$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/wqY--i5G4GBCJyxYygLsUr5VbDY.roa File: wqY--i5G4GBCJyxYygLsUr5VbDY.roa (raw, json) Hash identifier: bi1QUOHLAnsVrSk8uW2bqzDjQBX2qLxgoG3I9Hw9UxA= Subject key identifier: C2:A6:3E:FA:2E:46:E0:60:42:27:2C:58:CA:02:EC:52:BE:55:6C:36 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 128B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wqY--i5G4GBCJyxYygLsUr5VbDY.roa Signing time: Fri 22 Aug 2025 08:49:26 +0000 ROA not before: Fri 22 Aug 2025 08:49:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 27.96.224.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4747 (0x128b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C2A63EFA2E46E06042272C58CA02EC52BE556C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:8d:46:5c:3d:8b:ba:53:79:37:94:08:d4: 15:b7:89:99:94:9c:6d:7c:ab:02:aa:62:cf:0d:cf: b5:b9:a2:22:d2:30:95:9c:15:54:42:fb:2a:ad:ef: 53:a8:5a:9e:93:0d:04:41:1e:7e:e0:4c:fa:81:85: 8f:b9:fc:f3:ae:b5:6a:d1:65:b3:84:05:0a:e8:36: 70:8f:5d:9a:e5:5b:81:ac:06:26:11:fe:7c:6b:b7: 8f:b5:82:2d:40:50:6b:cc:14:5e:b8:c1:65:ee:1c: e9:98:d6:ca:57:5d:df:dc:df:ab:3e:4c:8a:bb:07: ce:50:1c:b1:7c:70:12:10:0e:e1:42:81:aa:bc:6c: 9d:98:6c:67:70:22:ad:ad:4b:0f:8b:08:bb:4f:af: 39:65:18:93:47:d6:a5:f6:8e:12:e1:df:5a:a8:6f: 2b:32:07:c5:c5:45:37:5d:3d:81:ae:8d:ae:26:26: 03:da:2d:96:48:d3:4f:e5:db:34:e3:b1:67:a8:b6: 5f:f2:71:09:4e:4c:5c:68:cc:5e:96:54:27:1a:e9: df:0c:5a:30:56:32:04:4e:e4:3f:ae:bc:ba:21:61: f3:5b:1b:58:54:95:17:b1:43:a0:1c:03:2c:84:a2: 22:d9:5c:e1:8e:4b:11:73:d0:28:b9:1b:9a:9e:d3: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:3E:FA:2E:46:E0:60:42:27:2C:58:CA:02:EC:52:BE:55:6C:36 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wqY--i5G4GBCJyxYygLsUr5VbDY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.96.224.0/19 Signature Algorithm: sha256WithRSAEncryption a7:ed:c4:cf:9a:04:19:23:e7:36:27:54:e7:46:07:8e:27:a7: e7:9d:7d:98:e6:8e:a4:d1:e9:97:f6:60:af:e4:2e:ed:c1:45: 45:23:de:15:2a:a9:c2:f0:17:60:88:35:cd:1c:4d:04:9e:1f: 75:8a:22:a5:07:99:77:a5:9f:ee:33:f1:a9:fd:1d:72:25:86: 39:19:ab:41:93:22:1f:03:e4:2b:f2:8b:cd:31:62:43:28:cb: ef:8d:a2:0c:6e:97:8f:16:c9:01:40:40:7a:ef:3b:d2:d6:2c: e5:a0:1a:b4:f9:c2:09:f3:33:3f:ca:53:81:24:34:2b:bf:68: 02:c0:de:c6:90:d1:0f:71:8b:2f:60:af:34:f5:1a:cb:22:d2: 8f:27:60:80:bb:3f:41:f8:9b:d8:d3:07:11:6b:8b:69:a6:68: dd:35:5d:92:5c:1e:53:52:f8:17:a1:d5:e6:da:8d:6f:d4:6d: dd:2d:f6:67:0f:49:ad:5b:5b:36:70:ab:61:ad:95:38:c9:5d: a1:62:cd:2d:1c:9f:4f:d0:a0:bb:00:39:9f:b6:40:35:f2:e2: ba:b4:07:dd:a3:98:a8:79:11:ea:75:77:e9:7f:1a:e9:b2:a2: d6:a6:c8:4d:01:e9:7c:e5:eb:28:2c:63:77:18:78:57:72:7b: 63:94:63:bf -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyQTYzRUZBMkU0NkUw NjA0MjI3MkM1OENBMDJFQzUyQkU1NTZDMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNbo1GXD2LulN5N5QI1BW3iZmUnG18qwKqYs8Nz7W5oiLSMJWc FVRC+yqt71OoWp6TDQRBHn7gTPqBhY+5/POutWrRZbOEBQroNnCPXZrlW4GsBiYR /nxrt4+1gi1AUGvMFF64wWXuHOmY1spXXd/c36s+TIq7B85QHLF8cBIQDuFCgaq8 bJ2YbGdwIq2tSw+LCLtPrzllGJNH1qX2jhLh31qobysyB8XFRTddPYGuja4mJgPa LZZI00/l2zTjsWeotl/ycQlOTFxozF6WVCca6d8MWjBWMgRO5D+uvLohYfNbG1hU lRexQ6AcAyyEoiLZXOGOSxFz0Ci5G5qe09jtAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUwqY++i5G4GBCJyxYygLsUr5VbDYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvd3FZLS1pNUc0R0JDSnl4WXlnTHNV cjVWYkRZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBRtg4DAN BgkqhkiG9w0BAQsFAAOCAQEAp+3Ez5oEGSPnNidU50YHjien5519mOaOpNHpl/Zg r+Qu7cFFRSPeFSqpwvAXYIg1zRxNBJ4fdYoipQeZd6Wf7jPxqf0dciWGORmrQZMi HwPkK/KLzTFiQyjL742iDG6XjxbJAUBAeu870tYs5aAatPnCCfMzP8pTgSQ0K79o AsDexpDRD3GLL2CvNPUayyLSjydggLs/Qfib2NMHEWuLaaZo3TVdklweU1L4F6HV 5tqNb9Rt3S32Zw9JrVtbNnCrYa2VOMldoWLNLRyfT9CguwA5n7ZANfLiurQH3aOY qHkR6nV36X8a6bKi1qbITQHpfOXrKCxjdxh4V3J7Y5Rjvw== -----END CERTIFICATE-----Generated at Thu Oct 23 08:23:12 2025 by rpki-client