$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/sLXunwSV2Ggk8vdXwuj8-TCnt20.roa File: sLXunwSV2Ggk8vdXwuj8-TCnt20.roa (raw, json) Hash identifier: ZzbjjiLiwwVhZ33lALBgIdMiv16790ZCmKaIHqBXlcY= Subject key identifier: B0:B5:EE:9F:04:95:D8:68:24:F2:F7:57:C2:E8:FC:F9:30:A7:B7:6D Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 128F Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/sLXunwSV2Ggk8vdXwuj8-TCnt20.roa Signing time: Fri 22 Aug 2025 08:49:27 +0000 ROA not before: Fri 22 Aug 2025 08:49:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.217.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4751 (0x128f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B0B5EE9F0495D86824F2F757C2E8FCF930A7B76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:d2:9b:a3:90:88:99:e3:8f:cc:9b:39:b0: 4e:ee:ae:f4:ba:59:f4:8f:4a:88:58:2e:9e:ee:84: c2:ce:8f:a8:35:2c:63:f6:f2:a8:b4:3b:3f:c1:e9: bb:84:00:5c:ac:f7:a9:f4:5f:5a:cc:d2:8e:7f:34: a1:84:f9:89:27:09:09:63:b9:46:ec:8a:7a:8f:01: 18:27:21:39:82:18:81:17:36:94:dc:8e:ab:f2:76: 9b:60:b3:eb:a7:57:8b:9b:3f:b9:85:e6:74:db:e1: 00:48:9b:a9:e3:69:4f:34:6d:c0:19:e2:cc:dc:f7: 37:92:f9:ec:b1:6c:92:67:2f:d6:80:01:55:38:77: 7a:06:8c:0f:98:f0:7e:09:19:27:2f:cf:7b:1f:42: a3:51:be:e6:dc:89:68:47:34:15:72:50:79:c1:4b: 62:1e:52:cc:41:ba:10:76:32:50:b6:c0:c3:84:b7: 03:64:45:f6:6f:00:f2:ac:7d:4c:43:76:05:cc:28: 5f:ac:b7:a1:5a:b5:46:55:99:be:a8:db:73:b8:29: c0:de:d9:17:4c:79:b9:18:c4:9a:0c:e0:75:4f:aa: d7:3f:8c:fa:13:ba:af:10:aa:1b:06:43:7f:d6:63: 37:39:92:d4:60:13:62:0b:18:94:63:78:ab:a9:39: cd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B5:EE:9F:04:95:D8:68:24:F2:F7:57:C2:E8:FC:F9:30:A7:B7:6D X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/sLXunwSV2Ggk8vdXwuj8-TCnt20.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.112.0/21 Signature Algorithm: sha256WithRSAEncryption 17:b9:bc:be:70:41:db:5e:63:2f:cf:61:47:96:68:32:3c:5b: a7:16:17:42:6c:7d:52:90:e0:cc:a6:88:bc:7d:32:97:42:3b: c5:30:9a:07:9b:f8:97:ac:0d:33:d8:26:03:46:33:c9:1b:b6: 2a:a9:73:c2:e1:60:6c:e4:aa:de:54:d5:63:16:77:79:d1:0b: 4d:aa:69:1f:bb:bd:d8:97:cd:c4:b1:37:13:0e:26:66:92:89: 01:d9:e0:57:2d:f1:18:f6:e1:fc:4f:fb:3f:4e:e0:28:91:da: 95:92:38:6a:bd:01:82:8c:60:47:f0:d6:1a:c1:8a:f5:67:cb: 7d:fa:66:2d:23:ca:88:05:1e:5b:38:c5:fe:cc:85:09:bb:65: 1c:fd:fa:3a:0d:f6:b6:ab:d3:31:e1:8e:37:ee:4f:43:8d:aa: 48:c8:6c:3e:09:54:56:fb:80:62:03:15:78:e2:32:2b:ce:2c: a7:30:58:6f:fc:42:8a:9b:42:c7:69:02:c5:59:53:4f:0a:93: 9e:c0:7b:b1:d0:41:b8:62:52:15:07:7b:df:91:56:95:e6:ca: 24:ca:d4:26:93:d4:62:fe:07:f3:bd:a6:d1:98:4e:a9:3e:66: f2:e7:61:df:b9:ab:da:b2:d6:a8:0a:29:18:c7:35:f2:39:e5: da:05:bd:8f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwQjVFRTlGMDQ5NUQ4 NjgyNEYyRjc1N0MyRThGQ0Y5MzBBN0I3NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZ39Kbo5CImeOPzJs5sE7urvS6WfSPSohYLp7uhMLOj6g1LGP2 8qi0Oz/B6buEAFys96n0X1rM0o5/NKGE+YknCQljuUbsinqPARgnITmCGIEXNpTc jqvydptgs+unV4ubP7mF5nTb4QBIm6njaU80bcAZ4szc9zeS+eyxbJJnL9aAAVU4 d3oGjA+Y8H4JGScvz3sfQqNRvubciWhHNBVyUHnBS2IeUsxBuhB2MlC2wMOEtwNk RfZvAPKsfUxDdgXMKF+st6FatUZVmb6o23O4KcDe2RdMebkYxJoM4HVPqtc/jPoT uq8QqhsGQ3/WYzc5ktRgE2ILGJRjeKupOc2tAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUsLXunwSV2Ggk8vdXwuj8+TCnt20wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvc0xYdW53U1YyR2drOHZkWHd1ajgt VENudDIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8vZcDAN BgkqhkiG9w0BAQsFAAOCAQEAF7m8vnBB215jL89hR5ZoMjxbpxYXQmx9UpDgzKaI vH0yl0I7xTCaB5v4l6wNM9gmA0YzyRu2KqlzwuFgbOSq3lTVYxZ3edELTappH7u9 2JfNxLE3Ew4mZpKJAdngVy3xGPbh/E/7P07gKJHalZI4ar0BgoxgR/DWGsGK9WfL ffpmLSPKiAUeWzjF/syFCbtlHP36Og32tqvTMeGON+5PQ42qSMhsPglUVvuAYgMV eOIyK84spzBYb/xCiptCx2kCxVlTTwqTnsB7sdBBuGJSFQd735FWlebKJMrUJpPU Yv4H872m0ZhOqT5m8udh37mr2rLWqAopGMc18jnl2gW9jw== -----END CERTIFICATE-----Generated at Thu Oct 23 08:23:13 2025 by rpki-client