$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/VJknFlsAIu-8BpvujNBcXAuZZdk.roa File: VJknFlsAIu-8BpvujNBcXAuZZdk.roa (raw, json) Hash identifier: LkPOCWKEXtPvUkt/O2KKBKYETurl3wQrx2iIdg9tkFg= Subject key identifier: 54:99:27:16:5B:00:22:EF:BC:06:9B:EE:8C:D0:5C:5C:0B:99:65:D9 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1103 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VJknFlsAIu-8BpvujNBcXAuZZdk.roa Signing time: Mon 10 Feb 2025 13:56:43 +0000 ROA not before: Mon 10 Feb 2025 13:56:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.217.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4355 (0x1103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=549927165B0022EFBC069BEE8CD05C5C0B9965D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:af:22:c3:34:c1:6e:ad:fd:5d:07:77:04: 6b:7a:3f:e7:cd:01:1a:f1:77:10:5b:5c:c5:c4:00: 34:05:ad:d7:e5:94:83:13:42:17:d0:e7:fc:3d:38: 78:37:77:39:a2:b6:dd:11:e5:7b:a9:9d:e1:96:0c: 08:66:6a:8c:43:c0:f5:f1:b5:78:9d:9f:c2:89:c8: 30:ba:de:6d:47:e2:d6:6a:49:84:5f:d3:94:fa:d7: f7:ef:01:20:63:0b:18:d0:cb:35:5f:66:1a:6b:15: 7c:af:4a:a6:09:92:8e:12:7f:0f:e5:49:50:a2:8f: d4:9f:48:2a:1a:ac:43:93:46:6b:bf:57:5b:d4:d7: d6:e7:68:2a:47:9e:a5:f1:22:25:d0:dc:32:d7:fd: b3:59:d5:74:4c:a7:93:86:77:ea:25:92:1b:1e:01: 74:ea:31:b1:12:bf:46:59:b2:45:67:bf:60:b0:e1: dd:9f:f8:1e:a5:f8:e0:fb:a6:5b:c1:14:b7:d7:01: 28:52:69:a9:da:fc:68:68:a1:7b:75:94:77:3b:a2: cd:93:5b:40:f2:17:11:a7:d3:e5:47:c6:d7:09:f9: 05:99:e0:53:41:77:35:ec:1a:06:71:1c:73:85:e3: f5:7f:5e:f2:8d:e4:71:b9:03:e8:1e:0a:cc:08:8d: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:99:27:16:5B:00:22:EF:BC:06:9B:EE:8C:D0:5C:5C:0B:99:65:D9 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VJknFlsAIu-8BpvujNBcXAuZZdk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/21 Signature Algorithm: sha256WithRSAEncryption 65:d6:2a:09:2f:6a:9b:5c:d1:69:f8:c7:80:a5:51:8b:4a:60: 85:97:f1:9d:80:b4:e6:80:2f:a7:a9:3c:2f:7e:b4:ff:66:2c: 2c:80:8b:d4:e3:58:1b:13:08:bc:0e:cf:9b:d2:14:7d:1b:99: 39:dd:5f:f1:10:a9:7d:80:35:37:9d:0e:c0:5c:14:af:ba:8e: 0e:69:4e:d1:3e:87:4c:96:42:cf:04:5c:c4:47:1e:63:85:b0: a6:cc:4e:6a:53:d6:6f:79:35:68:9c:94:2d:cb:0b:2a:f1:f2: 4e:f5:ce:5c:f7:7a:6f:88:2f:4b:28:6c:f6:87:52:28:fe:90: ae:ef:4a:c5:43:84:93:c8:4a:d4:b3:ab:ab:2e:8d:5c:56:c2: d4:80:dd:71:11:fc:f6:65:23:95:96:34:d7:9c:0c:6a:d3:1a: 29:cd:3a:1c:2f:b2:cd:31:af:bf:51:a5:4b:44:72:88:a3:3a: 90:b7:89:27:6c:16:92:b9:89:a7:56:cb:e4:65:08:66:81:6e: 25:34:98:b6:84:be:fa:01:b2:42:30:5c:e7:9f:8c:f2:69:2c: 91:86:7e:d2:94:45:a2:9a:46:21:23:d8:fd:53:78:08:7f:b8: c9:52:b5:48:bb:6d:60:07:5d:a8:8a:07:21:15:7d:31:46:e3: 18:0b:71:5e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0OTkyNzE2NUIwMDIy RUZCQzA2OUJFRThDRDA1QzVDMEI5OTY1RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0jq8iwzTBbq39XQd3BGt6P+fNARrxdxBbXMXEADQFrdfllIMT QhfQ5/w9OHg3dzmitt0R5XupneGWDAhmaoxDwPXxtXidn8KJyDC63m1H4tZqSYRf 05T61/fvASBjCxjQyzVfZhprFXyvSqYJko4Sfw/lSVCij9SfSCoarEOTRmu/V1vU 19bnaCpHnqXxIiXQ3DLX/bNZ1XRMp5OGd+olkhseAXTqMbESv0ZZskVnv2Cw4d2f +B6l+OD7plvBFLfXAShSaana/GhooXt1lHc7os2TW0DyFxGn0+VHxtcJ+QWZ4FNB dzXsGgZxHHOF4/V/XvKN5HG5A+geCswIjaDzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUVJknFlsAIu+8BpvujNBcXAuZZdkwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvVkprbkZsc0FJdS04QnB2dWpOQmNY QXVaWmRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8vZYDAN BgkqhkiG9w0BAQsFAAOCAQEAZdYqCS9qm1zRafjHgKVRi0pghZfxnYC05oAvp6k8 L360/2YsLICL1ONYGxMIvA7Pm9IUfRuZOd1f8RCpfYA1N50OwFwUr7qODmlO0T6H TJZCzwRcxEceY4WwpsxOalPWb3k1aJyULcsLKvHyTvXOXPd6b4gvSyhs9odSKP6Q ru9KxUOEk8hK1LOrqy6NXFbC1IDdcRH89mUjlZY015wMatMaKc06HC+yzTGvv1Gl S0RyiKM6kLeJJ2wWkrmJp1bL5GUIZoFuJTSYtoS++gGyQjBc55+M8mkskYZ+0pRF oppGISPY/VN4CH+4yVK1SLttYAddqIoHIRV9MUbjGAtxXg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net