$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/P-pmvq_ys4v4oJa2UbzwxCtwih0.roa File: P-pmvq_ys4v4oJa2UbzwxCtwih0.roa (raw, json) Hash identifier: WzkUohLFmyhSJ/wP680jQQ//UyEe+Y4vdmCdOtYmlEM= Subject key identifier: 3F:EA:66:BE:AF:F2:B3:8B:F8:A0:96:B6:51:BC:F0:C4:2B:70:8A:1D Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1282 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/P-pmvq_ys4v4oJa2UbzwxCtwih0.roa Signing time: Fri 22 Aug 2025 08:49:24 +0000 ROA not before: Fri 22 Aug 2025 08:49:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 182.155.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4738 (0x1282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3FEA66BEAFF2B38BF8A096B651BCF0C42B708A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:4e:98:ea:79:9e:66:2e:2c:8a:a2:b2:03: ff:4f:2e:7a:b5:74:fc:a8:4a:f7:fc:26:a2:75:19: fa:68:c9:88:da:3c:fd:44:b1:a4:25:91:6f:4c:c9: 1d:c1:85:7c:65:75:ca:8b:66:f3:2a:f5:04:be:ec: 12:ce:d2:03:4f:3f:66:1d:27:83:95:c3:26:5b:ff: 6c:65:4a:43:51:f1:e2:d1:8e:6e:01:32:73:3d:a5: 98:dc:45:4f:b3:1f:77:64:7a:34:4d:19:7c:0c:7d: 39:6b:27:6a:b9:f3:d1:3f:2b:70:42:40:be:52:24: c0:71:1a:7f:9f:f9:76:9d:24:fb:de:74:3f:18:02: 0a:68:66:5b:ed:3b:0a:8b:bd:a5:de:4d:66:85:e8: 57:90:82:9c:17:1c:b1:6f:a7:92:76:4e:41:b3:57: 37:43:40:24:7f:27:78:33:cb:8f:2e:6a:7f:63:b1: 4d:f0:a4:bd:40:64:6f:62:1c:d3:ab:6b:81:dd:fd: 31:f0:3d:40:11:a8:09:02:9d:d6:56:8a:0c:ff:42: 69:a0:ba:f6:a4:b0:8d:4c:8f:f0:22:9b:8f:db:6b: de:0c:af:6a:6c:6c:b2:ec:56:4c:15:76:dc:12:46: 16:16:f2:45:fe:a6:f3:49:83:8c:93:39:29:b7:95: 5c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:66:BE:AF:F2:B3:8B:F8:A0:96:B6:51:BC:F0:C4:2B:70:8A:1D X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/P-pmvq_ys4v4oJa2UbzwxCtwih0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:8d:bf:47:2e:13:7f:bd:b2:6c:1e:ca:e7:7e:41:a5:75:e4: 35:4e:f7:4a:59:bf:0e:73:ad:a3:c2:8a:12:de:83:4d:05:30: 2e:d8:04:3d:a2:fe:3c:42:2e:e6:db:c4:a1:93:53:96:0c:b3: 8b:f1:a7:a5:c5:2d:f3:d7:78:3f:dc:7f:c1:6e:93:51:ac:95: d7:0d:3f:a2:0f:a4:3f:69:bd:56:a4:18:92:ef:58:5b:0c:a1: 29:69:6c:a7:11:4f:55:64:9e:6a:5d:df:6d:10:7f:0a:c2:62: b4:35:e5:98:ab:f7:f4:f3:a7:c1:c7:aa:57:9c:fe:85:a0:9a: 42:29:24:0e:87:57:d0:ad:97:7d:28:49:d9:1b:46:9d:f3:0d: 88:e1:9d:21:e4:8c:49:d5:96:16:22:19:9d:f1:ab:15:4d:da: 8e:2c:76:80:e6:2d:c4:6d:bd:7f:e8:ca:c9:3d:65:e6:c0:53: a0:5d:2c:04:7e:44:b5:b6:c9:6f:87:c6:2c:68:24:23:cc:86: 0d:66:41:93:5a:05:66:49:78:9c:28:b7:02:58:31:4e:84:97: 0b:07:0e:b7:dc:45:b0:22:d8:a6:9f:66:55:d2:66:24:29:a6: 37:49:05:80:aa:34:d3:58:b2:e7:df:0f:6d:e7:fc:81:f6:c6: fc:57:36:85 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEoIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNGRUE2NkJFQUZGMkIz OEJGOEEwOTZCNjUxQkNGMEM0MkI3MDhBMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCckE6Y6nmeZi4siqKyA/9PLnq1dPyoSvf8JqJ1GfpoyYjaPP1E saQlkW9MyR3BhXxldcqLZvMq9QS+7BLO0gNPP2YdJ4OVwyZb/2xlSkNR8eLRjm4B MnM9pZjcRU+zH3dkejRNGXwMfTlrJ2q589E/K3BCQL5SJMBxGn+f+XadJPvedD8Y AgpoZlvtOwqLvaXeTWaF6FeQgpwXHLFvp5J2TkGzVzdDQCR/J3gzy48uan9jsU3w pL1AZG9iHNOra4Hd/THwPUARqAkCndZWigz/QmmguvaksI1Mj/Aim4/ba94Mr2ps bLLsVkwVdtwSRhYW8kX+pvNJg4yTOSm3lVxrAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUP+pmvq/ys4v4oJa2UbzwxCtwih0wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUC1wbXZxX3lzNHY0b0phMlViend4 Q3R3aWgwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrabgDAN BgkqhkiG9w0BAQsFAAOCAQEAS42/Ry4Tf72ybB7K535BpXXkNU73Slm/DnOto8KK Et6DTQUwLtgEPaL+PEIu5tvEoZNTlgyzi/GnpcUt89d4P9x/wW6TUayV1w0/og+k P2m9VqQYku9YWwyhKWlspxFPVWSeal3fbRB/CsJitDXlmKv39POnwceqV5z+haCa QikkDodX0K2XfShJ2RtGnfMNiOGdIeSMSdWWFiIZnfGrFU3ajix2gOYtxG29f+jK yT1l5sBToF0sBH5EtbbJb4fGLGgkI8yGDWZBk1oFZkl4nCi3AlgxToSXCwcOt9xF sCLYpp9mVdJmJCmmN0kFgKo001iy598Pbef8gfbG/Fc2hQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:15 2025 by rpki-client