$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/dNbqbraFPFyd_XRzNKuZD84LppY.roa File: dNbqbraFPFyd_XRzNKuZD84LppY.roa (raw, json) Hash identifier: Yi7PbW6U51FMSQG4NLUSzS7uhHodjgVcXXoyq1dYYTo= Subject key identifier: 74:D6:EA:6E:B6:85:3C:5C:9D:FD:74:73:34:AB:99:0F:CE:0B:A6:96 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1236 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/dNbqbraFPFyd_XRzNKuZD84LppY.roa Signing time: Fri 22 Aug 2025 08:49:07 +0000 ROA not before: Fri 22 Aug 2025 08:49:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.222.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4662 (0x1236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=74D6EA6EB6853C5C9DFD747334AB990FCE0BA696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:f7:4c:02:53:e2:21:24:00:d6:2c:2e:ae: b4:87:77:d1:96:9c:1f:e8:e3:05:dc:ab:ee:a7:93: b1:d8:c8:53:0e:38:fa:28:92:2f:b5:24:5e:cd:6e: 1f:4a:ae:14:1d:fe:d2:89:10:82:b2:4a:e5:33:e6: d1:14:91:12:66:02:5c:cf:ac:b3:6a:45:9e:b5:d2: d6:25:9e:54:6f:1b:6c:8c:06:76:18:65:10:fa:7d: 8f:13:e7:73:a2:d5:74:b7:49:7a:24:fc:bd:8b:88: cd:c9:9b:35:73:d3:2d:b9:7c:7e:3f:4f:34:8d:76: cb:b9:25:27:9b:0f:6e:ba:7b:2b:03:67:f3:0b:6d: 51:1b:0c:9d:04:18:a9:1e:67:29:4c:42:72:ef:b8: a4:02:93:e8:3d:fc:4e:8d:cb:f6:35:f1:c6:69:22: 72:af:1f:e3:70:b2:df:e3:de:40:b6:c4:cd:95:67: af:8b:53:8b:0a:ee:4a:d3:f7:a3:e3:0f:b7:7d:e4: 0e:2d:9e:92:06:30:c0:8c:8b:54:6f:a0:63:82:d3: 07:07:68:70:58:ee:ac:68:71:66:90:98:2d:35:c4: 28:84:e2:89:11:77:fa:10:b2:d3:26:4f:1b:2d:fb: 60:f9:2b:f0:65:b1:08:eb:31:8c:aa:dd:e6:54:0c: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:EA:6E:B6:85:3C:5C:9D:FD:74:73:34:AB:99:0F:CE:0B:A6:96 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/dNbqbraFPFyd_XRzNKuZD84LppY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.222.28.0/22 Signature Algorithm: sha256WithRSAEncryption 16:5d:ab:6a:62:5f:f0:6b:40:89:08:d4:bf:c3:d2:aa:e2:e4: 6b:86:a7:30:5e:3f:f8:8b:4c:e1:95:c6:de:91:36:ca:7a:87: ae:fd:74:9c:31:49:d4:7c:85:9b:32:fc:ce:74:56:48:2b:a1: 2e:94:9b:53:93:aa:ca:b4:a8:31:a0:72:9a:9a:11:07:43:ea: f5:a7:34:29:7b:10:5d:22:f0:bf:51:56:56:60:3c:9f:bd:a9: a3:fd:25:71:b1:64:1c:36:95:bb:29:51:92:8c:83:46:53:8a: 95:b0:e4:e6:de:7e:2c:83:b4:1c:15:55:64:63:ac:67:89:91: 47:9d:1e:d5:72:11:43:bc:de:16:42:74:bc:3b:dd:af:24:e5: 00:b0:e5:0a:b1:41:59:8c:1f:0b:f5:e1:0e:34:d1:ec:f2:aa: 71:d5:21:95:ae:3f:ea:c0:90:4c:67:f6:f9:77:72:1e:7f:c0: 48:c4:42:5d:ed:7b:e4:3d:78:5d:dc:3e:e2:ed:42:f2:29:c8: fe:d1:e0:83:0e:e7:ad:94:2b:cb:03:f0:65:47:7c:b0:7d:64: dc:c7:a3:02:cc:48:a8:7c:25:97:56:12:f5:cc:f3:07:6e:18: 74:3a:c2:1b:96:66:3d:0d:23:27:bd:5f:64:b4:81:45:79:c6: 14:0e:40:90 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEjYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc0RDZFQTZFQjY4NTND NUM5REZENzQ3MzM0QUI5OTBGQ0UwQkE2OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChZvdMAlPiISQA1iwurrSHd9GWnB/o4wXcq+6nk7HYyFMOOPoo ki+1JF7Nbh9KrhQd/tKJEIKySuUz5tEUkRJmAlzPrLNqRZ610tYlnlRvG2yMBnYY ZRD6fY8T53Oi1XS3SXok/L2LiM3JmzVz0y25fH4/TzSNdsu5JSebD266eysDZ/ML bVEbDJ0EGKkeZylMQnLvuKQCk+g9/E6Ny/Y18cZpInKvH+Nwst/j3kC2xM2VZ6+L U4sK7krT96PjD7d95A4tnpIGMMCMi1RvoGOC0wcHaHBY7qxocWaQmC01xCiE4okR d/oQstMmTxst+2D5K/BlsQjrMYyq3eZUDCu7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUdNbqbraFPFyd/XRzNKuZD84LppYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZE5icWJyYUZQRnlkX1hSek5LdVpE ODRMcHBZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveHDAN BgkqhkiG9w0BAQsFAAOCAQEAFl2ramJf8GtAiQjUv8PSquLka4anMF4/+ItM4ZXG 3pE2ynqHrv10nDFJ1HyFmzL8znRWSCuhLpSbU5OqyrSoMaBympoRB0Pq9ac0KXsQ XSLwv1FWVmA8n72po/0lcbFkHDaVuylRkoyDRlOKlbDk5t5+LIO0HBVVZGOsZ4mR R50e1XIRQ7zeFkJ0vDvdryTlALDlCrFBWYwfC/XhDjTR7PKqcdUhla4/6sCQTGf2 +XdyHn/ASMRCXe175D14Xdw+4u1C8inI/tHggw7nrZQrywPwZUd8sH1k3MejAsxI qHwll1YS9czzB24YdDrCG5ZmPQ0jJ71fZLSBRXnGFA5AkA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:22:26 2025 by rpki-client