$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/W6OaAgTbsO8ud2v9TvD1OKM8Kco.roa File: W6OaAgTbsO8ud2v9TvD1OKM8Kco.roa (raw, json) Hash identifier: 1I4K7MfDfllWMipitfpagkhwgW9vUDBjYlojv0D8rss= Subject key identifier: 5B:A3:9A:02:04:DB:B0:EF:2E:77:6B:FD:4E:F0:F5:38:A3:3C:29:CA Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10C3 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/W6OaAgTbsO8ud2v9TvD1OKM8Kco.roa Signing time: Mon 10 Feb 2025 13:56:29 +0000 ROA not before: Mon 10 Feb 2025 13:56:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.222.0.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4291 (0x10c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5BA39A0204DBB0EF2E776BFD4EF0F538A33C29CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:42:b9:8f:07:ad:99:8b:8c:83:3d:ce:73: 8f:f0:bc:59:01:09:ad:3c:41:7b:78:3c:2c:ba:cf: 48:f8:0f:c4:97:13:c8:4b:4f:11:0b:00:26:07:13: 34:27:8b:9c:b6:3f:26:4e:7b:6d:9b:d2:55:c5:29: d4:3f:7d:ae:e9:09:ba:8a:0d:6c:40:12:b8:bc:5c: c1:fb:9e:85:ea:25:6a:d9:13:13:67:d3:25:f0:ed: 9a:c6:86:e2:6c:f0:25:74:22:b4:9b:3f:78:aa:a7: 23:f2:30:65:7a:02:2d:34:2f:fb:1a:e9:30:3f:ee: 4b:7a:49:aa:73:0b:90:5c:56:a1:61:d5:0f:a0:10: 15:de:91:9e:e5:fb:8a:3c:c3:45:8e:45:d6:38:d7: 55:94:b1:94:44:4f:44:f3:e6:e8:31:6e:a9:97:08: 16:dc:08:77:d0:22:3f:a6:b8:dc:3b:ce:05:cf:42: b8:8e:22:dd:21:7c:a6:fe:80:c3:43:f7:db:43:cd: f8:66:1d:cb:2a:65:f3:6f:2c:1a:70:c1:dd:7d:56: 19:bd:1e:70:e3:cf:47:34:aa:3a:d1:72:49:39:77: 77:da:5b:d7:57:b9:4d:5e:d2:8b:79:e1:df:64:80: e6:b4:f0:bb:8a:82:52:13:a4:75:13:f7:59:da:01: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A3:9A:02:04:DB:B0:EF:2E:77:6B:FD:4E:F0:F5:38:A3:3C:29:CA X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/W6OaAgTbsO8ud2v9TvD1OKM8Kco.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.0.0/19 Signature Algorithm: sha256WithRSAEncryption 69:3e:91:ec:1d:4f:54:2b:0f:e6:83:88:47:8b:40:82:a1:dc: bb:94:a8:54:f9:d1:0d:c8:8e:db:c8:f0:e9:b0:24:e8:d3:41: a5:c4:bf:24:b4:9f:e7:35:ac:c2:06:e4:d8:09:62:84:40:04: 82:44:00:e7:41:cf:ed:a4:25:5d:19:1d:f8:3c:7d:43:e9:96: d5:6d:75:88:03:c1:aa:4a:ba:c6:2f:50:34:5d:ad:35:0e:c7: 9e:d3:29:fa:61:71:50:05:84:aa:b9:ec:23:25:33:91:2c:1a: a5:be:ae:d0:12:11:22:d2:35:fc:9c:31:2e:52:5f:a9:60:57: e8:23:4b:53:99:64:0e:de:c0:99:21:a3:47:77:da:bf:f3:52: 4d:4c:c6:c9:a8:bf:48:1d:67:79:af:55:f7:2e:46:ba:bd:9d: c8:0d:dd:6c:ce:08:3c:c4:62:66:ed:ff:44:82:51:ba:66:56: 73:bb:e4:ad:64:8b:b3:2e:a9:c5:88:a7:39:04:0b:ab:37:90: a9:99:5c:96:67:87:09:e2:46:2b:2e:f1:d6:e7:79:6f:de:81: 22:da:8a:89:80:a2:71:6a:f1:e6:eb:de:5e:1d:27:f2:5f:ee: 84:ca:72:98:d5:0f:b7:2c:36:54:75:b2:89:e5:c9:57:e9:8c: 29:3e:ae:82 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVCQTM5QTAyMDREQkIw RUYyRTc3NkJGRDRFRjBGNTM4QTMzQzI5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx70K5jwetmYuMgz3Oc4/wvFkBCa08QXt4PCy6z0j4D8SXE8hL TxELACYHEzQni5y2PyZOe22b0lXFKdQ/fa7pCbqKDWxAEri8XMH7noXqJWrZExNn 0yXw7ZrGhuJs8CV0IrSbP3iqpyPyMGV6Ai00L/sa6TA/7kt6SapzC5BcVqFh1Q+g EBXekZ7l+4o8w0WORdY411WUsZRET0Tz5ugxbqmXCBbcCHfQIj+muNw7zgXPQriO It0hfKb+gMND99tDzfhmHcsqZfNvLBpwwd19Vhm9HnDjz0c0qjrRckk5d3faW9dX uU1e0ot54d9kgOa08LuKglITpHUT91naAZmJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUW6OaAgTbsO8ud2v9TvD1OKM8KcowHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvVzZPYUFnVGJzTzh1ZDJ2OVR2RDFP S004S2NvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcveADAN BgkqhkiG9w0BAQsFAAOCAQEAaT6R7B1PVCsP5oOIR4tAgqHcu5SoVPnRDciO28jw 6bAk6NNBpcS/JLSf5zWswgbk2AlihEAEgkQA50HP7aQlXRkd+Dx9Q+mW1W11iAPB qkq6xi9QNF2tNQ7HntMp+mFxUAWEqrnsIyUzkSwapb6u0BIRItI1/JwxLlJfqWBX 6CNLU5lkDt7AmSGjR3fav/NSTUzGyai/SB1nea9V9y5Gur2dyA3dbM4IPMRiZu3/ RIJRumZWc7vkrWSLsy6pxYinOQQLqzeQqZlclmeHCeJGKy7x1ud5b96BItqKiYCi cWrx5uveXh0n8l/uhMpymNUPtyw2VHWyieXJV+mMKT6ugg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net