$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/wfLPPb5MLsGviuoW1ctIa0lY2CU.roa File: wfLPPb5MLsGviuoW1ctIa0lY2CU.roa (raw, json) Hash identifier: Tj+qzHKKSGGDOUU9+A0NgQE6Roa0PrCMjbwqLswTS7Q= Subject key identifier: C1:F2:CF:3D:BE:4C:2E:C1:AF:8A:EA:16:D5:CB:48:6B:49:58:D8:25 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1109 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wfLPPb5MLsGviuoW1ctIa0lY2CU.roa Signing time: Mon 10 Feb 2025 13:56:44 +0000 ROA not before: Mon 10 Feb 2025 13:56:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 182.155.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4361 (0x1109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C1F2CF3DBE4C2EC1AF8AEA16D5CB486B4958D825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1a:56:0f:03:80:57:90:6d:2c:ec:fb:ef:f0: 9b:47:bb:25:8f:b6:a4:05:56:ae:e5:58:fb:b7:3d: fa:d2:1e:e0:ff:2a:59:69:35:a7:9b:c5:67:a5:a2: 93:c7:f2:a2:b7:83:4f:1e:55:b9:0e:4a:39:51:3e: 39:7a:22:3a:94:c8:a7:21:ae:bc:e7:3d:39:28:90: 6f:ba:82:a8:99:d7:a4:43:56:85:8f:e5:5d:ee:2c: 8d:7e:39:bb:ef:52:e1:66:6c:dc:78:25:1b:68:ce: 62:57:25:5d:23:60:2e:f3:91:2f:7c:61:5d:c8:b7: 55:28:2e:2a:bf:78:e5:c5:a9:ca:5e:de:79:01:35: 92:ef:48:3f:cf:59:18:ab:dc:91:5c:26:a9:c8:52: 18:bd:ba:d9:17:2c:fc:32:ec:0a:24:8a:1f:ed:ad: db:32:d1:ed:f5:93:40:90:57:14:2a:bd:a5:d6:1c: cf:6c:73:57:d5:1e:36:11:9f:0d:d9:0c:26:65:24: a2:e2:f5:66:de:54:57:c3:8e:65:a9:ac:af:fb:76: 5d:b4:22:a0:dd:d8:21:41:74:01:9a:44:1b:66:5d: 9d:c2:1b:e4:40:a1:0d:c8:82:d1:bb:15:6d:8e:7e: 63:2b:f1:75:ed:e1:39:4e:ed:89:d3:20:b5:be:88: 42:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:CF:3D:BE:4C:2E:C1:AF:8A:EA:16:D5:CB:48:6B:49:58:D8:25 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wfLPPb5MLsGviuoW1ctIa0lY2CU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.128.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:fd:db:25:04:13:8e:30:34:76:56:83:c3:48:18:26:4e:1b: 0e:2b:ff:58:f2:af:64:2a:11:32:e1:6b:c6:b2:0d:1d:f5:08: 7b:e3:df:eb:0a:3d:5e:b0:55:bc:69:49:13:eb:0f:c9:eb:0a: 73:de:9e:ac:63:8e:62:ef:74:67:07:94:d3:c7:52:c6:73:91: c9:4f:2e:38:18:ac:9e:15:38:bd:70:67:4f:5b:02:56:e5:b2: 60:1b:a5:cf:62:fa:a6:b2:fb:97:34:96:77:bf:28:2e:e7:36: d5:0c:a6:97:e6:1b:6f:8f:77:b7:e1:90:9c:b7:b7:04:c8:79: 2a:1b:bc:76:01:ed:24:41:26:9e:f4:f7:30:b5:7a:45:f9:aa: 63:99:19:24:11:9f:bf:8e:c6:ac:83:c6:d3:6b:33:42:4f:b3: 14:be:c6:78:81:40:20:70:c5:9c:cc:bc:ae:1e:bc:49:68:e9: 81:9a:78:47:db:2f:f2:98:c9:8d:38:00:a8:93:28:96:8d:05: 42:df:79:fd:43:57:37:3f:8b:c4:e0:e3:2a:38:f0:fd:f2:bb: 87:d6:47:7c:e3:4f:60:82:af:0c:9d:ef:9e:53:9b:6b:37:af: 0d:98:9e:2d:d1:ee:57:a1:95:ea:13:cf:ff:4b:40:5d:07:29: 2f:47:2f:68 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxRjJDRjNEQkU0QzJF QzFBRjhBRUExNkQ1Q0I0ODZCNDk1OEQ4MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcGlYPA4BXkG0s7Pvv8JtHuyWPtqQFVq7lWPu3PfrSHuD/Kllp NaebxWelopPH8qK3g08eVbkOSjlRPjl6IjqUyKchrrznPTkokG+6gqiZ16RDVoWP 5V3uLI1+ObvvUuFmbNx4JRtozmJXJV0jYC7zkS98YV3It1UoLiq/eOXFqcpe3nkB NZLvSD/PWRir3JFcJqnIUhi9utkXLPwy7Aokih/trdsy0e31k0CQVxQqvaXWHM9s c1fVHjYRnw3ZDCZlJKLi9WbeVFfDjmWprK/7dl20IqDd2CFBdAGaRBtmXZ3CG+RA oQ3IgtG7FW2OfmMr8XXt4TlO7YnTILW+iEJFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUwfLPPb5MLsGviuoW1ctIa0lY2CUwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvd2ZMUFBiNU1Mc0d2aXVvVzFjdElh MGxZMkNVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbabgDAN BgkqhkiG9w0BAQsFAAOCAQEAn/3bJQQTjjA0dlaDw0gYJk4bDiv/WPKvZCoRMuFr xrINHfUIe+Pf6wo9XrBVvGlJE+sPyesKc96erGOOYu90ZweU08dSxnORyU8uOBis nhU4vXBnT1sCVuWyYBulz2L6prL7lzSWd78oLuc21Qyml+Ybb493t+GQnLe3BMh5 Khu8dgHtJEEmnvT3MLV6RfmqY5kZJBGfv47GrIPG02szQk+zFL7GeIFAIHDFnMy8 rh68SWjpgZp4R9sv8pjJjTgAqJMolo0FQt95/UNXNz+LxODjKjjw/fK7h9ZHfONP YIKvDJ3vnlObazevDZieLdHuV6GV6hPP/0tAXQcpL0cvaA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net