$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa File: gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa (raw, json) Hash identifier: iGMRBBUzfRsb41c39sMir7sW2E0NFOAnrXUhACaWYuk= Subject key identifier: 80:DE:21:09:58:FD:23:22:3C:F3:29:A4:6C:F3:F7:C1:84:FC:57:3B Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 110F Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa Signing time: Mon 10 Feb 2025 13:56:46 +0000 ROA not before: Mon 10 Feb 2025 13:56:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 2401:ab00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4367 (0x110f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=80DE210958FD23223CF329A46CF3F7C184FC573B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:04:83:b5:45:5f:1f:61:00:89:9e:24:09: 52:49:c3:25:34:ba:24:0c:a2:1d:d8:e9:57:dd:fe: b2:8a:b4:29:43:14:78:26:bf:de:71:fd:5d:db:28: 04:cd:45:98:04:66:4f:22:3c:0c:95:3d:72:c8:c3: c7:09:fb:86:1b:61:fd:4f:bd:99:00:f5:dd:41:e3: 08:8a:37:4d:9f:84:21:f1:f2:39:ed:aa:7a:75:2a: aa:37:e9:ed:f0:06:82:5a:a5:b8:b0:c2:48:97:ea: 14:3b:63:97:a3:72:1b:7e:79:da:29:4b:3c:8a:a7: 94:b2:5e:cf:30:45:21:ec:58:d2:5f:62:84:4b:1b: aa:f5:10:35:27:39:79:f4:8d:0c:a4:de:8b:b9:fb: e1:9c:7e:db:5c:58:dd:a8:98:e0:53:d7:89:5e:98: dd:e5:6f:e9:9c:32:97:56:8e:26:7f:eb:db:d6:e6: d8:ee:72:98:5c:20:c2:fa:d5:e1:8b:6b:43:83:88: 40:06:7e:d6:b3:69:6a:91:c5:5f:74:a0:a7:05:56: c6:f8:cc:61:c2:d1:aa:53:cf:6d:84:c0:a0:57:5f: 89:34:3b:ae:bf:29:cc:75:17:bd:a7:37:ae:93:96: 00:fa:a9:82:dc:95:e6:7a:a2:da:49:de:15:d9:ea: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DE:21:09:58:FD:23:22:3C:F3:29:A4:6C:F3:F7:C1:84:FC:57:3B X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:ab00::/32 Signature Algorithm: sha256WithRSAEncryption 26:a6:55:36:ed:8a:2d:a9:a2:22:cf:ff:74:eb:44:67:e6:81: 00:34:52:27:8f:dd:62:42:01:e0:da:34:89:83:84:db:fb:03: 7b:10:c8:07:87:87:11:78:db:3c:b2:99:ac:a8:36:28:e5:16: ae:a3:44:42:fe:19:cc:4c:4d:2f:e6:3d:9e:cc:67:cb:e5:39: 1b:7b:e7:e7:c0:33:78:7c:a8:e5:e9:e5:50:67:55:ef:98:5c: e7:2d:f2:b3:7f:c3:c8:2d:53:58:14:68:3b:bd:e4:58:fe:86: ab:08:8b:e2:55:1e:04:24:b2:d9:4f:43:13:ab:9a:28:24:7c: e6:c1:70:d7:4f:d3:8e:67:4b:cc:f4:84:10:36:ff:dc:9b:e3: 8e:7e:c1:05:5c:e4:bd:05:bf:52:27:d3:4b:0e:a1:49:04:07: a8:df:94:e9:26:93:4a:a4:bd:b7:02:a5:10:7a:3c:61:aa:05: 52:de:d0:c1:96:87:98:c8:bb:b5:d3:af:75:d3:15:10:de:5f: 2f:54:41:6e:df:25:3f:92:30:e3:e8:31:17:a8:35:ea:79:cf: 2f:15:1a:5c:98:98:11:db:61:e9:78:ce:36:c4:b1:35:74:8b: 86:3c:90:f5:68:94:01:a7:f5:7b:32:46:5e:30:ec:b7:8a:96: eb:0b:e9:5c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwREUyMTA5NThGRDIz MjIzQ0YzMjlBNDZDRjNGN0MxODRGQzU3M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaSASDtUVfH2EAiZ4kCVJJwyU0uiQMoh3Y6Vfd/rKKtClDFHgm v95x/V3bKATNRZgEZk8iPAyVPXLIw8cJ+4YbYf1PvZkA9d1B4wiKN02fhCHx8jnt qnp1Kqo36e3wBoJapbiwwkiX6hQ7Y5ejcht+edopSzyKp5SyXs8wRSHsWNJfYoRL G6r1EDUnOXn0jQyk3ou5++GcfttcWN2omOBT14lemN3lb+mcMpdWjiZ/69vW5tju cphcIML61eGLa0ODiEAGftazaWqRxV90oKcFVsb4zGHC0apTz22EwKBXX4k0O66/ Kcx1F72nN66TlgD6qYLcleZ6otpJ3hXZ6nm9AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUgN4hCVj9IyI88ymkbPP3wYT8VzswHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZ040aENWajlJeUk4OHlta2JQUDN3 WVQ4VnpzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBqwAw DQYJKoZIhvcNAQELBQADggEBACamVTbtii2poiLP/3TrRGfmgQA0UieP3WJCAeDa NImDhNv7A3sQyAeHhxF42zyymayoNijlFq6jREL+GcxMTS/mPZ7MZ8vlORt75+fA M3h8qOXp5VBnVe+YXOct8rN/w8gtU1gUaDu95Fj+hqsIi+JVHgQkstlPQxOrmigk fObBcNdP045nS8z0hBA2/9yb445+wQVc5L0Fv1In00sOoUkEB6jflOkmk0qkvbcC pRB6PGGqBVLe0MGWh5jIu7XTr3XTFRDeXy9UQW7fJT+SMOPoMReoNep5zy8VGlyY mBHbYel4zjbEsTV0i4Y8kPVolAGn9XsyRl4w7LeKlusL6Vw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net