$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZP5SaFVt3NZp1-5VcJJSDleFpnY.roa File: ZP5SaFVt3NZp1-5VcJJSDleFpnY.roa (raw, json) Hash identifier: Y6TwWroYOBWHjBX0bOCBZS+apiiDy/hdTck8Zlgvnhs= Subject key identifier: 64:FE:52:68:55:6D:DC:D6:69:D7:EE:55:70:92:52:0E:57:85:A6:76 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 127E Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZP5SaFVt3NZp1-5VcJJSDleFpnY.roa Signing time: Fri 22 Aug 2025 08:49:24 +0000 ROA not before: Fri 22 Aug 2025 08:49:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 119.15.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4734 (0x127e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=64FE5268556DDCD669D7EE557092520E5785A676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:dd:f9:b7:7b:15:94:68:63:d9:8e:e5:d2: d0:70:d8:b3:d8:05:dd:49:ec:52:02:46:0e:52:29: fa:e8:fc:29:97:91:86:d1:3c:67:8b:8c:14:89:da: 97:0c:13:55:b1:0a:d0:da:d4:d7:8c:93:d6:4a:7f: 20:98:f5:00:8c:02:c0:a2:51:e7:2d:db:98:87:fa: 35:21:59:63:21:b0:32:a1:c6:37:ad:75:f5:03:ae: c8:42:35:0f:c7:d8:c4:ed:51:45:a1:e3:d2:91:20: 42:00:15:ef:67:0b:c6:29:27:24:b7:c9:8c:70:e4: 8e:db:84:2e:40:f6:e1:dc:77:c9:66:00:42:18:93: fc:87:62:29:6a:8d:94:db:69:73:4b:58:04:e4:a5: 89:d1:62:e9:cd:85:2e:5c:6f:f3:da:7e:4f:e6:01: fb:75:cc:ab:f7:ff:cd:b0:8e:cc:79:e4:c5:d9:1e: bf:f4:a4:b3:04:92:55:1f:b8:3b:f2:66:85:b2:dc: 34:b6:80:24:6c:8d:c1:fe:c9:b1:b7:55:d3:e5:57: 05:a1:b0:a1:a1:04:bd:4d:3c:55:dd:ed:b4:8e:86: 32:13:d4:c7:dc:41:09:5e:b1:73:29:e3:2c:cc:1c: a3:77:73:07:7f:0d:fa:fe:35:33:2f:35:0d:d3:91: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:52:68:55:6D:DC:D6:69:D7:EE:55:70:92:52:0E:57:85:A6:76 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZP5SaFVt3NZp1-5VcJJSDleFpnY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.15.208.0/21 Signature Algorithm: sha256WithRSAEncryption 66:34:3c:6d:42:88:7a:8f:e5:bc:09:62:37:58:22:22:9d:1c: 66:25:6f:d3:29:b6:f5:cd:82:04:c4:71:d1:01:cf:95:9b:28: d2:46:55:60:16:eb:63:0c:6c:76:58:b7:88:a9:1a:71:af:43: 20:8d:02:46:2e:ec:3b:16:ed:8f:7c:2c:20:73:14:4c:ad:3a: 79:a6:9b:3b:05:dd:86:2e:d6:d8:10:ed:a1:06:f7:4f:04:69: ad:15:b0:e1:00:f8:a9:e3:24:3d:f6:70:cf:ae:38:38:9f:32: 7d:85:7e:f8:ba:2e:f1:ef:d8:a2:aa:86:eb:3c:f2:72:a2:43: 18:49:8d:4d:c4:93:fb:ee:ac:40:32:9c:4f:bc:e0:1b:b8:db: 65:b4:08:fc:8b:aa:01:cc:28:05:ca:42:12:ea:2b:70:dd:9d: 60:6c:73:37:75:c3:1d:68:88:53:23:1b:56:53:9a:a9:31:5f: ce:91:cb:ca:74:e1:92:9a:b0:9d:31:d1:66:e2:ec:81:65:8a: 80:43:08:99:f9:94:24:3a:27:7b:b7:9f:65:55:d3:1f:50:16: e1:67:a4:4c:ff:7d:a0:8e:d1:97:6a:82:d5:8e:bd:fc:4f:87: e7:25:38:ff:5f:bb:3b:99:9f:37:85:b3:87:ac:75:c6:b0:c0: 37:7c:5b:55 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY0RkU1MjY4NTU2RERD RDY2OUQ3RUU1NTcwOTI1MjBFNTc4NUE2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLm935t3sVlGhj2Y7l0tBw2LPYBd1J7FICRg5SKfro/CmXkYbR PGeLjBSJ2pcME1WxCtDa1NeMk9ZKfyCY9QCMAsCiUect25iH+jUhWWMhsDKhxjet dfUDrshCNQ/H2MTtUUWh49KRIEIAFe9nC8YpJyS3yYxw5I7bhC5A9uHcd8lmAEIY k/yHYilqjZTbaXNLWATkpYnRYunNhS5cb/Pafk/mAft1zKv3/82wjsx55MXZHr/0 pLMEklUfuDvyZoWy3DS2gCRsjcH+ybG3VdPlVwWhsKGhBL1NPFXd7bSOhjIT1Mfc QQlesXMp4yzMHKN3cwd/Dfr+NTMvNQ3TkfR7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUZP5SaFVt3NZp1+5VcJJSDleFpnYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvWlA1U2FGVnQzTlpwMS01VmNKSlNE bGVGcG5ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cP0DAN BgkqhkiG9w0BAQsFAAOCAQEAZjQ8bUKIeo/lvAliN1giIp0cZiVv0ym29c2CBMRx 0QHPlZso0kZVYBbrYwxsdli3iKkaca9DII0CRi7sOxbtj3wsIHMUTK06eaabOwXd hi7W2BDtoQb3TwRprRWw4QD4qeMkPfZwz644OJ8yfYV++Lou8e/YoqqG6zzycqJD GEmNTcST++6sQDKcT7zgG7jbZbQI/IuqAcwoBcpCEuorcN2dYGxzN3XDHWiIUyMb VlOaqTFfzpHLynThkpqwnTHRZuLsgWWKgEMImfmUJDone7efZVXTH1AW4WekTP99 oI7Rl2qC1Y69/E+H5yU4/1+7O5mfN4Wzh6x1xrDAN3xbVQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:18 2025 by rpki-client