$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/oqjJYMvf2T6WOk3z37Mk62Uqg9I.roa File: oqjJYMvf2T6WOk3z37Mk62Uqg9I.roa (raw, json) Hash identifier: dViRTkDEpIoYEB5kmUCfSFlB1gPu8F9S16BHcQ3XvM8= Subject key identifier: A2:A8:C9:60:CB:DF:D9:3E:96:3A:4D:F3:DF:B3:24:EB:65:2A:83:D2 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10DC Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oqjJYMvf2T6WOk3z37Mk62Uqg9I.roa Signing time: Mon 10 Feb 2025 13:56:33 +0000 ROA not before: Mon 10 Feb 2025 13:56:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 203.217.96.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4316 (0x10dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2A8C960CBDFD93E963A4DF3DFB324EB652A83D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:11:26:2d:3a:63:81:2e:c0:b1:9e:4e:f0: 64:01:be:b2:d1:30:b5:07:cf:12:91:c6:c1:95:41: 52:ff:84:72:33:f6:bd:8b:2e:df:c7:a8:ce:7f:6a: c3:7d:c3:58:87:91:26:1d:8a:27:08:33:3f:42:de: c8:b3:1a:34:d4:ee:0a:f5:81:b2:4c:1d:5b:c0:aa: 61:0b:d7:db:39:08:f1:67:91:7f:f8:5c:2e:d8:a3: cd:7d:f9:4b:96:02:a2:94:ae:d3:f5:3e:11:26:41: ab:5e:21:0a:3b:9d:e4:50:c8:21:74:27:0b:ef:2e: e7:30:3e:e4:28:11:09:85:e2:b0:62:a3:a1:6b:a9: 3c:88:11:35:4b:ad:34:d1:76:99:b3:1f:21:c2:85: e6:6d:d1:45:2d:f6:9b:f6:d6:01:9c:c9:f7:64:96: 1f:8e:b4:2c:ed:9c:10:61:83:b6:31:a3:23:0e:9b: b9:63:f8:65:a9:78:8a:5e:0b:a3:46:e7:5d:60:51: 54:fa:c9:5e:a0:dc:a6:8f:b7:3c:33:a6:87:a5:21: 6e:e6:ad:5b:7f:bc:d4:1c:f6:09:d7:4c:5c:a8:3d: 02:7e:57:37:74:ff:3e:a0:21:e3:3b:b4:aa:ad:f7: 84:65:48:e2:82:cb:dc:a3:56:2c:93:7f:ad:92:07: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A8:C9:60:CB:DF:D9:3E:96:3A:4D:F3:DF:B3:24:EB:65:2A:83:D2 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oqjJYMvf2T6WOk3z37Mk62Uqg9I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/19 Signature Algorithm: sha256WithRSAEncryption 70:04:04:5f:68:92:c5:d5:8e:ab:f3:71:c2:37:5e:64:0d:60: f3:43:41:e6:2f:93:04:bf:d5:6e:f2:2d:cc:84:d1:27:bd:e0: 80:6a:65:dc:83:d6:85:d9:a0:cf:23:78:f3:40:80:78:ac:2a: 0d:4b:a5:bf:8f:03:a4:07:92:87:ce:c2:e0:1f:87:bf:ba:dc: 70:a6:a0:4d:e8:23:1a:18:86:c6:35:e3:21:cc:fb:80:42:40: 14:9d:f1:3a:9c:a8:9e:e2:87:69:26:09:13:04:69:2f:61:78: 05:6c:ce:7a:39:bd:01:4c:04:95:92:63:17:2b:45:e1:95:db: 82:12:59:c8:44:df:b7:41:81:74:2f:80:4a:8a:0a:0b:da:41: 7a:84:b8:5d:b7:85:c4:81:2e:aa:a8:4c:7e:91:1c:2c:d5:fb: 0b:a7:ac:1b:84:3d:d2:27:3b:4f:6d:da:78:5f:cf:53:78:bb: f6:03:9e:a1:54:e0:11:c0:5a:b0:75:4c:e0:b2:60:c8:d3:00: f6:2f:84:54:96:e4:95:d1:bd:e4:1c:fe:57:49:c4:1a:7b:a7: 74:59:ed:fa:4e:da:26:af:5c:f6:09:db:76:e5:da:cc:8b:4b: 49:e2:3e:43:03:82:c7:bb:d6:8b:e5:d0:f1:07:12:25:d2:04: cb:13:b4:e6 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICENwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyQThDOTYwQ0JERkQ5 M0U5NjNBNERGM0RGQjMyNEVCNjUyQTgzRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmcxEmLTpjgS7AsZ5O8GQBvrLRMLUHzxKRxsGVQVL/hHIz9r2L Lt/HqM5/asN9w1iHkSYdiicIMz9C3sizGjTU7gr1gbJMHVvAqmEL19s5CPFnkX/4 XC7Yo819+UuWAqKUrtP1PhEmQateIQo7neRQyCF0JwvvLucwPuQoEQmF4rBio6Fr qTyIETVLrTTRdpmzHyHCheZt0UUt9pv21gGcyfdklh+OtCztnBBhg7YxoyMOm7lj +GWpeIpeC6NG511gUVT6yV6g3KaPtzwzpoelIW7mrVt/vNQc9gnXTFyoPQJ+Vzd0 /z6gIeM7tKqt94RlSOKCy9yjViyTf62SB9xJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUoqjJYMvf2T6WOk3z37Mk62Uqg9IwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvb3FqSllNdmYyVDZXT2szejM3TWs2 MlVxZzlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcvZYDAN BgkqhkiG9w0BAQsFAAOCAQEAcAQEX2iSxdWOq/NxwjdeZA1g80NB5i+TBL/VbvIt zITRJ73ggGpl3IPWhdmgzyN480CAeKwqDUulv48DpAeSh87C4B+Hv7rccKagTegj GhiGxjXjIcz7gEJAFJ3xOpyonuKHaSYJEwRpL2F4BWzOejm9AUwElZJjFytF4ZXb ghJZyETft0GBdC+ASooKC9pBeoS4XbeFxIEuqqhMfpEcLNX7C6esG4Q90ic7T23a eF/PU3i79gOeoVTgEcBasHVM4LJgyNMA9i+EVJbkldG95Bz+V0nEGnundFnt+k7a Jq9c9gnbduXazItLSeI+QwOCx7vWi+XQ8QcSJdIEyxO05g== -----END CERTIFICATE-----Generated at Tue Apr 8 18:10:06 2025 by rpki-client