$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPdcjY4BYZVr8nmd90jU1iVMjGg.roa File: oPdcjY4BYZVr8nmd90jU1iVMjGg.roa (raw, json) Hash identifier: 2KHMY+4FnwxxDsGLL3IWTG404ftAReNv8lsqp0YKjV4= Subject key identifier: A0:F7:5C:8D:8E:01:61:95:6B:F2:79:9D:F7:48:D4:D6:25:4C:8C:68 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1124 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPdcjY4BYZVr8nmd90jU1iVMjGg.roa Signing time: Mon 10 Feb 2025 13:56:52 +0000 ROA not before: Mon 10 Feb 2025 13:56:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 182.155.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4388 (0x1124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0F75C8D8E0161956BF2799DF748D4D6254C8C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:db:3e:ba:04:c0:0d:df:90:d5:27:d9:31: 80:96:29:9c:8f:9d:b5:7f:7d:c4:46:ca:d5:2c:a8: 62:20:29:45:2e:3e:8e:75:79:9a:aa:0f:54:95:e2: 91:82:82:df:45:20:91:a0:b5:d2:8f:f1:6c:92:3c: 97:73:fa:2f:4b:6e:cb:3b:10:64:28:03:9f:7b:23: 4e:6e:41:cc:aa:f7:36:9f:73:03:4a:2f:4d:9f:3b: e9:52:7f:d4:93:ff:a0:70:c2:f7:ac:2c:80:76:48: 00:ea:9e:f5:a4:c0:48:63:d9:5e:f3:7f:ef:1a:19: 67:43:91:7e:73:b3:5e:d9:54:e9:5e:d9:25:c6:70: 01:d5:17:67:54:39:c3:4f:69:08:a3:ab:97:5a:e3: bb:e6:bc:5c:b7:93:a7:a4:82:aa:2f:c9:6f:90:19: 8b:10:15:91:33:d2:f2:51:3a:81:83:60:65:6f:59: dd:23:1a:b4:6f:28:f8:78:8d:d5:20:9c:9e:da:7c: 3c:35:58:72:f1:c2:9f:12:39:b4:84:48:dd:ff:de: d0:a2:a1:36:9b:21:32:a7:28:2f:17:2f:88:c7:b2: 04:d3:29:e1:b9:27:e4:4f:cc:47:59:2c:9f:b2:29: 16:6c:5e:ea:c2:5c:b9:a7:60:2b:31:7d:c2:04:fd: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F7:5C:8D:8E:01:61:95:6B:F2:79:9D:F7:48:D4:D6:25:4C:8C:68 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPdcjY4BYZVr8nmd90jU1iVMjGg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.160.0/19 Signature Algorithm: sha256WithRSAEncryption 6f:22:d3:0a:12:41:37:91:ef:8e:7a:27:06:5b:6b:62:e7:7b: 43:c5:2a:40:ff:a6:05:31:10:a2:0e:81:41:69:b1:8b:ff:eb: 6f:63:61:9d:b9:33:20:72:75:7d:3c:2c:9a:fe:63:34:d0:29: 44:c1:0a:9e:ff:0c:49:f9:fd:3c:99:89:29:cb:21:62:56:50: cd:dc:e4:10:7c:61:1f:46:58:18:c1:a3:4f:05:14:2a:38:1f: b4:00:95:b8:dd:fb:00:71:33:5b:0a:c2:5a:2a:a7:b3:29:50: 8e:1f:c5:a2:c3:c4:2e:e7:04:03:05:2e:b1:c4:24:88:a6:ff: 9a:30:75:70:47:a7:9a:af:49:69:90:9a:86:e2:5a:9c:9e:85: b1:80:cc:39:a0:86:46:09:35:87:f8:08:4d:6d:4f:21:04:12: 09:9f:89:03:20:c1:94:48:30:8a:d5:81:39:1e:8f:65:09:1e: aa:c1:c2:dd:fb:9b:23:1f:ec:c0:96:93:93:70:af:45:58:f9: 73:44:6c:a9:49:5f:d3:87:7b:3e:13:2b:4d:17:18:84:49:a1: 5f:6b:e2:eb:c7:e7:a6:b3:cd:b0:9d:4c:47:dd:5c:f4:3a:c1: d3:87:f0:40:09:88:00:b0:bf:64:30:2a:20:6f:ac:d7:6b:f0: 16:ac:49:02 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICESQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwRjc1QzhEOEUwMTYx OTU2QkYyNzk5REY3NDhENEQ2MjU0QzhDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmSNs+ugTADd+Q1SfZMYCWKZyPnbV/fcRGytUsqGIgKUUuPo51 eZqqD1SV4pGCgt9FIJGgtdKP8WySPJdz+i9Lbss7EGQoA597I05uQcyq9zafcwNK L02fO+lSf9ST/6BwwvesLIB2SADqnvWkwEhj2V7zf+8aGWdDkX5zs17ZVOle2SXG cAHVF2dUOcNPaQijq5da47vmvFy3k6ekgqovyW+QGYsQFZEz0vJROoGDYGVvWd0j GrRvKPh4jdUgnJ7afDw1WHLxwp8SObSESN3/3tCioTabITKnKC8XL4jHsgTTKeG5 J+RPzEdZLJ+yKRZsXurCXLmnYCsxfcIE/caxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUoPdcjY4BYZVr8nmd90jU1iVMjGgwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvb1BkY2pZNEJZWlZyOG5tZDkwalUx aVZNakdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbaboDAN BgkqhkiG9w0BAQsFAAOCAQEAbyLTChJBN5HvjnonBltrYud7Q8UqQP+mBTEQog6B QWmxi//rb2NhnbkzIHJ1fTwsmv5jNNApRMEKnv8MSfn9PJmJKcshYlZQzdzkEHxh H0ZYGMGjTwUUKjgftACVuN37AHEzWwrCWiqnsylQjh/FosPELucEAwUuscQkiKb/ mjB1cEenmq9JaZCahuJanJ6FsYDMOaCGRgk1h/gITW1PIQQSCZ+JAyDBlEgwitWB OR6PZQkeqsHC3fubIx/swJaTk3CvRVj5c0RsqUlf04d7PhMrTRcYhEmhX2vi68fn prPNsJ1MR91c9DrB04fwQAmIALC/ZDAqIG+s12vwFqxJAg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net