$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/NRqSiHoSl4xeYWp3KHzx4V53_6Q.roa File: NRqSiHoSl4xeYWp3KHzx4V53_6Q.roa (raw, json) Hash identifier: ueP0wMPNuJ6YoLp8QS0u5bPoZE1sQNVYTJaSMcyUvts= Subject key identifier: 35:1A:92:88:7A:12:97:8C:5E:61:6A:77:28:7C:F1:E1:5E:77:FF:A4 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1280 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/NRqSiHoSl4xeYWp3KHzx4V53_6Q.roa Signing time: Fri 22 Aug 2025 08:49:24 +0000 ROA not before: Fri 22 Aug 2025 08:49:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 121.254.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4736 (0x1280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=351A92887A12978C5E616A77287CF1E15E77FFA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:46:84:28:88:12:af:c1:6a:ce:60:d1:6e: 97:e8:47:fc:f9:fa:06:4a:6d:88:53:33:68:3a:e9: 80:bf:0f:b1:80:35:ef:3d:67:5a:c5:19:12:00:05: 6e:03:77:63:64:5b:10:7a:bb:ab:02:7b:f4:29:2f: 28:d4:69:75:ab:47:72:20:51:2d:53:02:d9:ce:53: 59:64:a1:61:f9:db:c5:43:4e:fd:39:39:91:9d:90: ac:c9:75:ba:1c:8f:01:19:ce:91:77:56:8c:ad:ac: 97:11:84:1d:a5:bf:14:d9:bd:0b:74:db:ff:d5:8e: ff:3e:33:a9:57:53:ad:c6:a2:6c:67:86:5f:74:41: 1c:88:ac:8a:c2:91:04:17:0a:63:6f:b4:91:95:cd: 44:f4:20:8d:5a:1e:6d:6b:12:44:2d:58:69:51:92: 7e:f4:0e:17:70:57:57:d3:d9:05:bd:78:73:4b:29: b0:29:1b:3a:44:d3:ec:07:be:c9:76:d4:ae:86:3a: 35:a0:00:e9:5f:15:ec:f8:de:8b:bb:29:71:93:3d: dc:b6:bd:31:16:57:f3:56:2d:e0:e1:17:a8:77:5e: 76:d8:4b:ba:50:88:b2:83:fb:63:84:d1:3f:d7:d3: d5:44:63:39:7e:59:98:bd:38:15:dd:c1:e4:7d:d3: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:92:88:7A:12:97:8C:5E:61:6A:77:28:7C:F1:E1:5E:77:FF:A4 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/NRqSiHoSl4xeYWp3KHzx4V53_6Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.64.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:6a:60:f7:e8:27:fc:af:e9:ff:12:97:28:87:52:99:93:13: 4a:ec:c5:e7:83:28:94:33:ba:69:aa:59:3d:7c:0e:2a:1c:78: e3:36:61:7a:e4:d6:f3:5f:da:41:39:a1:95:95:19:ed:ee:57: e0:0c:2a:64:33:e4:87:1e:4b:9c:11:4a:b9:6f:1d:e4:3f:14: b6:56:34:5f:bd:a7:71:02:09:56:45:88:f8:67:29:b8:3f:cb: 02:f8:4f:bf:88:2d:0d:b2:49:e0:f6:bc:eb:49:29:00:57:10: 02:56:bf:c6:73:e6:bf:83:ed:d9:c2:3c:c3:52:a5:ed:ac:90: 13:cd:1c:6c:f9:0b:f3:57:48:b2:c3:26:49:f9:16:f2:c4:58: 7e:3b:c9:7b:54:7a:53:f4:57:2b:33:b4:1c:34:66:62:35:a9: c9:7c:c7:fa:9a:cf:05:78:76:ef:37:c6:b0:ad:f8:15:53:a7: fe:7f:18:77:b0:8c:f5:50:1e:0a:67:62:c7:76:0a:73:17:0e: bf:8e:a2:77:dc:ef:51:de:c1:d9:28:61:48:bb:5d:dc:d5:fe: 8e:2c:88:0d:d1:e2:dd:4f:62:f3:81:d2:47:47:a7:f6:05:a4: 84:44:0a:67:a9:c3:cf:70:c6:7d:fe:81:a6:33:fa:cf:90:43: ba:8b:a2:66 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM1MUE5Mjg4N0ExMjk3 OEM1RTYxNkE3NzI4N0NGMUUxNUU3N0ZGQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI2kaEKIgSr8FqzmDRbpfoR/z5+gZKbYhTM2g66YC/D7GANe89 Z1rFGRIABW4Dd2NkWxB6u6sCe/QpLyjUaXWrR3IgUS1TAtnOU1lkoWH528VDTv05 OZGdkKzJdbocjwEZzpF3VoytrJcRhB2lvxTZvQt02//Vjv8+M6lXU63Gomxnhl90 QRyIrIrCkQQXCmNvtJGVzUT0II1aHm1rEkQtWGlRkn70DhdwV1fT2QW9eHNLKbAp GzpE0+wHvsl21K6GOjWgAOlfFez43ou7KXGTPdy2vTEWV/NWLeDhF6h3XnbYS7pQ iLKD+2OE0T/X09VEYzl+WZi9OBXdweR9042LAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNRqSiHoSl4xeYWp3KHzx4V53/6QwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTlJxU2lIb1NsNHhlWVdwM0tIeng0 VjUzXzZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+QDAN BgkqhkiG9w0BAQsFAAOCAQEAnmpg9+gn/K/p/xKXKIdSmZMTSuzF54MolDO6aapZ PXwOKhx44zZheuTW81/aQTmhlZUZ7e5X4AwqZDPkhx5LnBFKuW8d5D8UtlY0X72n cQIJVkWI+GcpuD/LAvhPv4gtDbJJ4Pa860kpAFcQAla/xnPmv4Pt2cI8w1Kl7ayQ E80cbPkL81dIssMmSfkW8sRYfjvJe1R6U/RXKzO0HDRmYjWpyXzH+prPBXh27zfG sK34FVOn/n8Yd7CM9VAeCmdix3YKcxcOv46id9zvUd7B2ShhSLtd3NX+jiyIDdHi 3U9i84HSR0en9gWkhEQKZ6nDz3DGff6BpjP6z5BDuouiZg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:20:34 2025 by rpki-client