$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Pa2iof130SfMip6yKkaGY8ZR13o.roa File: Pa2iof130SfMip6yKkaGY8ZR13o.roa (raw, json) Hash identifier: 2jSSODk7LIbOK0k0fp8mEm3GeNHnSLd1XA06ixCte80= Subject key identifier: 3D:AD:A2:A1:FD:77:D1:27:CC:8A:9E:B2:2A:46:86:63:C6:51:D7:7A Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10BD Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Pa2iof130SfMip6yKkaGY8ZR13o.roa Signing time: Mon 10 Feb 2025 13:56:28 +0000 ROA not before: Mon 10 Feb 2025 13:56:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131611 IP address blocks: 119.15.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 17:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4285 (0x10bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3DADA2A1FD77D127CC8A9EB22A468663C651D77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:f0:1c:e8:8d:c4:45:ec:da:28:bf:b7:0a: 18:a3:9f:36:86:16:7c:00:e1:97:f0:33:72:f2:2f: cf:b1:47:9b:99:70:af:d4:77:11:4f:6e:bf:8b:e2: 25:5f:d7:b2:ab:f2:ee:07:3a:55:d0:34:e5:3f:41: e6:20:0d:25:7b:8d:14:77:f9:4e:4a:e4:e6:67:d3: 3f:4e:86:34:d8:bc:c3:77:63:5d:79:f8:b4:47:42: df:41:d4:9b:43:09:c1:67:17:bf:9e:b4:c2:1f:cc: 30:ce:48:07:24:8a:66:de:b5:76:00:f9:22:75:2a: 24:c6:cb:28:02:fd:c2:82:09:51:b0:b6:ff:8f:df: 0f:02:81:27:e1:5d:36:68:6f:c5:99:a0:0a:f3:e4: e8:21:15:70:f8:bd:bc:2f:1b:5a:bf:94:0b:26:4b: cd:50:9e:3f:db:90:1c:dc:80:15:9a:c0:a5:c7:d6: 75:71:10:54:a2:ec:60:1c:4e:ec:e9:78:c3:76:51: af:2f:62:48:3d:ee:3c:93:f9:03:20:51:63:90:13: 16:0d:37:fb:be:9f:64:9d:e1:e8:1c:39:20:f8:d4: a2:91:54:df:57:ac:58:27:2e:dc:ce:4f:0c:ec:21: 6a:cb:4f:7d:5d:00:e1:c9:53:58:8e:67:8d:98:43: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AD:A2:A1:FD:77:D1:27:CC:8A:9E:B2:2A:46:86:63:C6:51:D7:7A X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Pa2iof130SfMip6yKkaGY8ZR13o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.15.224.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:cd:47:3c:9e:9b:05:26:ed:e1:57:d8:52:3a:14:f8:af:12: 32:28:7c:23:f8:c1:8d:e5:f8:49:a8:07:0c:b6:bf:3a:2c:df: 95:a0:6a:90:f6:2e:7a:2f:88:59:3b:ae:2e:c7:ef:74:07:a0: 75:6c:4b:5c:67:89:db:20:0a:0e:ff:94:c9:df:91:82:6f:6d: c8:aa:c5:eb:d9:21:a7:b2:aa:75:29:8c:8c:c6:fa:02:d9:fa: 68:45:41:f7:73:88:a3:77:e1:78:f8:69:1a:84:c8:a6:34:0c: b7:c0:b3:df:9c:a4:d5:9e:90:c3:e1:53:b6:0a:6d:ba:70:b0: e9:0a:d1:ae:a9:1b:bf:26:0b:49:f9:ca:1b:4a:7d:b7:d1:ec: 86:c7:75:dc:2a:52:d6:86:55:dc:ad:43:69:57:c0:fc:32:4d: 6f:df:00:40:c0:a3:b1:d2:99:fe:9a:ea:5e:4e:c8:aa:49:28: c7:9b:50:7f:bf:27:96:53:9b:7b:ba:fa:2b:d5:86:0c:a4:75: 10:a3:10:62:85:8f:c8:d9:27:59:15:23:ca:bb:5b:9a:1f:ce: 20:17:11:3f:e5:ed:6e:50:a8:65:8a:ee:63:18:a7:ac:a6:1f: 47:f8:d3:d1:7d:03:5b:2b:12:78:d5:f5:72:01:77:fe:b2:3b: f2:92:db:1d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNEQURBMkExRkQ3N0Qx MjdDQzhBOUVCMjJBNDY4NjYzQzY1MUQ3N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmxfAc6I3ERezaKL+3ChijnzaGFnwA4ZfwM3LyL8+xR5uZcK/U dxFPbr+L4iVf17Kr8u4HOlXQNOU/QeYgDSV7jRR3+U5K5OZn0z9OhjTYvMN3Y115 +LRHQt9B1JtDCcFnF7+etMIfzDDOSAckimbetXYA+SJ1KiTGyygC/cKCCVGwtv+P 3w8CgSfhXTZob8WZoArz5OghFXD4vbwvG1q/lAsmS81Qnj/bkBzcgBWawKXH1nVx EFSi7GAcTuzpeMN2Ua8vYkg97jyT+QMgUWOQExYNN/u+n2Sd4egcOSD41KKRVN9X rFgnLtzOTwzsIWrLT31dAOHJU1iOZ42YQ+ThAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUPa2iof130SfMip6yKkaGY8ZR13owHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUGEyaW9mMTMwU2ZNaXA2eUtrYUdZ OFpSMTNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXcP4DAN BgkqhkiG9w0BAQsFAAOCAQEALM1HPJ6bBSbt4VfYUjoU+K8SMih8I/jBjeX4SagH DLa/OizflaBqkPYuei+IWTuuLsfvdAegdWxLXGeJ2yAKDv+Uyd+Rgm9tyKrF69kh p7KqdSmMjMb6Atn6aEVB93OIo3fhePhpGoTIpjQMt8Cz35yk1Z6Qw+FTtgptunCw 6QrRrqkbvyYLSfnKG0p9t9Hshsd13CpS1oZV3K1DaVfA/DJNb98AQMCjsdKZ/prq Xk7Iqkkox5tQf78nllObe7r6K9WGDKR1EKMQYoWPyNknWRUjyrtbmh/OIBcRP+Xt blCoZYruYxinrKYfR/jT0X0DWysSeNX1cgF3/rI78pLbHQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:20:21 2025 by rpki-client