$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/M0zl24u9LEO4PxGaFT_Y_XWxS3Q.roa File: M0zl24u9LEO4PxGaFT_Y_XWxS3Q.roa (raw, json) Hash identifier: AdeTtCqHXNKNipZemozeYMKX19yrc3L+XtlQe8jBthA= Subject key identifier: 33:4C:E5:DB:8B:BD:2C:43:B8:3F:11:9A:15:3F:D8:FD:75:B1:4B:74 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 125A Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/M0zl24u9LEO4PxGaFT_Y_XWxS3Q.roa Signing time: Fri 22 Aug 2025 08:49:15 +0000 ROA not before: Fri 22 Aug 2025 08:49:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 113.61.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4698 (0x125a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=334CE5DB8BBD2C43B83F119A153FD8FD75B14B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:d4:a8:86:89:e3:7e:09:0d:cc:f8:7c:78: 33:bc:e5:cf:30:23:2b:71:cd:92:c5:a4:25:ca:73: 64:97:8b:99:b5:d4:06:e7:20:a1:a0:13:06:df:0f: f9:3e:e6:73:1c:94:84:57:7d:a8:cd:51:6c:75:15: 65:7d:65:f5:bb:79:e2:99:c4:4e:6c:69:74:70:e7: 72:af:31:f0:20:83:77:d6:c5:e9:76:c4:97:77:a7: 37:83:36:04:a7:24:e5:9f:90:35:4d:31:36:96:eb: 9f:04:be:83:c4:94:e9:68:a4:65:a1:74:84:a6:c9: e1:fa:12:c3:6c:6b:21:70:cd:71:fd:85:09:99:6f: 91:7f:ed:20:55:64:bb:fd:e0:7c:06:5e:c9:4a:42: 9e:86:7f:69:e3:a0:e0:a8:30:a4:8c:3a:ba:88:e1: dc:0d:20:38:75:22:c7:4b:6b:be:7a:1d:09:74:8c: 0f:6d:de:43:81:42:e8:3e:a7:ad:8d:6d:a6:f7:f8: 0e:97:ef:dd:85:c8:f6:46:5d:2f:eb:41:66:93:ad: 31:4b:db:ec:d8:a6:2b:85:55:a5:26:8a:a7:b7:8c: ee:f4:9b:c1:8b:55:ea:cd:f7:c6:65:be:8d:01:f6: a6:20:3e:a9:28:04:0b:24:bd:89:22:61:42:ff:2b: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4C:E5:DB:8B:BD:2C:43:B8:3F:11:9A:15:3F:D8:FD:75:B1:4B:74 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/M0zl24u9LEO4PxGaFT_Y_XWxS3Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.173.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:0e:67:c4:8c:ce:0f:a3:d6:ba:29:b8:32:87:8e:09:b1:1a: 79:1d:6d:33:13:79:c4:c8:7b:e5:78:dc:4e:4c:bf:3c:66:42: af:56:fe:cf:e6:2c:2c:11:7b:58:fd:24:26:44:31:bc:b6:cf: 66:b1:60:d7:aa:27:f5:82:c2:65:a1:f6:44:5c:71:da:4c:ba: 10:38:5f:0c:e8:05:e2:1f:42:76:de:de:58:17:b4:07:8c:d8: 4e:5b:f6:9c:62:84:5f:7d:05:70:00:c5:6b:60:85:ac:c5:19: 01:99:99:e3:22:70:8d:a2:f2:a8:0b:5b:e1:53:63:c6:76:09: 71:28:3c:96:68:54:eb:24:50:00:b3:f9:dc:16:05:da:a3:77: f8:bd:4e:89:13:41:24:03:7c:c8:8c:82:72:f2:9e:55:dc:d4: fc:b8:ac:31:11:39:89:40:3a:c1:36:e6:4b:a1:48:c9:c5:aa: 05:9c:24:16:f1:4f:6f:b5:18:a7:ca:3f:08:09:fd:45:4f:24: 12:47:d3:a2:1f:ec:ff:3e:19:3c:64:d6:d5:2f:af:36:77:70: ac:41:d4:29:e8:69:e1:17:6c:14:35:98:cf:3e:97:6d:3d:ff: 02:f1:45:a7:75:5c:7d:f7:34:23:21:32:f3:e6:a5:a0:8f:0f: 53:5d:5b:40 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICElowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzNENFNURCOEJCRDJD NDNCODNGMTE5QTE1M0ZEOEZENzVCMTRCNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDwdSohonjfgkNzPh8eDO85c8wIytxzZLFpCXKc2SXi5m11Abn IKGgEwbfD/k+5nMclIRXfajNUWx1FWV9ZfW7eeKZxE5saXRw53KvMfAgg3fWxel2 xJd3pzeDNgSnJOWfkDVNMTaW658EvoPElOlopGWhdISmyeH6EsNsayFwzXH9hQmZ b5F/7SBVZLv94HwGXslKQp6Gf2njoOCoMKSMOrqI4dwNIDh1IsdLa756HQl0jA9t 3kOBQug+p62Nbab3+A6X792FyPZGXS/rQWaTrTFL2+zYpiuFVaUmiqe3jO70m8GL VerN98Zlvo0B9qYgPqkoBAskvYkiYUL/KxFBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUM0zl24u9LEO4PxGaFT/Y/XWxS3QwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTTB6bDI0dTlMRU80UHhHYUZUX1lf WFd4UzNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE9rTAN BgkqhkiG9w0BAQsFAAOCAQEAng5nxIzOD6PWuim4MoeOCbEaeR1tMxN5xMh75Xjc Tky/PGZCr1b+z+YsLBF7WP0kJkQxvLbPZrFg16on9YLCZaH2RFxx2ky6EDhfDOgF 4h9Cdt7eWBe0B4zYTlv2nGKEX30FcADFa2CFrMUZAZmZ4yJwjaLyqAtb4VNjxnYJ cSg8lmhU6yRQALP53BYF2qN3+L1OiRNBJAN8yIyCcvKeVdzU/LisMRE5iUA6wTbm S6FIycWqBZwkFvFPb7UYp8o/CAn9RU8kEkfToh/s/z4ZPGTW1S+vNndwrEHUKehp 4RdsFDWYzz6XbT3/AvFFp3Vcffc0IyEy8+aloI8PU11bQA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:14:59 2025 by rpki-client