$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/NnBJE-rVbWIv_qtZ8URSb9pjD64.roa File: NnBJE-rVbWIv_qtZ8URSb9pjD64.roa (raw, json) Hash identifier: DyBOMa5uHLH/phgsAzfUYFHMQFcuBJmtn8qIxykCJFE= Subject key identifier: 36:70:49:13:EA:D5:6D:62:2F:FE:AB:59:F1:44:52:6F:DA:63:0F:AE Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1229 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/NnBJE-rVbWIv_qtZ8URSb9pjD64.roa Signing time: Fri 22 Aug 2025 08:49:03 +0000 ROA not before: Fri 22 Aug 2025 08:49:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 121.254.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4649 (0x1229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=36704913EAD56D622FFEAB59F144526FDA630FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:64:2f:ea:e5:fe:95:62:94:8e:2c:06:f9: 5d:3c:56:11:b8:53:81:49:ed:71:72:ac:a9:45:39: 1f:0a:85:0a:33:72:e7:11:51:e8:36:f6:e8:54:1c: 86:15:08:1f:36:8b:f6:bd:0f:5e:3f:0d:6b:79:30: da:da:22:90:69:ea:5e:ab:92:07:b6:78:b0:0c:5d: 6e:cb:9f:03:e9:c7:f7:28:39:50:34:8d:e5:b1:fe: a6:d5:73:ea:3d:61:50:be:03:26:55:3c:e0:ac:d4: 9e:b6:70:7d:05:c1:e6:cd:28:33:fa:dc:a2:59:9e: a7:b1:c9:61:93:df:06:bf:bf:3f:8d:75:bf:82:7c: 20:17:86:81:f2:21:d7:a1:fe:87:86:12:2b:11:3c: 5a:b8:43:1a:75:b0:e1:2c:9c:b6:dc:83:37:58:8f: cc:c7:dc:a8:b9:98:d6:14:8d:2d:2b:34:87:8d:ae: 60:d0:1c:d3:d1:d3:c2:a1:a3:69:74:03:88:82:1e: 8a:bd:35:56:56:48:6b:4d:ce:cb:8f:42:cc:fa:40: d6:47:19:6d:9d:32:ae:05:b7:03:5a:9d:da:a5:44: 50:a8:58:8e:3e:fc:8e:25:6d:f0:16:79:16:63:c4: 03:7b:02:19:29:4f:17:80:3b:ef:e9:e7:54:13:f7: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:70:49:13:EA:D5:6D:62:2F:FE:AB:59:F1:44:52:6F:DA:63:0F:AE X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/NnBJE-rVbWIv_qtZ8URSb9pjD64.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.64.0/18 Signature Algorithm: sha256WithRSAEncryption b2:4a:02:5e:47:b4:86:62:a8:bb:88:3e:9b:e1:25:e8:bd:a9: e4:98:76:ce:1b:50:ed:68:a4:fa:0b:f4:98:77:f8:0e:c4:8b: 07:ba:8a:be:24:ee:f7:b6:d9:d6:7e:61:6c:f9:ad:1f:1a:b6: f0:e1:d3:22:29:ed:a7:bc:30:d3:a0:ec:61:ef:0e:06:3f:35: 7f:57:4e:e4:36:a4:f9:2b:7d:f4:f9:ee:4d:f7:ac:6d:f2:36: b5:96:b2:bd:45:4c:d0:4c:88:b8:80:b5:c4:38:67:1e:1d:ea: db:e3:07:b1:46:85:a8:d7:e8:50:0c:71:d5:10:a1:a9:71:04: aa:c3:48:42:35:4c:08:8b:a3:75:c8:6f:f2:60:25:17:f7:e6: a2:26:43:f8:69:c3:5c:a5:3e:b2:be:f6:61:13:2f:7f:2d:c5: db:a9:72:d0:37:54:28:3a:b8:aa:55:f8:4f:6e:c5:fa:71:e1: dd:bb:70:71:a3:0b:1d:b9:f9:1a:97:f5:8f:fb:e3:70:fc:76: dd:d2:c2:25:30:5f:bc:93:16:59:51:98:00:0f:d4:b8:f8:85: fc:ba:a0:a5:79:48:f4:9f:6b:0c:f4:69:a1:a2:5c:a2:44:88: 39:35:e3:d5:56:f1:72:5c:3d:bc:90:d9:9b:b6:9e:80:b5:c6: e0:8c:07:eb -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM2NzA0OTEzRUFENTZE NjIyRkZFQUI1OUYxNDQ1MjZGREE2MzBGQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVH2Qv6uX+lWKUjiwG+V08VhG4U4FJ7XFyrKlFOR8KhQozcucR Ueg29uhUHIYVCB82i/a9D14/DWt5MNraIpBp6l6rkge2eLAMXW7LnwPpx/coOVA0 jeWx/qbVc+o9YVC+AyZVPOCs1J62cH0FwebNKDP63KJZnqexyWGT3wa/vz+Ndb+C fCAXhoHyIdeh/oeGEisRPFq4Qxp1sOEsnLbcgzdYj8zH3Ki5mNYUjS0rNIeNrmDQ HNPR08Kho2l0A4iCHoq9NVZWSGtNzsuPQsz6QNZHGW2dMq4FtwNandqlRFCoWI4+ /I4lbfAWeRZjxAN7AhkpTxeAO+/p51QT9/A1AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNnBJE+rVbWIv/qtZ8URSb9pjD64wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTm5CSkUtclZiV0l2X3F0WjhVUlNi OXBqRDY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnn+QDAN BgkqhkiG9w0BAQsFAAOCAQEAskoCXke0hmKou4g+m+El6L2p5Jh2zhtQ7Wik+gv0 mHf4DsSLB7qKviTu97bZ1n5hbPmtHxq28OHTIintp7ww06DsYe8OBj81f1dO5Dak +St99PnuTfesbfI2tZayvUVM0EyIuIC1xDhnHh3q2+MHsUaFqNfoUAxx1RChqXEE qsNIQjVMCIujdchv8mAlF/fmoiZD+GnDXKU+sr72YRMvfy3F26ly0DdUKDq4qlX4 T27F+nHh3btwcaMLHbn5Gpf1j/vjcPx23dLCJTBfvJMWWVGYAA/UuPiF/LqgpXlI 9J9rDPRpoaJcokSIOTXj1Vbxclw9vJDZm7aegLXG4IwH6w== -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:21 2025 by rpki-client