$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Ne5Mhkb29mYwK7NUTbmFDRjj5jk.roa File: Ne5Mhkb29mYwK7NUTbmFDRjj5jk.roa (raw, json) Hash identifier: zcFzkp/qSQkTHBd5KqHKofDB/ydQEvSadVDVK3W0oTo= Subject key identifier: 35:EE:4C:86:46:F6:F6:66:30:2B:B3:54:4D:B9:85:0D:18:E3:E6:39 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 110C Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Ne5Mhkb29mYwK7NUTbmFDRjj5jk.roa Signing time: Mon 10 Feb 2025 13:56:46 +0000 ROA not before: Mon 10 Feb 2025 13:56:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 113.61.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4364 (0x110c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=35EE4C8646F6F666302BB3544DB9850D18E3E639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:ca:ae:24:9e:4f:69:ff:40:70:02:4d:a7: e7:40:8d:e8:0b:b0:50:50:bd:af:d6:6f:1f:80:df: 4c:a4:f8:72:10:36:d4:4c:e6:d7:4d:bf:4e:e3:86: d4:a2:9e:eb:7b:81:5c:79:d9:a1:79:c0:05:eb:a3: 77:b3:12:40:f9:00:8f:ef:6e:a3:3c:7b:69:98:74: 9f:27:0e:63:69:d7:4d:3a:66:f4:82:a8:1e:48:29: 98:55:ab:96:3d:2f:13:3b:b4:86:8c:3c:07:89:a9: 22:fd:b3:aa:74:c8:cd:a3:e3:a2:69:d2:79:0e:26: c7:a3:f8:82:81:2a:b1:43:72:a4:f2:26:67:6d:d6: 44:c8:2c:3a:58:4a:02:8d:0d:5b:01:1f:45:3c:3b: 00:cc:aa:6b:8d:da:05:f2:4c:46:c7:5c:ac:62:39: f5:9c:e8:1d:9d:24:4f:9c:88:b9:18:fc:ef:cd:8f: 70:7c:0b:ca:50:b1:32:1d:6f:a8:ea:39:56:c0:3e: c3:4b:87:d0:cc:df:a2:63:66:5d:dd:b1:58:bd:66: 21:0c:1d:e9:27:1c:50:60:ad:04:2b:68:3d:06:6c: 85:21:f4:27:15:13:f2:0a:13:87:fe:e5:db:b2:de: 19:f9:f0:9a:dd:36:90:97:95:b1:4c:ac:10:c8:2f: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EE:4C:86:46:F6:F6:66:30:2B:B3:54:4D:B9:85:0D:18:E3:E6:39 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Ne5Mhkb29mYwK7NUTbmFDRjj5jk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.172.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:3b:d9:f8:69:5e:a7:05:09:7f:1e:78:8e:df:e7:74:d6:d2: 3b:63:1e:a7:53:ee:f2:44:25:2e:ff:f9:71:a7:ea:cd:58:70: ad:a6:77:ed:85:11:8c:ac:86:6c:c6:06:da:ef:0b:b6:66:2f: 5e:91:99:db:7c:3c:f0:19:e5:53:af:12:7d:bc:88:2d:c2:9d: 01:f5:a1:68:21:34:fd:bd:3a:17:4e:bd:c1:e4:33:3d:95:7d: 7a:25:d5:c3:54:33:3f:70:c2:11:ab:bb:31:60:44:46:e1:26: aa:13:2a:a9:51:53:34:9e:76:80:d6:4a:a4:c7:fa:06:d2:86: fd:27:0f:d2:c2:ac:eb:2f:0a:8b:84:40:7d:b2:4f:b5:c7:4f: 16:1b:0c:67:a6:f1:b0:95:04:4f:a8:df:45:8b:2e:fc:fc:c8: f0:dd:c6:75:85:44:6e:2c:c3:b6:05:a7:af:09:b1:f8:bf:63: b0:3f:7e:ad:7b:88:ce:18:5e:b2:df:94:7c:06:ad:63:39:44: 7c:d6:bc:f4:cb:8c:bd:84:4b:e1:a3:94:32:28:4f:7a:64:2f: ad:6d:b7:38:0f:cb:85:46:12:06:00:d4:2c:d8:0b:0e:b4:38: a8:da:fe:f6:d1:c8:65:9a:07:65:40:27:3c:8b:b0:16:42:e3: aa:bd:bc:bd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1RUU0Qzg2NDZGNkY2 NjYzMDJCQjM1NDREQjk4NTBEMThFM0U2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcIMquJJ5Paf9AcAJNp+dAjegLsFBQva/Wbx+A30yk+HIQNtRM 5tdNv07jhtSinut7gVx52aF5wAXro3ezEkD5AI/vbqM8e2mYdJ8nDmNp1006ZvSC qB5IKZhVq5Y9LxM7tIaMPAeJqSL9s6p0yM2j46Jp0nkOJsej+IKBKrFDcqTyJmdt 1kTILDpYSgKNDVsBH0U8OwDMqmuN2gXyTEbHXKxiOfWc6B2dJE+ciLkY/O/Nj3B8 C8pQsTIdb6jqOVbAPsNLh9DM36JjZl3dsVi9ZiEMHeknHFBgrQQraD0GbIUh9CcV E/IKE4f+5duy3hn58JrdNpCXlbFMrBDILz55AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNe5Mhkb29mYwK7NUTbmFDRjj5jkwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTmU1TWhrYjI5bVl3SzdOVVRibUZE UmpqNWprLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE9rDAN BgkqhkiG9w0BAQsFAAOCAQEACjvZ+GlepwUJfx54jt/ndNbSO2Mep1Pu8kQlLv/5 cafqzVhwraZ37YURjKyGbMYG2u8LtmYvXpGZ23w88BnlU68SfbyILcKdAfWhaCE0 /b06F069weQzPZV9eiXVw1QzP3DCEau7MWBERuEmqhMqqVFTNJ52gNZKpMf6BtKG /ScP0sKs6y8Ki4RAfbJPtcdPFhsMZ6bxsJUET6jfRYsu/PzI8N3GdYVEbizDtgWn rwmx+L9jsD9+rXuIzhhest+UfAatYzlEfNa89MuMvYRL4aOUMihPemQvrW23OA/L hUYSBgDULNgLDrQ4qNr+9tHIZZoHZUAnPIuwFkLjqr28vQ== -----END CERTIFICATE-----Generated at Tue Apr 8 18:07:53 2025 by rpki-client