$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/j0We9P7SAbQ6MVRyWZIAKe3BXFQ.roa File: j0We9P7SAbQ6MVRyWZIAKe3BXFQ.roa (raw, json) Hash identifier: jaauIUx2ulxvbr4wrGWyFsAXwviK9xJMA9sNKesufhE= Subject key identifier: 8F:45:9E:F4:FE:D2:01:B4:3A:31:54:72:59:92:00:29:ED:C1:5C:54 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 125D Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/j0We9P7SAbQ6MVRyWZIAKe3BXFQ.roa Signing time: Fri 22 Aug 2025 08:49:16 +0000 ROA not before: Fri 22 Aug 2025 08:49:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 121.254.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4701 (0x125d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F459EF4FED201B43A31547259920029EDC15C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:13:58:73:79:7b:89:90:bf:aa:18:2d:e7: e7:12:8a:18:89:70:c5:c2:ab:1b:16:cb:b7:bf:98: 4e:e7:c4:ed:c9:e9:2f:74:aa:1a:18:4f:7f:22:b7: e9:c8:9a:6a:06:2f:68:68:d2:20:9f:c9:a9:65:4c: 70:20:f6:57:b9:3b:ef:4f:65:c3:82:57:00:43:71: 58:ee:78:50:e8:d5:ae:b7:ca:fd:30:ad:7f:9a:f1: 20:e8:20:65:9d:de:c8:91:24:62:24:bd:cb:0a:24: c5:2a:82:13:f7:a5:88:27:49:21:17:65:51:c8:a6: d4:d5:12:8d:a9:24:06:d2:0a:09:3b:f7:04:2a:b0: b0:1e:b3:5f:6f:f1:2c:4c:f0:3b:ba:1b:52:fa:0b: 0b:b7:f0:35:3f:c5:65:00:22:89:3a:b7:fc:7c:13: bb:e9:5c:6a:c0:d6:0d:e7:06:1e:5a:45:19:ee:55: f5:fb:3f:00:0d:11:e1:b1:7b:04:c9:d3:3f:91:b0: 12:5b:57:e4:2e:41:62:24:44:3a:9a:d7:66:15:21: f7:33:a6:a4:2d:0d:90:32:2e:e7:e4:82:17:cd:04: 3f:70:a1:e0:b0:db:88:b4:a2:71:85:f1:fc:48:6b: 64:11:79:07:67:b4:85:54:78:7a:c9:1e:d5:25:9c: 7c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:45:9E:F4:FE:D2:01:B4:3A:31:54:72:59:92:00:29:ED:C1:5C:54 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/j0We9P7SAbQ6MVRyWZIAKe3BXFQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.96.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:57:f7:07:b9:d6:ff:69:80:93:9d:8e:89:d7:56:78:3e:cd: c7:2c:71:d8:a3:1f:d1:6a:17:2e:94:46:a5:ff:20:ee:71:e8: b9:83:37:aa:ed:f9:b3:a8:e1:ce:1c:27:0b:c2:f1:41:a6:28: bf:e1:52:b6:87:e2:34:52:6c:45:0e:62:02:36:8e:67:72:ca: 6a:24:80:d1:70:db:53:95:95:d4:a1:90:85:ed:84:18:ee:58: 70:86:6e:26:ef:f7:1b:92:07:84:23:a9:92:e0:2b:72:3c:97: c3:38:ce:6a:6c:a2:79:85:32:1b:58:8b:cf:c6:f8:4c:f6:3d: bc:d3:5c:84:9c:15:8b:a0:22:0a:3a:75:b3:d1:b4:1a:b5:92: 64:c9:fc:fe:17:b3:26:c5:ca:79:94:ea:40:c8:bc:14:31:c7: 31:7b:c6:da:73:c5:ef:a5:7e:1a:8b:20:dc:f0:2d:d9:ce:2a: b6:ab:7d:4f:20:a2:41:f3:bd:e5:5e:d5:cb:7b:b4:56:89:e7: ac:76:cc:04:a2:25:90:67:34:e7:81:ad:33:aa:25:61:49:c9: 07:f7:41:de:61:a9:4f:b8:b8:49:35:ed:50:88:f2:2a:32:63: de:08:32:1b:e0:b9:3a:63:f2:0b:d6:9d:7d:1d:bf:7b:74:95: 87:16:45:cc -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGNDU5RUY0RkVEMjAx QjQzQTMxNTQ3MjU5OTIwMDI5RURDMTVDNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwexNYc3l7iZC/qhgt5+cSihiJcMXCqxsWy7e/mE7nxO3J6S90 qhoYT38it+nImmoGL2ho0iCfyallTHAg9le5O+9PZcOCVwBDcVjueFDo1a63yv0w rX+a8SDoIGWd3siRJGIkvcsKJMUqghP3pYgnSSEXZVHIptTVEo2pJAbSCgk79wQq sLAes19v8SxM8Du6G1L6Cwu38DU/xWUAIok6t/x8E7vpXGrA1g3nBh5aRRnuVfX7 PwANEeGxewTJ0z+RsBJbV+QuQWIkRDqa12YVIfczpqQtDZAyLufkghfNBD9woeCw 24i0onGF8fxIa2QReQdntIVUeHrJHtUlnHyBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUj0We9P7SAbQ6MVRyWZIAKe3BXFQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvajBXZTlQN1NBYlE2TVZSeVdaSUFL ZTNCWEZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXn+YDAN BgkqhkiG9w0BAQsFAAOCAQEAPFf3B7nW/2mAk52OiddWeD7Nxyxx2KMf0WoXLpRG pf8g7nHouYM3qu35s6jhzhwnC8LxQaYov+FStofiNFJsRQ5iAjaOZ3LKaiSA0XDb U5WV1KGQhe2EGO5YcIZuJu/3G5IHhCOpkuArcjyXwzjOamyieYUyG1iLz8b4TPY9 vNNchJwVi6AiCjp1s9G0GrWSZMn8/hezJsXKeZTqQMi8FDHHMXvG2nPF76V+Gosg 3PAt2c4qtqt9TyCiQfO95V7Vy3u0VonnrHbMBKIlkGc054GtM6olYUnJB/dB3mGp T7i4STXtUIjyKjJj3ggyG+C5OmPyC9adfR2/e3SVhxZFzA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:25 2025 by rpki-client