$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/a9P3wLnd9Hse0_J4vGplGx3HoFw.roa File: a9P3wLnd9Hse0_J4vGplGx3HoFw.roa (raw, json) Hash identifier: h+t5VMIr9v20+38xvvLisSlGpqgBGjHZISny3dMCTh0= Subject key identifier: 6B:D3:F7:C0:B9:DD:F4:7B:1E:D3:F2:78:BC:6A:65:1B:1D:C7:A0:5C Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10E8 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/a9P3wLnd9Hse0_J4vGplGx3HoFw.roa Signing time: Mon 10 Feb 2025 13:56:36 +0000 ROA not before: Mon 10 Feb 2025 13:56:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.217.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4328 (0x10e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6BD3F7C0B9DDF47B1ED3F278BC6A651B1DC7A05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:a4:cd:6a:fe:31:1b:3c:d8:09:ca:86:a2: c1:67:ba:ae:31:1d:cd:00:5d:0a:64:52:5c:ed:b2: 5b:b4:36:06:ec:e4:ef:ae:a9:9c:aa:d7:ae:1e:6a: cc:38:db:b1:ce:2e:80:bb:2d:ad:ca:93:69:89:c6: b3:29:12:52:12:f5:d8:32:9c:40:d3:da:65:39:82: 98:75:1a:b6:6f:59:96:51:de:e9:d0:ab:0e:dd:56: 26:1f:3e:99:95:77:d5:16:89:c0:ad:34:21:c6:bf: 2a:ad:2c:85:fe:77:9c:63:1b:83:f6:85:56:5c:46: 14:25:dc:b9:02:3b:7f:fd:f9:25:45:38:d0:ce:64: 01:7c:04:26:3b:33:d6:b9:97:c3:61:e1:b0:c3:36: c3:2d:74:08:b8:3b:3b:10:b1:a5:d9:e8:b2:c2:07: 61:0e:dd:26:65:2c:26:a3:8f:7c:c4:dc:b4:e5:98: ca:02:04:60:ba:74:36:d2:05:23:55:35:94:04:36: 0a:78:f4:48:f6:fa:03:70:e7:25:44:4d:08:b6:ac: 66:ad:2e:ee:a2:06:f7:2c:e8:31:ae:69:79:7d:da: 4b:f3:4c:1e:5d:11:9e:6b:f5:37:95:7d:73:01:d9: 9a:02:dd:e7:6a:da:0d:e7:78:f9:ae:a5:63:f3:1b: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D3:F7:C0:B9:DD:F4:7B:1E:D3:F2:78:BC:6A:65:1B:1D:C7:A0:5C X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/a9P3wLnd9Hse0_J4vGplGx3HoFw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:a3:9c:fc:6c:6d:86:d8:ef:a7:83:7c:f9:7f:ca:42:5d:1b: 75:29:d3:87:27:1c:31:dd:05:0e:31:21:d7:7a:a8:e3:c8:57: 30:c0:d5:68:ea:15:19:2f:24:82:74:31:7b:5c:be:70:46:25: df:4d:23:2d:31:6f:07:7f:05:6f:5d:8a:70:a2:e2:d8:2c:a6: 9e:4a:b4:7b:d8:eb:a4:b7:19:f8:cb:8c:8d:56:6a:2d:7f:cf: 2f:0d:3e:5c:ae:e3:ce:9a:db:ef:98:7a:82:3f:b5:07:bd:1d: 57:74:2c:e3:5e:d8:4a:fa:71:8a:0e:62:6c:d9:9f:e8:a0:28: 10:36:86:1d:ba:75:6e:3c:ec:22:2a:34:db:41:51:f4:98:cd: 9f:4d:0b:93:62:78:30:3e:01:b6:b6:2e:7a:01:10:04:7e:37: 9e:46:a8:2a:c2:d9:e4:c8:94:97:0c:df:5a:f4:77:ee:3c:00: 8d:c0:31:8e:aa:0d:ea:c9:83:07:03:64:26:dd:2f:05:46:ea: 8d:cc:37:36:3a:86:18:4c:0c:c7:07:50:20:a9:15:83:93:98: 2a:a4:d2:05:c0:ff:d1:a8:ee:5c:6d:f6:22:62:df:4b:57:9c: 8c:6c:bf:f9:a7:99:2a:ca:0a:33:59:ef:10:43:fa:b7:dc:6e: 94:6b:d2:cf -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCRDNGN0MwQjlEREY0 N0IxRUQzRjI3OEJDNkE2NTFCMURDN0EwNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNV6TNav4xGzzYCcqGosFnuq4xHc0AXQpkUlztslu0Ngbs5O+u qZyq164easw427HOLoC7La3Kk2mJxrMpElIS9dgynEDT2mU5gph1GrZvWZZR3unQ qw7dViYfPpmVd9UWicCtNCHGvyqtLIX+d5xjG4P2hVZcRhQl3LkCO3/9+SVFONDO ZAF8BCY7M9a5l8Nh4bDDNsMtdAi4OzsQsaXZ6LLCB2EO3SZlLCajj3zE3LTlmMoC BGC6dDbSBSNVNZQENgp49Ej2+gNw5yVETQi2rGatLu6iBvcs6DGuaXl92kvzTB5d EZ5r9TeVfXMB2ZoC3edq2g3nePmupWPzG33/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUa9P3wLnd9Hse0/J4vGplGx3HoFwwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvYTlQM3dMbmQ5SHNlMF9KNHZHcGxH eDNIb0Z3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMvZYDAN BgkqhkiG9w0BAQsFAAOCAQEATqOc/Gxthtjvp4N8+X/KQl0bdSnThyccMd0FDjEh 13qo48hXMMDVaOoVGS8kgnQxe1y+cEYl300jLTFvB38Fb12KcKLi2Cymnkq0e9jr pLcZ+MuMjVZqLX/PLw0+XK7jzprb75h6gj+1B70dV3Qs417YSvpxig5ibNmf6KAo EDaGHbp1bjzsIio020FR9JjNn00Lk2J4MD4BtrYuegEQBH43nkaoKsLZ5MiUlwzf WvR37jwAjcAxjqoN6smDBwNkJt0vBUbqjcw3NjqGGEwMxwdQIKkVg5OYKqTSBcD/ 0ajuXG32ImLfS1ecjGy/+aeZKsoKM1nvEEP6t9xulGvSzw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net