$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/1qQlt7ea7RuKyd-mix8V1NMfdK8.roa File: 1qQlt7ea7RuKyd-mix8V1NMfdK8.roa (raw, json) Hash identifier: H9POiR+L8iHXqRC9IrP6XcqZR6u9ae/rt7iZSkWszB4= Subject key identifier: D6:A4:25:B7:B7:9A:ED:1B:8A:C9:DF:A6:8B:1F:15:D4:D3:1F:74:AF Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10F1 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/1qQlt7ea7RuKyd-mix8V1NMfdK8.roa Signing time: Mon 10 Feb 2025 13:56:37 +0000 ROA not before: Mon 10 Feb 2025 13:56:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.222.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4337 (0x10f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6A425B7B79AED1B8AC9DFA68B1F15D4D31F74AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0b:b1:9a:48:3f:dc:a6:06:30:15:2e:68:98: 11:97:6c:4e:ce:5c:5a:97:2d:8a:1d:b1:0f:a2:9f: ea:f7:89:6a:af:61:79:00:f7:a0:fd:56:ef:a2:3c: d8:65:e4:19:78:38:90:ee:8d:e6:e6:89:f1:0f:c2: 64:c7:6a:9e:5b:8b:f4:46:ef:d7:1b:d7:d9:02:9e: 23:65:c7:28:d2:3a:0f:2b:b0:90:23:83:91:6d:28: fd:4f:c2:ad:8d:7b:fc:1f:00:28:1b:6c:8b:99:d6: ce:84:f6:8b:df:37:4d:62:37:b5:98:f9:74:a1:77: e7:42:ab:17:f4:28:bc:dc:f9:6c:13:8b:4b:a6:77: e8:47:db:64:5d:73:89:9a:aa:46:ed:eb:6a:fb:31: bf:9b:95:4e:ca:e5:1e:28:c9:b8:84:53:19:23:e0: 30:d4:cb:e2:d1:da:82:9f:89:c7:fb:93:12:8b:61: 45:a9:47:11:56:6a:98:1a:7f:a9:ac:dc:ba:2a:26: fc:34:13:ee:17:3a:9c:26:2d:01:3d:e3:85:d9:4e: 5d:ac:39:93:6d:47:e5:b7:99:71:3b:ae:a9:0e:98: d5:a8:a5:ef:bc:45:93:e2:a3:a0:d2:bb:d6:b3:fe: eb:c8:67:e6:9b:92:a8:35:a0:70:20:f6:1d:52:5e: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A4:25:B7:B7:9A:ED:1B:8A:C9:DF:A6:8B:1F:15:D4:D3:1F:74:AF X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/1qQlt7ea7RuKyd-mix8V1NMfdK8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.0.0/19 Signature Algorithm: sha256WithRSAEncryption 52:0a:57:57:15:1b:b1:f0:af:e0:4d:50:7b:7b:e0:7f:f5:07: 7a:40:44:03:dd:63:d5:32:06:ca:a7:b7:57:93:b5:f5:52:ee: f4:dd:a1:63:8d:00:03:85:27:c8:30:4a:3c:2d:bb:23:76:12: b6:6f:4a:43:78:aa:b2:06:b3:71:01:c3:74:29:b0:cb:e4:36: e9:1c:a3:46:9a:35:69:e1:35:84:64:07:29:a6:1d:59:bf:3e: e3:38:b7:0e:c0:0a:a3:1e:a9:f1:61:e3:d3:83:ab:4b:b9:d6: 37:81:cd:e0:b7:72:da:e7:ba:c3:0f:38:27:21:58:30:5c:d4: 1f:a0:80:38:1b:36:3d:66:cf:9d:df:8e:2f:71:07:d6:fd:cd: be:e6:21:65:1d:13:de:9a:79:fc:de:b6:17:f0:4b:6c:22:62: 67:40:67:9d:75:48:e0:e6:1d:c5:f6:d8:51:23:70:47:a5:e1: f8:b5:5d:da:7e:7a:49:40:8c:52:3d:f5:bb:bc:43:06:7d:77: cf:a0:2d:47:53:47:a6:f8:70:55:24:41:d3:14:14:97:01:f8: dc:84:15:e4:38:c4:c5:b1:51:57:57:4e:05:dd:2e:fa:78:9c: 3c:aa:32:af:59:19:50:f8:55:9f:56:4d:f4:02:6b:f3:a2:d6: f1:59:07:10 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2QTQyNUI3Qjc5QUVE MUI4QUM5REZBNjhCMUYxNUQ0RDMxRjc0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvC7GaSD/cpgYwFS5omBGXbE7OXFqXLYodsQ+in+r3iWqvYXkA 96D9Vu+iPNhl5Bl4OJDujebmifEPwmTHap5bi/RG79cb19kCniNlxyjSOg8rsJAj g5FtKP1Pwq2Ne/wfACgbbIuZ1s6E9ovfN01iN7WY+XShd+dCqxf0KLzc+WwTi0um d+hH22Rdc4maqkbt62r7Mb+blU7K5R4oybiEUxkj4DDUy+LR2oKficf7kxKLYUWp RxFWapgaf6ms3LoqJvw0E+4XOpwmLQE944XZTl2sOZNtR+W3mXE7rqkOmNWope+8 RZPio6DSu9az/uvIZ+abkqg1oHAg9h1SXn9XAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU1qQlt7ea7RuKyd+mix8V1NMfdK8wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvMXFRbHQ3ZWE3UnVLeWQtbWl4OFYx Tk1mZEs4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcveADAN BgkqhkiG9w0BAQsFAAOCAQEAUgpXVxUbsfCv4E1Qe3vgf/UHekBEA91j1TIGyqe3 V5O19VLu9N2hY40AA4UnyDBKPC27I3YStm9KQ3iqsgazcQHDdCmwy+Q26RyjRpo1 aeE1hGQHKaYdWb8+4zi3DsAKox6p8WHj04OrS7nWN4HN4Ldy2ue6ww84JyFYMFzU H6CAOBs2PWbPnd+OL3EH1v3NvuYhZR0T3pp5/N62F/BLbCJiZ0BnnXVI4OYdxfbY USNwR6Xh+LVd2n56SUCMUj31u7xDBn13z6AtR1NHpvhwVSRB0xQUlwH43IQV5DjE xbFRV1dOBd0u+nicPKoyr1kZUPhVn1ZN9AJr86LW8VkHEA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net