$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/S12NpOGXvvKUI2bSTCU_AKD3u0w.roa File: S12NpOGXvvKUI2bSTCU_AKD3u0w.roa (raw, json) Hash identifier: aPCx3RI0WTGEguPmZN3oA60SVYQc9wCfTBezweumYk0= Subject key identifier: 4B:5D:8D:A4:E1:97:BE:F2:94:23:66:D2:4C:25:3F:00:A0:F7:BB:4C Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 122C Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/S12NpOGXvvKUI2bSTCU_AKD3u0w.roa Signing time: Fri 22 Aug 2025 08:49:04 +0000 ROA not before: Fri 22 Aug 2025 08:49:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.222.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4652 (0x122c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4B5D8DA4E197BEF2942366D24C253F00A0F7BB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:e8:96:0b:b4:ae:dc:76:05:36:4b:ba:59: f1:26:32:da:bf:1e:ad:2a:10:d2:32:54:e4:58:bb: ca:0e:ca:0e:5b:22:05:b2:80:c5:4a:97:3f:a9:d1: 92:d2:4c:79:e7:e3:de:eb:84:cf:f1:3f:f9:76:5d: 7f:b3:75:c4:79:be:1f:16:2a:be:12:d6:1f:0d:7c: 7e:1a:35:aa:83:ac:a1:56:6c:37:7d:d7:8e:a4:41: 64:d5:be:cd:91:bc:eb:78:01:50:c0:d3:0a:83:1f: 35:e7:5a:83:71:29:63:59:86:19:b8:f1:ef:a0:b4: ce:27:ec:fc:70:c8:a9:35:e5:cd:fb:cf:29:3a:2a: fc:cb:e4:8d:80:34:13:54:c2:18:5a:ee:d3:80:29: c5:e8:45:84:27:21:c7:1d:28:16:46:f7:5c:f9:04: a6:18:53:16:50:c9:de:c6:71:1c:6f:38:3b:3c:be: e7:91:9f:f0:c5:56:0e:00:03:1b:d5:65:1c:71:93: 5c:83:d8:7a:3f:9a:65:c5:d9:41:93:a5:bf:2f:cf: 63:c8:f3:65:12:db:ab:a1:22:f6:ac:fa:f1:18:e8: d5:60:55:8b:87:38:3e:9a:16:0e:f1:2f:3c:2e:03: 37:11:a4:e0:eb:a8:d8:bf:4d:72:b7:c5:50:ea:90: 63:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:8D:A4:E1:97:BE:F2:94:23:66:D2:4C:25:3F:00:A0:F7:BB:4C X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/S12NpOGXvvKUI2bSTCU_AKD3u0w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.0.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:02:0d:08:18:e3:78:5d:f2:54:cc:f0:6b:ad:46:35:cb:35: 3a:67:36:26:9e:b3:fb:d4:08:e9:7e:61:95:04:18:ba:2a:6c: 2e:65:9e:6c:bb:27:c6:5e:84:51:dd:66:52:b2:b4:03:4f:4a: fd:7c:02:96:22:38:bf:e7:4c:1f:84:70:9c:bb:4e:fc:a1:9e: f2:19:81:5f:8b:a0:46:dd:ca:3e:b1:04:14:2f:a3:de:ee:d1: 76:05:8f:a4:bc:b7:42:26:c0:61:2c:27:0a:8c:1c:1a:46:61: 03:60:6c:da:b9:d4:a7:5b:40:8f:f0:b7:42:ef:c9:1d:c2:03: 73:42:0b:88:e8:2e:f5:18:57:a6:71:d3:81:68:66:12:9b:23: 52:ee:96:51:43:fe:36:87:5c:bf:3b:e7:9d:8c:21:ab:a5:ef: 7f:e1:2d:d8:0f:ff:fd:63:bb:0f:35:55:7f:21:8a:04:28:db: 8b:69:92:22:93:6a:e1:94:7c:48:8b:37:1b:77:d0:a7:cd:67: 29:06:27:8d:31:d9:e6:57:a6:a4:30:d4:f0:86:d6:19:e4:3c: 7a:7c:c3:02:f7:cf:b5:22:cc:1a:fc:73:4c:1d:8a:04:90:c0: af:3d:ed:29:fb:9d:b9:b5:8a:74:93:55:b9:77:a1:e8:7e:05: c8:8d:92:00 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRCNUQ4REE0RTE5N0JF RjI5NDIzNjZEMjRDMjUzRjAwQTBGN0JCNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN1uiWC7Su3HYFNku6WfEmMtq/Hq0qENIyVORYu8oOyg5bIgWy gMVKlz+p0ZLSTHnn497rhM/xP/l2XX+zdcR5vh8WKr4S1h8NfH4aNaqDrKFWbDd9 146kQWTVvs2RvOt4AVDA0wqDHzXnWoNxKWNZhhm48e+gtM4n7PxwyKk15c37zyk6 KvzL5I2ANBNUwhha7tOAKcXoRYQnIccdKBZG91z5BKYYUxZQyd7GcRxvODs8vueR n/DFVg4AAxvVZRxxk1yD2Ho/mmXF2UGTpb8vz2PI82US26uhIvas+vEY6NVgVYuH OD6aFg7xLzwuAzcRpODrqNi/TXK3xVDqkGNnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUS12NpOGXvvKUI2bSTCU/AKD3u0wwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvUzEyTnBPR1h2dktVSTJiU1RDVV9B S0QzdTB3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveADAN BgkqhkiG9w0BAQsFAAOCAQEAnAINCBjjeF3yVMzwa61GNcs1Omc2Jp6z+9QI6X5h lQQYuipsLmWebLsnxl6EUd1mUrK0A09K/XwCliI4v+dMH4RwnLtO/KGe8hmBX4ug Rt3KPrEEFC+j3u7RdgWPpLy3QibAYSwnCowcGkZhA2Bs2rnUp1tAj/C3Qu/JHcID c0ILiOgu9RhXpnHTgWhmEpsjUu6WUUP+NodcvzvnnYwhq6Xvf+Et2A///WO7DzVV fyGKBCjbi2mSIpNq4ZR8SIs3G3fQp81nKQYnjTHZ5lempDDU8IbWGeQ8enzDAvfP tSLMGvxzTB2KBJDArz3tKfudubWKdJNVuXeh6H4FyI2SAA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:21 2025 by rpki-client