$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/I0i_hcNWzBBCcH98ooGtRi9lLuQ.roa File: I0i_hcNWzBBCcH98ooGtRi9lLuQ.roa (raw, json) Hash identifier: 8fZjXg7pWYxS9ewOpaPd6Yn1cv0vNNL1enVJGHPcPdE= Subject key identifier: 23:48:BF:85:C3:56:CC:10:42:70:7F:7C:A2:81:AD:46:2F:65:2E:E4 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1258 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/I0i_hcNWzBBCcH98ooGtRi9lLuQ.roa Signing time: Fri 22 Aug 2025 08:49:15 +0000 ROA not before: Fri 22 Aug 2025 08:49:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.222.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4696 (0x1258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2348BF85C356CC1042707F7CA281AD462F652EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:64:8b:55:c7:c4:3d:18:6d:93:ce:aa:05:0c: 1b:f0:dd:27:91:28:e3:5d:24:24:50:30:7a:c9:6b: a0:e9:1d:47:10:e9:f7:e2:1e:d1:0e:d0:0b:2b:7b: 03:7b:26:01:cf:3a:b9:bc:61:56:a6:ea:0e:55:51: 3c:36:86:73:d8:17:13:77:38:65:bb:e3:9b:5c:1f: 29:28:63:ae:d2:53:42:d0:5b:41:4f:0d:e8:4b:2f: 51:76:ed:65:87:6f:37:08:42:78:e8:b8:0c:5c:96: 02:8d:59:2c:5d:91:52:98:00:a7:8a:0f:39:4e:99: 50:3d:6c:94:a0:a4:e9:d2:6c:ca:2b:e4:c2:3b:7f: 14:71:f7:79:3b:b2:5b:bb:24:d3:c6:63:67:ad:f2: 25:ea:1b:1e:d8:3a:e4:4c:1d:50:22:5c:48:6a:2f: e4:59:ff:f9:38:58:db:01:c4:ee:f9:68:3e:2a:03: 4e:83:39:68:76:c4:25:bf:08:34:b9:be:be:a5:36: d8:04:2d:78:35:84:c6:fe:9c:df:d2:9a:e3:26:69: f7:e0:17:43:6d:8e:40:c2:1c:db:9c:9f:31:42:a4: 62:63:28:c0:6b:ab:f6:70:eb:e2:d6:69:9f:45:d2: 49:c3:31:08:05:7f:a7:f7:9f:36:6a:39:cc:65:3d: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:48:BF:85:C3:56:CC:10:42:70:7F:7C:A2:81:AD:46:2F:65:2E:E4 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/I0i_hcNWzBBCcH98ooGtRi9lLuQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.8.0/21 Signature Algorithm: sha256WithRSAEncryption 13:5d:63:20:71:8c:49:93:eb:5a:e7:7b:f6:da:4c:5d:2c:fe: 19:c0:24:6d:05:e4:36:cb:c5:3e:1c:89:04:5c:1b:08:7b:72: 75:4c:25:b6:97:8b:b1:9f:9f:a0:cb:2b:ae:62:f3:d0:3f:d9: 4e:31:e7:0d:2e:ac:ce:ab:f1:6f:bf:93:2c:0e:74:db:ce:e5: 1d:79:ac:98:17:cc:6b:4d:80:fd:9f:1f:98:a7:62:42:e1:df: ba:dc:d4:5c:6e:75:80:13:61:89:d9:c7:7b:1d:84:c3:c5:80: d1:52:f7:e7:d5:14:36:39:c6:fa:c3:47:0b:c1:d7:0f:fd:74: b0:d3:66:b5:e4:35:ff:64:a9:a9:82:98:49:69:ca:42:b7:8d: 13:5f:fa:8e:12:00:e1:e7:1b:9a:14:81:20:5a:31:5d:11:1b: 4b:dc:80:fc:f1:95:f3:46:57:3f:e0:49:ef:c2:f7:ce:de:d3: e2:6e:a8:00:5b:d4:67:f9:39:33:72:8f:14:c2:8f:67:b9:2a: 03:bd:a9:ee:2e:51:8e:a1:d6:98:6d:16:10:62:86:f8:c1:47: e1:7a:7a:6d:66:9f:5b:b1:8a:08:30:d0:a2:c1:bf:21:0c:00: 25:37:13:3d:61:fb:a9:d0:6f:84:7f:ee:5c:31:ba:85:cb:99: 1e:b0:30:b3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICElgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzNDhCRjg1QzM1NkND MTA0MjcwN0Y3Q0EyODFBRDQ2MkY2NTJFRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZZItVx8Q9GG2TzqoFDBvw3SeRKONdJCRQMHrJa6DpHUcQ6ffi HtEO0AsrewN7JgHPOrm8YVam6g5VUTw2hnPYFxN3OGW745tcHykoY67SU0LQW0FP DehLL1F27WWHbzcIQnjouAxclgKNWSxdkVKYAKeKDzlOmVA9bJSgpOnSbMor5MI7 fxRx93k7slu7JNPGY2et8iXqGx7YOuRMHVAiXEhqL+RZ//k4WNsBxO75aD4qA06D OWh2xCW/CDS5vr6lNtgELXg1hMb+nN/SmuMmaffgF0NtjkDCHNucnzFCpGJjKMBr q/Zw6+LWaZ9F0knDMQgFf6f3nzZqOcxlPbwvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUI0i/hcNWzBBCcH98ooGtRi9lLuQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvSTBpX2hjTld6QkJDY0g5OG9vR3RS aTlsTHVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8veCDAN BgkqhkiG9w0BAQsFAAOCAQEAE11jIHGMSZPrWud79tpMXSz+GcAkbQXkNsvFPhyJ BFwbCHtydUwltpeLsZ+foMsrrmLz0D/ZTjHnDS6szqvxb7+TLA50287lHXmsmBfM a02A/Z8fmKdiQuHfutzUXG51gBNhidnHex2Ew8WA0VL359UUNjnG+sNHC8HXD/10 sNNmteQ1/2SpqYKYSWnKQreNE1/6jhIA4ecbmhSBIFoxXREbS9yA/PGV80ZXP+BJ 78L3zt7T4m6oAFvUZ/k5M3KPFMKPZ7kqA72p7i5RjqHWmG0WEGKG+MFH4Xp6bWaf W7GKCDDQosG/IQwAJTcTPWH7qdBvhH/uXDG6hcuZHrAwsw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:20:32 2025 by rpki-client