$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/bTOkSWmL-7oO2pqE5TVJRc86N8s.roa File: bTOkSWmL-7oO2pqE5TVJRc86N8s.roa (raw, json) Hash identifier: HJ3Gnj7PfQaBgxo+zLT0R414cVoWv7c6GZOOfYlWaM4= Subject key identifier: 6D:33:A4:49:69:8B:FB:BA:0E:DA:9A:84:E5:35:49:45:CF:3A:37:CB Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10BF Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bTOkSWmL-7oO2pqE5TVJRc86N8s.roa Signing time: Mon 10 Feb 2025 13:56:28 +0000 ROA not before: Mon 10 Feb 2025 13:56:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.217.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 16:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4287 (0x10bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6D33A449698BFBBA0EDA9A84E5354945CF3A37CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:06:35:5f:98:19:51:82:bd:3c:db:f5:6a: b8:3d:99:80:8c:71:7e:6d:7f:35:ce:60:2d:83:6b: 02:da:58:70:77:51:69:4c:67:a0:ab:a6:6d:1f:b5: a7:3a:1f:f0:f5:c5:56:a5:f5:55:77:59:10:07:be: 61:b3:e8:78:53:97:57:1b:97:36:94:a3:89:1c:e2: c4:14:81:34:71:1e:07:ce:31:a5:2b:81:af:76:e9: 1e:b4:dc:c7:f1:05:48:b7:88:3c:9c:51:28:56:f7: 8a:07:b8:a5:6b:ec:c3:86:82:d7:c7:cc:1e:2d:11: 4d:31:a4:19:ac:73:fc:5f:dd:fc:e1:92:5e:bc:d4: a0:74:68:45:ac:68:e0:2b:60:d3:93:9d:bc:0c:23: 20:c9:9b:75:c9:ac:48:62:02:ba:74:27:c5:1a:e3: 1c:13:74:bf:34:ae:60:c2:86:27:a5:02:bf:36:b8: e7:76:c2:97:29:53:88:64:75:1f:e4:d5:00:c8:73: 46:01:ac:d0:ee:81:6c:29:81:40:f0:53:0c:97:a7: 17:52:0f:06:04:7e:73:bd:c9:4b:77:54:82:79:41: 47:68:8b:7d:d3:4e:83:e9:b4:be:2c:69:86:92:5c: 52:d5:9b:7f:f9:d3:c2:92:92:b3:d9:78:e4:7c:af: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:33:A4:49:69:8B:FB:BA:0E:DA:9A:84:E5:35:49:45:CF:3A:37:CB X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bTOkSWmL-7oO2pqE5TVJRc86N8s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.112.0/21 Signature Algorithm: sha256WithRSAEncryption a5:37:7c:1b:3c:c2:32:87:37:6a:9d:72:4c:26:ac:6b:fe:67: 4b:48:87:db:2b:91:43:48:03:c4:37:de:df:d3:1c:7c:87:be: 53:9e:04:7c:c1:ee:77:be:1e:9c:3d:90:47:69:1c:76:d6:33: f4:6b:c0:8e:26:95:21:5f:ac:f2:13:17:36:c6:7b:57:2c:7d: a4:dd:16:6a:5b:bd:a5:7c:27:1d:2e:18:cb:ef:3e:8e:ac:78: f0:e8:dc:d0:95:c6:ab:8c:03:50:23:19:1c:e9:9f:53:4a:68: 73:f0:5c:bd:36:eb:03:45:b1:5d:d2:e3:ca:70:c0:d8:e5:2e: e9:72:69:49:96:31:bf:d7:fc:a0:1d:ce:b2:b9:ac:48:94:f0: c3:ea:d9:aa:dd:64:7c:61:6f:0d:9c:e9:f6:b4:42:30:6f:13: 1b:e5:fe:61:5a:72:3c:3a:c7:69:ef:2c:dd:57:2a:c7:95:04: a4:a6:74:10:21:77:9d:a6:fe:cf:96:a6:0c:d4:4c:c1:69:50: b1:ba:76:d9:16:72:fe:98:9b:13:1c:d9:f4:e8:67:2a:71:06: bb:e0:28:b8:d7:56:e2:8c:7d:0b:04:29:ab:96:8c:e8:c4:60: 97:8a:e4:16:27:e1:c0:9a:9a:e7:2c:6c:ca:b4:e5:50:fa:d7: c4:2f:72:41 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZEMzNBNDQ5Njk4QkZC QkEwRURBOUE4NEU1MzU0OTQ1Q0YzQTM3Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+DgY1X5gZUYK9PNv1arg9mYCMcX5tfzXOYC2DawLaWHB3UWlM Z6Crpm0ftac6H/D1xVal9VV3WRAHvmGz6HhTl1cblzaUo4kc4sQUgTRxHgfOMaUr ga926R603MfxBUi3iDycUShW94oHuKVr7MOGgtfHzB4tEU0xpBmsc/xf3fzhkl68 1KB0aEWsaOArYNOTnbwMIyDJm3XJrEhiArp0J8Ua4xwTdL80rmDChielAr82uOd2 wpcpU4hkdR/k1QDIc0YBrNDugWwpgUDwUwyXpxdSDwYEfnO9yUt3VIJ5QUdoi33T ToPptL4saYaSXFLVm3/508KSkrPZeOR8r7J7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUbTOkSWmL+7oO2pqE5TVJRc86N8swHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvYlRPa1NXbUwtN29PMnBxRTVUVkpS Yzg2TjhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8vZcDAN BgkqhkiG9w0BAQsFAAOCAQEApTd8GzzCMoc3ap1yTCasa/5nS0iH2yuRQ0gDxDfe 39McfIe+U54EfMHud74enD2QR2kcdtYz9GvAjiaVIV+s8hMXNsZ7Vyx9pN0Walu9 pXwnHS4Yy+8+jqx48Ojc0JXGq4wDUCMZHOmfU0poc/BcvTbrA0WxXdLjynDA2OUu 6XJpSZYxv9f8oB3OsrmsSJTww+rZqt1kfGFvDZzp9rRCMG8TG+X+YVpyPDrHae8s 3Vcqx5UEpKZ0ECF3nab+z5amDNRMwWlQsbp22RZy/pibExzZ9OhnKnEGu+AouNdW 4ox9CwQpq5aM6MRgl4rkFifhwJqa5yxsyrTlUPrXxC9yQQ== -----END CERTIFICATE-----Generated at Tue Apr 8 14:42:47 2025 by rpki-client