$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/VZE1WM_Oyr0GJR7pX3GM_iUAH2E.roa File: VZE1WM_Oyr0GJR7pX3GM_iUAH2E.roa (raw, json) Hash identifier: aiXpLf6sQuC0/lHoQAwX1cng+OkB8wLVDhNaAkv7NQE= Subject key identifier: 55:91:35:58:CF:CE:CA:BD:06:25:1E:E9:5F:71:8C:FE:25:00:1F:61 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10E4 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VZE1WM_Oyr0GJR7pX3GM_iUAH2E.roa Signing time: Mon 10 Feb 2025 13:56:35 +0000 ROA not before: Mon 10 Feb 2025 13:56:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.222.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4324 (0x10e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=55913558CFCECABD06251EE95F718CFE25001F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:35:de:f7:29:07:17:c1:5c:dc:a0:56:c1: 4d:72:b1:06:b0:99:78:bc:c9:6e:cb:f6:d5:55:04: ad:03:ef:7d:7f:a5:77:31:f8:19:f7:69:f3:d3:76: 7e:67:4e:95:cc:23:c1:85:6c:ff:33:11:2a:fb:65: a6:45:c4:e3:98:0a:c9:1f:1f:ad:fe:c9:37:8a:13: 0a:93:44:93:34:1f:26:98:3d:82:f5:b1:d6:2c:7f: 49:8d:af:07:a3:2d:a7:af:4b:a8:59:85:0e:5b:df: 39:eb:c1:4e:3e:84:05:57:bf:0a:57:53:51:a3:77: 49:ff:98:8d:4a:5d:fe:37:a2:a9:4b:62:05:d7:41: 4c:7a:37:c6:34:08:10:a5:1c:1a:b1:f5:8f:17:42: 07:70:13:dc:16:2f:3e:bb:d6:10:56:8a:d1:49:b4: a5:18:7d:b0:da:38:9e:cc:12:9f:1b:23:4f:c3:4f: 12:b1:26:73:60:f8:8e:3b:13:70:8f:1b:2c:bd:a5: f6:fe:d4:56:98:13:e1:49:4d:44:9d:e9:38:ad:c1: 1d:a2:a2:c2:b2:22:f9:8c:6f:29:8c:13:d0:f1:d4: 0f:c3:50:91:86:c8:fc:cd:9c:13:89:be:d1:f0:db: be:b7:f9:ed:af:fe:85:7b:da:bd:4e:3c:e1:bf:61: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:91:35:58:CF:CE:CA:BD:06:25:1E:E9:5F:71:8C:FE:25:00:1F:61 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VZE1WM_Oyr0GJR7pX3GM_iUAH2E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.4.0/22 Signature Algorithm: sha256WithRSAEncryption 86:a7:80:5b:40:38:99:c3:06:b7:7c:c6:cf:cb:04:79:bd:37: 29:d1:71:f3:f8:68:36:3c:82:38:8b:97:93:95:bf:4e:3a:52: cd:d3:e2:1b:f4:a1:54:1c:77:1f:2b:13:b6:8a:56:97:bb:f7: b0:19:1e:f5:e6:81:ff:ab:f4:1d:a6:61:cf:42:d8:48:ba:25: 2d:42:f0:85:a1:16:5d:8a:c6:19:f8:e9:17:c0:fb:bb:38:51: 87:89:b5:ae:fa:46:53:6f:98:28:66:1d:30:05:7b:6b:dd:de: 6b:60:a0:c6:ed:ff:96:b3:30:3d:e8:ee:d7:f6:5b:84:2e:47: 7c:e6:47:1a:cc:32:d8:c8:2d:97:7e:21:e3:25:af:b0:bd:29: 05:32:a4:1a:9d:83:eb:ac:c8:fa:e6:b1:dc:83:e8:75:10:40: 64:a8:4c:6b:eb:c9:89:ba:ca:b1:2e:3a:db:ef:c9:54:d0:01: e8:a8:2d:8d:24:aa:50:e9:1e:a6:35:54:6b:c8:07:9a:97:91: 25:d2:fa:b8:54:b8:54:64:88:0c:ac:04:0d:27:13:56:f2:b1: dd:8e:b3:25:14:1c:f6:1e:46:ca:88:93:c4:3a:70:69:2c:94: f8:9f:13:38:47:e2:12:bd:84:f5:2e:4b:11:01:79:a3:e2:1c: 90:55:3e:ae -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1OTEzNTU4Q0ZDRUNB QkQwNjI1MUVFOTVGNzE4Q0ZFMjUwMDFGNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyQTXe9ykHF8Fc3KBWwU1ysQawmXi8yW7L9tVVBK0D731/pXcx +Bn3afPTdn5nTpXMI8GFbP8zESr7ZaZFxOOYCskfH63+yTeKEwqTRJM0HyaYPYL1 sdYsf0mNrwejLaevS6hZhQ5b3znrwU4+hAVXvwpXU1Gjd0n/mI1KXf43oqlLYgXX QUx6N8Y0CBClHBqx9Y8XQgdwE9wWLz671hBWitFJtKUYfbDaOJ7MEp8bI0/DTxKx JnNg+I47E3CPGyy9pfb+1FaYE+FJTUSd6TitwR2iosKyIvmMbymME9Dx1A/DUJGG yPzNnBOJvtHw2763+e2v/oV72r1OPOG/YX6fAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUVZE1WM/Oyr0GJR7pX3GM/iUAH2EwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvVlpFMVdNX095cjBHSlI3cFgzR01f aVVBSDJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveBDAN BgkqhkiG9w0BAQsFAAOCAQEAhqeAW0A4mcMGt3zGz8sEeb03KdFx8/hoNjyCOIuX k5W/TjpSzdPiG/ShVBx3HysTtopWl7v3sBke9eaB/6v0HaZhz0LYSLolLULwhaEW XYrGGfjpF8D7uzhRh4m1rvpGU2+YKGYdMAV7a93ea2Cgxu3/lrMwPeju1/ZbhC5H fOZHGswy2Mgtl34h4yWvsL0pBTKkGp2D66zI+uax3IPodRBAZKhMa+vJibrKsS46 2+/JVNAB6KgtjSSqUOkepjVUa8gHmpeRJdL6uFS4VGSIDKwEDScTVvKx3Y6zJRQc 9h5GyoiTxDpwaSyU+J8TOEfiEr2E9S5LEQF5o+IckFU+rg== -----END CERTIFICATE-----Generated at Tue Apr 8 18:07:33 2025 by rpki-client