$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WjqfgXZft42R4CRgc-z_ouDP-SQ.roa File: WjqfgXZft42R4CRgc-z_ouDP-SQ.roa (raw, json) Hash identifier: X5YMSETl/OSBqM+aaZfKEwHFMfE53FRnQKMZ9chEkkQ= Subject key identifier: 5A:3A:9F:81:76:5F:B7:8D:91:E0:24:60:73:EC:FF:A2:E0:CF:F9:24 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10ED Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WjqfgXZft42R4CRgc-z_ouDP-SQ.roa Signing time: Mon 10 Feb 2025 13:56:36 +0000 ROA not before: Mon 10 Feb 2025 13:56:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 27.96.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4333 (0x10ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5A3A9F81765FB78D91E0246073ECFFA2E0CFF924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:1a:e5:5f:76:94:fa:c8:7f:11:1d:2a:eb: 90:bf:c1:70:d6:24:85:7d:95:88:08:54:73:52:27: 81:0e:f7:cc:ff:6c:9e:74:45:9a:95:63:62:41:a7: 2e:18:8c:25:d4:a8:bb:de:56:f0:1e:29:fe:f7:68: 35:d3:c7:8d:42:d9:be:bc:b0:7c:46:1e:1d:93:22: b6:1e:02:c7:be:ee:e2:82:2e:ee:c9:8f:a9:73:be: ac:ad:99:99:28:2c:5d:d5:c0:c1:ab:92:00:af:63: cf:56:6e:34:6c:16:7f:1d:b2:6b:46:13:6a:0f:db: b1:63:1a:75:5a:67:a4:38:5c:22:54:2e:2a:e7:49: 51:ba:7a:ac:85:a8:57:7f:21:80:b3:46:ab:bb:bc: 59:34:1d:b4:f0:c3:47:70:34:99:55:9e:55:25:b1: 2e:2a:69:18:0b:a2:b7:4d:42:ed:f5:90:74:c1:ab: a3:5f:b3:5c:07:39:77:27:41:4e:96:4c:c6:b0:2a: 5a:39:00:95:ab:67:3c:f3:8d:eb:7a:36:c4:86:69: 60:2b:03:b1:4a:5c:68:fa:e0:e0:12:d6:eb:a2:2e: 52:42:f9:a0:45:bc:2e:82:20:8e:47:5d:2e:e9:a3: 02:b5:65:1e:e6:f6:73:8e:16:81:a0:df:60:5a:38: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:9F:81:76:5F:B7:8D:91:E0:24:60:73:EC:FF:A2:E0:CF:F9:24 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WjqfgXZft42R4CRgc-z_ouDP-SQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.224.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:5f:ba:91:e1:6b:4f:96:52:5c:f3:9f:1c:1c:09:e9:6d:68: 60:01:d8:3c:4b:40:94:ea:a5:1f:45:4b:38:9a:47:ee:75:c3: db:92:4d:31:ad:c6:6a:2f:26:e2:77:f1:68:5f:48:56:78:f8: a7:39:f2:b6:5f:db:6f:e5:17:59:73:d9:00:16:42:92:86:5b: 94:e7:7a:ba:8b:20:37:73:08:d1:aa:43:5b:ed:7c:74:14:9c: f8:85:b1:93:08:6a:64:10:e0:d9:ca:5e:90:30:33:62:8e:15: 70:e8:4a:91:52:9f:a0:cc:55:be:47:ac:4c:56:03:8f:56:a6: ca:cf:22:aa:6d:a1:96:66:a5:37:1a:59:10:52:b9:77:7c:57: 54:86:bc:bc:f5:cd:55:7c:3f:58:40:dc:19:e0:45:8f:50:e1: 0c:0a:8c:53:d0:66:61:54:06:b2:c8:c5:7c:b7:72:6a:40:42: 37:27:d0:c9:c9:92:c8:64:fe:be:60:8f:3d:3a:7c:d9:5c:5f: 55:7f:df:a7:0f:cf:67:33:82:fc:ec:26:9a:46:9b:75:9c:35: 22:61:0c:b7:03:e9:4a:06:9d:ec:74:33:4d:31:e3:c6:60:df: af:19:0b:47:6e:eb:2a:dd:a3:ad:38:ac:e4:3b:ea:5b:80:ff: 94:a4:80:69 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBM0E5RjgxNzY1RkI3 OEQ5MUUwMjQ2MDczRUNGRkEyRTBDRkY5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyvhrlX3aU+sh/ER0q65C/wXDWJIV9lYgIVHNSJ4EO98z/bJ50 RZqVY2JBpy4YjCXUqLveVvAeKf73aDXTx41C2b68sHxGHh2TIrYeAse+7uKCLu7J j6lzvqytmZkoLF3VwMGrkgCvY89WbjRsFn8dsmtGE2oP27FjGnVaZ6Q4XCJULirn SVG6eqyFqFd/IYCzRqu7vFk0HbTww0dwNJlVnlUlsS4qaRgLordNQu31kHTBq6Nf s1wHOXcnQU6WTMawKlo5AJWrZzzzjet6NsSGaWArA7FKXGj64OAS1uuiLlJC+aBF vC6CII5HXS7powK1ZR7m9nOOFoGg32BaOAhnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUWjqfgXZft42R4CRgc+z/ouDP+SQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvV2pxZmdYWmZ0NDJSNENSZ2Mtel9v dURQLVNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhtg4DAN BgkqhkiG9w0BAQsFAAOCAQEAjV+6keFrT5ZSXPOfHBwJ6W1oYAHYPEtAlOqlH0VL OJpH7nXD25JNMa3Gai8m4nfxaF9IVnj4pznytl/bb+UXWXPZABZCkoZblOd6uosg N3MI0apDW+18dBSc+IWxkwhqZBDg2cpekDAzYo4VcOhKkVKfoMxVvkesTFYDj1am ys8iqm2hlmalNxpZEFK5d3xXVIa8vPXNVXw/WEDcGeBFj1DhDAqMU9BmYVQGssjF fLdyakBCNyfQycmSyGT+vmCPPTp82VxfVX/fpw/PZzOC/OwmmkabdZw1ImEMtwPp Sgad7HQzTTHjxmDfrxkLR27rKt2jrTis5DvqW4D/lKSAaQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net