$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/RXN_8y4E1KB53TZtwJ7NECoaLJM.roa File: RXN_8y4E1KB53TZtwJ7NECoaLJM.roa (raw, json) Hash identifier: VZJYNSzprvXhCq0a+PvEsQysRyy69VMHhLw3n223oHA= Subject key identifier: 45:73:7F:F3:2E:04:D4:A0:79:DD:36:6D:C0:9E:CD:10:2A:1A:2C:93 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1227 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RXN_8y4E1KB53TZtwJ7NECoaLJM.roa Signing time: Fri 22 Aug 2025 08:49:03 +0000 ROA not before: Fri 22 Aug 2025 08:49:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 113.61.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4647 (0x1227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=45737FF32E04D4A079DD366DC09ECD102A1A2C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:48:b1:b0:c9:3d:14:75:b2:e2:55:c9:0a: dd:c2:fa:b1:c8:93:6f:9e:db:2e:5a:6d:72:47:02: 8a:be:f7:09:c2:26:d0:11:a9:14:7c:e8:df:43:6c: 9a:e8:33:cf:6b:c6:25:88:c4:65:c0:1b:be:6c:7a: 58:8c:35:92:0e:5d:f6:e5:0f:9e:91:98:c1:7b:2a: 2f:65:49:91:60:1d:51:a9:f2:ec:75:ca:a9:03:f2: 39:ad:13:6e:46:69:4c:eb:fa:9c:8f:ff:a4:10:41: 7e:3a:8a:fa:2d:75:a3:a4:82:cb:dd:e8:a6:98:c0: 40:f0:26:e3:2e:f0:6c:3d:8d:21:7d:5a:da:2c:b9: 7a:9f:5e:dd:46:4b:be:17:a8:ca:24:43:60:6f:d8: fc:36:d5:64:eb:21:04:d4:f7:06:d3:86:93:e9:17: f0:ea:76:fe:30:50:3d:70:9c:a0:35:b0:26:cd:e8: 4b:c6:db:7c:7a:fc:1d:da:f4:74:81:93:b7:40:98: 45:a9:03:b3:4b:73:2c:bb:6f:fd:86:f6:91:d5:ed: 59:98:28:78:55:31:b8:df:5e:9b:98:82:96:ec:05: 90:ce:ba:0c:17:e4:e1:06:49:d7:58:94:d9:29:28: 30:5a:c4:d3:ec:29:b7:ce:e2:8b:d1:9d:ed:38:8a: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:73:7F:F3:2E:04:D4:A0:79:DD:36:6D:C0:9E:CD:10:2A:1A:2C:93 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RXN_8y4E1KB53TZtwJ7NECoaLJM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.174.0/24 Signature Algorithm: sha256WithRSAEncryption 16:51:30:7c:72:48:2a:a4:e9:8f:91:67:82:76:19:c5:dc:bc: d0:ba:87:96:0d:d6:a8:bb:01:3d:57:3b:60:07:2f:e1:29:7c: 72:fc:c5:50:95:d9:ee:f5:72:8f:0d:a7:cd:48:0c:c4:b3:91: 21:82:03:6b:20:ca:99:3a:af:64:e3:ab:5a:1a:74:ee:c7:be: fb:d4:40:45:7e:3c:3d:16:db:a5:47:6a:5c:02:73:a1:bd:6d: 68:ee:1f:96:18:c6:00:d1:e4:8f:e7:f1:fe:45:fe:34:c8:9f: 64:79:3a:dc:a7:79:79:c3:25:85:2c:d4:5d:2a:5d:a9:f6:8f: af:19:6a:db:74:91:73:84:51:33:6f:eb:0a:2b:ba:18:f8:32: 0a:4d:70:e4:e8:af:b3:84:3e:d6:40:83:b1:c6:c8:ab:4b:09: b2:aa:22:1f:c9:40:75:26:73:07:97:f6:5b:eb:05:5d:f3:97: 21:ad:c4:1f:49:a1:27:31:b0:dd:ed:cd:72:35:7b:7e:12:4e: 19:9e:3c:7f:7d:5e:0c:45:3e:df:8c:52:6a:35:f6:ba:a5:3b: 53:6b:d4:1a:9c:ae:fb:56:a6:c8:1a:aa:42:76:77:f8:4d:7f: 2e:78:9c:3e:a8:fe:17:ab:d2:d7:ca:fa:2b:8d:05:da:49:21: 94:fd:c5:82 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ1NzM3RkYzMkUwNEQ0 QTA3OUREMzY2REMwOUVDRDEwMkExQTJDOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI7UixsMk9FHWy4lXJCt3C+rHIk2+e2y5abXJHAoq+9wnCJtAR qRR86N9DbJroM89rxiWIxGXAG75seliMNZIOXfblD56RmMF7Ki9lSZFgHVGp8ux1 yqkD8jmtE25GaUzr+pyP/6QQQX46ivotdaOkgsvd6KaYwEDwJuMu8Gw9jSF9Wtos uXqfXt1GS74XqMokQ2Bv2Pw21WTrIQTU9wbThpPpF/Dqdv4wUD1wnKA1sCbN6EvG 23x6/B3a9HSBk7dAmEWpA7NLcyy7b/2G9pHV7VmYKHhVMbjfXpuYgpbsBZDOugwX 5OEGSddYlNkpKDBaxNPsKbfO4ovRne04igrDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQURXN/8y4E1KB53TZtwJ7NECoaLJMwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUlhOXzh5NEUxS0I1M1RadHdKN05F Q29hTEpNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE9rjAN BgkqhkiG9w0BAQsFAAOCAQEAFlEwfHJIKqTpj5FngnYZxdy80LqHlg3WqLsBPVc7 YAcv4Sl8cvzFUJXZ7vVyjw2nzUgMxLORIYIDayDKmTqvZOOrWhp07se++9RARX48 PRbbpUdqXAJzob1taO4flhjGANHkj+fx/kX+NMifZHk63Kd5ecMlhSzUXSpdqfaP rxlq23SRc4RRM2/rCiu6GPgyCk1w5Oivs4Q+1kCDscbIq0sJsqoiH8lAdSZzB5f2 W+sFXfOXIa3EH0mhJzGw3e3NcjV7fhJOGZ48f31eDEU+34xSajX2uqU7U2vUGpyu +1amyBqqQnZ3+E1/LnicPqj+F6vS18r6K40F2kkhlP3Fgg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:22:27 2025 by rpki-client