$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/224-DaAuwUCd0-eKXsJK_DNJ7Uw.roa File: 224-DaAuwUCd0-eKXsJK_DNJ7Uw.roa (raw, json) Hash identifier: DaQ7/2yRMnZLvf/anR7HaBkNQ9or8CvMLRlxxyudc10= Subject key identifier: DB:6E:3E:0D:A0:2E:C1:40:9D:D3:E7:8A:5E:C2:4A:FC:33:49:ED:4C Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1291 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/224-DaAuwUCd0-eKXsJK_DNJ7Uw.roa Signing time: Fri 22 Aug 2025 08:49:28 +0000 ROA not before: Fri 22 Aug 2025 08:49:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 210.209.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4753 (0x1291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DB6E3E0DA02EC1409DD3E78A5EC24AFC3349ED4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2c:76:81:49:b4:71:d3:39:20:d5:f5:ea:f1: 51:78:2a:3f:b2:a0:3a:24:37:e2:22:d1:36:03:3b: 5a:9b:37:04:34:33:f9:97:e7:cf:8c:68:f0:f1:62: 58:2e:29:b6:b2:d7:f5:81:36:36:a8:80:35:a3:be: 69:8a:59:65:1c:e7:b1:ce:a1:9d:6c:7f:1e:fb:24: 75:a6:6a:5f:70:4b:2a:6b:d0:f8:a1:d8:c5:1d:db: e4:72:1c:94:0a:66:b2:03:2c:3c:a9:d5:4c:00:cf: d2:b8:b7:bf:74:a7:ae:72:06:63:56:1d:58:ea:35: 9e:58:eb:91:22:78:a4:05:1e:4f:2b:7d:a6:4c:65: 67:39:60:6a:1c:ec:e3:2f:82:d4:b7:69:29:4e:c6: 53:a3:6e:eb:8c:ed:ca:d3:97:7c:c2:a6:c9:36:6e: f5:0c:61:59:2e:b5:77:20:0a:43:67:4e:0b:f2:c7: df:a5:e0:48:76:b5:00:89:00:91:4d:8b:ee:70:b2: 80:73:e1:a3:79:9f:8e:b7:56:30:78:08:4d:53:c2: 53:b2:1b:f6:17:56:c9:b4:10:fe:73:1c:e5:69:ab: 74:c4:30:78:da:56:62:c8:55:3b:45:9f:f9:f7:ef: a3:99:cc:6b:32:6d:a2:19:5f:8a:46:36:ac:53:b3: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6E:3E:0D:A0:2E:C1:40:9D:D3:E7:8A:5E:C2:4A:FC:33:49:ED:4C X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/224-DaAuwUCd0-eKXsJK_DNJ7Uw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.144.0/20 Signature Algorithm: sha256WithRSAEncryption 45:ff:5b:97:d5:df:f8:17:75:2a:62:2c:95:ba:57:a7:13:27: 07:d7:2c:bc:f8:6b:80:7b:b2:3e:c0:1f:c4:a2:88:08:84:5f: 31:2a:32:87:01:e2:df:07:0d:56:e4:40:97:9b:39:f6:f8:3e: 2f:c7:f5:51:51:62:ca:3b:09:a5:a5:c4:04:68:82:ef:af:2c: b0:6f:95:d8:56:44:0e:ca:34:a4:ca:da:e9:1c:c4:47:25:f9: c0:96:11:24:cf:59:9d:44:6b:eb:f5:52:df:f3:55:67:8b:5b: 10:7f:1d:e1:63:c2:45:1f:89:5b:36:55:8c:6d:64:f6:92:68: 48:1f:17:04:2d:d7:74:b1:84:62:38:27:a3:7c:53:c5:28:16: 9b:8d:85:3d:9d:25:0f:c7:77:32:d5:01:ac:f2:e6:66:01:dc: 36:5a:ac:2a:ab:fb:56:f0:31:5b:55:31:67:5f:e4:49:b4:4f: 26:aa:41:a6:ba:f3:bc:59:ee:62:cc:37:59:e6:f6:08:34:4f: 06:35:77:8b:4e:af:f7:b7:bf:15:d7:67:ec:1d:00:8a:45:49: 3a:bb:e9:37:43:4a:28:11:54:f1:e2:e1:a7:2b:f8:56:91:83: 44:68:16:50:f4:9a:ab:b0:11:da:68:16:de:7a:50:d1:9a:14: 69:17:6f:9f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEpEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERCNkUzRTBEQTAyRUMx NDA5REQzRTc4QTVFQzI0QUZDMzM0OUVENEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnLHaBSbRx0zkg1fXq8VF4Kj+yoDokN+Ii0TYDO1qbNwQ0M/mX 58+MaPDxYlguKbay1/WBNjaogDWjvmmKWWUc57HOoZ1sfx77JHWmal9wSypr0Pih 2MUd2+RyHJQKZrIDLDyp1UwAz9K4t790p65yBmNWHVjqNZ5Y65EieKQFHk8rfaZM ZWc5YGoc7OMvgtS3aSlOxlOjbuuM7crTl3zCpsk2bvUMYVkutXcgCkNnTgvyx9+l 4Eh2tQCJAJFNi+5wsoBz4aN5n463VjB4CE1TwlOyG/YXVsm0EP5zHOVpq3TEMHja VmLIVTtFn/n376OZzGsybaIZX4pGNqxTs3VhAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU224+DaAuwUCd0+eKXsJK/DNJ7UwwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvMjI0LURhQXV3VUNkMC1lS1hzSktf RE5KN1V3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLRkDAN BgkqhkiG9w0BAQsFAAOCAQEARf9bl9Xf+Bd1KmIslbpXpxMnB9csvPhrgHuyPsAf xKKICIRfMSoyhwHi3wcNVuRAl5s59vg+L8f1UVFiyjsJpaXEBGiC768ssG+V2FZE Dso0pMra6RzERyX5wJYRJM9ZnURr6/VS3/NVZ4tbEH8d4WPCRR+JWzZVjG1k9pJo SB8XBC3XdLGEYjgno3xTxSgWm42FPZ0lD8d3MtUBrPLmZgHcNlqsKqv7VvAxW1Ux Z1/kSbRPJqpBprrzvFnuYsw3Web2CDRPBjV3i06v97e/Fddn7B0AikVJOrvpN0NK KBFU8eLhpyv4VpGDRGgWUPSaq7AR2mgW3npQ0ZoUaRdvnw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:22 2025 by rpki-client