$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/QCskt3etYC8SwCAQS2xWx2oyuJQ.roa File: QCskt3etYC8SwCAQS2xWx2oyuJQ.roa (raw, json) Hash identifier: VCIZQHlfkEm+Wwj9yUhUAQ+bcBIX5CZEZzEuok+7WDE= Subject key identifier: 40:2B:24:B7:77:AD:60:2F:12:C0:20:10:4B:6C:56:C7:6A:32:B8:94 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 126B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/QCskt3etYC8SwCAQS2xWx2oyuJQ.roa Signing time: Fri 22 Aug 2025 08:49:20 +0000 ROA not before: Fri 22 Aug 2025 08:49:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 182.155.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4715 (0x126b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=402B24B777AD602F12C020104B6C56C76A32B894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:63:8c:cc:29:46:43:c1:b6:f0:44:bf:97: 37:fb:47:04:d4:73:b2:d7:2e:43:86:2c:79:89:92: b7:ab:d3:f5:ca:1f:df:fd:f5:15:d5:53:b2:b7:9a: 58:e3:5c:35:73:81:b5:77:3b:12:b6:f8:07:70:96: ae:99:69:99:f0:2b:b6:74:cc:fc:82:8e:10:c7:96: 6f:95:e7:8e:1b:49:bc:45:39:f2:84:73:80:fc:a3: ac:e5:60:5d:18:26:58:87:4f:fb:6e:85:fe:ae:8d: 9e:5b:55:ff:30:9a:43:4a:f2:ce:90:f3:36:da:ab: 2e:e3:9a:18:45:82:68:0b:e4:46:5f:4e:84:d7:9b: 89:c5:f4:f9:1c:c6:67:9d:68:6e:0f:4a:89:54:62: d9:61:b4:29:02:e2:6e:e3:36:32:e0:dc:02:36:37: fb:2c:b2:c4:6b:19:44:ec:b1:92:ea:9c:54:16:d4: 8e:d0:e8:fc:2d:21:5b:42:0b:7a:d8:f8:66:28:01: e5:29:32:9d:a7:31:90:7e:df:49:a9:92:bd:3c:94: 35:ae:d6:53:0f:50:93:3c:4d:c5:58:04:40:57:bb: 18:dd:00:32:3d:dc:5c:fa:32:8c:85:d9:36:05:d6: 0d:a4:07:19:57:b0:87:9e:47:05:70:80:49:0d:18: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:24:B7:77:AD:60:2F:12:C0:20:10:4B:6C:56:C7:6A:32:B8:94 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/QCskt3etYC8SwCAQS2xWx2oyuJQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.0.0/18 Signature Algorithm: sha256WithRSAEncryption 41:5a:2d:50:c5:fe:bf:d5:37:19:b8:b8:6f:27:11:73:df:29: 57:62:b8:a3:c6:f5:2e:8e:e5:c2:b5:ef:be:70:f8:7f:d5:a1: 29:a7:c0:95:8b:ae:08:28:04:7f:57:bd:d5:8f:d6:8b:de:71: bc:82:fd:45:e7:b4:c0:88:b7:1f:01:45:d1:5e:1b:9d:62:7f: 71:a5:10:9e:f0:97:ed:a2:97:34:e1:25:d2:2d:f5:8e:97:9d: 07:d1:4b:36:15:c4:a0:ac:fa:40:9d:c0:96:d5:58:15:73:d0: 57:16:b3:c2:87:49:f8:3b:25:64:d9:50:0a:f6:60:07:05:c1: ee:9e:28:3f:24:1c:c0:48:be:d2:44:1d:89:83:61:34:d9:b9: 06:12:2e:f3:15:44:09:5f:03:08:79:a4:82:5a:d9:03:81:60: ab:13:68:b6:c9:e1:cc:52:90:9e:05:52:61:95:85:15:3f:e3: 78:fd:fe:e4:99:40:be:bd:1e:14:c9:c6:80:73:26:4b:57:11: 4e:ee:f3:46:8b:ec:70:7e:f3:6b:8a:35:54:b4:72:53:ac:4a: f5:92:74:4e:57:77:c6:6e:6d:3e:b9:68:7a:64:8e:dd:f5:db: e1:46:ef:ea:78:3f:34:37:48:04:ec:0c:58:6e:2b:56:4a:a4: 2a:b5:18:a5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwMkIyNEI3NzdBRDYw MkYxMkMwMjAxMDRCNkM1NkM3NkEzMkI4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8AGOMzClGQ8G28ES/lzf7RwTUc7LXLkOGLHmJkrer0/XKH9/9 9RXVU7K3mljjXDVzgbV3OxK2+Adwlq6ZaZnwK7Z0zPyCjhDHlm+V544bSbxFOfKE c4D8o6zlYF0YJliHT/tuhf6ujZ5bVf8wmkNK8s6Q8zbaqy7jmhhFgmgL5EZfToTX m4nF9PkcxmedaG4PSolUYtlhtCkC4m7jNjLg3AI2N/ssssRrGUTssZLqnFQW1I7Q 6PwtIVtCC3rY+GYoAeUpMp2nMZB+30mpkr08lDWu1lMPUJM8TcVYBEBXuxjdADI9 3Fz6MoyF2TYF1g2kBxlXsIeeRwVwgEkNGI3tAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQCskt3etYC8SwCAQS2xWx2oyuJQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUUNza3QzZXRZQzhTd0NBUVMyeFd4 Mm95dUpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrabADAN BgkqhkiG9w0BAQsFAAOCAQEAQVotUMX+v9U3Gbi4bycRc98pV2K4o8b1Lo7lwrXv vnD4f9WhKafAlYuuCCgEf1e91Y/Wi95xvIL9Ree0wIi3HwFF0V4bnWJ/caUQnvCX 7aKXNOEl0i31jpedB9FLNhXEoKz6QJ3AltVYFXPQVxazwodJ+DslZNlQCvZgBwXB 7p4oPyQcwEi+0kQdiYNhNNm5BhIu8xVECV8DCHmkglrZA4FgqxNotsnhzFKQngVS YZWFFT/jeP3+5JlAvr0eFMnGgHMmS1cRTu7zRovscH7za4o1VLRyU6xK9ZJ0Tld3 xm5tPrloemSO3fXb4Ubv6ng/NDdIBOwMWG4rVkqkKrUYpQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:23 2025 by rpki-client