$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/zzskRrBZVfhfzEYSac71QlVJB_s.roa File: zzskRrBZVfhfzEYSac71QlVJB_s.roa (raw, json) Hash identifier: TQGD/FSSIhbryjWQeVmxDRtEmcdO8Bh3zA3GnuVF0jM= Subject key identifier: CF:3B:24:46:B0:59:55:F8:5F:CC:46:12:69:CE:F5:42:55:49:07:FB Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 126E Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zzskRrBZVfhfzEYSac71QlVJB_s.roa Signing time: Fri 22 Aug 2025 08:49:20 +0000 ROA not before: Fri 22 Aug 2025 08:49:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 121.254.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4718 (0x126e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CF3B2446B05955F85FCC461269CEF542554907FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:10:8d:c5:cf:9c:47:00:ed:e9:a0:3a:99:9e: 59:c6:1e:87:51:53:e0:61:12:46:bd:1b:0d:8e:f4: 7a:1c:cb:2e:bb:fc:a6:a0:2f:b8:76:5f:34:e7:a5: d2:8f:e4:5d:a3:3d:69:2f:92:93:fb:9d:ad:bc:bb: 19:e3:af:a0:74:da:dd:77:f9:4d:32:6a:49:64:c7: c0:73:d7:91:45:a0:50:f6:ea:7b:6d:6c:ab:bd:94: e2:e7:1a:3e:0f:76:30:21:d7:a6:e9:95:6c:4b:7b: a0:0f:85:1d:7b:01:73:8f:f7:46:2b:41:44:b5:83: eb:d7:d3:5b:f0:9f:d9:00:f1:51:e8:5f:2a:2e:00: 65:f3:e5:77:38:1b:8d:36:32:96:51:23:c6:b5:ef: 9f:1d:dc:b6:8c:d6:50:8f:3f:c2:05:ae:95:02:42: fe:87:13:87:30:43:03:03:07:17:78:62:c6:99:e5: 02:eb:10:f0:8d:f7:c1:27:66:3a:f6:82:31:20:58: 68:27:c4:09:71:bc:ac:f3:f7:bc:eb:1e:02:9a:f6: 10:e5:8b:07:8a:98:fc:e0:47:ec:43:68:0a:5c:37: b3:78:db:f8:40:eb:40:0c:46:ad:9a:7d:9a:0a:92: 02:eb:54:05:8f:8d:a4:17:6d:76:21:36:67:3e:cd: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3B:24:46:B0:59:55:F8:5F:CC:46:12:69:CE:F5:42:55:49:07:FB X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zzskRrBZVfhfzEYSac71QlVJB_s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.104.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:47:4a:19:38:05:f0:b0:61:1b:33:9a:17:0f:da:8c:11:21: b7:ca:84:82:4b:bd:98:63:53:54:8f:a7:fa:70:40:f0:e0:9d: 2d:06:e2:19:31:b3:81:d1:84:30:0a:38:00:2c:8e:5d:f6:ca: 4a:d1:37:e3:6d:24:1e:70:89:06:d2:71:5c:a9:34:73:a8:63: 32:20:e7:cf:77:a8:e7:14:5e:66:d9:08:48:ca:e6:e8:52:26: 72:39:c2:5a:88:6d:e5:f5:37:1f:04:61:77:13:0f:ce:7b:ad: 20:06:77:c2:e7:a1:0b:ad:f2:ad:6d:fd:ac:3b:47:62:f3:4c: 7b:fc:ee:04:b0:aa:68:58:0a:c5:be:15:a2:b2:bf:d3:cc:00: 19:06:2a:ed:48:b3:bf:27:e0:a0:5c:ac:3e:b0:28:80:1a:d6: 7e:6d:a3:89:6f:21:cb:a5:a7:33:72:88:d3:c9:bc:6a:b4:d8: 4b:71:2d:a2:c9:3b:77:35:e1:7b:54:4e:03:fd:9f:fe:a4:f9: b0:53:cf:f4:a6:23:b2:22:40:dd:9a:73:c5:47:37:cf:49:28: 32:d2:2a:6d:85:d4:75:72:83:ae:5d:ac:ce:a4:1b:89:30:fc: 52:64:8c:45:3e:ec:82:17:66:ab:65:31:c5:37:3c:66:a4:04: 84:f7:a7:a3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENGM0IyNDQ2QjA1OTU1 Rjg1RkNDNDYxMjY5Q0VGNTQyNTU0OTA3RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgEI3Fz5xHAO3poDqZnlnGHodRU+BhEka9Gw2O9Hocyy67/Kag L7h2XzTnpdKP5F2jPWkvkpP7na28uxnjr6B02t13+U0yaklkx8Bz15FFoFD26ntt bKu9lOLnGj4PdjAh16bplWxLe6APhR17AXOP90YrQUS1g+vX01vwn9kA8VHoXyou AGXz5Xc4G402MpZRI8a1758d3LaM1lCPP8IFrpUCQv6HE4cwQwMDBxd4YsaZ5QLr EPCN98EnZjr2gjEgWGgnxAlxvKzz97zrHgKa9hDliweKmPzgR+xDaApcN7N42/hA 60AMRq2afZoKkgLrVAWPjaQXbXYhNmc+zaUTAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUzzskRrBZVfhfzEYSac71QlVJB/swHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvenpza1JyQlpWZmhmekVZU2FjNzFR bFZKQl9zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+aDAN BgkqhkiG9w0BAQsFAAOCAQEALkdKGTgF8LBhGzOaFw/ajBEht8qEgku9mGNTVI+n +nBA8OCdLQbiGTGzgdGEMAo4ACyOXfbKStE3420kHnCJBtJxXKk0c6hjMiDnz3eo 5xReZtkISMrm6FImcjnCWoht5fU3HwRhdxMPznutIAZ3wuehC63yrW39rDtHYvNM e/zuBLCqaFgKxb4VorK/08wAGQYq7UizvyfgoFysPrAogBrWfm2jiW8hy6WnM3KI 08m8arTYS3Etosk7dzXhe1ROA/2f/qT5sFPP9KYjsiJA3ZpzxUc3z0koMtIqbYXU dXKDrl2szqQbiTD8UmSMRT7sghdmq2UxxTc8ZqQEhPenow== -----END CERTIFICATE-----Generated at Thu Oct 23 08:23:11 2025 by rpki-client