$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/hteA6KwpY-PcR0zcLL0vbQlSYk0.roa File: hteA6KwpY-PcR0zcLL0vbQlSYk0.roa (raw, json) Hash identifier: 7Ueru8oPkKRjbpuFsiOGh2IjoyCqw79cLbcwE2jrwlY= Subject key identifier: 86:D7:80:E8:AC:29:63:E3:DC:47:4C:DC:2C:BD:2F:6D:09:52:62:4D Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1273 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hteA6KwpY-PcR0zcLL0vbQlSYk0.roa Signing time: Fri 22 Aug 2025 08:49:21 +0000 ROA not before: Fri 22 Aug 2025 08:49:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 210.209.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4723 (0x1273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=86D780E8AC2963E3DC474CDC2CBD2F6D0952624D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a1:a3:39:41:1f:21:a0:d5:98:4c:63:f1:bf: ed:9a:b2:99:a3:6c:8b:9a:2d:67:ee:62:b9:52:58: 8c:ad:39:47:4a:17:74:64:ab:1c:82:a1:6d:da:ed: 24:37:a5:9b:90:7f:0e:f1:88:69:7f:a4:c6:29:a5: 3d:ab:27:1c:9a:91:40:c8:e1:c1:40:92:30:90:72: c5:39:27:95:a9:25:24:07:6b:62:54:a2:be:5a:d4: 8a:c4:c5:17:b0:dc:61:78:f0:3c:77:f0:3b:79:d5: 18:27:ce:6e:95:01:e7:25:30:5a:c2:69:81:49:6f: 16:a9:e9:b7:96:3c:88:70:63:b4:92:16:6e:c6:a7: 00:31:4c:76:a1:c1:6c:b5:52:d3:da:45:9a:21:c0: 1f:7f:32:64:4b:28:69:f5:21:b6:25:4b:1b:53:af: 12:e2:76:ea:1f:ac:70:57:c4:43:dc:b9:62:95:bf: d2:a3:a7:62:eb:2d:58:7b:54:85:2d:86:dd:4d:b2: 11:d5:23:4a:c8:5c:f3:a1:72:af:8e:1c:38:bf:38: 61:e9:35:03:49:18:e3:72:7c:f8:6b:7e:af:c1:bf: f8:36:d0:6b:ce:fb:2e:a2:1e:6c:92:ed:ea:4e:5b: 8b:fe:51:06:52:d5:c8:7d:53:a1:6a:91:ee:9d:10: 80:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D7:80:E8:AC:29:63:E3:DC:47:4C:DC:2C:BD:2F:6D:09:52:62:4D X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hteA6KwpY-PcR0zcLL0vbQlSYk0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.160.0/19 Signature Algorithm: sha256WithRSAEncryption 91:9e:9e:96:f7:b1:eb:15:e4:90:21:a5:3f:23:12:22:9d:2f: d4:a0:14:39:2e:b9:26:f1:7e:5e:44:e9:74:f9:15:a1:a0:84: 3a:32:00:83:11:f4:72:c6:e6:f3:3c:17:ad:2b:e1:d9:d4:12: d2:8b:ae:9f:ad:60:23:b4:3c:73:bf:82:e3:51:9c:bf:7b:36: 6b:cc:7a:df:d7:fe:bc:ce:0a:9c:c0:94:ee:83:dd:06:e6:16: 55:dd:d0:94:9c:63:76:23:ce:68:fe:79:6f:ef:19:1b:f1:cb: 9b:ac:21:fc:ec:ec:47:19:8b:57:88:8a:ad:92:69:5c:dd:1d: d5:1b:da:d0:7a:8c:f4:3e:0f:18:19:b1:ef:eb:82:2d:2a:e1: 77:06:8e:4e:29:dd:b2:0c:a0:e2:95:0a:a7:82:93:a8:d8:00: 4e:8c:f5:82:fc:c1:0b:ea:9d:ba:bc:6c:82:d4:d6:96:19:bd: 8a:ed:37:46:9d:40:47:fc:5d:5e:c9:d1:35:4c:50:b6:54:23: fe:6e:e4:b4:2b:b5:d2:a9:2c:c0:99:da:29:a3:2d:a5:fb:3d: 56:61:b9:d5:5c:08:27:80:5f:c6:8e:30:99:90:ff:2c:38:93: cb:a1:9e:19:0b:15:07:9c:c9:22:d3:a5:42:7d:82:b5:2a:95: df:cb:f6:5a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg2RDc4MEU4QUMyOTYz RTNEQzQ3NENEQzJDQkQyRjZEMDk1MjYyNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzoaM5QR8hoNWYTGPxv+2aspmjbIuaLWfuYrlSWIytOUdKF3Rk qxyCoW3a7SQ3pZuQfw7xiGl/pMYppT2rJxyakUDI4cFAkjCQcsU5J5WpJSQHa2JU or5a1IrExRew3GF48Dx38Dt51Rgnzm6VAeclMFrCaYFJbxap6beWPIhwY7SSFm7G pwAxTHahwWy1UtPaRZohwB9/MmRLKGn1IbYlSxtTrxLiduofrHBXxEPcuWKVv9Kj p2LrLVh7VIUtht1NshHVI0rIXPOhcq+OHDi/OGHpNQNJGONyfPhrfq/Bv/g20GvO +y6iHmyS7epOW4v+UQZS1ch9U6Fqke6dEID3AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUhteA6KwpY+PcR0zcLL0vbQlSYk0wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvaHRlQTZLd3BZLVBjUjB6Y0xMMHZi UWxTWWswLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdLRoDAN BgkqhkiG9w0BAQsFAAOCAQEAkZ6elvex6xXkkCGlPyMSIp0v1KAUOS65JvF+XkTp dPkVoaCEOjIAgxH0csbm8zwXrSvh2dQS0ouun61gI7Q8c7+C41Gcv3s2a8x639f+ vM4KnMCU7oPdBuYWVd3QlJxjdiPOaP55b+8ZG/HLm6wh/OzsRxmLV4iKrZJpXN0d 1Rva0HqM9D4PGBmx7+uCLSrhdwaOTindsgyg4pUKp4KTqNgAToz1gvzBC+qdurxs gtTWlhm9iu03Rp1AR/xdXsnRNUxQtlQj/m7ktCu10qkswJnaKaMtpfs9VmG51VwI J4Bfxo4wmZD/LDiTy6GeGQsVB5zJItOlQn2CtSqV38v2Wg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:22:25 2025 by rpki-client