$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZrD9rCMfWG2WLF9_-Am7pFAjkF8.roa File: ZrD9rCMfWG2WLF9_-Am7pFAjkF8.roa (raw, json) Hash identifier: D88HXFsbmwlsfhrOO0VSeDYM5bB+r5w/aL7wBLyC2T0= Subject key identifier: 66:B0:FD:AC:23:1F:58:6D:96:2C:5F:7F:F8:09:BB:A4:50:23:90:5F Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 123E Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZrD9rCMfWG2WLF9_-Am7pFAjkF8.roa Signing time: Fri 22 Aug 2025 08:49:08 +0000 ROA not before: Fri 22 Aug 2025 08:49:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 27.96.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4670 (0x123e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=66B0FDAC231F586D962C5F7FF809BBA45023905F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:c0:69:34:e5:22:0d:22:ca:6e:d1:f6:60: b8:a2:dd:ea:f8:e8:17:55:67:b1:24:f4:2b:41:e0: 93:87:7c:70:0f:53:c8:52:65:2f:73:a7:5a:f6:8e: 49:71:cb:e7:7c:2b:ce:21:6b:56:63:9e:8e:78:a1: bb:26:76:fc:85:7c:ee:22:d9:d7:38:76:3f:ec:47: a7:aa:c6:e3:4c:a3:59:45:c3:40:ae:52:07:b3:10: ce:92:6a:f1:62:4c:e5:08:99:8a:52:6c:a8:09:da: f5:31:b2:7b:4a:b6:2a:40:1c:19:4f:11:03:07:c5: 7a:14:7f:95:56:06:e6:36:0e:58:94:da:04:62:9e: 79:96:0a:c7:ef:7c:de:68:49:5a:98:eb:b7:47:ca: b3:13:47:62:ef:41:7f:8d:48:b1:fd:e4:44:4c:0d: 80:82:63:d1:06:d1:a2:1d:58:25:9b:c4:e4:93:89: 58:4e:19:1d:c8:af:7d:e1:ec:a2:fc:8d:a0:52:83: 65:47:2c:7e:94:a8:3d:83:01:7f:26:b6:b0:d2:a3: 97:b9:9e:98:e5:fe:a7:fc:33:b6:e7:c0:57:57:b2: 11:6f:c3:b3:46:57:78:b3:d8:d4:8d:2f:74:ee:06: 40:e4:8c:68:6f:ff:0f:eb:76:ec:4c:d5:e2:60:f8: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:FD:AC:23:1F:58:6D:96:2C:5F:7F:F8:09:BB:A4:50:23:90:5F X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZrD9rCMfWG2WLF9_-Am7pFAjkF8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.240.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:e9:69:5d:9a:40:16:d1:c3:08:74:33:f3:7f:bd:8d:d8:49: 27:cb:d9:74:52:6e:fc:73:86:a2:a1:82:21:c1:36:39:0c:d2: 01:42:b3:f7:2c:26:f2:60:ac:4d:3d:c5:2a:53:37:95:52:07: d8:2b:a8:b2:b6:d6:8e:0b:15:5e:2e:3e:d8:3d:37:bc:24:3d: 3e:38:22:d0:e9:e7:4d:09:ea:ca:02:b1:7a:d5:34:f6:fc:c3: c3:c6:a5:a5:91:6f:70:62:b2:0a:7f:f0:8e:61:15:56:8f:4b: b4:96:b7:2e:d1:90:e5:5e:3e:cd:9f:ad:4d:c4:fd:b5:25:3c: 75:de:db:ac:2d:d0:04:17:be:f3:87:5a:42:19:20:b1:3b:ba: 09:fe:4d:b3:cc:fc:5d:18:51:4d:2d:36:f5:d2:d1:a3:ef:e4: bf:c8:b9:72:66:6d:c5:8a:ac:69:5b:5d:99:9d:cf:3f:39:d0: ed:6d:51:e8:aa:1c:bc:94:d8:ef:64:0e:e8:e0:6e:9b:33:cc: f9:3a:91:08:dd:ff:c2:77:1a:c3:3e:ff:63:99:16:cf:fe:33: 95:1d:fe:17:3d:05:fb:ef:88:21:27:59:2a:f3:64:1e:d9:b3: ad:0b:fb:4f:d7:4f:dc:96:8b:19:c4:13:ac:b9:04:5c:e0:d6: c0:03:3e:6c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY2QjBGREFDMjMxRjU4 NkQ5NjJDNUY3RkY4MDlCQkE0NTAyMzkwNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc3sBpNOUiDSLKbtH2YLii3er46BdVZ7Ek9CtB4JOHfHAPU8hS ZS9zp1r2jklxy+d8K84ha1Zjno54obsmdvyFfO4i2dc4dj/sR6eqxuNMo1lFw0Cu UgezEM6SavFiTOUImYpSbKgJ2vUxsntKtipAHBlPEQMHxXoUf5VWBuY2DliU2gRi nnmWCsfvfN5oSVqY67dHyrMTR2LvQX+NSLH95ERMDYCCY9EG0aIdWCWbxOSTiVhO GR3Ir33h7KL8jaBSg2VHLH6UqD2DAX8mtrDSo5e5npjl/qf8M7bnwFdXshFvw7NG V3iz2NSNL3TuBkDkjGhv/w/rduxM1eJg+Mw7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUZrD9rCMfWG2WLF9/+Am7pFAjkF8wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvWnJEOXJDTWZXRzJXTEY5Xy1BbTdw RkFqa0Y4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAxtg8DAN BgkqhkiG9w0BAQsFAAOCAQEAjulpXZpAFtHDCHQz83+9jdhJJ8vZdFJu/HOGoqGC IcE2OQzSAUKz9ywm8mCsTT3FKlM3lVIH2CuosrbWjgsVXi4+2D03vCQ9Pjgi0Onn TQnqygKxetU09vzDw8alpZFvcGKyCn/wjmEVVo9LtJa3LtGQ5V4+zZ+tTcT9tSU8 dd7brC3QBBe+84daQhkgsTu6Cf5Ns8z8XRhRTS029dLRo+/kv8i5cmZtxYqsaVtd mZ3PPznQ7W1R6KocvJTY72QO6OBumzPM+TqRCN3/wncawz7/Y5kWz/4zlR3+Fz0F +++IISdZKvNkHtmzrQv7T9dP3JaLGcQTrLkEXODWwAM+bA== -----END CERTIFICATE-----Generated at Thu Oct 23 08:23:12 2025 by rpki-client