$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/zpvHi-QLsqbKM6diW2u145fhUwY.roa File: zpvHi-QLsqbKM6diW2u145fhUwY.roa (raw, json) Hash identifier: QE6pB9S6b5jWkMyWggOn+vWjksSGFwMK9xy3od5NBKo= Subject key identifier: CE:9B:C7:8B:E4:0B:B2:A6:CA:33:A7:62:5B:6B:B5:E3:97:E1:53:06 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 101B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zpvHi-QLsqbKM6diW2u145fhUwY.roa Signing time: Mon 26 Aug 2024 05:13:23 +0000 ROA not before: Mon 26 Aug 2024 05:13:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 113.61.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4123 (0x101b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 26 05:13:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CE9BC78BE40BB2A6CA33A7625B6BB5E397E15306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:e6:0d:62:27:d7:1f:f1:f2:91:34:da:f8: b5:dd:b2:02:03:64:3d:7b:56:31:24:f5:de:72:62: e6:f5:1c:52:0d:08:3c:27:e0:6f:c3:3e:a7:60:4f: a5:45:0c:3b:45:fe:e9:3b:6f:12:ec:db:cf:5d:b5: 5f:e7:fe:33:d7:a7:52:60:fc:27:ef:ac:9d:89:5e: df:40:17:22:b2:ac:90:03:9c:0e:1e:a3:a2:3e:0a: cb:cf:dc:49:67:58:7a:14:5d:f3:85:c4:1c:81:75: 7f:f6:1f:33:0e:9e:4b:cb:59:9e:81:5e:06:29:2b: 00:c3:ce:0e:a9:35:a8:5f:ac:54:6a:bd:ec:45:6f: 97:27:e9:6c:25:6a:ac:13:44:b1:3e:77:66:3b:98: fc:41:59:4f:06:80:71:e1:73:7d:1a:5e:2a:4e:58: 8d:d5:9a:1d:42:1a:a4:7a:54:5b:6d:98:2f:38:fc: cd:a3:16:65:48:32:ab:e5:8a:82:e4:8b:d4:ed:ae: 30:b3:90:43:a6:14:24:ab:58:42:16:ff:d8:88:60: b0:e1:ac:68:e2:c8:7e:3a:60:df:75:47:78:3c:f6: af:c7:91:33:90:fe:4d:73:40:82:cf:ed:89:68:b2: 7f:f3:1e:b7:71:3d:b4:08:4f:55:6b:04:ce:cc:05: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9B:C7:8B:E4:0B:B2:A6:CA:33:A7:62:5B:6B:B5:E3:97:E1:53:06 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zpvHi-QLsqbKM6diW2u145fhUwY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.192.0/20 Signature Algorithm: sha256WithRSAEncryption 25:c2:72:1b:5e:7f:1d:21:b4:06:42:0d:0f:38:35:fa:0a:0c: 5a:f8:d9:b1:c2:09:61:75:f7:5d:4a:50:e0:a8:06:a8:6a:33: 76:6a:c2:ce:8d:fb:40:d1:1f:9e:97:83:39:58:10:d8:4f:90: 1d:3a:7e:46:ff:f5:3d:e1:7c:63:e8:6a:01:4a:c2:d1:fa:02: 2a:da:a8:3f:c4:6f:a2:4f:fb:eb:84:b6:c3:34:9a:4f:ba:36: 05:fd:aa:42:89:7c:da:b9:eb:d9:de:12:cb:38:aa:02:45:bd: eb:be:a4:f5:1b:c9:a9:77:43:4a:41:25:fc:1d:17:b4:2f:69: 12:23:ad:a5:f5:1c:b1:6d:05:37:a5:de:c4:1f:8e:27:97:a8: fc:a6:0d:f6:86:d0:0c:75:2d:05:6d:e3:eb:1e:90:c7:2c:fe: cd:7b:20:6c:7d:ca:dc:4a:e7:5a:19:78:ea:65:58:13:1a:2c: 84:03:96:f2:d7:d6:b7:25:ec:73:7d:d7:ac:62:4c:1b:3d:be: e0:7c:ed:f1:1c:df:c0:70:b7:51:a6:ad:a5:59:60:d2:29:cc: 58:da:cb:69:3f:6d:a9:f3:7a:d3:66:59:88:74:05:3a:a0:27: d8:bc:17:13:4a:4f:32:69:7b:2e:e8:6a:75:f7:b1:b4:c2:1d: 7f:ec:79:c8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw NTEzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFOUJDNzhCRTQwQkIy QTZDQTMzQTc2MjVCNkJCNUUzOTdFMTUzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQi+YNYifXH/HykTTa+LXdsgIDZD17VjEk9d5yYub1HFINCDwn 4G/DPqdgT6VFDDtF/uk7bxLs289dtV/n/jPXp1Jg/CfvrJ2JXt9AFyKyrJADnA4e o6I+CsvP3ElnWHoUXfOFxByBdX/2HzMOnkvLWZ6BXgYpKwDDzg6pNahfrFRqvexF b5cn6WwlaqwTRLE+d2Y7mPxBWU8GgHHhc30aXipOWI3Vmh1CGqR6VFttmC84/M2j FmVIMqvlioLki9TtrjCzkEOmFCSrWEIW/9iIYLDhrGjiyH46YN91R3g89q/HkTOQ /k1zQILP7Ylosn/zHrdxPbQIT1VrBM7MBTARAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUzpvHi+QLsqbKM6diW2u145fhUwYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvenB2SGktUUxzcWJLTTZkaVcydTE0 NWZoVXdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE9wDAN BgkqhkiG9w0BAQsFAAOCAQEAJcJyG15/HSG0BkINDzg1+goMWvjZscIJYXX3XUpQ 4KgGqGozdmrCzo37QNEfnpeDOVgQ2E+QHTp+Rv/1PeF8Y+hqAUrC0foCKtqoP8Rv ok/764S2wzSaT7o2Bf2qQol82rnr2d4SyziqAkW9676k9RvJqXdDSkEl/B0XtC9p EiOtpfUcsW0FN6XexB+OJ5eo/KYN9obQDHUtBW3j6x6Qxyz+zXsgbH3K3ErnWhl4 6mVYExoshAOW8tfWtyXsc33XrGJMGz2+4Hzt8RzfwHC3UaatpVlg0inMWNrLaT9t qfN602ZZiHQFOqAn2LwXE0pPMml7LuhqdfextMIdf+x5yA== -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:40 2024 by rpki-client on console-fra.rpki-client.org