$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/cmfKT7T_UFfVa_Y9k4uTY6VTJvg.roa File: cmfKT7T_UFfVa_Y9k4uTY6VTJvg.roa (raw, json) Hash identifier: zY17FeZD+/5KGrW9vof3dOWKaOT/ZJY0P/hM5MvQjcI= Subject key identifier: 72:67:CA:4F:B4:FF:50:57:D5:6B:F6:3D:93:8B:93:63:A5:53:26:F8 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 110D Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cmfKT7T_UFfVa_Y9k4uTY6VTJvg.roa Signing time: Mon 10 Feb 2025 13:56:46 +0000 ROA not before: Mon 10 Feb 2025 13:56:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 113.61.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4365 (0x110d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7267CA4FB4FF5057D56BF63D938B9363A55326F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:5e:e9:09:d3:f7:85:c0:f0:e9:ab:90:22: 86:9d:ba:e3:71:9e:5d:7c:a2:fe:17:58:87:d0:c0: 0a:09:6f:7d:2a:18:17:07:87:0d:6e:3e:c9:3f:43: 78:3d:9f:60:17:08:24:86:13:cc:d8:44:15:9e:aa: b7:12:f6:59:d2:d1:58:65:bb:b0:09:5a:19:1a:bb: ce:e7:92:14:70:d5:f2:1d:97:2b:87:cb:b9:f0:61: bb:b5:46:af:03:88:49:ef:c8:f7:e5:ae:ef:7a:9d: d1:66:9f:ea:bc:fb:07:ba:3c:6e:ca:ba:77:cf:3a: 2d:c4:5b:67:b4:9a:df:88:de:bb:07:12:f4:eb:89: 07:94:57:df:19:03:86:ba:aa:52:d7:05:4d:2d:44: c6:de:47:9f:2b:0c:5f:fb:92:f9:82:50:76:8d:cf: 18:d9:33:ff:aa:0f:8d:54:2b:a5:33:92:49:5f:5e: 43:83:be:3d:0f:a9:1e:8f:52:a1:6e:e1:29:5e:5b: e6:4e:93:ed:09:5b:f5:c0:42:2e:83:b5:41:0c:68: f2:78:64:1f:94:d4:e9:33:34:df:1b:51:15:82:27: 65:64:24:00:70:11:c8:de:33:b9:89:e4:ed:ef:f5: b2:92:85:ea:12:6e:bb:a7:1b:1c:ee:3f:15:62:62: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:CA:4F:B4:FF:50:57:D5:6B:F6:3D:93:8B:93:63:A5:53:26:F8 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cmfKT7T_UFfVa_Y9k4uTY6VTJvg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.128.0/18 Signature Algorithm: sha256WithRSAEncryption 15:a6:de:e4:1a:33:47:6f:af:56:fb:c7:4c:a3:fe:1c:25:29: 16:f1:66:68:61:c2:d5:c2:6f:e3:a3:0e:2c:41:01:8d:63:63: 26:7f:48:d0:cd:85:19:3d:b5:6c:77:44:ac:c7:a0:4d:c3:8a: 7a:8e:82:f1:c5:c8:41:e6:a6:52:85:f3:1d:63:ff:b6:35:6c: 30:08:42:22:cf:8d:47:b6:19:12:6e:41:00:b4:20:78:58:63: f8:17:8f:ca:4b:45:90:92:38:dd:cf:7d:9f:ca:ed:0c:f9:65: 30:39:bd:ab:96:d9:ef:ab:70:52:d7:55:6b:d1:66:9c:26:ae: bd:69:d7:1b:9c:58:c0:89:e9:34:cc:75:34:50:be:08:c5:56: df:e9:34:3b:60:5e:b6:20:90:03:a4:71:e8:5d:6b:e8:07:2c: 28:2e:c7:6e:dc:4a:f5:81:39:2b:e2:10:65:48:b2:2f:c3:59: 5c:c3:23:c0:c3:5e:44:a9:22:ff:ee:60:66:92:81:c2:e3:23: 30:e4:66:d3:d6:5c:9f:8f:cf:30:21:1a:ae:e2:6d:21:07:09: 6b:fc:52:91:e2:31:84:32:8b:7e:d4:75:93:a1:26:31:4d:5a: 42:8f:fe:de:50:4a:03:58:3e:00:2f:b4:98:93:30:5e:47:43: 51:1a:8c:01 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyNjdDQTRGQjRGRjUw NTdENTZCRjYzRDkzOEI5MzYzQTU1MzI2RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgXl7pCdP3hcDw6auQIoaduuNxnl18ov4XWIfQwAoJb30qGBcH hw1uPsk/Q3g9n2AXCCSGE8zYRBWeqrcS9lnS0Vhlu7AJWhkau87nkhRw1fIdlyuH y7nwYbu1Rq8DiEnvyPflru96ndFmn+q8+we6PG7KunfPOi3EW2e0mt+I3rsHEvTr iQeUV98ZA4a6qlLXBU0tRMbeR58rDF/7kvmCUHaNzxjZM/+qD41UK6UzkklfXkOD vj0PqR6PUqFu4SleW+ZOk+0JW/XAQi6DtUEMaPJ4ZB+U1OkzNN8bURWCJ2VkJABw EcjeM7mJ5O3v9bKSheoSbrunGxzuPxViYqdJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUcmfKT7T/UFfVa/Y9k4uTY6VTJvgwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvY21mS1Q3VF9VRmZWYV9ZOWs0dVRZ NlZUSnZnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnE9gDAN BgkqhkiG9w0BAQsFAAOCAQEAFabe5BozR2+vVvvHTKP+HCUpFvFmaGHC1cJv46MO LEEBjWNjJn9I0M2FGT21bHdErMegTcOKeo6C8cXIQeamUoXzHWP/tjVsMAhCIs+N R7YZEm5BALQgeFhj+BePyktFkJI43c99n8rtDPllMDm9q5bZ76twUtdVa9FmnCau vWnXG5xYwInpNMx1NFC+CMVW3+k0O2BetiCQA6Rx6F1r6AcsKC7HbtxK9YE5K+IQ ZUiyL8NZXMMjwMNeRKki/+5gZpKBwuMjMORm09Zcn4/PMCEaruJtIQcJa/xSkeIx hDKLftR1k6EmMU1aQo/+3lBKA1g+AC+0mJMwXkdDURqMAQ== -----END CERTIFICATE-----Generated at Tue Apr 8 18:08:09 2025 by rpki-client