$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/rE5wzEizhYAYcAhbY3x6a9-yCPQ.roa File: rE5wzEizhYAYcAhbY3x6a9-yCPQ.roa (raw, json) Hash identifier: Ke/yhTdjNunslXlLHzN6ATGPQjHs37/ihpuI/sbNqk4= Subject key identifier: AC:4E:70:CC:48:B3:85:80:18:70:08:5B:63:7C:7A:6B:DF:B2:08:F4 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1233 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/rE5wzEizhYAYcAhbY3x6a9-yCPQ.roa Signing time: Fri 22 Aug 2025 08:49:06 +0000 ROA not before: Fri 22 Aug 2025 08:49:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 121.254.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4659 (0x1233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AC4E70CC48B385801870085B637C7A6BDFB208F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:22:7e:f4:6a:55:63:67:cb:cf:5b:96:21: 33:5a:98:9a:2b:85:96:49:8a:ff:12:90:65:d0:5c: b0:9b:fa:4e:39:c7:3c:62:e5:e0:84:02:7a:d4:53: a9:1e:6f:0e:09:2c:81:84:0b:ca:d9:c2:6c:b6:d4: cb:f9:b8:3d:a9:80:42:3c:a4:8e:3a:fd:a1:22:61: e5:91:eb:2b:6a:c9:25:db:8e:66:ca:16:d5:7b:4e: 8a:cb:70:50:00:fb:fe:48:d7:bd:fb:eb:eb:66:69: d6:34:71:d6:76:33:44:a9:eb:c0:39:7a:66:f9:bd: f9:d9:dd:52:13:65:81:d2:e6:cb:05:d3:38:08:e0: e5:cf:1d:a4:85:c2:49:70:42:92:bc:ca:c8:d3:f1: ec:26:9f:47:36:5b:8b:25:82:f4:5b:2c:17:73:85: 92:75:1d:a7:ec:94:13:2a:e1:0c:c0:55:47:e9:53: ba:5f:5e:0f:51:35:e8:91:45:58:8e:37:b3:37:77: 43:90:c6:d7:6b:37:80:bb:f4:97:b6:41:36:b0:2d: d1:3c:14:1a:f0:48:7c:20:4e:de:72:97:4e:d2:4e: d0:e4:9e:a3:5c:a4:45:7b:15:8c:b4:bf:23:f9:f1: 37:0c:e2:17:e9:3a:8a:6f:be:b2:80:a6:92:d0:4d: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4E:70:CC:48:B3:85:80:18:70:08:5B:63:7C:7A:6B:DF:B2:08:F4 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/rE5wzEizhYAYcAhbY3x6a9-yCPQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.254.72.0/21 Signature Algorithm: sha256WithRSAEncryption 29:ee:b6:2d:f6:b1:ad:d2:48:ad:56:df:aa:4a:05:4d:3b:8e: 73:c7:8d:61:b5:60:bf:d5:23:e3:c9:6a:80:89:8f:46:00:1c: b3:3e:fc:64:d6:b8:cb:29:fd:18:ea:ad:15:8b:25:2d:94:e5: 51:49:3d:fc:2d:a6:18:77:19:70:5f:03:d3:0b:2a:21:b6:f5: 55:65:8a:50:20:f3:02:4d:90:f1:5a:2e:83:a3:94:b0:ec:89: 07:b5:9e:15:65:4c:3c:d5:30:21:43:2a:f6:bc:54:0e:24:3e: db:1f:a3:11:b7:44:99:ce:24:f4:6b:e5:46:2f:f7:dc:d4:8a: f8:64:2c:a2:fd:52:77:fc:59:f7:e4:8b:02:67:fe:a3:95:d5: 62:86:bb:0b:03:98:6b:80:69:00:54:bb:3e:08:b9:61:88:ac: f4:42:5b:9c:41:45:a6:1d:15:0f:63:4b:f6:3a:d6:00:e7:d4: 2c:91:ba:b3:18:f1:76:67:0a:ec:7e:16:94:b4:ab:90:cb:33: fa:79:ed:ef:d7:78:61:61:34:1a:db:09:8b:7d:41:a0:14:5f: 91:64:d3:4a:5c:df:9a:9a:31:eb:35:32:f5:ae:83:83:98:99: aa:d7:22:d8:ec:0a:20:2c:5c:2a:d3:f0:89:8b:81:b6:8c:53: eb:ea:49:28 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFDNEU3MENDNDhCMzg1 ODAxODcwMDg1QjYzN0M3QTZCREZCMjA4RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkOCJ+9GpVY2fLz1uWITNamJorhZZJiv8SkGXQXLCb+k45xzxi 5eCEAnrUU6kebw4JLIGEC8rZwmy21Mv5uD2pgEI8pI46/aEiYeWR6ytqySXbjmbK FtV7TorLcFAA+/5I17376+tmadY0cdZ2M0Sp68A5emb5vfnZ3VITZYHS5ssF0zgI 4OXPHaSFwklwQpK8ysjT8ewmn0c2W4slgvRbLBdzhZJ1HafslBMq4QzAVUfpU7pf Xg9RNeiRRViON7M3d0OQxtdrN4C79Je2QTawLdE8FBrwSHwgTt5yl07STtDknqNc pEV7FYy0vyP58TcM4hfpOopvvrKAppLQTZA7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUrE5wzEizhYAYcAhbY3x6a9+yCPQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvckU1d3pFaXpoWUFZY0FoYlkzeDZh OS15Q1BRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+SDAN BgkqhkiG9w0BAQsFAAOCAQEAKe62LfaxrdJIrVbfqkoFTTuOc8eNYbVgv9Uj48lq gImPRgAcsz78ZNa4yyn9GOqtFYslLZTlUUk9/C2mGHcZcF8D0wsqIbb1VWWKUCDz Ak2Q8Voug6OUsOyJB7WeFWVMPNUwIUMq9rxUDiQ+2x+jEbdEmc4k9GvlRi/33NSK +GQsov1Sd/xZ9+SLAmf+o5XVYoa7CwOYa4BpAFS7Pgi5YYis9EJbnEFFph0VD2NL 9jrWAOfULJG6sxjxdmcK7H4WlLSrkMsz+nnt79d4YWE0GtsJi31BoBRfkWTTSlzf mpox6zUy9a6Dg5iZqtci2OwKICxcKtPwiYuBtoxT6+pJKA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:19:47 2025 by rpki-client