$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/XfolmmYPWKfMnMI2C-qpzcK07ps.roa File: XfolmmYPWKfMnMI2C-qpzcK07ps.roa (raw, json) Hash identifier: OtMeMqJQJvCfre/OvSkqj1qxVih9i89JQtg84PB1Py8= Subject key identifier: 5D:FA:25:9A:66:0F:58:A7:CC:9C:C2:36:0B:EA:A9:CD:C2:B4:EE:9B Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 129B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/XfolmmYPWKfMnMI2C-qpzcK07ps.roa Signing time: Fri 22 Aug 2025 08:49:30 +0000 ROA not before: Fri 22 Aug 2025 08:49:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131611 IP address blocks: 119.15.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4763 (0x129b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5DFA259A660F58A7CC9CC2360BEAA9CDC2B4EE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1a:a8:bb:00:8a:cc:b2:9e:2f:b3:59:c9:4b: 75:d6:98:97:55:83:e1:22:85:e0:5b:08:b3:1b:43: 52:79:fa:f5:9e:3a:e6:08:69:99:fc:19:14:fc:97: da:05:7e:3f:33:1a:52:28:93:85:c7:c6:ef:48:fb: 4d:ee:38:52:f9:10:51:30:f6:31:83:ca:a2:d3:ba: aa:3d:65:11:36:bc:1c:75:85:09:72:68:8e:f8:4a: 42:9e:eb:1c:a1:a2:23:a8:3b:f9:52:bc:51:b9:e4: d4:54:30:8a:65:1c:e2:91:47:f9:7e:36:35:16:31: 8e:8e:f6:57:74:19:9f:f1:cb:a8:c6:5a:2d:65:8e: 31:88:d2:93:b2:88:76:9c:5c:3f:9a:d9:2c:aa:60: d8:77:4d:ce:28:8c:f6:ec:82:9c:5b:1f:6e:f8:0c: e9:76:95:5a:b9:96:20:46:15:a7:d2:ac:d4:9d:9e: ce:d8:62:f7:38:f2:83:bf:70:bc:66:92:16:79:d6: d2:30:dc:a6:fa:5c:f3:cf:61:89:16:95:4c:dd:0e: 8d:57:39:16:76:6b:68:c0:f4:b6:bb:5f:d6:be:b6: c5:c6:eb:df:b3:06:12:69:20:54:98:ac:fa:e5:2a: 24:c4:ae:50:0b:86:80:cf:20:46:88:32:c6:a6:ab: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FA:25:9A:66:0F:58:A7:CC:9C:C2:36:0B:EA:A9:CD:C2:B4:EE:9B X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/XfolmmYPWKfMnMI2C-qpzcK07ps.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.15.224.0/19 Signature Algorithm: sha256WithRSAEncryption 6b:f4:8e:8f:f4:56:5c:45:79:9e:8a:dd:85:64:d9:2d:10:fe: b0:85:1e:38:98:fc:3a:2a:f1:2c:54:25:d4:e2:1b:f8:af:2f: d5:22:2f:29:a2:79:e0:18:5e:5c:a7:c3:02:a3:96:14:a1:b4: 8e:e6:3e:e0:5c:f5:9c:8c:51:68:00:9e:9a:64:8c:41:1a:c1: 85:74:92:94:3a:40:9c:22:b2:f7:05:f1:3c:9e:8a:e8:ed:ee: 21:fa:58:ff:66:4e:f6:85:ee:df:ba:90:60:0d:ce:57:35:f1: 79:42:1e:1f:03:00:20:69:a3:6a:a6:e6:4f:fc:a5:c4:35:26: cc:63:ca:7f:f7:6c:d4:2c:10:a5:00:f4:d3:cd:f8:fc:76:e0: 5c:41:c5:e6:3d:f6:78:25:b5:ff:dd:bd:9c:26:5f:37:e1:98: 8d:73:57:de:2f:bc:03:76:1a:2e:5a:d0:f3:a9:28:e8:28:f1: 2e:f9:df:d3:92:6b:f1:f7:13:c0:96:3a:ab:7b:c3:cb:0b:c4: 59:a0:54:a4:38:13:6d:db:14:5e:8a:ee:a9:85:07:4a:22:da: 40:4d:47:58:c1:4f:67:45:3f:d5:bd:ba:75:86:90:66:b8:ea: 25:cd:65:66:e7:f2:e5:25:5b:7a:cf:92:6d:91:16:7c:0f:da: 56:dc:cb:88 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVERkEyNTlBNjYwRjU4 QTdDQzlDQzIzNjBCRUFBOUNEQzJCNEVFOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlGqi7AIrMsp4vs1nJS3XWmJdVg+EiheBbCLMbQ1J5+vWeOuYI aZn8GRT8l9oFfj8zGlIok4XHxu9I+03uOFL5EFEw9jGDyqLTuqo9ZRE2vBx1hQly aI74SkKe6xyhoiOoO/lSvFG55NRUMIplHOKRR/l+NjUWMY6O9ld0GZ/xy6jGWi1l jjGI0pOyiHacXD+a2SyqYNh3Tc4ojPbsgpxbH274DOl2lVq5liBGFafSrNSdns7Y Yvc48oO/cLxmkhZ51tIw3Kb6XPPPYYkWlUzdDo1XORZ2a2jA9La7X9a+tsXG69+z BhJpIFSYrPrlKiTErlALhoDPIEaIMsamq5tFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUXfolmmYPWKfMnMI2C+qpzcK07pswHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvWGZvbG1tWVBXS2ZNbk1JMkMtcXB6 Y0swN3BzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXcP4DAN BgkqhkiG9w0BAQsFAAOCAQEAa/SOj/RWXEV5nordhWTZLRD+sIUeOJj8OirxLFQl 1OIb+K8v1SIvKaJ54BheXKfDAqOWFKG0juY+4Fz1nIxRaACemmSMQRrBhXSSlDpA nCKy9wXxPJ6K6O3uIfpY/2ZO9oXu37qQYA3OVzXxeUIeHwMAIGmjaqbmT/ylxDUm zGPKf/ds1CwQpQD00834/HbgXEHF5j32eCW1/929nCZfN+GYjXNX3i+8A3YaLlrQ 86ko6CjxLvnf05Jr8fcTwJY6q3vDywvEWaBUpDgTbdsUXoruqYUHSiLaQE1HWMFP Z0U/1b26dYaQZrjqJc1lZufy5SVbes+SbZEWfA/aVtzLiA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:19 2025 by rpki-client