$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/uM0hwSdupNp5ENlBDua7iu5L9-M.roa File: uM0hwSdupNp5ENlBDua7iu5L9-M.roa (raw, json) Hash identifier: 6rylI+nkGpjmzW/drd+HvNFlp/K6085cIZa8sgqjSRs= Subject key identifier: B8:CD:21:C1:27:6E:A4:DA:79:10:D9:41:0E:E6:BB:8A:EE:4B:F7:E3 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E47 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uM0hwSdupNp5ENlBDua7iu5L9-M.roa Signing time: Fri 01 Sep 2023 08:49:30 +0000 ROA not before: Fri 01 Sep 2023 08:49:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 203.222.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3655 (0xe47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B8CD21C1276EA4DA7910D9410EE6BB8AEE4BF7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:e5:6b:d6:dd:f0:3c:5f:ec:de:da:d1:3f: db:6a:03:a3:a1:f5:9a:05:7c:b5:95:0f:8e:1b:5b: 50:2f:33:b5:2a:b4:8c:4b:3f:a6:93:0f:2e:38:68: 59:44:56:b3:a1:72:bf:18:66:f4:ae:05:55:30:01: a7:4f:21:1b:cf:a9:e9:67:78:33:a7:76:c7:d5:a2: 36:da:ba:cd:85:12:6b:42:1a:6b:09:db:05:8a:82: 37:1a:2b:fc:07:a3:f9:e8:9e:f3:e7:ca:49:cb:12: 5f:34:9c:8c:c2:ce:47:ea:b7:9a:66:cc:b2:71:37: f6:d5:bd:8a:de:0d:09:1b:ca:69:3e:d7:1f:11:44: 50:a3:54:8b:2a:7d:33:72:f5:98:bd:d6:89:b4:f5: b4:e9:92:31:d7:bb:5d:40:1b:71:1f:30:f2:a5:02: 9c:43:3d:a7:66:26:ba:30:1a:41:1f:40:32:f3:75: ed:c2:79:61:b9:8f:e0:c0:51:8e:c0:b2:c6:2e:53: 4a:7b:ed:ab:17:4c:f4:ee:f3:16:bd:7b:29:12:9a: f6:a5:5f:ea:18:d0:9d:86:b7:67:78:14:7c:96:03: 3d:91:1a:37:8d:a3:6d:19:b7:c2:1e:b6:a3:ba:34: ec:c1:c0:46:ba:ce:bc:08:12:b5:fe:ec:b7:da:50: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CD:21:C1:27:6E:A4:DA:79:10:D9:41:0E:E6:BB:8A:EE:4B:F7:E3 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uM0hwSdupNp5ENlBDua7iu5L9-M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.24.0/22 Signature Algorithm: sha256WithRSAEncryption a6:77:ac:16:98:96:91:19:fc:ab:07:4a:9c:f4:29:ed:bb:bb: 0e:dc:4d:21:6c:4c:7a:4d:48:d8:8c:f3:27:09:82:20:94:b1: 34:e6:b5:1f:00:a9:c3:4a:c2:90:e1:07:1f:3e:bf:24:56:82: 0d:30:0b:a9:29:ed:4c:6d:ac:43:ae:bc:41:93:98:87:3f:a9: 97:43:55:28:e4:3e:eb:e4:54:be:c6:c4:da:c0:dd:80:c6:18: 12:dd:f0:9d:8a:4d:09:73:f8:e0:47:74:4d:e1:8d:e5:d8:f1: 5f:ce:b4:5d:c8:8b:2e:4b:1b:f3:a0:a3:5f:73:ad:ca:14:fc: b5:b8:ca:15:f7:f8:1a:1e:d3:27:d8:18:94:dc:89:c8:4a:ef: 64:63:25:44:63:0e:8a:d4:75:ac:08:56:47:4a:fb:8e:0a:b1: 99:2e:7d:66:66:ca:eb:83:87:88:6b:0a:d8:0a:d8:8c:3a:7c: c4:0d:00:4e:09:61:1d:32:dd:c6:53:00:19:a1:ae:16:eb:dc: b4:22:3e:4f:0f:80:01:20:97:20:82:eb:1d:92:f3:aa:bb:f6: bf:26:9f:2b:1b:1d:13:ec:1e:bc:8e:e8:cc:dc:f5:ff:9d:21: d5:f8:cf:9e:46:ac:7c:66:35:bc:8d:4b:05:a9:24:61:4b:99: 35:ec:06:f4 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI4Q0QyMUMxMjc2RUE0 REE3OTEwRDk0MTBFRTZCQjhBRUU0QkY3RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+h+Vr1t3wPF/s3trRP9tqA6Oh9ZoFfLWVD44bW1AvM7UqtIxL P6aTDy44aFlEVrOhcr8YZvSuBVUwAadPIRvPqelneDOndsfVojbaus2FEmtCGmsJ 2wWKgjcaK/wHo/nonvPnyknLEl80nIzCzkfqt5pmzLJxN/bVvYreDQkbymk+1x8R RFCjVIsqfTNy9Zi91om09bTpkjHXu11AG3EfMPKlApxDPadmJrowGkEfQDLzde3C eWG5j+DAUY7AssYuU0p77asXTPTu8xa9eykSmvalX+oY0J2Gt2d4FHyWAz2RGjeN o20Zt8IetqO6NOzBwEa6zrwIErX+7LfaUPx7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUuM0hwSdupNp5ENlBDua7iu5L9+MwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvdU0waHdTZHVwTnA1RU5sQkR1YTdp dTVMOS1NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveGDAN BgkqhkiG9w0BAQsFAAOCAQEApnesFpiWkRn8qwdKnPQp7bu7DtxNIWxMek1I2Izz JwmCIJSxNOa1HwCpw0rCkOEHHz6/JFaCDTALqSntTG2sQ668QZOYhz+pl0NVKOQ+ 6+RUvsbE2sDdgMYYEt3wnYpNCXP44Ed0TeGN5djxX860XciLLksb86CjX3OtyhT8 tbjKFff4Gh7TJ9gYlNyJyErvZGMlRGMOitR1rAhWR0r7jgqxmS59ZmbK64OHiGsK 2ArYjDp8xA0ATglhHTLdxlMAGaGuFuvctCI+Tw+AASCXIILrHZLzqrv2vyafKxsd E+wevI7ozNz1/50h1fjPnkasfGY1vI1LBakkYUuZNewG9A== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org