$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/OtKVf87VpBfkydf6awxA3IsA6pM.roa File: OtKVf87VpBfkydf6awxA3IsA6pM.roa (raw, json) Hash identifier: Zs6sGOsyzlZNAXaIWAax7BeXSawkyhiberao1wH0Ah8= Subject key identifier: 3A:D2:95:7F:CE:D5:A4:17:E4:C9:D7:FA:6B:0C:40:DC:8B:00:EA:93 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1294 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OtKVf87VpBfkydf6awxA3IsA6pM.roa Signing time: Fri 22 Aug 2025 08:49:29 +0000 ROA not before: Fri 22 Aug 2025 08:49:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 210.209.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4756 (0x1294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3AD2957FCED5A417E4C9D7FA6B0C40DC8B00EA93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:9f:2b:65:0e:e0:9d:35:6b:4c:9b:27:f0: 26:b3:c3:ab:e3:7c:64:6b:15:c9:65:19:b9:69:01: 70:63:cf:6d:f9:e2:cc:f1:29:88:8b:34:94:b1:3f: b7:b1:8f:ea:f3:40:05:73:86:b9:a1:19:f4:d9:07: 9b:21:e3:5b:75:e4:ee:fb:d2:4f:31:a5:b4:bf:d6: cc:81:f3:d8:2c:fa:f1:1c:88:c2:f3:a5:83:e3:0d: 22:64:7b:c4:41:a6:a6:19:d9:2c:b0:78:cd:93:5d: fb:d1:bb:20:36:03:68:b4:ed:31:b2:58:2e:1f:ab: d6:84:4b:af:64:e2:f2:3d:57:6f:e5:66:07:96:8f: ce:73:42:27:34:88:f0:e8:63:63:74:49:2e:15:4a: 35:b9:c9:b1:a3:08:7d:29:60:55:3a:88:03:47:90: 19:af:54:4b:e6:a2:07:8a:3b:41:b5:a5:1e:8a:a2: 96:d9:e0:2e:a0:36:64:a9:0c:eb:6a:f6:63:fa:51: 36:61:f3:53:d8:85:fe:81:0d:cf:8d:25:77:85:cc: 29:4f:6f:3f:96:a2:1e:c0:6f:61:36:97:31:ad:68: 29:86:1c:c7:51:67:ab:41:bd:0d:d3:c5:27:f1:06: 3a:40:07:85:a3:c8:57:c9:36:26:2f:26:e3:ef:0f: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D2:95:7F:CE:D5:A4:17:E4:C9:D7:FA:6B:0C:40:DC:8B:00:EA:93 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OtKVf87VpBfkydf6awxA3IsA6pM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.192.0/20 Signature Algorithm: sha256WithRSAEncryption 53:03:dd:fb:c7:3e:dc:60:6f:e9:73:a1:b2:79:02:c2:09:f9: cb:36:f3:2f:12:51:f6:bd:31:20:d4:73:d7:a3:8d:fd:91:c6: 41:d5:4f:1d:28:5d:0d:c8:e1:87:8b:77:78:51:bb:f3:82:e1: 94:36:91:dc:88:82:38:97:49:94:6b:6b:78:fa:81:36:44:15: 19:0b:0b:89:14:b2:1e:6e:7c:73:e3:20:51:99:56:df:40:07: 5a:58:22:cd:e5:58:72:25:38:75:80:9e:c5:0a:fb:89:bf:07: 46:84:03:8f:7f:84:68:59:53:50:8e:ab:6a:13:c0:7f:ed:3b: 01:4c:1d:99:99:a2:1a:3a:d3:d1:9f:b5:3d:b0:20:16:71:77: 04:cc:fe:5b:99:94:78:ce:d7:05:be:38:13:af:c3:b1:05:6b: 9e:6f:12:01:ba:e1:d7:c7:a4:b3:1c:07:cc:90:83:34:40:28: 12:0d:66:20:54:0d:37:1e:b4:a5:d8:c1:74:ca:97:ae:6f:83: f9:78:f5:ab:ce:96:73:b6:4b:8a:87:24:f4:1b:cb:f2:08:51: 42:7d:32:44:29:b5:be:e9:e9:50:8c:86:3f:a4:59:f0:9c:e9: 9f:67:a5:f0:1a:71:3c:5c:57:70:c2:15:1e:76:81:c7:da:9c: e7:cd:a4:a9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBRDI5NTdGQ0VENUE0 MTdFNEM5RDdGQTZCMEM0MERDOEIwMEVBOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcsp8rZQ7gnTVrTJsn8Cazw6vjfGRrFcllGblpAXBjz2354szx KYiLNJSxP7exj+rzQAVzhrmhGfTZB5sh41t15O770k8xpbS/1syB89gs+vEciMLz pYPjDSJke8RBpqYZ2SyweM2TXfvRuyA2A2i07TGyWC4fq9aES69k4vI9V2/lZgeW j85zQic0iPDoY2N0SS4VSjW5ybGjCH0pYFU6iANHkBmvVEvmogeKO0G1pR6KopbZ 4C6gNmSpDOtq9mP6UTZh81PYhf6BDc+NJXeFzClPbz+Woh7Ab2E2lzGtaCmGHMdR Z6tBvQ3TxSfxBjpAB4WjyFfJNiYvJuPvDywJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUOtKVf87VpBfkydf6awxA3IsA6pMwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvT3RLVmY4N1ZwQmZreWRmNmF3eEEz SXNBNnBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLRwDAN BgkqhkiG9w0BAQsFAAOCAQEAUwPd+8c+3GBv6XOhsnkCwgn5yzbzLxJR9r0xINRz 16ON/ZHGQdVPHShdDcjhh4t3eFG784LhlDaR3IiCOJdJlGtrePqBNkQVGQsLiRSy Hm58c+MgUZlW30AHWlgizeVYciU4dYCexQr7ib8HRoQDj3+EaFlTUI6rahPAf+07 AUwdmZmiGjrT0Z+1PbAgFnF3BMz+W5mUeM7XBb44E6/DsQVrnm8SAbrh18eksxwH zJCDNEAoEg1mIFQNNx60pdjBdMqXrm+D+Xj1q86Wc7ZLiock9BvL8ghRQn0yRCm1 vunpUIyGP6RZ8Jzpn2el8BpxPFxXcMIVHnaBx9qc582kqQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:16 2025 by rpki-client