$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/V0i4MhbTPBkhXSEIVQNSxdEDRTE.roa File: V0i4MhbTPBkhXSEIVQNSxdEDRTE.roa (raw, json) Hash identifier: I2lzlGXNbg03s3URWn26P5wriDhOF9TDKBC3PEwuBrY= Subject key identifier: 57:48:B8:32:16:D3:3C:19:21:5D:21:08:55:03:52:C5:D1:03:45:31 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1240 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/V0i4MhbTPBkhXSEIVQNSxdEDRTE.roa Signing time: Fri 22 Aug 2025 08:49:09 +0000 ROA not before: Fri 22 Aug 2025 08:49:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.222.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4672 (0x1240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5748B83216D33C19215D2108550352C5D1034531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:4a:1a:34:46:f2:cf:aa:dd:8c:4b:d9:0f: 1f:4d:87:97:74:6b:04:1f:7e:ed:1c:09:be:21:e4: 1e:3f:a6:f5:dc:71:62:f1:29:c0:6e:b5:08:d0:7f: 05:d6:ce:aa:c1:5b:9c:bd:a1:78:5b:d4:29:a1:d3: 09:7f:e1:b2:bc:3e:33:47:16:7e:56:b2:27:78:a9: ad:a0:8b:10:76:cc:0f:cc:99:a8:78:93:21:bb:eb: 41:63:0b:ff:41:c1:3a:b5:dc:6c:d1:d7:28:9c:2c: fb:45:4d:41:5b:e5:a7:4a:92:e7:df:21:1d:4b:4a: 49:0b:20:46:e5:c6:3b:c6:6e:cd:61:a9:13:62:c5: 75:57:da:f0:5b:ff:18:a1:84:71:d6:11:bf:e5:32: bc:ad:75:5f:56:87:2a:eb:cf:cb:e0:0c:c2:3b:6c: 5b:90:2e:2a:5d:0a:82:33:97:78:4b:79:b3:0f:da: 0e:37:56:8c:6a:e5:e2:aa:fd:48:ac:dd:cf:53:e4: 29:71:75:20:eb:5d:12:1b:dd:59:f8:0e:3d:e9:88: 1c:18:38:d5:ca:e4:e2:b7:dc:ed:02:b1:0d:69:86: 0a:a5:a8:52:0b:69:af:3a:9c:bc:13:62:ec:7a:66: 58:0e:14:c7:45:34:74:c1:a7:46:ff:48:e7:bb:67: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:48:B8:32:16:D3:3C:19:21:5D:21:08:55:03:52:C5:D1:03:45:31 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/V0i4MhbTPBkhXSEIVQNSxdEDRTE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.24.0/21 Signature Algorithm: sha256WithRSAEncryption 49:19:75:ac:04:6d:d9:aa:71:de:bd:e4:b1:57:ec:5e:bc:68: 01:a0:8d:92:49:1a:e9:08:62:26:04:7b:98:61:f8:96:aa:c4: da:8d:f2:82:64:85:85:53:2a:63:ba:f7:b3:71:e8:7b:51:89: 4b:a4:99:4e:10:40:b0:6a:2d:13:83:bb:c2:44:fc:ab:a2:32: c9:db:52:7d:3f:d8:d2:53:1d:3a:78:e3:45:af:cf:58:bd:02: 1d:1a:53:87:aa:b3:b9:dc:99:d4:31:f6:f3:8f:32:15:73:4a: 6b:16:22:35:62:54:c3:3a:78:f8:f9:cb:74:aa:00:5c:2f:4f: 80:c0:18:05:de:a7:d5:2f:5a:3d:72:b7:3d:19:c1:ee:7d:97: f7:78:9f:3f:84:6f:ae:94:9e:76:28:47:91:34:43:00:f7:40: 7c:d1:ec:66:34:e4:c6:bb:89:6e:13:ab:ea:73:dd:f3:5e:7a: 94:6d:b5:2f:91:40:2d:cd:33:95:45:fe:1e:37:dc:5d:1e:ab: 9b:f9:4b:35:20:d1:5b:8b:fa:51:7d:e5:fd:84:46:5c:a0:19: 3a:e7:14:7e:46:db:30:e1:4a:ea:d4:57:1a:e0:84:fe:19:b1: 45:8f:71:a7:41:d0:9b:57:a0:77:bd:de:b9:de:75:01:2c:1a: 3b:d8:c8:be -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU3NDhCODMyMTZEMzND MTkyMTVEMjEwODU1MDM1MkM1RDEwMzQ1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ZEoaNEbyz6rdjEvZDx9Nh5d0awQffu0cCb4h5B4/pvXccWLx KcButQjQfwXWzqrBW5y9oXhb1Cmh0wl/4bK8PjNHFn5Wsid4qa2gixB2zA/Mmah4 kyG760FjC/9BwTq13GzR1yicLPtFTUFb5adKkuffIR1LSkkLIEblxjvGbs1hqRNi xXVX2vBb/xihhHHWEb/lMrytdV9Whyrrz8vgDMI7bFuQLipdCoIzl3hLebMP2g43 Voxq5eKq/Uis3c9T5ClxdSDrXRIb3Vn4Dj3piBwYONXK5OK33O0CsQ1phgqlqFIL aa86nLwTYux6ZlgOFMdFNHTBp0b/SOe7Z6v9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUV0i4MhbTPBkhXSEIVQNSxdEDRTEwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvVjBpNE1oYlRQQmtoWFNFSVZRTlN4 ZEVEUlRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8veGDAN BgkqhkiG9w0BAQsFAAOCAQEASRl1rARt2apx3r3ksVfsXrxoAaCNkkka6QhiJgR7 mGH4lqrE2o3ygmSFhVMqY7r3s3Hoe1GJS6SZThBAsGotE4O7wkT8q6IyydtSfT/Y 0lMdOnjjRa/PWL0CHRpTh6qzudyZ1DH2848yFXNKaxYiNWJUwzp4+PnLdKoAXC9P gMAYBd6n1S9aPXK3PRnB7n2X93ifP4RvrpSedihHkTRDAPdAfNHsZjTkxruJbhOr 6nPd8156lG21L5FALc0zlUX+HjfcXR6rm/lLNSDRW4v6UX3l/YRGXKAZOucUfkbb MOFK6tRXGuCE/hmxRY9xp0HQm1egd73eud51ASwaO9jIvg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:23 2025 by rpki-client