$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uod8jxzkFAU65kxzrkclThh0i7w.roa File: Uod8jxzkFAU65kxzrkclThh0i7w.roa (raw, json) Hash identifier: jrYFQnnYe0PgLJKcxE53AH4Ox7neARMYdWRJk0gX0y4= Subject key identifier: 52:87:7C:8F:1C:E4:14:05:3A:E6:4C:73:AE:47:25:4E:18:74:8B:BC Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 122B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uod8jxzkFAU65kxzrkclThh0i7w.roa Signing time: Fri 22 Aug 2025 08:49:03 +0000 ROA not before: Fri 22 Aug 2025 08:49:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 211.79.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4651 (0x122b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=52877C8F1CE414053AE64C73AE47254E18748BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:ec:62:68:62:d3:49:de:99:70:24:06:7b: 3c:58:65:e1:f8:7c:df:d4:f0:94:90:23:fa:0f:5e: 42:fe:d6:10:e3:0d:6e:ac:b1:f9:69:3f:71:25:bd: d9:51:0b:08:64:94:6e:01:dc:9c:c7:3e:a4:bd:61: dd:34:36:65:e1:fe:7b:8d:e4:4f:ae:b9:d2:15:0b: 54:82:82:21:29:c3:2f:4a:0b:c1:c9:dd:2b:9d:78: a1:cc:d4:3d:a8:83:5a:89:6f:17:5e:33:f6:6a:58: 3d:db:6c:67:ea:57:1f:71:f1:6c:e6:16:01:42:bc: fc:ff:33:f3:c4:46:82:77:57:89:ea:39:d8:e3:f7: c1:27:fe:b6:35:c4:ca:d9:05:8d:3d:91:e4:13:12: 94:05:68:27:88:f5:1d:7e:a2:17:76:c8:96:f7:e8: 3c:00:a1:79:b3:a0:ef:ca:34:8c:a1:13:a1:81:2f: 30:aa:c9:47:64:62:65:52:ab:0b:9a:61:46:64:6c: 47:9e:da:b8:f5:03:7d:0e:6b:a6:c2:93:cb:fa:4f: 2f:08:ac:51:c3:33:d1:f5:e5:42:41:c2:1a:82:73: c0:a1:25:79:70:60:c5:63:7a:e7:04:7f:7c:5f:30: a7:6a:76:a7:bf:6d:37:a2:62:b7:62:20:86:38:cd: 89:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:87:7C:8F:1C:E4:14:05:3A:E6:4C:73:AE:47:25:4E:18:74:8B:BC X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uod8jxzkFAU65kxzrkclThh0i7w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.120.0/21 Signature Algorithm: sha256WithRSAEncryption 05:a0:0e:a9:d9:bf:7a:02:59:91:06:90:7c:79:06:88:96:d3: b2:d3:85:c8:05:b6:24:28:1b:28:91:04:84:e8:19:a4:8c:dc: 38:be:5e:26:ac:92:66:af:23:ba:8b:c1:b4:3f:b4:11:c2:11: 13:1b:0d:06:3e:85:b8:4f:c9:e1:0d:01:cb:b9:68:68:fa:b3: c0:99:60:73:aa:0c:39:ac:d0:8c:78:80:26:70:5b:a2:86:f0: 8d:b7:de:91:b2:1a:35:d8:9b:17:8b:db:d8:55:29:cd:8f:99: c3:3d:29:0d:38:d6:c8:89:e1:70:58:7c:16:12:e6:60:64:4f: f8:97:4d:6f:ff:05:e6:6c:e0:a5:20:00:17:87:11:8d:6b:fb: 93:b2:81:fc:11:a4:d6:43:10:14:8e:5f:c6:c1:5c:0e:be:39: bf:9c:ff:c8:72:da:54:de:f5:3c:85:60:ef:b5:9a:ee:96:7a: 00:df:9e:42:1c:39:c5:b4:2e:71:73:88:26:7d:99:01:a7:d3: 15:54:3c:c5:20:7a:a6:a3:58:3d:37:7b:be:cb:03:45:5e:50: 30:c4:ff:dd:01:b4:dd:b6:02:28:46:ce:12:8a:9c:32:e3:fb: b6:98:90:88:5e:93:b0:15:68:6f:fa:35:47:93:ee:62:a4:5f: da:46:a6:4e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUyODc3QzhGMUNFNDE0 MDUzQUU2NEM3M0FFNDcyNTRFMTg3NDhCQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9d+xiaGLTSd6ZcCQGezxYZeH4fN/U8JSQI/oPXkL+1hDjDW6s sflpP3ElvdlRCwhklG4B3JzHPqS9Yd00NmXh/nuN5E+uudIVC1SCgiEpwy9KC8HJ 3SudeKHM1D2og1qJbxdeM/ZqWD3bbGfqVx9x8WzmFgFCvPz/M/PERoJ3V4nqOdjj 98En/rY1xMrZBY09keQTEpQFaCeI9R1+ohd2yJb36DwAoXmzoO/KNIyhE6GBLzCq yUdkYmVSqwuaYUZkbEee2rj1A30Oa6bCk8v6Ty8IrFHDM9H15UJBwhqCc8ChJXlw YMVjeucEf3xfMKdqdqe/bTeiYrdiIIY4zYlVAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUUod8jxzkFAU65kxzrkclThh0i7wwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvVW9kOGp4emtGQVU2NWt4enJrY2xU aGgwaTd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9NPeDAN BgkqhkiG9w0BAQsFAAOCAQEABaAOqdm/egJZkQaQfHkGiJbTstOFyAW2JCgbKJEE hOgZpIzcOL5eJqySZq8juovBtD+0EcIRExsNBj6FuE/J4Q0By7loaPqzwJlgc6oM OazQjHiAJnBboobwjbfekbIaNdibF4vb2FUpzY+Zwz0pDTjWyInhcFh8FhLmYGRP +JdNb/8F5mzgpSAAF4cRjWv7k7KB/BGk1kMQFI5fxsFcDr45v5z/yHLaVN71PIVg 77Wa7pZ6AN+eQhw5xbQucXOIJn2ZAafTFVQ8xSB6pqNYPTd7vssDRV5QMMT/3QG0 3bYCKEbOEoqcMuP7tpiQiF6TsBVob/o1R5PuYqRf2kamTg== -----END CERTIFICATE-----Generated at Thu Oct 23 08:23:12 2025 by rpki-client