$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/0ieTUIxCU_HCtt3orakU0HbzTqg.roa File: 0ieTUIxCU_HCtt3orakU0HbzTqg.roa (raw, json) Hash identifier: ieYl9AHK42cK3I45tqrYckNdSn++uRDNtNbgYNVkhSI= Subject key identifier: D2:27:93:50:8C:42:53:F1:C2:B6:DD:E8:AD:A9:14:D0:76:F3:4E:A8 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1271 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/0ieTUIxCU_HCtt3orakU0HbzTqg.roa Signing time: Fri 22 Aug 2025 08:49:21 +0000 ROA not before: Fri 22 Aug 2025 08:49:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 119.15.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4721 (0x1271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D22793508C4253F1C2B6DDE8ADA914D076F34EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:cf:97:c5:c4:90:c5:50:bb:e4:52:ab:e4: 99:4d:1f:79:8f:7c:4a:b5:16:c5:65:d9:02:38:bc: 17:0c:db:6f:af:53:d8:7f:59:0d:4c:50:02:ff:3d: a0:d6:f9:62:6f:28:47:07:e9:8e:32:f7:f7:d4:30: 4e:9f:b9:25:83:63:92:ac:47:cb:6c:f9:6d:ff:06: b6:1c:a9:e9:5e:ff:92:da:23:d3:10:41:00:12:7f: e7:23:61:83:a2:2c:cc:72:67:49:5c:cb:20:42:ba: 65:d8:a9:6e:97:1f:f0:e7:ad:4c:26:83:cc:13:b5: d5:21:80:1d:81:5d:a4:8f:28:7c:29:7c:80:5e:71: 33:e9:35:1a:86:d1:20:be:89:b6:77:1a:bb:a0:27: f0:09:da:93:0f:73:90:1f:c0:66:23:ef:61:7b:9b: cb:a7:83:8a:96:ea:44:22:e5:c4:d2:3b:24:6e:54: 12:9d:83:e7:6f:ca:7c:23:19:a0:dc:69:cc:e9:32: ba:92:00:1c:f4:08:3d:d1:bd:65:fd:0a:cd:e0:ae: 7d:42:7d:f3:ed:2c:65:af:d3:dc:cc:55:62:15:f0: 84:12:7c:f6:c8:f7:9f:da:d1:3d:64:6c:60:45:9f: f1:d8:d0:d1:70:80:df:92:04:ad:e0:fe:8b:cc:60: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:27:93:50:8C:42:53:F1:C2:B6:DD:E8:AD:A9:14:D0:76:F3:4E:A8 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/0ieTUIxCU_HCtt3orakU0HbzTqg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.15.200.0/21 Signature Algorithm: sha256WithRSAEncryption aa:00:bf:ee:fd:b7:f7:d7:0b:03:d1:51:fd:2b:ad:a7:ca:37: fd:aa:9c:a5:b3:fb:08:d1:77:d0:0a:e8:85:12:24:98:cd:e0: 0c:0f:23:92:6f:7a:aa:d0:8a:5b:0d:89:ab:b6:5a:72:93:7d: f8:8c:4c:d6:12:a1:72:b8:da:e7:1a:16:c4:0b:a9:c3:e3:da: 37:8d:b1:15:1b:34:f3:a3:fc:4a:ce:a5:b0:2f:f9:e1:d2:7c: 23:ff:4e:82:11:02:d2:fc:31:b2:55:5a:11:04:e2:0f:21:a7: 6e:46:4a:52:dd:2b:4a:25:7f:2c:e7:6d:c6:a0:d5:78:d9:7e: 87:72:f0:f4:a9:fc:bf:f6:43:3c:0d:9b:f9:4f:fb:f6:67:2f: 8a:f1:78:ce:bd:0d:7e:89:d0:bc:95:ee:7f:2a:cd:9a:f2:1e: e9:a8:79:f1:d5:7d:54:4e:f1:08:47:4e:aa:6a:53:99:c3:51: 4b:03:68:02:e7:a8:eb:01:7f:8a:cf:7d:27:38:53:4f:55:d8: 6b:f3:77:92:ff:c5:fb:95:2b:56:09:83:2f:88:04:9b:24:ab: 51:1b:11:ab:67:49:81:28:9b:d4:ce:92:b0:73:fe:43:b9:af: bc:27:33:1e:42:e4:2d:3f:d5:c6:37:e5:1c:0d:21:4e:42:87: 50:12:a5:47 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQyMjc5MzUwOEM0MjUz RjFDMkI2RERFOEFEQTkxNEQwNzZGMzRFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdTM+XxcSQxVC75FKr5JlNH3mPfEq1FsVl2QI4vBcM22+vU9h/ WQ1MUAL/PaDW+WJvKEcH6Y4y9/fUME6fuSWDY5KsR8ts+W3/BrYcqele/5LaI9MQ QQASf+cjYYOiLMxyZ0lcyyBCumXYqW6XH/DnrUwmg8wTtdUhgB2BXaSPKHwpfIBe cTPpNRqG0SC+ibZ3GrugJ/AJ2pMPc5AfwGYj72F7m8ung4qW6kQi5cTSOyRuVBKd g+dvynwjGaDcaczpMrqSABz0CD3RvWX9Cs3grn1CffPtLGWv09zMVWIV8IQSfPbI 95/a0T1kbGBFn/HY0NFwgN+SBK3g/ovMYGHnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU0ieTUIxCU/HCtt3orakU0HbzTqgwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvMGllVFVJeENVX0hDdHQzb3Jha1Uw SGJ6VHFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cPyDAN BgkqhkiG9w0BAQsFAAOCAQEAqgC/7v2399cLA9FR/Sutp8o3/aqcpbP7CNF30Aro hRIkmM3gDA8jkm96qtCKWw2Jq7ZacpN9+IxM1hKhcrja5xoWxAupw+PaN42xFRs0 86P8Ss6lsC/54dJ8I/9OghEC0vwxslVaEQTiDyGnbkZKUt0rSiV/LOdtxqDVeNl+ h3Lw9Kn8v/ZDPA2b+U/79mcvivF4zr0NfonQvJXufyrNmvIe6ah58dV9VE7xCEdO qmpTmcNRSwNoAueo6wF/is99JzhTT1XYa/N3kv/F+5UrVgmDL4gEmySrURsRq2dJ gSib1M6SsHP+Q7mvvCczHkLkLT/VxjflHA0hTkKHUBKlRw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:18 2025 by rpki-client