$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/QKGr3F9OIUnsTPLTkzE1wGOoBUE.roa File: QKGr3F9OIUnsTPLTkzE1wGOoBUE.roa (raw, json) Hash identifier: c8b46Pxhwnkx0XHON0kfdlI7wDbi4qN79oNLiuWa7QQ= Subject key identifier: 40:A1:AB:DC:5F:4E:21:49:EC:4C:F2:D3:93:31:35:C0:63:A8:05:41 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10DB Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/QKGr3F9OIUnsTPLTkzE1wGOoBUE.roa Signing time: Mon 10 Feb 2025 13:56:33 +0000 ROA not before: Mon 10 Feb 2025 13:56:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 113.61.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4315 (0x10db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=40A1ABDC5F4E2149EC4CF2D3933135C063A80541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:0d:8d:29:64:7c:48:f1:9e:79:83:e2:75: 19:76:c2:b8:10:e0:d6:d4:54:a1:f0:21:81:95:ca: 2e:cf:80:9e:db:97:1f:b0:ba:8b:16:63:e6:4a:ac: ce:db:ab:4d:af:b8:b9:4d:fa:cc:bc:01:e1:2b:75: fb:b5:c4:9c:17:ea:c6:46:2b:a1:25:25:5d:7a:3b: be:02:cb:d4:90:a6:8b:ba:f1:8d:c3:fc:47:1f:24: 34:81:0e:a5:a3:52:e1:de:09:d9:6b:a6:cc:2a:de: 2d:41:83:3d:fc:34:2d:0e:ab:6c:00:65:d3:03:96: ed:4c:38:b5:0e:ed:64:f6:c2:48:43:b5:96:1f:5d: 43:73:bf:e2:30:21:9f:82:4d:cc:77:1a:48:4e:9b: 64:6b:6b:a5:3c:8c:5c:12:5d:26:06:ba:d5:34:6b: 7d:e1:f4:d5:ce:72:2e:3d:54:e4:28:8f:ea:aa:db: 4e:85:82:79:9e:b2:36:f3:93:16:6e:3b:17:cb:6d: c0:d8:33:75:df:11:58:f2:57:6e:e7:0f:76:9b:48: 39:38:7b:d2:70:2c:07:d0:98:3e:8d:3f:56:3c:15: 1c:cd:a6:1b:9c:bc:93:9a:82:1c:ed:0d:d5:26:b1: 06:35:fc:8f:f6:3a:47:f3:f1:ce:1c:0d:dc:3f:49: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A1:AB:DC:5F:4E:21:49:EC:4C:F2:D3:93:31:35:C0:63:A8:05:41 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/QKGr3F9OIUnsTPLTkzE1wGOoBUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.168.0/24 Signature Algorithm: sha256WithRSAEncryption b4:2a:6f:b9:5d:e4:6f:c8:99:f9:4b:ec:27:de:2f:67:a1:85: 47:df:2b:f1:56:b0:de:64:fa:5f:6b:a9:8b:03:4b:50:30:46: 76:ad:4f:be:db:c9:70:ab:4a:03:d4:be:3a:28:9c:47:63:5a: de:e6:49:e1:a3:11:48:dc:ce:5e:0c:03:80:95:e6:59:09:02: 8d:24:7f:d2:02:df:dd:42:00:5a:ba:13:ac:e9:c4:03:55:89: 78:a9:1f:e2:c8:37:ad:4c:00:11:a0:e9:63:8e:1f:31:30:1c: 81:70:c8:88:5a:6e:e8:18:8b:6b:69:ba:1e:91:24:4b:bb:01: c4:19:09:9b:8f:ce:01:7b:64:ff:41:0f:bf:4a:04:36:f9:ff: e1:0a:45:6a:80:f3:14:50:ad:85:2a:0c:61:54:04:e8:44:e8: c3:72:88:4c:c0:30:62:1a:64:45:d5:99:a0:44:e3:51:55:e5: 8b:7c:3d:53:9a:b0:fc:f4:4e:29:6c:98:a6:ff:2b:a9:1b:2d: 05:43:33:20:c3:b9:5e:37:73:88:92:13:92:fe:f6:03:41:df: 51:d1:17:f6:44:2c:47:d5:45:cd:92:f3:f5:cb:ac:ad:60:e1: f9:38:77:bc:79:72:9c:58:be:d7:02:80:7a:b7:7a:8f:11:b9: 67:fc:75:1a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICENswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwQTFBQkRDNUY0RTIx NDlFQzRDRjJEMzkzMzEzNUMwNjNBODA1NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ1w2NKWR8SPGeeYPidRl2wrgQ4NbUVKHwIYGVyi7PgJ7blx+w uosWY+ZKrM7bq02vuLlN+sy8AeErdfu1xJwX6sZGK6ElJV16O74Cy9SQpou68Y3D /EcfJDSBDqWjUuHeCdlrpswq3i1Bgz38NC0Oq2wAZdMDlu1MOLUO7WT2wkhDtZYf XUNzv+IwIZ+CTcx3GkhOm2Rra6U8jFwSXSYGutU0a33h9NXOci49VOQoj+qq206F gnmesjbzkxZuOxfLbcDYM3XfEVjyV27nD3abSDk4e9JwLAfQmD6NP1Y8FRzNphuc vJOaghztDdUmsQY1/I/2Okfz8c4cDdw/SfDRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQKGr3F9OIUnsTPLTkzE1wGOoBUEwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUUtHcjNGOU9JVW5zVFBMVGt6RTF3 R09vQlVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE9qDAN BgkqhkiG9w0BAQsFAAOCAQEAtCpvuV3kb8iZ+UvsJ94vZ6GFR98r8Vaw3mT6X2up iwNLUDBGdq1PvtvJcKtKA9S+OiicR2Na3uZJ4aMRSNzOXgwDgJXmWQkCjSR/0gLf 3UIAWroTrOnEA1WJeKkf4sg3rUwAEaDpY44fMTAcgXDIiFpu6BiLa2m6HpEkS7sB xBkJm4/OAXtk/0EPv0oENvn/4QpFaoDzFFCthSoMYVQE6ETow3KITMAwYhpkRdWZ oETjUVXli3w9U5qw/PROKWyYpv8rqRstBUMzIMO5XjdziJITkv72A0HfUdEX9kQs R9VFzZLz9cusrWDh+Th3vHlynFi+1wKAerd6jxG5Z/x1Gg== -----END CERTIFICATE-----Generated at Tue Apr 8 18:07:38 2025 by rpki-client