$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/oLo5vsko-jsDRWvxxFnYl28rDbI.roa File: oLo5vsko-jsDRWvxxFnYl28rDbI.roa (raw, json) Hash identifier: turCv2z6McYpK/xWDP3kehOyP7nh+k7wAGre7f4BIis= Subject key identifier: A0:BA:39:BE:C9:28:FA:3B:03:45:6B:F1:C4:59:D8:97:6F:2B:0D:B2 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 124B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oLo5vsko-jsDRWvxxFnYl28rDbI.roa Signing time: Fri 22 Aug 2025 08:49:11 +0000 ROA not before: Fri 22 Aug 2025 08:49:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.217.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4683 (0x124b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0BA39BEC928FA3B03456BF1C459D8976F2B0DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:76:47:ab:f4:09:54:7e:0c:d6:84:84:6e: b4:a2:55:f7:07:46:0b:fe:1b:44:c0:d7:a5:64:c2: bf:40:7b:17:ea:c0:c6:36:7a:bc:96:f2:c6:d0:39: e5:4a:3e:52:3f:c4:52:0e:60:aa:d5:1d:1a:9d:7f: 52:79:7f:e7:ef:cb:c8:7d:0b:18:3a:34:86:7b:26: 33:5b:91:23:0f:62:91:8b:46:04:c7:ed:8b:85:0b: 78:2b:b2:69:a5:2d:0d:59:ba:d1:e1:ff:42:73:c6: 88:ff:74:90:18:8d:b7:11:3f:ba:bb:2c:88:94:2f: c6:2b:79:8d:28:58:99:b7:17:2e:58:67:70:2a:38: 54:06:d5:95:9e:14:7c:26:dd:30:a6:83:9d:97:84: 41:db:06:68:0c:2b:89:78:96:29:8f:f4:6b:e5:b2: 0e:4d:09:97:fe:41:9d:1c:41:d9:80:64:39:43:c6: 92:42:01:04:78:f8:70:75:4e:74:25:a3:ed:8f:2e: f4:a8:88:63:66:46:b9:07:2c:b2:24:3d:bf:ac:88: 16:b0:25:e2:4d:ca:05:9d:e1:0c:f0:94:85:0b:51: a7:61:c7:f0:6b:d4:e6:5e:50:94:32:05:28:a0:9a: 83:c5:3e:91:11:b6:ca:fc:82:70:10:d0:ee:50:30: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:39:BE:C9:28:FA:3B:03:45:6B:F1:C4:59:D8:97:6F:2B:0D:B2 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oLo5vsko-jsDRWvxxFnYl28rDbI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.112.0/20 Signature Algorithm: sha256WithRSAEncryption 38:71:76:67:9c:b8:66:60:ca:74:5f:91:8c:34:65:4d:41:55: 21:db:56:8e:e1:e7:37:a2:64:86:c8:65:8f:2c:20:2f:1b:71: bd:a2:49:99:c5:5b:f5:32:1a:c8:7f:71:f1:9d:b2:df:aa:fe: 7c:68:a2:0d:ee:a3:e7:3c:7a:10:d2:25:5d:86:61:52:2c:48: 6c:07:d1:49:a0:6d:c8:6a:09:e2:26:63:8b:a4:52:36:96:ea: 9e:08:7d:f8:35:c2:32:17:0b:4e:1e:1e:79:21:4d:02:a0:b5: 71:60:87:a2:48:e8:61:14:62:59:90:9f:4b:fd:b3:8c:87:f6: c3:fc:4b:ff:d7:93:7f:17:6e:fa:67:01:52:31:41:04:c5:cf: 08:61:e7:1b:8d:41:cd:e1:30:1c:8b:06:0d:54:89:0f:e0:06: c7:e5:a8:1c:ba:37:04:ec:62:b0:86:9f:4f:0d:da:45:17:aa: e7:4f:25:62:7e:4a:17:38:b0:a4:0d:0d:fd:97:26:92:07:46: 27:6e:5c:5a:21:a0:bb:15:0b:b2:72:2b:34:37:2b:e2:56:6c: a6:85:b4:23:27:02:16:ae:e0:b8:53:6b:c4:1a:b5:bb:48:3c: 03:89:c4:87:ae:ff:da:74:b5:e7:c9:df:a9:79:2e:86:2a:b0: 15:67:c0:e3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwQkEzOUJFQzkyOEZB M0IwMzQ1NkJGMUM0NTlEODk3NkYyQjBEQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY83ZHq/QJVH4M1oSEbrSiVfcHRgv+G0TA16Vkwr9AexfqwMY2 eryW8sbQOeVKPlI/xFIOYKrVHRqdf1J5f+fvy8h9Cxg6NIZ7JjNbkSMPYpGLRgTH 7YuFC3grsmmlLQ1ZutHh/0Jzxoj/dJAYjbcRP7q7LIiUL8YreY0oWJm3Fy5YZ3Aq OFQG1ZWeFHwm3TCmg52XhEHbBmgMK4l4limP9Gvlsg5NCZf+QZ0cQdmAZDlDxpJC AQR4+HB1TnQlo+2PLvSoiGNmRrkHLLIkPb+siBawJeJNygWd4QzwlIULUadhx/Br 1OZeUJQyBSigmoPFPpERtsr8gnAQ0O5QMAZ9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUoLo5vsko+jsDRWvxxFnYl28rDbIwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvb0xvNXZza28tanNEUld2eHhGblls MjhyRGJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMvZcDAN BgkqhkiG9w0BAQsFAAOCAQEAOHF2Z5y4ZmDKdF+RjDRlTUFVIdtWjuHnN6Jkhshl jywgLxtxvaJJmcVb9TIayH9x8Z2y36r+fGiiDe6j5zx6ENIlXYZhUixIbAfRSaBt yGoJ4iZji6RSNpbqngh9+DXCMhcLTh4eeSFNAqC1cWCHokjoYRRiWZCfS/2zjIf2 w/xL/9eTfxdu+mcBUjFBBMXPCGHnG41BzeEwHIsGDVSJD+AGx+WoHLo3BOxisIaf Tw3aRReq508lYn5KFziwpA0N/ZcmkgdGJ25cWiGguxULsnIrNDcr4lZspoW0IycC Fq7guFNrxBq1u0g8A4nEh67/2nS158nfqXkuhiqwFWfA4w== -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:20 2025 by rpki-client