$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/6iGBi6vHbctxDSHCsbSl-aMUzvk.roa File: 6iGBi6vHbctxDSHCsbSl-aMUzvk.roa (raw, json) Hash identifier: Tb1pe1htaAaDQp1R95Vs0tMnfWxCf0kRQM0JKEHeF6g= Subject key identifier: EA:21:81:8B:AB:C7:6D:CB:71:0D:21:C2:B1:B4:A5:F9:A3:14:CE:F9 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 125E Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6iGBi6vHbctxDSHCsbSl-aMUzvk.roa Signing time: Fri 22 Aug 2025 08:49:16 +0000 ROA not before: Fri 22 Aug 2025 08:49:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 210.209.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4702 (0x125e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EA21818BABC76DCB710D21C2B1B4A5F9A314CEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:b9:4c:2e:be:34:6b:dc:b0:98:83:7f:a3: 2e:4d:f7:31:2f:bf:22:28:08:0d:62:78:97:73:1b: 3e:d8:47:87:ff:68:2d:a2:6f:0a:a3:bb:35:2c:55: 44:ab:24:5e:98:6d:01:04:56:77:92:83:bc:d8:53: 85:9f:e0:75:06:70:42:f9:6c:59:54:b4:73:7a:21: 19:1c:88:87:30:26:f0:a1:24:fd:40:25:f2:87:75: 09:8a:74:0d:a1:ca:25:67:57:69:7f:5f:d0:0d:99: df:b0:b5:51:33:0c:ab:45:09:37:cf:60:1d:16:d6: 93:90:6a:55:e0:bf:a4:37:cd:d8:87:5c:85:71:d6: 2f:30:6c:69:f7:a3:b7:55:2f:e6:82:db:42:9e:fb: 10:31:f9:39:a9:d0:69:6f:12:ef:c5:47:b7:06:ee: 89:78:78:4d:c7:0e:08:4a:d0:6e:93:f3:44:56:a8: e2:89:0d:d9:b6:37:3d:36:a9:78:ae:2a:63:e2:0b: 95:13:2a:ee:d8:6c:ab:cb:d3:5c:01:4e:cf:b1:bc: 99:2f:ce:7a:4f:6f:48:a1:07:58:ca:4b:77:d4:a7: 7f:61:5e:1a:b6:79:36:64:60:5f:1e:2a:22:46:12: 5e:93:cf:b7:2d:09:09:48:be:8f:43:4f:79:05:23: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:81:8B:AB:C7:6D:CB:71:0D:21:C2:B1:B4:A5:F9:A3:14:CE:F9 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/6iGBi6vHbctxDSHCsbSl-aMUzvk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.224.0/19 Signature Algorithm: sha256WithRSAEncryption 82:33:c9:94:e2:e2:69:65:c0:de:02:90:41:21:3c:4a:ff:65: 71:de:74:bd:8c:42:64:3d:59:7e:0f:a9:99:98:5e:3f:11:94: e3:36:da:8c:36:5c:f5:81:1d:04:35:8b:82:5c:20:75:c3:90: 23:4f:42:92:0a:ce:5c:52:00:20:07:4e:41:aa:91:e2:01:40: 06:eb:1c:56:62:00:23:0b:ee:84:c0:fd:0b:fb:72:45:fd:76: c4:b6:76:5e:7e:7c:1f:91:d9:eb:6e:d7:3e:13:e8:0e:73:ab: c7:f4:93:5e:08:12:5e:91:b1:6a:7b:b0:29:5f:d3:73:c5:1b: 2f:63:96:57:4c:ea:5b:32:84:50:a1:6e:dc:dd:eb:88:58:d1: 8d:41:6b:f6:e1:b0:22:42:39:07:76:88:e8:98:15:20:94:19: b9:32:70:5a:85:be:13:ba:a2:33:23:e0:5f:4a:e8:89:1b:47: 2d:e2:93:43:0e:38:43:ab:48:53:d5:aa:96:ab:30:a2:27:d8: 40:04:56:eb:6c:61:30:8d:48:ad:d6:33:c5:a3:a4:bd:34:bc: 13:2c:8d:4c:89:8c:dd:fe:fe:61:6d:66:e5:b5:44:41:61:c0: bc:b5:a8:66:60:2d:36:71:5a:1f:e2:83:d5:53:aa:69:ee:45: 77:3e:0e:28 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBMjE4MThCQUJDNzZE Q0I3MTBEMjFDMkIxQjRBNUY5QTMxNENFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEFLlMLr40a9ywmIN/oy5N9zEvvyIoCA1ieJdzGz7YR4f/aC2i bwqjuzUsVUSrJF6YbQEEVneSg7zYU4Wf4HUGcEL5bFlUtHN6IRkciIcwJvChJP1A JfKHdQmKdA2hyiVnV2l/X9ANmd+wtVEzDKtFCTfPYB0W1pOQalXgv6Q3zdiHXIVx 1i8wbGn3o7dVL+aC20Ke+xAx+Tmp0GlvEu/FR7cG7ol4eE3HDghK0G6T80RWqOKJ Ddm2Nz02qXiuKmPiC5UTKu7YbKvL01wBTs+xvJkvznpPb0ihB1jKS3fUp39hXhq2 eTZkYF8eKiJGEl6Tz7ctCQlIvo9DT3kFI4KJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU6iGBi6vHbctxDSHCsbSl+aMUzvkwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvNmlHQmk2dkhiY3R4RFNIQ3NiU2wt YU1VenZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdLR4DAN BgkqhkiG9w0BAQsFAAOCAQEAgjPJlOLiaWXA3gKQQSE8Sv9lcd50vYxCZD1Zfg+p mZhePxGU4zbajDZc9YEdBDWLglwgdcOQI09CkgrOXFIAIAdOQaqR4gFABuscVmIA IwvuhMD9C/tyRf12xLZ2Xn58H5HZ627XPhPoDnOrx/STXggSXpGxanuwKV/Tc8Ub L2OWV0zqWzKEUKFu3N3riFjRjUFr9uGwIkI5B3aI6JgVIJQZuTJwWoW+E7qiMyPg X0roiRtHLeKTQw44Q6tIU9WqlqswoifYQARW62xhMI1IrdYzxaOkvTS8EyyNTImM 3f7+YW1m5bVEQWHAvLWoZmAtNnFaH+KD1VOqae5Fdz4OKA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:17:40 2025 by rpki-client