$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/_-rP9IOW2-fixLcT34ly6WPM5GI.roa File: _-rP9IOW2-fixLcT34ly6WPM5GI.roa (raw, json) Hash identifier: a9mRkIxOdGTFzUgF13vArsePxMXFaxdIHz9AYUzBRuw= Subject key identifier: FF:EA:CF:F4:83:96:DB:E7:E2:C4:B7:13:DF:89:72:E9:63:CC:E4:62 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1252 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_-rP9IOW2-fixLcT34ly6WPM5GI.roa Signing time: Fri 22 Aug 2025 08:49:13 +0000 ROA not before: Fri 22 Aug 2025 08:49:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.222.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4690 (0x1252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FFEACFF48396DBE7E2C4B713DF8972E963CCE462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:43:06:48:0c:bd:fd:11:6c:d0:e9:2a:ac: 16:19:85:93:3d:25:1e:84:d8:62:60:c2:cd:f9:5d: fc:e0:85:cd:b3:d3:61:ad:39:d2:95:26:fa:b3:d1: 6e:d6:1d:24:8c:7f:21:35:26:fd:c9:b4:b7:38:ac: 40:72:ee:24:c1:fa:d8:50:79:b5:df:28:51:c0:d5: 24:42:1a:bd:41:42:ae:1a:ef:33:40:fb:f2:e2:cd: 89:ab:71:1e:ad:16:ce:56:98:56:ce:8f:af:af:e1: b9:a9:a9:73:d4:18:60:27:88:7d:7d:d3:14:39:88: 98:eb:31:a9:af:89:f7:1a:1a:06:9e:e7:01:c8:3f: 58:4a:06:ba:e2:bf:22:43:37:44:8a:98:61:b0:12: da:27:e7:a3:e5:94:c3:8b:c6:81:60:f3:76:7e:3d: b8:60:48:a1:56:ba:5a:09:0a:7c:88:2f:cc:9c:bc: e8:32:45:91:92:de:bc:4e:f7:3a:c5:9f:83:b6:ff: 77:25:80:38:ff:7a:88:fb:2a:b0:a3:f7:14:32:01: 1b:bc:79:6a:f8:2e:93:82:89:e9:d4:da:dc:b7:10: c1:35:46:47:28:75:2a:ae:bf:85:e4:b4:17:91:c8: b7:f9:fc:b2:48:72:9f:ad:35:26:c4:19:9c:7e:9b: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EA:CF:F4:83:96:DB:E7:E2:C4:B7:13:DF:89:72:E9:63:CC:E4:62 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_-rP9IOW2-fixLcT34ly6WPM5GI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.16.0/22 Signature Algorithm: sha256WithRSAEncryption 68:21:e2:9e:b5:40:ed:15:a8:9f:d6:18:ab:d0:a8:5d:34:fb: e4:a0:2f:13:72:9d:48:f5:3f:4c:18:b5:1b:30:21:87:f2:e2: 45:37:75:8f:c4:b1:a2:63:ab:13:67:fd:0b:ed:f3:c5:28:92: 60:3f:a9:67:db:42:8b:d5:5e:26:e8:0c:25:a7:1e:e5:18:84: 4a:03:d2:39:8e:a8:d6:b3:d0:22:0b:73:6b:ac:5d:7c:36:e6: ab:43:27:1f:cd:a7:ec:20:85:b8:4a:11:ad:31:8a:fe:7c:68: 5c:cb:63:28:20:8b:eb:51:94:cd:f7:a1:01:5d:c7:2b:6b:bf: 55:56:7e:47:7d:a8:26:92:12:7e:ce:29:86:1a:56:4c:9d:81: 88:cd:79:1a:6d:0a:16:9f:08:0c:5f:e1:6a:0d:a0:20:60:f2: e4:2e:77:71:63:d8:32:47:50:1e:8c:52:70:7e:72:d8:f4:a2: 1d:07:ed:17:de:2b:86:d6:02:6d:f5:fd:60:3e:66:13:5a:35: 32:7f:1e:3a:eb:15:04:ae:c7:df:1d:eb:48:2f:0b:b8:84:31: 88:88:e0:a3:40:3b:72:7a:52:f4:1e:e6:84:17:2e:ab:ff:b3: a5:f7:cd:45:eb:66:8e:0c:c1:4a:5a:e0:a5:7e:7e:2f:c5:46: d2:e3:b8:f5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICElIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZGRUFDRkY0ODM5NkRC RTdFMkM0QjcxM0RGODk3MkU5NjNDQ0U0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO4kMGSAy9/RFs0OkqrBYZhZM9JR6E2GJgws35Xfzghc2z02Gt OdKVJvqz0W7WHSSMfyE1Jv3JtLc4rEBy7iTB+thQebXfKFHA1SRCGr1BQq4a7zNA +/LizYmrcR6tFs5WmFbOj6+v4bmpqXPUGGAniH190xQ5iJjrMamvifcaGgae5wHI P1hKBrrivyJDN0SKmGGwEton56PllMOLxoFg83Z+PbhgSKFWuloJCnyIL8ycvOgy RZGS3rxO9zrFn4O2/3clgDj/eoj7KrCj9xQyARu8eWr4LpOCienU2ty3EME1Rkco dSquv4XktBeRyLf5/LJIcp+tNSbEGZx+mwqtAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU/+rP9IOW2+fixLcT34ly6WPM5GIwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvXy1yUDlJT1cyLWZpeExjVDM0bHk2 V1BNNUdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveEDAN BgkqhkiG9w0BAQsFAAOCAQEAaCHinrVA7RWon9YYq9CoXTT75KAvE3KdSPU/TBi1 GzAhh/LiRTd1j8SxomOrE2f9C+3zxSiSYD+pZ9tCi9VeJugMJace5RiESgPSOY6o 1rPQIgtza6xdfDbmq0MnH82n7CCFuEoRrTGK/nxoXMtjKCCL61GUzfehAV3HK2u/ VVZ+R32oJpISfs4phhpWTJ2BiM15Gm0KFp8IDF/hag2gIGDy5C53cWPYMkdQHoxS cH5y2PSiHQftF94rhtYCbfX9YD5mE1o1Mn8eOusVBK7H3x3rSC8LuIQxiIjgo0A7 cnpS9B7mhBcuq/+zpffNRetmjgzBSlrgpX5+L8VG0uO49Q== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:25 2025 by rpki-client