$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/wpHHW7nvjCBpR-s5GpQOvjRV7Jo.roa File: wpHHW7nvjCBpR-s5GpQOvjRV7Jo.roa (raw, json) Hash identifier: +DNlqw7Kg29BVccg+mTn2EZ7z97t2bISwRVl7RN8RrA= Subject key identifier: C2:91:C7:5B:B9:EF:8C:20:69:47:EB:39:1A:94:0E:BE:34:55:EC:9A Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 10FD Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wpHHW7nvjCBpR-s5GpQOvjRV7Jo.roa Signing time: Mon 10 Feb 2025 13:56:41 +0000 ROA not before: Mon 10 Feb 2025 13:56:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17809 IP address blocks: 121.254.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4349 (0x10fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Feb 10 13:56:41 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C291C75BB9EF8C206947EB391A940EBE3455EC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:a2:fc:e3:86:58:61:19:cb:8c:b5:22:1a: 47:ec:10:db:9a:91:62:2e:8e:34:08:79:95:ea:1b: c7:95:56:d3:ac:56:7c:e9:9a:48:52:03:8d:63:8f: 9f:f8:c9:ae:0c:9e:26:a3:16:2e:df:de:45:7d:60: e0:8b:f1:f7:5d:3b:ae:ae:b1:71:15:37:35:40:ae: 20:71:85:79:15:7d:e5:b9:5a:67:11:cb:6e:51:f6: 73:cd:0d:7f:6b:93:87:54:14:aa:20:58:d7:1b:a3: 20:df:3f:1b:14:d4:98:6e:66:4a:b2:68:7f:11:af: 5f:39:3d:f3:f1:e8:ff:34:72:43:e2:25:55:ac:1a: e3:97:78:01:c3:ee:a3:74:a6:37:6f:6b:86:68:a6: 5d:a7:b4:4c:23:1f:53:93:b9:56:19:ca:d1:ef:7e: e9:05:9d:12:1f:86:18:8f:cc:f5:7f:b0:85:ae:c8: 55:20:e4:b5:30:35:2b:e0:b1:98:16:a7:32:23:6e: 0c:a4:5d:1a:55:6f:db:eb:af:e5:38:39:4a:7c:51: c7:ec:10:fe:96:5a:86:7f:f4:29:82:a8:8a:89:a7: 0a:ee:50:41:7a:12:78:88:0f:bb:33:68:04:54:04: 87:cf:68:11:a9:d9:31:b8:eb:dc:39:66:c4:a9:49: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:91:C7:5B:B9:EF:8C:20:69:47:EB:39:1A:94:0E:BE:34:55:EC:9A X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wpHHW7nvjCBpR-s5GpQOvjRV7Jo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.80.0/21 Signature Algorithm: sha256WithRSAEncryption 26:44:c4:50:25:8a:5f:c4:58:ee:bb:18:d9:db:c7:c5:76:da: 37:83:1f:79:51:ad:3e:5a:a7:79:bc:1a:df:99:78:81:a6:aa: 43:73:15:9c:de:0a:b1:40:33:31:34:4a:b5:ca:8c:ee:0f:2f: 87:52:63:81:31:91:2f:bb:47:45:97:19:50:4a:4a:e4:50:37: bd:30:40:3f:f9:bd:8c:ea:91:6c:4a:f3:de:c3:73:22:33:ae: 71:d6:59:70:43:46:9b:7e:93:96:be:a3:88:89:2b:9a:ef:ca: 9c:00:25:19:90:27:8d:5f:b1:72:7c:9f:57:f6:85:bb:3c:60: 0f:ec:b5:68:e7:69:54:0a:53:75:f9:28:fe:8b:7c:a2:ab:85: af:c3:57:af:70:ea:d6:59:b2:c0:4e:88:e3:ef:e6:71:6a:3a: 27:1f:85:b8:e6:fd:6a:4f:de:80:ed:df:89:8f:da:fe:7e:b7: 34:29:96:09:35:e7:e4:55:ff:d3:0a:95:d8:52:4a:1e:50:9b: b8:69:2e:f2:c3:5a:33:6d:6f:2e:ee:59:aa:0c:a1:02:b4:83: ab:3a:1a:80:07:07:95:f2:db:ea:52:3c:42:c2:ab:99:c4:91: 6b:93:6a:b7:ab:fd:94:21:d8:58:e9:04:b3:12:3b:12:ef:07: 60:f3:44:cd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx MzU2NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyOTFDNzVCQjlFRjhD MjA2OTQ3RUIzOTFBOTQwRUJFMzQ1NUVDOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy3KL844ZYYRnLjLUiGkfsENuakWIujjQIeZXqG8eVVtOsVnzp mkhSA41jj5/4ya4MniajFi7f3kV9YOCL8fddO66usXEVNzVAriBxhXkVfeW5WmcR y25R9nPNDX9rk4dUFKogWNcboyDfPxsU1JhuZkqyaH8Rr185PfPx6P80ckPiJVWs GuOXeAHD7qN0pjdva4Zopl2ntEwjH1OTuVYZytHvfukFnRIfhhiPzPV/sIWuyFUg 5LUwNSvgsZgWpzIjbgykXRpVb9vrr+U4OUp8UcfsEP6WWoZ/9CmCqIqJpwruUEF6 EniID7szaARUBIfPaBGp2TG469w5ZsSpSfgnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUwpHHW7nvjCBpR+s5GpQOvjRV7JowHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvd3BISFc3bnZqQ0JwUi1zNUdwUU92 alJWN0pvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+UDAN BgkqhkiG9w0BAQsFAAOCAQEAJkTEUCWKX8RY7rsY2dvHxXbaN4MfeVGtPlqnebwa 35l4gaaqQ3MVnN4KsUAzMTRKtcqM7g8vh1JjgTGRL7tHRZcZUEpK5FA3vTBAP/m9 jOqRbErz3sNzIjOucdZZcENGm36Tlr6jiIkrmu/KnAAlGZAnjV+xcnyfV/aFuzxg D+y1aOdpVApTdfko/ot8oquFr8NXr3Dq1lmywE6I4+/mcWo6Jx+FuOb9ak/egO3f iY/a/n63NCmWCTXn5FX/0wqV2FJKHlCbuGku8sNaM21vLu5ZqgyhArSDqzoagAcH lfLb6lI8QsKrmcSRa5Nqt6v9lCHYWOkEsxI7Eu8HYPNEzQ== -----END CERTIFICATE-----Generated at Tue Apr 8 18:07:41 2025 by rpki-client