$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/z1lKit1XS_-iKj241y5uwJUsfO0.roa File: z1lKit1XS_-iKj241y5uwJUsfO0.roa (raw, json) Hash identifier: lFolRs8fHO4OY/cC6pKMaHCY7w/P/QRhuA7cFM6H3RQ= Subject key identifier: CF:59:4A:8A:DD:57:4B:FF:A2:2A:3D:B8:D7:2E:6E:C0:95:2C:7C:ED Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 0E5B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/z1lKit1XS_-iKj241y5uwJUsfO0.roa Signing time: Fri 01 Sep 2023 08:49:35 +0000 ROA not before: Fri 01 Sep 2023 08:49:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17809 IP address blocks: 203.217.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3675 (0xe5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Sep 1 08:49:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CF594A8ADD574BFFA22A3DB8D72E6EC0952C7CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:db:7e:ad:89:52:50:9a:7e:78:52:d3:4e:55: 6e:13:af:1d:d7:a1:97:83:55:d7:05:bf:42:cb:56: b1:87:48:9b:36:0e:e4:db:ec:11:c5:e3:2f:4d:87: 1c:ab:f1:e3:2e:46:ae:aa:ea:71:e5:79:5b:9a:38: 6f:f3:8b:88:44:70:03:7b:49:77:a4:3b:bf:6b:26: 5e:0f:b0:3b:1c:bc:ba:d0:12:7a:66:44:9d:e3:9e: 32:49:ba:2a:6f:cb:c7:33:65:f9:0a:44:30:b4:b8: 34:f6:01:d7:04:07:8a:cd:8c:39:fc:47:cd:45:eb: 81:98:ef:e5:23:95:38:1f:1e:42:c9:51:8c:96:4c: 1e:43:b9:02:84:01:71:26:c4:66:b2:42:ac:5d:cd: c6:5d:7d:87:91:57:d6:0a:3d:ef:56:8f:9d:41:ae: d7:de:6d:90:55:da:d6:64:f0:1b:23:2d:c0:02:84: 72:97:bd:d8:82:c6:c9:ec:84:cb:b6:69:45:ab:12: 02:c4:89:59:f2:d5:8e:3c:b4:61:21:a8:6e:9b:5a: d3:c0:81:1a:a2:5a:3a:7e:c9:2c:03:48:d1:f0:e8: 93:55:96:30:8c:bf:54:4e:68:fa:40:76:6b:82:93: 2a:09:8e:09:16:13:d7:22:a4:f9:a1:42:48:34:37: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:59:4A:8A:DD:57:4B:FF:A2:2A:3D:B8:D7:2E:6E:C0:95:2C:7C:ED X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/z1lKit1XS_-iKj241y5uwJUsfO0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/19 Signature Algorithm: sha256WithRSAEncryption 58:95:03:1e:0f:85:45:46:57:70:06:05:38:b6:83:c6:1b:f6: e8:b0:da:a6:5d:00:a9:ea:36:75:40:73:05:66:a1:56:6b:fb: 12:78:b7:b2:34:f2:84:d0:65:b6:c8:c5:b0:1c:1a:c6:ef:48: 20:ee:7c:36:0b:78:5f:47:ed:bc:ab:51:7b:8a:85:50:d4:ff: 48:bc:e6:41:10:6a:09:2a:bb:12:c4:8d:94:fb:39:69:84:81: 36:60:bd:5d:1f:0d:ef:1a:71:c0:e1:7a:f8:22:77:55:1a:ef: 72:0e:0a:1a:1c:fb:d5:9f:b3:97:1d:df:5b:65:ce:87:97:6a: a0:6f:2c:84:d7:91:6e:20:a9:3a:2f:52:f7:3f:22:77:a8:4f: 7c:ee:88:ea:d5:89:d3:09:91:0e:7f:18:02:23:ba:45:bb:f2: ca:2c:a0:8b:30:58:a2:a2:35:6b:09:84:0c:68:a2:bd:8a:be: b4:5d:f8:e6:61:e8:60:26:e4:d6:25:e1:da:66:b3:22:46:23: 4f:73:fb:3f:62:c9:0e:f3:d8:94:35:39:8e:0a:16:a4:cf:b6: 50:e9:1f:12:03:4e:47:14:1f:4e:2f:dd:71:bf:c5:ef:da:9f: 21:ab:1f:79:7b:0f:1d:0f:6b:b2:de:07:62:06:58:ea:08:a7: 09:63:14:39 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw ODQ5MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENGNTk0QThBREQ1NzRC RkZBMjJBM0RCOEQ3MkU2RUMwOTUyQzdDRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp236tiVJQmn54UtNOVW4Trx3XoZeDVdcFv0LLVrGHSJs2DuTb 7BHF4y9Nhxyr8eMuRq6q6nHleVuaOG/zi4hEcAN7SXekO79rJl4PsDscvLrQEnpm RJ3jnjJJuipvy8czZfkKRDC0uDT2AdcEB4rNjDn8R81F64GY7+UjlTgfHkLJUYyW TB5DuQKEAXEmxGayQqxdzcZdfYeRV9YKPe9Wj51BrtfebZBV2tZk8BsjLcAChHKX vdiCxsnshMu2aUWrEgLEiVny1Y48tGEhqG6bWtPAgRqiWjp+ySwDSNHw6JNVljCM v1ROaPpAdmuCkyoJjgkWE9cipPmhQkg0N0MVAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUz1lKit1XS/+iKj241y5uwJUsfO0wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvejFsS2l0MVhTXy1pS2oyNDF5NXV3 SlVzZk8wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcvZYDAN BgkqhkiG9w0BAQsFAAOCAQEAWJUDHg+FRUZXcAYFOLaDxhv26LDapl0Aqeo2dUBz BWahVmv7Eni3sjTyhNBltsjFsBwaxu9IIO58Ngt4X0ftvKtRe4qFUNT/SLzmQRBq CSq7EsSNlPs5aYSBNmC9XR8N7xpxwOF6+CJ3VRrvcg4KGhz71Z+zlx3fW2XOh5dq oG8shNeRbiCpOi9S9z8id6hPfO6I6tWJ0wmRDn8YAiO6RbvyyiygizBYoqI1awmE DGiivYq+tF345mHoYCbk1iXh2mazIkYjT3P7P2LJDvPYlDU5jgoWpM+2UOkfEgNO RxQfTi/dcb/F79qfIasfeXsPHQ9rst4HYgZY6ginCWMUOQ== -----END CERTIFICATE-----Generated at Mon Jun 3 06:07:08 2024 by rpki-client on console-ams.rpki-client.org