$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/mwKDTMazJzVPV9KBroOKIdqe2n4.roa File: mwKDTMazJzVPV9KBroOKIdqe2n4.roa (raw, json) Hash identifier: Hmj4wBfLncNY6exy3cPNOc+Et5XPKMhKjn0Jg2pqft8= Subject key identifier: 9B:02:83:4C:C6:B3:27:35:4F:57:D2:81:AE:83:8A:21:DA:9E:DA:7E Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10C9 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mwKDTMazJzVPV9KBroOKIdqe2n4.roa Signing time: Mon 10 Feb 2025 13:56:29 +0000 ROA not before: Mon 10 Feb 2025 13:56:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 210.209.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4297 (0x10c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B02834CC6B327354F57D281AE838A21DA9EDA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:3c:ad:88:3c:7d:c7:52:a1:bb:66:c4:b1: 0c:30:a0:e1:58:cc:ee:51:87:3a:bc:85:ec:c7:29: 0f:f7:6f:65:6f:f7:1e:b5:f7:98:c1:51:7b:60:fe: 80:a8:17:4b:da:46:0c:c9:89:27:37:a6:0a:77:b2: 67:3b:70:1d:ce:16:a3:27:f8:5a:cb:e8:aa:c4:20: 36:fc:80:27:92:75:40:40:3c:99:d8:c7:f1:c9:53: 8a:17:81:36:96:5f:83:03:d1:53:33:1f:07:8a:61: ef:ea:1d:c2:aa:6c:a4:9c:03:ef:17:fd:3b:68:93: 53:72:c7:69:5c:71:d7:13:11:ca:93:75:1a:fb:63: a5:b3:e6:83:ad:c1:eb:c2:c9:7c:f0:3a:7e:59:9f: 82:e5:b2:3e:a7:83:8c:83:07:44:38:2e:04:c9:ba: 14:b4:70:70:62:39:ca:3d:9f:6f:6b:64:0e:d2:ae: 05:48:ae:b1:01:b8:41:b7:da:fc:36:f8:8f:3f:df: 14:34:60:f7:01:77:d5:f0:98:ca:42:22:3c:ff:b7: bc:7f:ea:93:c8:50:b1:60:b5:74:e4:48:8f:bd:4f: f6:76:b0:24:b5:50:14:c5:b6:c4:4d:55:84:e5:e0: 26:83:59:32:68:9d:3b:94:17:f0:e0:b7:86:d4:1b: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:83:4C:C6:B3:27:35:4F:57:D2:81:AE:83:8A:21:DA:9E:DA:7E X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mwKDTMazJzVPV9KBroOKIdqe2n4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.192.0/18 Signature Algorithm: sha256WithRSAEncryption ab:29:85:5e:a6:5b:76:e2:09:5e:3b:13:f6:e7:d7:9e:47:4b: f8:6c:19:3e:d5:2a:56:d4:bb:04:d2:e2:d3:16:a2:29:c7:11: 1f:af:83:cf:7d:07:55:5d:b9:fa:ed:69:07:e4:ea:10:8f:ce: ba:36:37:ba:1f:5c:e1:a3:3e:8a:f2:d0:58:0c:24:34:6c:d0: 54:49:f3:20:85:a5:92:50:98:a5:5b:92:ad:8d:a2:58:61:26: 63:1e:46:dc:5f:20:7e:ab:10:c4:9b:fa:1f:53:14:c4:0c:46: fd:77:56:db:50:00:1e:6b:4e:47:c9:89:3a:98:de:dc:da:44: ee:1c:53:e2:42:66:0d:37:11:26:a4:38:fb:c2:8e:1b:03:89: e3:87:e7:1d:e8:b5:b7:51:9a:70:2e:dc:f3:7f:5b:25:12:09: 9c:22:3e:c9:fb:3a:5c:19:7b:94:8a:c3:cc:d0:63:4e:d7:68: b9:48:61:b9:77:d7:65:56:0f:a4:23:5c:d0:f6:8f:dd:ac:ba: 9a:87:22:7d:91:03:16:f3:df:2e:df:a1:de:af:20:f8:4f:3c: 90:99:e6:3a:ec:76:8f:06:23:d7:1e:11:f9:9a:04:54:1b:52: 50:fa:5f:aa:85:b3:68:78:04:49:1f:15:13:cc:b0:52:ba:15: fc:99:0c:5e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCMDI4MzRDQzZCMzI3 MzU0RjU3RDI4MUFFODM4QTIxREE5RURBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI6jytiDx9x1Khu2bEsQwwoOFYzO5Rhzq8hezHKQ/3b2Vv9x61 95jBUXtg/oCoF0vaRgzJiSc3pgp3smc7cB3OFqMn+FrL6KrEIDb8gCeSdUBAPJnY x/HJU4oXgTaWX4MD0VMzHweKYe/qHcKqbKScA+8X/Ttok1Nyx2lccdcTEcqTdRr7 Y6Wz5oOtwevCyXzwOn5Zn4Llsj6ng4yDB0Q4LgTJuhS0cHBiOco9n29rZA7SrgVI rrEBuEG32vw2+I8/3xQ0YPcBd9XwmMpCIjz/t7x/6pPIULFgtXTkSI+9T/Z2sCS1 UBTFtsRNVYTl4CaDWTJonTuUF/Dgt4bUG0t9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUmwKDTMazJzVPV9KBroOKIdqe2n4wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbXdLRFRNYXpKelZQVjlLQnJvT0tJ ZHFlMm40LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLRwDAN BgkqhkiG9w0BAQsFAAOCAQEAqymFXqZbduIJXjsT9ufXnkdL+GwZPtUqVtS7BNLi 0xaiKccRH6+Dz30HVV25+u1pB+TqEI/OujY3uh9c4aM+ivLQWAwkNGzQVEnzIIWl klCYpVuSrY2iWGEmYx5G3F8gfqsQxJv6H1MUxAxG/XdW21AAHmtOR8mJOpje3NpE 7hxT4kJmDTcRJqQ4+8KOGwOJ44fnHei1t1GacC7c839bJRIJnCI+yfs6XBl7lIrD zNBjTtdouUhhuXfXZVYPpCNc0PaP3ay6mocifZEDFvPfLt+h3q8g+E88kJnmOux2 jwYj1x4R+ZoEVBtSUPpfqoWzaHgESR8VE8ywUroV/JkMXg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net