$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa File: 6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa (raw, json) Hash identifier: UfS6sTSJXlnCh6f2QWwIDq3xlIBGXkv8cbMgcrqGnVw= Subject key identifier: E8:48:FA:4B:2E:60:57:93:77:7C:18:99:AF:CE:0E:91:C5:86:C0:C5 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1267 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa Signing time: Fri 22 Aug 2025 08:49:19 +0000 ROA not before: Fri 22 Aug 2025 08:49:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.222.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4711 (0x1267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E848FA4B2E605793777C1899AFCE0E91C586C0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:32:15:7c:0a:ef:64:f8:61:c1:82:1b:72: 5c:85:7c:4e:5b:be:85:2e:dc:57:42:90:fc:7b:7e: 18:4d:2b:60:0a:55:ff:59:e0:2f:4d:59:52:03:7c: 0d:a5:f4:a6:ec:2c:5c:28:a0:c1:8b:87:8f:e0:b3: 02:01:ed:73:94:3e:86:ed:41:1b:09:fb:63:09:86: 76:9e:b8:24:5b:60:9f:07:87:18:be:8e:a0:4d:d6: 1f:64:af:43:67:b7:06:3b:61:f0:14:24:86:96:bb: c0:74:f1:b1:36:95:d0:25:3e:ea:dd:22:07:bd:3c: b8:34:64:a7:90:75:7b:3f:13:7d:7c:68:16:1a:eb: ff:c8:54:a1:98:ce:f9:fd:fc:13:ea:51:19:ae:73: 92:dd:48:2a:d5:7f:cf:2c:dd:a8:6a:34:03:83:96: 12:3a:6c:53:04:e4:54:57:71:79:89:34:03:fc:27: 27:90:47:8f:3d:b2:e7:7d:2c:75:1c:09:12:76:5c: 7e:94:d3:6e:3a:b6:c8:79:a1:1b:60:39:17:64:55: 71:79:59:cc:33:07:c8:cb:f1:38:59:15:ef:08:52: 90:67:2d:2b:8a:00:63:50:88:f9:17:54:e0:15:a0: 88:18:6b:5c:97:17:7a:3a:a4:fd:d3:33:5e:b0:78: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:FA:4B:2E:60:57:93:77:7C:18:99:AF:CE:0E:91:C5:86:C0:C5 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6Ej6Sy5gV5N3fBiZr84OkcWGwMU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.20.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:63:28:6b:a7:90:7f:c2:00:3b:0c:2a:21:49:41:69:ec:7d: c9:14:38:1c:a4:8d:47:eb:27:77:a5:a2:a8:ae:49:16:d6:f6: c8:ce:62:b7:ed:05:57:d7:06:dc:02:d8:ba:e0:0d:66:34:f9: d5:44:81:cd:ea:43:bc:c8:66:81:3b:f7:e6:70:0c:2f:47:fe: f8:59:c0:d3:0f:9c:0e:fc:ae:da:62:a6:9a:1a:7c:6e:c5:79: bb:34:e5:ba:fd:2b:5d:9c:c5:06:d5:55:c3:9c:e5:16:8e:6b: 0e:da:cc:66:1e:fb:41:6a:fd:54:8d:db:96:77:9a:0a:00:bf: 4c:43:12:89:d9:54:ae:7e:b8:cf:6c:a4:98:b4:65:ad:17:31: df:66:36:38:91:cb:00:c5:d8:4c:99:56:42:96:41:ef:21:5d: 8a:e4:8a:ae:7a:d6:7b:56:83:4a:21:58:f6:e2:9d:03:70:3e: 70:a5:9e:70:1a:b8:0a:a8:9a:b3:5a:44:8e:7b:8a:4e:0b:a4: c6:43:d6:91:8e:49:c2:85:29:0d:37:51:38:0b:1b:f1:e7:5c: a7:33:54:b1:36:11:82:09:ed:23:90:a5:5f:e3:a1:5e:25:54: f5:0c:c1:c1:9f:83:18:d9:31:27:20:36:80:0e:13:4b:c1:de: 49:52:26:e7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU4NDhGQTRCMkU2MDU3 OTM3NzdDMTg5OUFGQ0UwRTkxQzU4NkMwQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4ITIVfArvZPhhwYIbclyFfE5bvoUu3FdCkPx7fhhNK2AKVf9Z 4C9NWVIDfA2l9KbsLFwooMGLh4/gswIB7XOUPobtQRsJ+2MJhnaeuCRbYJ8Hhxi+ jqBN1h9kr0NntwY7YfAUJIaWu8B08bE2ldAlPurdIge9PLg0ZKeQdXs/E318aBYa 6//IVKGYzvn9/BPqURmuc5LdSCrVf88s3ahqNAODlhI6bFME5FRXcXmJNAP8JyeQ R489sud9LHUcCRJ2XH6U0246tsh5oRtgORdkVXF5WcwzB8jL8ThZFe8IUpBnLSuK AGNQiPkXVOAVoIgYa1yXF3o6pP3TM16weL2zAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU6Ej6Sy5gV5N3fBiZr84OkcWGwMUwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvNkVqNlN5NWdWNU4zZkJpWnI4NE9r Y1dHd01VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveFDAN BgkqhkiG9w0BAQsFAAOCAQEAHmMoa6eQf8IAOwwqIUlBaex9yRQ4HKSNR+snd6Wi qK5JFtb2yM5it+0FV9cG3ALYuuANZjT51USBzepDvMhmgTv35nAML0f++FnA0w+c Dvyu2mKmmhp8bsV5uzTluv0rXZzFBtVVw5zlFo5rDtrMZh77QWr9VI3blneaCgC/ TEMSidlUrn64z2ykmLRlrRcx32Y2OJHLAMXYTJlWQpZB7yFdiuSKrnrWe1aDSiFY 9uKdA3A+cKWecBq4Cqias1pEjnuKTgukxkPWkY5JwoUpDTdROAsb8edcpzNUsTYR ggntI5ClX+OhXiVU9QzBwZ+DGNkxJyA2gA4TS8HeSVIm5w== -----END CERTIFICATE-----Generated at Mon Oct 20 23:15:13 2025 by rpki-client