$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/AEbbEZpBg-uDbGOwpxZSD_p7ODA.roa File: AEbbEZpBg-uDbGOwpxZSD_p7ODA.roa (raw, json) Hash identifier: 0Rx3RhhCRDUlg8rj5JrA+SMBkYk3/CcDb7yZ+is8GmE= Subject key identifier: 00:46:DB:11:9A:41:83:EB:83:6C:63:B0:A7:16:52:0F:FA:7B:38:30 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1253 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/AEbbEZpBg-uDbGOwpxZSD_p7ODA.roa Signing time: Fri 22 Aug 2025 08:49:13 +0000 ROA not before: Fri 22 Aug 2025 08:49:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 211.79.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4691 (0x1253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0046DB119A4183EB836C63B0A716520FFA7B3830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:3e:c8:ed:2f:44:b5:1d:d4:8c:2b:3c:4d: dd:39:fa:ff:43:3d:ef:84:4f:2b:74:67:63:9e:f2: 78:40:69:14:22:e7:22:ce:68:6e:b8:50:94:0d:ba: e7:1f:c7:ab:17:e8:91:a7:02:80:5f:cd:b8:45:75: e0:6f:5e:45:12:b3:82:a4:50:c1:4d:bd:f2:2f:cb: 11:cc:51:ba:98:c6:b6:00:1a:fb:14:bf:41:f4:8c: 73:bf:e6:fd:d2:c1:a2:06:bf:da:a9:6e:fa:0e:fa: 7f:a7:b7:80:4e:db:09:c4:26:7a:5b:25:82:22:83: ff:72:86:be:3a:dd:08:13:5b:5b:e1:03:67:90:0a: 9c:a6:39:5d:c0:b6:f3:b2:15:d9:3f:b9:02:84:43: 8f:4c:f2:74:f9:94:12:4c:75:40:6b:bb:60:5e:31: 0d:1e:e2:64:9f:14:fa:13:1e:17:f5:f4:0e:88:08: ec:3d:38:24:f9:5f:e2:5e:7c:73:e4:8b:2f:ab:e0: 1c:63:9d:23:6f:83:d9:12:47:8b:f5:f3:71:68:92: 86:b6:eb:14:06:b6:80:3e:6b:ae:ff:b6:d4:7f:31: f0:9a:96:59:29:00:66:a1:d4:bc:87:fc:54:f2:ce: b9:a0:b8:19:f2:90:ea:35:6e:85:4c:c3:f0:bd:98: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:46:DB:11:9A:41:83:EB:83:6C:63:B0:A7:16:52:0F:FA:7B:38:30 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/AEbbEZpBg-uDbGOwpxZSD_p7ODA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.112.0/20 Signature Algorithm: sha256WithRSAEncryption 45:25:42:de:1e:a9:6c:4f:47:a2:77:3c:35:85:ee:07:5d:74: 4b:1b:ac:f0:12:4a:ab:a1:c6:47:4e:85:50:92:30:2e:a5:f1: 06:30:0f:ca:c1:44:3a:9b:62:fc:27:9e:fd:7b:88:ce:64:74: 96:af:3e:98:55:58:cf:6b:2f:93:eb:9a:24:2d:5e:b0:77:d9: 29:74:d8:09:d2:00:ac:99:04:d6:d7:31:be:7a:42:af:c2:be: a5:89:5b:27:a8:cf:7b:35:20:c3:35:19:58:51:48:d8:63:65: 53:e0:4d:f8:a3:4f:7a:f9:92:c0:c8:23:08:aa:fd:8a:81:15: 4c:b2:ff:4a:a3:76:c7:bd:63:19:67:f1:80:16:c8:cc:7c:45: 13:5e:c9:70:54:0d:30:15:17:7b:28:5a:1b:4e:43:00:d7:7c: 01:31:af:76:1b:70:e2:7e:0f:3d:c8:45:49:e3:1e:af:cd:9c: 4c:f2:b6:31:6c:ce:83:52:68:00:42:d4:bc:44:33:56:38:f2: 8d:10:94:8e:20:27:d5:07:2c:4e:09:74:82:f5:33:08:85:25: 25:de:74:cd:f3:dc:e4:b1:71:6a:73:60:83:a6:6a:f4:f9:7f: 00:f0:37:cd:cd:20:bd:5e:39:70:ef:80:17:f6:b6:f9:e5:47: bb:25:9b:8c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICElMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwNDZEQjExOUE0MTgz RUI4MzZDNjNCMEE3MTY1MjBGRkE3QjM4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT1z7I7S9EtR3UjCs8Td05+v9DPe+ETyt0Z2Oe8nhAaRQi5yLO aG64UJQNuucfx6sX6JGnAoBfzbhFdeBvXkUSs4KkUMFNvfIvyxHMUbqYxrYAGvsU v0H0jHO/5v3SwaIGv9qpbvoO+n+nt4BO2wnEJnpbJYIig/9yhr463QgTW1vhA2eQ CpymOV3AtvOyFdk/uQKEQ49M8nT5lBJMdUBru2BeMQ0e4mSfFPoTHhf19A6ICOw9 OCT5X+JefHPkiy+r4BxjnSNvg9kSR4v183Fokoa26xQGtoA+a67/ttR/MfCallkp AGah1LyH/FTyzrmguBnykOo1boVMw/C9mMGdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUAEbbEZpBg+uDbGOwpxZSD/p7ODAwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvQUViYkVacEJnLXVEYkdPd3B4WlNE X3A3T0RBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNNPcDAN BgkqhkiG9w0BAQsFAAOCAQEARSVC3h6pbE9Honc8NYXuB110Sxus8BJKq6HGR06F UJIwLqXxBjAPysFEOpti/Cee/XuIzmR0lq8+mFVYz2svk+uaJC1esHfZKXTYCdIA rJkE1tcxvnpCr8K+pYlbJ6jPezUgwzUZWFFI2GNlU+BN+KNPevmSwMgjCKr9ioEV TLL/SqN2x71jGWfxgBbIzHxFE17JcFQNMBUXeyhaG05DANd8ATGvdhtw4n4PPchF SeMer82cTPK2MWzOg1JoAELUvEQzVjjyjRCUjiAn1QcsTgl0gvUzCIUlJd50zfPc 5LFxanNgg6Zq9Pl/APA3zc0gvV45cO+AF/a2+eVHuyWbjA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:17 2025 by rpki-client