$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/__nw3a1llOKG0UWr0zoy0L_ZVtU.roa File: __nw3a1llOKG0UWr0zoy0L_ZVtU.roa (raw, json) Hash identifier: XGLEKWs0qYQJeytwmzmKCWShl5FJYYrfI040DV4H53I= Subject key identifier: FF:F9:F0:DD:AD:65:94:E2:86:D1:45:AB:D3:3A:32:D0:BF:D9:56:D5 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1106 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/__nw3a1llOKG0UWr0zoy0L_ZVtU.roa Signing time: Mon 10 Feb 2025 13:56:44 +0000 ROA not before: Mon 10 Feb 2025 13:56:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.217.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4358 (0x1106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FFF9F0DDAD6594E286D145ABD33A32D0BFD956D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:df:a4:77:70:5c:37:1a:86:df:ae:f4:26: 39:54:9a:ae:f3:5f:ff:08:6f:34:a1:a8:19:53:b6: 91:17:b3:81:02:59:96:20:1f:2d:dd:e1:e9:37:e0: 06:3f:c1:59:33:40:a7:7c:0b:86:a0:ac:d6:b9:bc: 01:10:15:a6:5b:83:38:fe:ae:83:99:92:3d:7a:12: 36:bc:b8:18:5f:10:b7:55:59:19:26:4b:40:87:69: 54:9e:86:26:59:92:70:1a:39:bc:89:92:65:b5:34: 0a:be:46:99:ff:bb:e4:06:7d:b5:99:5f:34:69:d7: 67:56:b9:be:92:45:84:8a:a3:13:23:5e:a5:b7:e6: 24:23:3e:9a:22:5e:cf:1a:f1:34:71:eb:72:b0:17: 85:55:e7:c5:e7:28:63:2b:4e:80:0a:28:ba:95:36: 5c:54:2f:32:2b:f6:20:da:da:84:71:82:ed:f9:79: a8:59:5c:00:60:ee:39:95:ae:64:51:7c:54:2d:a3: 87:5b:38:ff:99:69:17:15:e3:2e:1a:61:60:ae:21: 7a:03:d9:9f:57:92:c8:1c:a7:fb:21:82:c1:03:da: 75:7d:f8:ab:82:2a:8b:5c:65:47:75:7b:f8:35:2d: 03:ca:3f:69:a2:30:54:97:2d:c0:6e:7f:10:72:4d: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F9:F0:DD:AD:65:94:E2:86:D1:45:AB:D3:3A:32:D0:BF:D9:56:D5 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/__nw3a1llOKG0UWr0zoy0L_ZVtU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.112.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:66:08:e7:e0:57:34:87:56:20:de:e9:13:cc:e0:2a:e3:1b: de:8e:5c:72:46:15:de:81:f6:b8:ac:2b:c5:c4:58:e1:b6:6d: 6f:c9:99:1d:d7:62:65:9b:c5:5e:14:4c:58:15:98:ae:04:08: e6:f2:14:e5:39:32:92:60:d3:dc:d2:69:15:14:61:af:5f:3d: 58:40:ba:d6:5e:17:9f:ea:d0:65:96:66:ca:69:43:1b:b0:df: 3a:4d:35:18:3b:78:4d:ad:00:01:4c:15:68:8c:1b:68:17:3a: bb:a9:8f:d8:1e:b9:a2:30:e5:33:b2:a3:19:73:8e:95:dd:11: dd:7f:4e:3d:20:4a:12:3c:ab:4b:87:13:a3:b9:ed:5d:0d:e5: 55:37:3a:d7:89:f2:64:62:af:2a:b8:2f:03:5e:30:99:72:b9: 52:81:d5:53:d9:ec:7f:bd:8a:58:bb:ea:7a:bb:ec:fb:12:97: ca:c1:2d:90:80:61:cc:dd:fc:b3:05:a4:e4:e5:36:ed:9f:0f: b3:f3:a5:b1:d7:fa:2d:18:69:3e:04:7a:98:2b:31:cd:82:f8: 1a:32:15:d4:d2:0e:1a:8a:cd:8c:f9:4a:2e:7b:7d:fd:9b:ea: 70:4f:28:a3:fd:22:dc:ac:a7:27:58:0c:2f:8d:8f:4f:b3:bc: da:47:c0:7f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGRjlGMEREQUQ2NTk0 RTI4NkQxNDVBQkQzM0EzMkQwQkZEOTU2RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxiN+kd3BcNxqG3670JjlUmq7zX/8IbzShqBlTtpEXs4ECWZYg Hy3d4ek34AY/wVkzQKd8C4agrNa5vAEQFaZbgzj+roOZkj16Eja8uBhfELdVWRkm S0CHaVSehiZZknAaObyJkmW1NAq+Rpn/u+QGfbWZXzRp12dWub6SRYSKoxMjXqW3 5iQjPpoiXs8a8TRx63KwF4VV58XnKGMrToAKKLqVNlxULzIr9iDa2oRxgu35eahZ XABg7jmVrmRRfFQto4dbOP+ZaRcV4y4aYWCuIXoD2Z9Xksgcp/shgsED2nV9+KuC KotcZUd1e/g1LQPKP2miMFSXLcBufxByTUj/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU//nw3a1llOKG0UWr0zoy0L/ZVtUwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvX19udzNhMWxsT0tHMFVXcjB6b3kw TF9aVnRVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMvZcDAN BgkqhkiG9w0BAQsFAAOCAQEAb2YI5+BXNIdWIN7pE8zgKuMb3o5cckYV3oH2uKwr xcRY4bZtb8mZHddiZZvFXhRMWBWYrgQI5vIU5TkykmDT3NJpFRRhr189WEC61l4X n+rQZZZmymlDG7DfOk01GDt4Ta0AAUwVaIwbaBc6u6mP2B65ojDlM7KjGXOOld0R 3X9OPSBKEjyrS4cTo7ntXQ3lVTc614nyZGKvKrgvA14wmXK5UoHVU9nsf72KWLvq ervs+xKXysEtkIBhzN38swWk5OU27Z8Ps/Olsdf6LRhpPgR6mCsxzYL4GjIV1NIO GorNjPlKLnt9/ZvqcE8oo/0i3KynJ1gML42PT7O82kfAfw== -----END CERTIFICATE-----Generated at Tue Apr 8 18:08:05 2025 by rpki-client