$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/3__B6FtZH3zWG0oKIof9g0XlIJ0.roa File: 3__B6FtZH3zWG0oKIof9g0XlIJ0.roa (raw, json) Hash identifier: CTPdO0BiAeIufBmUXMkcIVJnY/G6mm4e+AtHAnO31ms= Subject key identifier: DF:FF:C1:E8:5B:59:1F:7C:D6:1B:4A:0A:22:87:FD:83:45:E5:20:9D Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1121 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3__B6FtZH3zWG0oKIof9g0XlIJ0.roa Signing time: Mon 10 Feb 2025 13:56:51 +0000 ROA not before: Mon 10 Feb 2025 13:56:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 113.61.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 16:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4385 (0x1121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DFFFC1E85B591F7CD61B4A0A2287FD8345E5209D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:f6:15:6b:10:09:8f:88:bc:58:0c:d3:ba: 46:e0:72:b6:72:59:b9:4f:7d:7a:ea:cb:25:45:f3: e3:af:23:18:b7:8d:72:c5:95:f6:5d:d4:56:ca:7f: 7c:4e:96:a9:9a:91:1e:a0:71:a3:fd:31:08:76:41: 7e:5a:fd:4e:78:a0:0e:cd:48:07:3a:4a:f4:14:37: 9b:b8:2c:8f:b6:1b:8e:ac:b9:8d:b7:c5:f1:a2:b4: 37:08:23:9e:45:f9:c9:87:34:ae:17:5e:f8:91:a2: 86:4c:61:10:4c:99:65:17:a6:e0:81:2e:ee:fb:3e: 05:53:ae:32:8f:57:03:6d:a9:ad:8e:52:2f:6f:f3: d5:43:b9:3e:d3:cd:cf:77:d4:ec:28:8a:1c:30:81: 75:d1:b1:da:02:d5:43:be:a6:dc:18:22:bb:4c:26: d8:c9:b1:d3:a8:ca:42:b4:dc:94:56:26:21:51:31: 13:3a:4c:fa:6d:de:c8:6b:b3:e0:ea:fe:11:0b:1b: 1d:08:19:f8:6d:23:c1:15:d9:4f:30:dd:ad:dc:1d: f4:a8:7b:b8:7f:b4:55:20:d2:0c:dc:3b:ee:53:c2: 91:c4:3b:80:9b:69:4c:29:62:68:3a:ad:10:42:10: a0:ec:27:e5:67:e5:fb:61:1e:a8:1f:0b:4c:04:11: f9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FF:C1:E8:5B:59:1F:7C:D6:1B:4A:0A:22:87:FD:83:45:E5:20:9D X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3__B6FtZH3zWG0oKIof9g0XlIJ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.192.0/19 Signature Algorithm: sha256WithRSAEncryption 0f:51:a0:ab:62:29:04:d9:da:e8:55:6f:82:eb:7b:96:67:b9: 47:c0:ab:5f:bf:a0:b7:8d:d7:72:32:9c:f4:07:49:c7:64:38: ef:52:80:ed:8e:0f:79:30:ae:f4:95:b5:71:ba:26:aa:97:c3: 81:86:59:f5:06:6f:f3:dc:38:2f:5e:f1:c5:30:44:48:40:40: 30:7c:6e:b7:66:04:e1:cf:dc:52:bf:3f:77:bb:94:48:03:9f: ea:98:5e:8c:0f:52:78:62:e0:e1:f2:71:0f:29:0a:36:6a:9e: af:68:2d:63:75:b7:97:1d:93:24:5b:3a:ef:41:bf:39:59:62: a5:f5:f7:fd:d3:c2:41:06:04:5d:ff:f1:da:a5:ee:aa:e7:4e: 3c:16:94:9f:c7:27:c5:ba:67:39:33:a3:76:55:b5:4a:57:fc: af:19:2d:2f:81:aa:3c:08:c5:39:1d:6b:f4:2e:d7:86:3f:ee: 4e:b2:b5:da:4e:31:0e:3f:81:e8:48:44:3f:a9:f3:b8:77:59: 36:03:db:e9:04:ec:61:4c:0e:23:8b:f2:0b:a4:cd:17:f2:c8: 86:4d:3b:88:a4:15:0b:6b:fc:3e:0b:be:dd:af:1a:de:19:7b: 3f:2e:19:40:7b:2f:11:6c:02:1e:73:3e:6a:8a:d0:8a:1e:13: b1:6e:c7:23 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICESEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGRkZDMUU4NUI1OTFG N0NENjFCNEEwQTIyODdGRDgzNDVFNTIwOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyyfYVaxAJj4i8WAzTukbgcrZyWblPfXrqyyVF8+OvIxi3jXLF lfZd1FbKf3xOlqmakR6gcaP9MQh2QX5a/U54oA7NSAc6SvQUN5u4LI+2G46suY23 xfGitDcII55F+cmHNK4XXviRooZMYRBMmWUXpuCBLu77PgVTrjKPVwNtqa2OUi9v 89VDuT7Tzc931OwoihwwgXXRsdoC1UO+ptwYIrtMJtjJsdOoykK03JRWJiFRMRM6 TPpt3shrs+Dq/hELGx0IGfhtI8EV2U8w3a3cHfSoe7h/tFUg0gzcO+5TwpHEO4Cb aUwpYmg6rRBCEKDsJ+Vn5fthHqgfC0wEEfnBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU3//B6FtZH3zWG0oKIof9g0XlIJ0wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvM19fQjZGdFpIM3pXRzBvS0lvZjln MFhsSUowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXE9wDAN BgkqhkiG9w0BAQsFAAOCAQEAD1Ggq2IpBNna6FVvgut7lme5R8CrX7+gt43XcjKc 9AdJx2Q471KA7Y4PeTCu9JW1cbomqpfDgYZZ9QZv89w4L17xxTBESEBAMHxut2YE 4c/cUr8/d7uUSAOf6phejA9SeGLg4fJxDykKNmqer2gtY3W3lx2TJFs670G/OVli pfX3/dPCQQYEXf/x2qXuqudOPBaUn8cnxbpnOTOjdlW1Slf8rxktL4GqPAjFOR1r 9C7Xhj/uTrK12k4xDj+B6EhEP6nzuHdZNgPb6QTsYUwOI4vyC6TNF/LIhk07iKQV C2v8Pgu+3a8a3hl7Py4ZQHsvEWwCHnM+aorQih4TsW7HIw== -----END CERTIFICATE-----Generated at Tue Apr 8 15:06:08 2025 by rpki-client