$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/c19jkyuQ1n1zX5kwlU-jfv2ukBc.roa File: c19jkyuQ1n1zX5kwlU-jfv2ukBc.roa (raw, json) Hash identifier: LoDNWJVg61IuGoD01SJ8sAEH+jUba1uYD4umzs3HH7Y= Subject key identifier: 73:5F:63:93:2B:90:D6:7D:73:5F:99:30:95:4F:A3:7E:FD:AE:90:17 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1119 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/c19jkyuQ1n1zX5kwlU-jfv2ukBc.roa Signing time: Mon 10 Feb 2025 13:56:49 +0000 ROA not before: Mon 10 Feb 2025 13:56:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 210.209.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 16:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4377 (0x1119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=735F63932B90D67D735F9930954FA37EFDAE9017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:92:99:b4:99:ec:d9:da:e2:14:b7:8f:9e: 5c:83:f2:05:5e:83:3f:d3:0e:bf:d4:40:ad:31:82: 12:62:27:9c:8b:13:bf:60:6c:f0:e1:82:a0:72:7e: 95:64:72:9a:c7:3a:9e:f3:68:9d:3f:cd:13:0d:7e: 5f:a0:9c:1d:14:4a:d1:7f:d9:8c:90:5a:c5:3c:5e: 72:64:3e:a7:da:47:c2:34:04:7b:05:d2:ea:53:60: 81:64:51:88:a2:a8:ca:6b:60:3f:58:8c:12:80:7e: cc:4a:a8:ec:50:57:62:90:73:31:69:07:24:ac:a7: f2:5f:a6:80:b6:3b:5e:b5:b6:51:fd:03:6a:3f:e9: 05:4e:c5:fd:56:fb:89:49:75:23:90:1d:c2:44:d2: 49:72:84:be:ef:f3:1b:fd:0a:ef:91:db:3d:df:e4: bb:96:f8:d1:61:51:a7:f0:47:87:39:a2:18:81:02: 02:0c:e0:2b:e4:88:fb:c0:c2:5a:93:ac:ae:c0:f6: 07:3f:b0:f3:6c:2f:57:92:72:c0:25:0a:40:72:05: 7d:a9:5f:b1:6a:6f:d3:b4:ef:2b:51:58:f8:8f:25: 86:c3:6e:31:0a:27:41:5b:42:f7:a1:77:6d:ee:e0: 0f:c6:9b:eb:ec:dc:19:e0:81:ed:18:f3:be:f7:f8: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:63:93:2B:90:D6:7D:73:5F:99:30:95:4F:A3:7E:FD:AE:90:17 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/c19jkyuQ1n1zX5kwlU-jfv2ukBc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.128.0/19 Signature Algorithm: sha256WithRSAEncryption 38:a3:4d:c8:ab:22:54:bf:ed:36:00:a7:eb:f4:16:ef:e7:92: f9:6b:8e:92:36:c3:7d:5b:57:ee:3b:8b:b6:c8:6d:6a:0c:c4: 2f:b1:44:75:b1:a3:87:c3:9b:61:9c:75:46:94:53:03:1f:dd: fb:79:06:fe:0d:84:a0:31:00:20:06:d6:ee:5c:59:37:77:b1: 5d:9e:38:b8:60:82:de:40:60:e4:4e:19:3f:1b:4d:8a:80:34: cd:b3:7f:27:44:55:84:32:5c:48:91:a2:14:09:2b:15:53:12: 6a:92:4b:25:3e:96:f8:7e:7c:d7:4d:4d:c9:b6:5d:27:a4:f6: 00:98:9e:cc:06:c8:38:8b:0b:aa:72:74:ae:00:a9:fb:f7:75: 4b:28:1a:14:cd:96:02:0d:ac:fd:67:e9:2f:43:ce:f7:31:bf: a7:27:a4:45:f0:3d:86:d9:d7:f8:a3:1e:53:c6:cc:fd:0f:cc: 80:9b:c8:32:a3:fa:c4:56:9e:73:37:4b:e0:0d:32:74:b7:00: 31:d7:08:0e:63:63:e0:18:2a:10:72:4d:ef:83:99:59:af:52: 09:c9:96:23:5a:20:b6:27:a4:3b:a1:2f:1e:c1:11:53:7a:29: b1:74:cd:b4:cd:7f:ca:57:68:c8:08:b4:66:10:f9:7f:af:51: 05:a5:0e:1a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICERkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDczNUY2MzkzMkI5MEQ2 N0Q3MzVGOTkzMDk1NEZBMzdFRkRBRTkwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW2JKZtJns2driFLePnlyD8gVegz/TDr/UQK0xghJiJ5yLE79g bPDhgqByfpVkcprHOp7zaJ0/zRMNfl+gnB0UStF/2YyQWsU8XnJkPqfaR8I0BHsF 0upTYIFkUYiiqMprYD9YjBKAfsxKqOxQV2KQczFpBySsp/JfpoC2O161tlH9A2o/ 6QVOxf1W+4lJdSOQHcJE0klyhL7v8xv9Cu+R2z3f5LuW+NFhUafwR4c5ohiBAgIM 4CvkiPvAwlqTrK7A9gc/sPNsL1eScsAlCkByBX2pX7Fqb9O07ytRWPiPJYbDbjEK J0FbQvehd23u4A/Gm+vs3Bngge0Y8773+O49AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUc19jkyuQ1n1zX5kwlU+jfv2ukBcwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvYzE5amt5dVExbjF6WDVrd2xVLWpm djJ1a0JjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdLRgDAN BgkqhkiG9w0BAQsFAAOCAQEAOKNNyKsiVL/tNgCn6/QW7+eS+WuOkjbDfVtX7juL tshtagzEL7FEdbGjh8ObYZx1RpRTAx/d+3kG/g2EoDEAIAbW7lxZN3exXZ44uGCC 3kBg5E4ZPxtNioA0zbN/J0RVhDJcSJGiFAkrFVMSapJLJT6W+H58101NybZdJ6T2 AJiezAbIOIsLqnJ0rgCp+/d1SygaFM2WAg2s/WfpL0PO9zG/pyekRfA9htnX+KMe U8bM/Q/MgJvIMqP6xFaeczdL4A0ydLcAMdcIDmNj4BgqEHJN74OZWa9SCcmWI1og tiekO6EvHsERU3opsXTNtM1/yldoyAi0ZhD5f69RBaUOGg== -----END CERTIFICATE-----Generated at Tue Apr 8 14:57:06 2025 by rpki-client