$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/nbDDB6CdOfaj6WHT-WPKfkZVQM8.roa File: nbDDB6CdOfaj6WHT-WPKfkZVQM8.roa (raw, json) Hash identifier: 9NOq7YwzNYSSG2rwTOSYea4plmdanO9fPk6ZsQ8DQTU= Subject key identifier: 9D:B0:C3:07:A0:9D:39:F6:A3:E9:61:D3:F9:63:CA:7E:46:55:40:CF Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1289 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nbDDB6CdOfaj6WHT-WPKfkZVQM8.roa Signing time: Fri 22 Aug 2025 08:49:26 +0000 ROA not before: Fri 22 Aug 2025 08:49:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 182.155.0.0/16 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4745 (0x1289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9DB0C307A09D39F6A3E961D3F963CA7E465540CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:15:ba:6e:61:f9:4f:12:db:83:7f:97:41: f2:1f:34:8a:79:63:95:ac:2b:c5:44:de:f6:7c:e6: 4b:69:04:09:41:b6:ce:a2:44:b4:c0:6a:f9:16:3b: 5f:39:98:bb:ac:12:17:e1:0a:01:4e:b1:7a:6d:b6: e7:f9:80:1b:2d:6f:98:83:0d:00:b1:7b:41:f3:cb: 64:2f:95:e6:25:d8:a7:40:60:23:65:89:1c:70:4e: aa:87:7e:19:d0:7a:78:67:e6:a9:89:06:cd:d0:a7: f9:57:bf:d0:ab:29:31:44:1b:a5:e4:6a:1a:e3:e0: 86:7b:d7:c6:f7:96:69:dc:6c:37:bf:0b:71:52:2b: d3:5e:15:be:02:4c:71:e3:1d:f3:02:66:21:cc:84: 70:3e:5d:70:d6:39:57:8b:4f:dc:ac:dd:a0:7b:92: 7a:78:4d:50:07:ab:dd:7b:48:61:5c:0c:33:71:6f: 9d:b0:cc:9d:35:a3:6e:b3:6a:61:96:da:d3:6a:a1: 09:40:38:9e:9c:a3:c1:04:e1:4b:d3:01:7d:43:1f: 00:6b:55:3d:4e:10:e0:9a:f2:e7:36:4b:43:ac:78: b2:8c:8b:58:16:cd:6b:98:91:69:ba:72:88:c3:43: 2f:f7:1d:fd:e4:ad:dd:d3:a5:58:5a:0d:9e:48:7a: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:C3:07:A0:9D:39:F6:A3:E9:61:D3:F9:63:CA:7E:46:55:40:CF X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nbDDB6CdOfaj6WHT-WPKfkZVQM8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.155.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:88:9a:a9:33:3b:ad:07:4f:53:e2:74:2c:ec:26:6f:8e:3a: 19:7d:6b:7a:5a:68:15:c2:7a:66:08:b1:06:1c:85:0d:0d:c9: 67:fb:a4:e2:19:2f:e2:33:9d:bf:eb:26:38:9f:ca:06:36:85: 3e:32:ad:7b:d6:dd:ed:04:4e:d9:ea:5c:1c:a1:88:17:16:4f: 95:69:b0:62:64:d8:e4:3e:b5:dd:29:d9:8a:bf:bf:65:55:15: 5c:3a:7d:f4:d7:8a:ea:d0:28:74:56:a7:18:bf:f6:c0:71:da: 24:d7:55:97:06:28:58:40:38:ca:83:a9:c7:84:d1:15:82:14: 0b:d3:31:a3:31:ed:cf:8f:d4:fd:20:4f:a1:95:be:01:62:f1: 1d:9d:10:35:cf:06:c4:c9:17:29:49:42:87:8f:85:c3:47:9b: 50:02:a6:03:1e:40:dc:ef:6d:7a:7b:7b:fc:5a:b0:7b:cc:45: 02:90:d9:ca:2e:69:6e:c2:b4:bd:83:86:b8:68:5b:cd:3a:2b: 5d:d6:14:56:77:90:5e:5f:92:6d:67:fb:52:8f:07:f3:17:9c: 8c:73:ad:4d:57:ad:bc:0a:53:a1:80:ec:e5:74:f6:49:e5:7c: df:6a:b9:6e:c9:07:fc:3b:60:2c:67:d3:ec:85:ed:bf:a3:f6: 3e:9f:74:57 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlEQjBDMzA3QTA5RDM5 RjZBM0U5NjFEM0Y5NjNDQTdFNDY1NTQwQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCheBW6bmH5TxLbg3+XQfIfNIp5Y5WsK8VE3vZ85ktpBAlBts6i RLTAavkWO185mLusEhfhCgFOsXpttuf5gBstb5iDDQCxe0Hzy2QvleYl2KdAYCNl iRxwTqqHfhnQenhn5qmJBs3Qp/lXv9CrKTFEG6Xkahrj4IZ718b3lmncbDe/C3FS K9NeFb4CTHHjHfMCZiHMhHA+XXDWOVeLT9ys3aB7knp4TVAHq917SGFcDDNxb52w zJ01o26zamGW2tNqoQlAOJ6co8EE4UvTAX1DHwBrVT1OEOCa8uc2S0OseLKMi1gW zWuYkWm6cojDQy/3Hf3krd3TpVhaDZ5IegzJAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUnbDDB6CdOfaj6WHT+WPKfkZVQM8wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbmJEREI2Q2RPZmFqNldIVC1XUEtm a1pWUU04LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALabMA0G CSqGSIb3DQEBCwUAA4IBAQCfiJqpMzutB09T4nQs7CZvjjoZfWt6WmgVwnpmCLEG HIUNDcln+6TiGS/iM52/6yY4n8oGNoU+Mq171t3tBE7Z6lwcoYgXFk+VabBiZNjk PrXdKdmKv79lVRVcOn3014rq0Ch0VqcYv/bAcdok11WXBihYQDjKg6nHhNEVghQL 0zGjMe3Pj9T9IE+hlb4BYvEdnRA1zwbEyRcpSUKHj4XDR5tQAqYDHkDc7216e3v8 WrB7zEUCkNnKLmluwrS9g4a4aFvNOitd1hRWd5BeX5JtZ/tSjwfzF5yMc61NV628 ClOhgOzldPZJ5XzfarluyQf8O2AsZ9Pshe2/o/Y+n3RX -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:29 2025 by rpki-client