$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/9pV9mJyo-S4nNVi23fpFBEB-ifM.roa File: 9pV9mJyo-S4nNVi23fpFBEB-ifM.roa (raw, json) Hash identifier: hsSWKo+zw6/ncxH1k9QMDFxJARwOTXjS2cZLVfnYKGM= Subject key identifier: F6:95:7D:98:9C:A8:F9:2E:27:35:58:B6:DD:FA:45:04:40:7E:89:F3 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1268 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9pV9mJyo-S4nNVi23fpFBEB-ifM.roa Signing time: Fri 22 Aug 2025 08:49:19 +0000 ROA not before: Fri 22 Aug 2025 08:49:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.217.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4712 (0x1268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F6957D989CA8F92E273558B6DDFA4504407E89F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:f8:59:09:f8:48:36:b6:c9:db:c5:c1:2d: ac:84:97:b8:6f:9f:4a:78:7d:7f:3a:ee:fa:24:53: a6:cd:4b:0a:01:14:c2:6e:ea:5d:9a:96:da:46:05: 46:2c:d3:e3:74:af:f9:04:ab:c3:f7:e1:9b:08:1c: f0:b8:1d:49:28:f4:79:40:35:1a:75:4d:fa:d3:91: a4:36:47:b6:76:24:65:96:96:38:e1:12:cc:ed:21: fd:1d:73:58:e4:93:90:fd:89:35:5a:28:70:69:84: 5c:e3:d8:bf:c9:68:a4:63:18:f2:75:f5:79:7d:4b: bc:4a:23:db:1e:da:c7:ae:26:c4:32:b3:8d:81:b7: 9e:36:06:c4:4d:91:19:97:ee:e5:d0:f6:36:b2:50: 00:f4:eb:2f:ff:0e:68:0b:3d:e8:9a:f8:eb:cd:3f: f1:0d:36:e4:db:dc:ec:a2:e9:b3:13:8c:e3:3e:39: 0a:3d:7f:7c:17:7e:1c:a6:db:ab:28:bf:96:a2:e3: fc:08:b4:22:64:22:49:da:cc:41:04:76:04:04:fc: 82:d1:4e:12:e9:c7:80:e0:c3:18:f7:56:11:87:cb: da:80:33:41:34:91:b7:92:df:53:94:a6:e3:e6:65: 03:81:6e:4c:e8:3f:69:75:3a:b5:bc:1d:e3:f9:35: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:95:7D:98:9C:A8:F9:2E:27:35:58:B6:DD:FA:45:04:40:7E:89:F3 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9pV9mJyo-S4nNVi23fpFBEB-ifM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:51:72:16:89:82:ed:2c:bf:ca:11:5b:31:f4:12:d4:5c:4c: e1:f9:43:89:fd:cd:0e:48:d9:34:7a:16:d3:44:4c:cc:0f:af: c7:cf:39:22:1e:24:32:ba:74:12:c9:c1:68:34:b3:2d:d1:13: bf:ea:17:c8:ee:5b:b6:01:ec:16:01:27:69:4c:5b:b4:fc:4a: 54:82:5c:b6:ee:a7:28:4d:f4:bf:88:3c:91:40:c4:e5:94:d0: 74:fe:73:32:e8:7d:2a:c1:8d:5e:b4:10:8e:34:c0:c3:97:88: 7f:1f:13:3c:a8:21:fd:e0:ef:f8:e2:af:dd:44:29:59:e8:e5: 3a:75:c9:6a:ba:cf:cb:91:4c:0b:87:86:01:c7:50:a6:3a:d9: 11:1c:0e:53:22:62:10:e8:39:af:28:07:bb:c6:38:75:07:62: c0:4d:a5:5f:b6:5e:e5:36:aa:b9:f9:e4:d8:3d:d3:d1:cd:23: 11:cd:38:f0:1d:1d:80:90:d7:d2:a9:fd:ac:5c:c6:a1:d3:59: 8f:66:e2:0c:8a:2e:1d:83:28:ff:7a:53:d0:81:d3:4f:af:62: 93:4d:bd:52:46:cf:0f:d0:df:60:21:fe:e8:46:74:2d:ec:97: 64:fe:f0:d5:53:e5:ba:be:4c:70:e8:60:d6:81:13:35:26:89: 74:ca:a5:54 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY2OTU3RDk4OUNBOEY5 MkUyNzM1NThCNkRERkE0NTA0NDA3RTg5RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC24fhZCfhINrbJ28XBLayEl7hvn0p4fX867vokU6bNSwoBFMJu 6l2altpGBUYs0+N0r/kEq8P34ZsIHPC4HUko9HlANRp1TfrTkaQ2R7Z2JGWWljjh EsztIf0dc1jkk5D9iTVaKHBphFzj2L/JaKRjGPJ19Xl9S7xKI9se2seuJsQys42B t542BsRNkRmX7uXQ9jayUAD06y//DmgLPeia+OvNP/ENNuTb3Oyi6bMTjOM+OQo9 f3wXfhym26sov5ai4/wItCJkIknazEEEdgQE/ILRThLpx4Dgwxj3VhGHy9qAM0E0 kbeS31OUpuPmZQOBbkzoP2l1OrW8HeP5NRklAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU9pV9mJyo+S4nNVi23fpFBEB+ifMwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvOXBWOW1KeW8tUzRuTlZpMjNmcEZC RUItaWZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMvZYDAN BgkqhkiG9w0BAQsFAAOCAQEAClFyFomC7Sy/yhFbMfQS1FxM4flDif3NDkjZNHoW 00RMzA+vx885Ih4kMrp0EsnBaDSzLdETv+oXyO5btgHsFgEnaUxbtPxKVIJctu6n KE30v4g8kUDE5ZTQdP5zMuh9KsGNXrQQjjTAw5eIfx8TPKgh/eDv+OKv3UQpWejl OnXJarrPy5FMC4eGAcdQpjrZERwOUyJiEOg5rygHu8Y4dQdiwE2lX7Ze5Taqufnk 2D3T0c0jEc048B0dgJDX0qn9rFzGodNZj2biDIouHYMo/3pT0IHTT69ik029UkbP D9DfYCH+6EZ0LeyXZP7w1VPlur5McOhg1oETNSaJdMqlVA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:17:47 2025 by rpki-client