$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/xAEVoThVelJhj5cmUwDDmrTFKPY.roa File: xAEVoThVelJhj5cmUwDDmrTFKPY.roa (raw, json) Hash identifier: DjmMO0OHkNRdJ0+8/E6xPVSHnLghDOl3dUwO1ZIegpk= Subject key identifier: C4:01:15:A1:38:55:7A:52:61:8F:97:26:53:00:C3:9A:B4:C5:28:F6 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1027 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xAEVoThVelJhj5cmUwDDmrTFKPY.roa Signing time: Mon 26 Aug 2024 05:13:26 +0000 ROA not before: Mon 26 Aug 2024 05:13:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 27.96.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4135 (0x1027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C40115A138557A52618F97265300C39AB4C528F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:fd:9a:ee:d7:48:ab:1d:bf:26:14:8c:60: 41:4e:19:52:8b:90:00:84:0a:a1:2c:b0:7f:bf:53: 69:c9:0b:60:ed:e1:46:24:65:84:5e:49:7a:e1:9e: 55:e6:ad:1d:8d:2a:b0:f7:37:e9:d2:f9:c8:13:cb: 91:2f:50:58:83:72:28:b7:2a:d6:b1:bd:f4:4a:b8: f2:43:dd:be:64:a6:6b:5c:e3:30:2c:59:ec:2e:d1: 58:39:09:40:78:93:fe:2f:c0:8f:b0:0f:96:32:96: 78:73:a0:67:78:d7:16:39:a7:11:5d:7e:11:19:a9: db:d3:6f:ac:72:f8:75:a5:47:9d:bf:3b:a6:3b:fa: 40:05:48:89:bf:e9:49:76:39:45:da:a5:8f:17:79: e1:54:d2:06:b7:1e:65:14:37:f0:21:c5:6e:30:9e: 93:7f:08:3e:df:c6:56:1c:c3:2c:e0:58:53:05:82: 03:9d:90:a8:7e:68:0d:67:c0:44:73:5f:e2:f5:d9: 01:ff:00:dd:d8:50:3a:df:db:bc:63:b5:25:16:d5: bd:df:7b:72:52:16:7a:e5:c2:04:eb:d8:d8:2e:08: d0:44:d8:d1:cc:d1:cd:3d:8d:e8:77:dc:75:95:ee: fb:e0:ee:db:19:71:cd:72:5b:bb:9d:4f:82:ee:4b: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:01:15:A1:38:55:7A:52:61:8F:97:26:53:00:C3:9A:B4:C5:28:F6 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xAEVoThVelJhj5cmUwDDmrTFKPY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.248.0/22 Signature Algorithm: sha256WithRSAEncryption a4:86:ad:7a:92:14:35:95:5e:2f:04:af:76:9c:0a:b3:ea:4f: ae:5a:eb:9a:ff:5a:f2:ba:0b:1c:4d:6a:2c:12:95:85:fe:cb: 6b:b7:8a:88:22:de:87:e4:b3:67:44:13:49:c9:53:ef:73:be: 0e:37:d8:ff:a0:4c:67:83:a1:05:c6:95:d1:15:09:c2:4c:e1: 7a:4f:17:0b:75:d8:6d:d0:af:46:57:1e:56:9e:34:fb:70:b7: 5b:bc:50:1c:00:91:1b:c0:cb:3c:4f:25:ea:70:03:eb:e4:3b: ce:c7:19:c7:15:eb:f1:ba:20:58:ec:b8:61:fa:05:3f:1e:0e: 4e:c3:93:e4:d6:49:29:91:cb:41:2b:5c:55:0f:96:d7:35:21: e9:33:24:9e:49:ff:74:9d:67:53:24:90:89:95:46:8b:c4:07: 73:0a:66:fc:ce:dc:0d:43:8a:69:5b:de:67:c2:ad:38:27:34: 5f:f6:13:e1:cd:91:12:96:dc:ec:ce:5a:b6:fb:3b:3d:ce:95: 17:35:e7:cc:d7:a3:d3:35:69:42:24:25:95:49:ef:27:8c:0c: 29:36:ff:06:b5:af:87:d8:c2:88:2d:22:17:12:6f:c5:1b:44: 48:2e:98:4c:d0:87:c9:85:f2:ef:dc:d1:6e:de:2c:31:fa:35: 69:7a:71:b0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICECcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0MDExNUExMzg1NTdB NTI2MThGOTcyNjUzMDBDMzlBQjRDNTI4RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvhv2a7tdIqx2/JhSMYEFOGVKLkACECqEssH+/U2nJC2Dt4UYk ZYReSXrhnlXmrR2NKrD3N+nS+cgTy5EvUFiDcii3KtaxvfRKuPJD3b5kpmtc4zAs Wewu0Vg5CUB4k/4vwI+wD5YylnhzoGd41xY5pxFdfhEZqdvTb6xy+HWlR52/O6Y7 +kAFSIm/6Ul2OUXapY8XeeFU0ga3HmUUN/AhxW4wnpN/CD7fxlYcwyzgWFMFggOd kKh+aA1nwERzX+L12QH/AN3YUDrf27xjtSUW1b3fe3JSFnrlwgTr2NguCNBE2NHM 0c09jeh33HWV7vvg7tsZcc1yW7udT4LuS5Z9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUxAEVoThVelJhj5cmUwDDmrTFKPYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgveEFFVm9UaFZlbEpoajVjbVV3RERt clRGS1BZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhtg+DAN BgkqhkiG9w0BAQsFAAOCAQEApIatepIUNZVeLwSvdpwKs+pPrlrrmv9a8roLHE1q LBKVhf7La7eKiCLeh+SzZ0QTSclT73O+DjfY/6BMZ4OhBcaV0RUJwkzhek8XC3XY bdCvRlceVp40+3C3W7xQHACRG8DLPE8l6nAD6+Q7zscZxxXr8bogWOy4YfoFPx4O TsOT5NZJKZHLQStcVQ+W1zUh6TMknkn/dJ1nUySQiZVGi8QHcwpm/M7cDUOKaVve Z8KtOCc0X/YT4c2REpbc7M5atvs7Pc6VFzXnzNej0zVpQiQllUnvJ4wMKTb/BrWv h9jCiC0iFxJvxRtESC6YTNCHyYXy79zRbt4sMfo1aXpxsA== -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:46 2024 by rpki-client on console-ams.rpki-client.org