$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/BKP5R2UB5nRQvwpKEZCus_NLC-s.roa File: BKP5R2UB5nRQvwpKEZCus_NLC-s.roa (raw, json) Hash identifier: i9TVaIrjwSYM3mITVr6+uiGL05NUhn4g/esaluR3vZU= Subject key identifier: 04:A3:F9:47:65:01:E6:74:50:BF:0A:4A:11:90:AE:B3:F3:4B:0B:EB Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 124E Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/BKP5R2UB5nRQvwpKEZCus_NLC-s.roa Signing time: Fri 22 Aug 2025 08:49:12 +0000 ROA not before: Fri 22 Aug 2025 08:49:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.217.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4686 (0x124e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=04A3F9476501E67450BF0A4A1190AEB3F34B0BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:da:36:91:1c:6b:b4:a6:ed:32:d4:3b:bf: 5c:d3:82:07:1e:88:98:92:f1:8f:82:d5:96:b1:90: 67:c4:4e:36:f9:e4:69:29:f1:a9:c7:f2:10:02:2c: c6:ba:d4:82:9e:94:12:9b:02:bc:69:b5:91:f8:97: ff:cb:7b:de:7a:b7:d6:33:ed:84:a6:57:a0:e0:b6: f8:60:3d:18:79:5e:66:1e:f6:6e:0d:fc:b4:e6:c9: 1f:9d:7a:5a:ba:ee:0e:5f:44:14:c0:8c:a0:49:14: d7:67:e4:12:4c:2f:58:02:43:9a:bb:0d:40:eb:82: 68:be:92:86:fc:02:b6:41:b3:75:24:1c:11:56:86: 04:21:2a:74:cf:75:29:99:77:46:82:2a:cd:e3:90: 6c:e8:26:f0:7f:38:db:6f:d8:03:a1:52:71:45:0c: 7d:4d:ea:fa:65:69:26:41:22:d9:41:f9:e3:39:f6: fc:1e:86:fb:05:be:9d:53:52:7f:9f:6e:1f:1d:86: 22:cb:15:90:14:ce:bd:e9:45:fd:01:b5:98:c5:ec: d6:ad:f0:1b:56:95:9f:2e:5c:59:8d:57:28:8a:41: a3:3f:27:7c:8e:22:b7:96:e3:27:f9:c8:31:85:48: 60:d0:55:22:e8:bf:51:cb:5e:44:f6:ec:de:fa:c7: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A3:F9:47:65:01:E6:74:50:BF:0A:4A:11:90:AE:B3:F3:4B:0B:EB X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/BKP5R2UB5nRQvwpKEZCus_NLC-s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/21 Signature Algorithm: sha256WithRSAEncryption 64:e5:e0:fe:8f:84:90:88:37:1c:d8:22:82:36:fc:27:85:74: 60:e3:f4:50:9d:93:cf:d1:d8:2e:42:54:8c:6e:4d:fa:6f:59: 8b:a9:08:ef:2d:9c:eb:b4:be:d7:38:00:5f:c1:62:a3:f8:2a: 76:cf:37:77:3a:67:84:f5:33:88:a5:05:7e:66:65:31:96:6d: 4a:79:b1:08:04:df:8a:01:44:ff:cd:86:be:57:aa:b3:ab:fb: 70:87:c7:4f:b0:63:23:2a:12:1a:f5:82:e2:ee:89:51:79:bc: ce:dc:bd:1b:5f:fb:2b:69:c7:7d:0e:cc:86:09:ff:e5:66:ce: 92:e6:be:53:58:2f:57:ad:1e:52:6d:0f:22:c7:82:02:2d:ef: 66:46:b3:c9:58:7b:03:d0:3f:61:36:ab:09:15:a1:93:2f:96: 1e:f5:fa:13:d3:8c:5e:de:4e:b0:eb:43:03:2f:4b:52:4c:73: 51:67:52:42:12:05:c1:61:6e:13:0d:2f:c3:2e:23:9c:46:9a: 8f:f9:25:06:bb:79:d0:80:4e:84:5e:e2:43:0f:25:11:3d:30: d6:d4:77:de:77:18:34:aa:79:fc:36:ed:a2:13:61:4c:7e:07: 0b:96:38:f9:9b:d1:84:4d:e1:05:32:02:6e:f1:10:fa:0b:53: 2f:f8:53:83 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0QTNGOTQ3NjUwMUU2 NzQ1MEJGMEE0QTExOTBBRUIzRjM0QjBCRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcdNo2kRxrtKbtMtQ7v1zTggceiJiS8Y+C1ZaxkGfETjb55Gkp 8anH8hACLMa61IKelBKbArxptZH4l//Le956t9Yz7YSmV6DgtvhgPRh5XmYe9m4N /LTmyR+delq67g5fRBTAjKBJFNdn5BJML1gCQ5q7DUDrgmi+kob8ArZBs3UkHBFW hgQhKnTPdSmZd0aCKs3jkGzoJvB/ONtv2AOhUnFFDH1N6vplaSZBItlB+eM59vwe hvsFvp1TUn+fbh8dhiLLFZAUzr3pRf0BtZjF7Nat8BtWlZ8uXFmNVyiKQaM/J3yO IreW4yf5yDGFSGDQVSLov1HLXkT27N76xwu/AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUBKP5R2UB5nRQvwpKEZCus/NLC+swHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvQktQNVIyVUI1blJRdndwS0VaQ3Vz X05MQy1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8vZYDAN BgkqhkiG9w0BAQsFAAOCAQEAZOXg/o+EkIg3HNgigjb8J4V0YOP0UJ2Tz9HYLkJU jG5N+m9Zi6kI7y2c67S+1zgAX8Fio/gqds83dzpnhPUziKUFfmZlMZZtSnmxCATf igFE/82Gvleqs6v7cIfHT7BjIyoSGvWC4u6JUXm8zty9G1/7K2nHfQ7Mhgn/5WbO kua+U1gvV60eUm0PIseCAi3vZkazyVh7A9A/YTarCRWhky+WHvX6E9OMXt5OsOtD Ay9LUkxzUWdSQhIFwWFuEw0vwy4jnEaaj/klBrt50IBOhF7iQw8lET0w1tR33ncY NKp5/DbtohNhTH4HC5Y4+ZvRhE3hBTICbvEQ+gtTL/hTgw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:21 2025 by rpki-client