$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/bEEu_7RmKbPfZcHQdJhHU4_HEN4.roa File: bEEu_7RmKbPfZcHQdJhHU4_HEN4.roa (raw, json) Hash identifier: 2p5FDxs35A1KiHSWjvYNUmgvKx17IQzB+N0WBdwC/E0= Subject key identifier: 6C:41:2E:FF:B4:66:29:B3:DF:65:C1:D0:74:98:47:53:8F:C7:10:DE Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 122A Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bEEu_7RmKbPfZcHQdJhHU4_HEN4.roa Signing time: Fri 22 Aug 2025 08:49:03 +0000 ROA not before: Fri 22 Aug 2025 08:49:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 210.209.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4650 (0x122a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6C412EFFB46629B3DF65C1D0749847538FC710DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:21:c4:fa:be:9e:07:85:e1:03:8c:21:60: 80:da:59:dd:6a:95:92:95:08:48:90:3e:87:55:9d: c7:bf:4d:08:43:bb:f0:17:18:f8:2b:bb:0f:8c:d9: 0e:2a:1f:75:22:16:1b:81:de:e3:21:6a:48:fa:17: d0:c6:71:b5:eb:69:c8:5e:54:78:71:89:f0:89:9a: ed:f0:1e:5d:1a:52:93:69:45:70:0b:76:f9:f0:95: e3:a6:df:86:78:3d:8e:7a:7a:66:ce:a5:aa:a5:03: 5f:3a:71:6b:c9:ac:81:30:f8:ea:d5:ce:4a:86:fb: 2e:88:95:fa:c4:cb:c7:28:7a:1f:67:c5:09:72:99: b5:10:8d:eb:46:dc:ef:c9:5e:5a:bc:19:73:96:e0: ea:9f:f6:a2:fb:de:79:c1:bb:08:47:33:cc:8f:bb: 9e:f9:4c:f4:87:ce:3f:50:b8:5f:50:1b:4a:c5:9a: 5e:90:3e:b4:14:72:2c:e1:e5:7b:40:c9:1f:55:65: 2d:b6:e7:f7:be:05:5d:9e:b4:c4:b1:a5:c6:a2:e8: d3:ce:9c:4c:e0:d6:7b:06:84:98:5f:b7:87:56:13: 1f:8b:94:ff:74:96:14:c9:97:85:0d:db:67:e2:80: b5:49:af:49:11:77:84:70:9f:a5:99:03:9b:27:cf: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:41:2E:FF:B4:66:29:B3:DF:65:C1:D0:74:98:47:53:8F:C7:10:DE X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bEEu_7RmKbPfZcHQdJhHU4_HEN4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.128.0/18 Signature Algorithm: sha256WithRSAEncryption 1b:d2:ae:d5:6c:d5:b3:59:e0:5d:26:f4:22:df:01:fe:83:bc: 5f:71:b2:f5:04:d4:65:17:cb:10:d3:84:85:02:5f:1e:6a:35: bc:18:d8:46:90:49:62:fb:d9:91:f4:ca:32:8a:6e:ca:40:67: 96:0e:e2:47:36:60:a1:82:14:b1:8e:44:ea:60:0b:8b:5a:e3: 3e:d7:04:d3:ac:64:68:80:78:88:b6:f3:0a:b4:30:f8:ed:fa: 70:20:6b:7d:da:08:eb:78:a8:e9:f1:79:54:10:7d:87:87:1c: 88:b5:1d:9c:02:7c:fe:25:08:2f:6e:71:fc:48:f2:cd:7d:40: 81:1f:92:ab:b2:ea:40:8f:46:4e:46:ac:74:ca:f8:8c:5b:95: 63:6e:02:57:f5:50:50:c6:65:a9:21:08:4a:58:b1:a5:da:5b: b2:50:9c:4b:2e:f0:8d:be:80:06:14:85:d9:5d:12:26:c6:ee: 82:d4:8e:e7:8a:70:ce:62:49:e2:53:57:fe:50:33:8f:c5:7b: b8:90:b1:d6:a8:44:94:a9:03:99:4b:a7:8a:e9:ce:fd:26:85: 29:3f:f8:95:a2:ba:dd:3f:e8:7d:d4:fe:43:03:23:35:44:68: eb:8c:21:de:70:ac:2c:b9:87:3e:37:89:d0:9f:a3:13:1b:b1: 5d:bc:10:8a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDNDEyRUZGQjQ2NjI5 QjNERjY1QzFEMDc0OTg0NzUzOEZDNzEwREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ9CHE+r6eB4XhA4whYIDaWd1qlZKVCEiQPodVnce/TQhDu/AX GPgruw+M2Q4qH3UiFhuB3uMhakj6F9DGcbXracheVHhxifCJmu3wHl0aUpNpRXAL dvnwleOm34Z4PY56embOpaqlA186cWvJrIEw+OrVzkqG+y6IlfrEy8coeh9nxQly mbUQjetG3O/JXlq8GXOW4Oqf9qL73nnBuwhHM8yPu575TPSHzj9QuF9QG0rFml6Q PrQUcizh5XtAyR9VZS225/e+BV2etMSxpcai6NPOnEzg1nsGhJhft4dWEx+LlP90 lhTJl4UN22figLVJr0kRd4Rwn6WZA5snz9VpAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUbEEu/7RmKbPfZcHQdJhHU4/HEN4wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvYkVFdV83Um1LYlBmWmNIUWRKaEhV NF9IRU40LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLRgDAN BgkqhkiG9w0BAQsFAAOCAQEAG9Ku1WzVs1ngXSb0It8B/oO8X3Gy9QTUZRfLENOE hQJfHmo1vBjYRpBJYvvZkfTKMopuykBnlg7iRzZgoYIUsY5E6mALi1rjPtcE06xk aIB4iLbzCrQw+O36cCBrfdoI63io6fF5VBB9h4cciLUdnAJ8/iUIL25x/EjyzX1A gR+Sq7LqQI9GTkasdMr4jFuVY24CV/VQUMZlqSEISlixpdpbslCcSy7wjb6ABhSF 2V0SJsbugtSO54pwzmJJ4lNX/lAzj8V7uJCx1qhElKkDmUuniunO/SaFKT/4laK6 3T/ofdT+QwMjNURo64wh3nCsLLmHPjeJ0J+jExuxXbwQig== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:18 2025 by rpki-client