$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/SWi1mLIo22Y1NaVpq-dYMeRbczI.roa File: SWi1mLIo22Y1NaVpq-dYMeRbczI.roa (raw, json) Hash identifier: o7A1YP46hMTTQTwfaAOQwSLgAUXHk2oda5vcuOYl02w= Subject key identifier: 49:68:B5:98:B2:28:DB:66:35:35:A5:69:AB:E7:58:31:E4:5B:73:32 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 124F Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SWi1mLIo22Y1NaVpq-dYMeRbczI.roa Signing time: Fri 22 Aug 2025 08:49:12 +0000 ROA not before: Fri 22 Aug 2025 08:49:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 113.61.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4687 (0x124f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4968B598B228DB663535A569ABE75831E45B7332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:1e:14:74:2e:16:94:0b:e1:20:8d:42:1a: 9b:d4:21:4b:75:da:3f:1b:db:71:1f:be:01:88:66: 15:77:81:56:ea:04:1e:2b:95:e7:e2:66:e8:85:21: 33:cd:0c:40:b4:6d:e8:ea:21:9d:d5:1d:03:91:cf: f5:6f:58:96:da:25:a3:e1:48:b4:a4:97:09:d4:b9: 84:f0:4e:2e:7f:10:3f:7f:df:fa:4b:0e:df:cf:0f: 49:a2:2f:06:92:81:5c:9d:d1:a3:8f:29:2f:c5:52: f3:8e:82:b3:7f:e4:5e:cf:d8:7a:00:2d:aa:43:0e: 31:a0:31:e6:87:f5:e8:32:36:2f:13:41:8d:b5:62: 79:1a:a0:f9:cb:ad:48:30:82:ec:23:8f:0b:35:c0: 82:0d:3c:60:53:51:d0:74:4f:ec:3a:81:96:25:b5: 95:a8:79:ae:6f:4e:8b:07:32:ae:c8:99:49:a0:d6: 5c:79:6c:28:99:ec:af:42:fe:53:76:e4:2a:7e:93: 9e:7b:b2:1d:76:17:bb:d3:83:da:ae:45:a3:4b:f9: 08:9f:c2:aa:73:29:77:60:6c:41:dc:1f:92:97:a7: de:cf:96:85:13:64:6c:a7:ae:3d:3a:b1:73:45:ac: a4:c0:87:29:85:7d:2c:9f:eb:34:a3:a0:0d:b9:4d: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:68:B5:98:B2:28:DB:66:35:35:A5:69:AB:E7:58:31:E4:5B:73:32 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SWi1mLIo22Y1NaVpq-dYMeRbczI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.176.0/20 Signature Algorithm: sha256WithRSAEncryption 32:a7:5b:65:9d:e3:ca:78:51:0f:d1:7b:75:c2:c5:94:69:8d: 5e:a0:1a:28:bb:86:05:e9:fd:96:4f:58:ba:c8:21:97:76:8f: 0c:c2:a3:86:ab:19:76:45:b2:2b:83:62:30:d2:bd:45:91:f4: f8:ca:cd:f1:ee:6e:dc:55:19:c2:f4:e7:8c:f9:7a:a4:13:f7: f9:6d:1c:4c:ad:40:d7:5d:37:3b:ea:00:2d:30:16:80:6f:60: c9:7f:29:e1:c1:ef:48:cc:bb:44:51:fa:d3:d0:9c:9f:2c:d1: f3:98:51:27:27:33:40:4a:91:12:85:76:3d:13:57:bd:6f:c9: 60:0e:84:d5:b6:0a:41:2b:1b:8e:d6:1e:1b:72:85:4f:f7:22: 69:f9:20:17:5d:d0:71:8a:9e:38:82:b5:70:c3:80:f9:ad:5f: 91:bd:f6:42:e2:fa:85:de:14:37:15:72:60:30:fb:3c:2d:76: cd:cc:e7:d2:fd:0c:35:03:ff:e2:2c:c3:e8:34:0e:f2:ce:78: 25:c4:e3:89:fc:10:cd:ab:2f:97:32:db:84:4b:2e:53:53:eb: 41:c3:01:03:90:43:b6:bc:e0:fc:cb:4f:26:d5:2d:ba:a4:a2: 18:80:44:a8:63:31:68:11:cd:11:d1:5a:d2:eb:68:c9:f0:d1: 3c:2e:2b:0f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ5NjhCNTk4QjIyOERC NjYzNTM1QTU2OUFCRTc1ODMxRTQ1QjczMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC96x4UdC4WlAvhII1CGpvUIUt12j8b23EfvgGIZhV3gVbqBB4r lefiZuiFITPNDEC0bejqIZ3VHQORz/VvWJbaJaPhSLSklwnUuYTwTi5/ED9/3/pL Dt/PD0miLwaSgVyd0aOPKS/FUvOOgrN/5F7P2HoALapDDjGgMeaH9egyNi8TQY21 YnkaoPnLrUgwguwjjws1wIINPGBTUdB0T+w6gZYltZWoea5vTosHMq7ImUmg1lx5 bCiZ7K9C/lN25Cp+k557sh12F7vTg9quRaNL+QifwqpzKXdgbEHcH5KXp97PloUT ZGynrj06sXNFrKTAhymFfSyf6zSjoA25TWY9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUSWi1mLIo22Y1NaVpq+dYMeRbczIwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvU1dpMW1MSW8yMlkxTmFWcHEtZFlN ZVJiY3pJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE9sDAN BgkqhkiG9w0BAQsFAAOCAQEAMqdbZZ3jynhRD9F7dcLFlGmNXqAaKLuGBen9lk9Y usghl3aPDMKjhqsZdkWyK4NiMNK9RZH0+MrN8e5u3FUZwvTnjPl6pBP3+W0cTK1A 1103O+oALTAWgG9gyX8p4cHvSMy7RFH609CcnyzR85hRJyczQEqREoV2PRNXvW/J YA6E1bYKQSsbjtYeG3KFT/ciafkgF13QcYqeOIK1cMOA+a1fkb32QuL6hd4UNxVy YDD7PC12zczn0v0MNQP/4izD6DQO8s54JcTjifwQzasvlzLbhEsuU1PrQcMBA5BD trzg/MtPJtUtuqSiGIBEqGMxaBHNEdFa0utoyfDRPC4rDw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:14:56 2025 by rpki-client