$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ts3e05xzIIFV85zaohuJ3HyTL0I.roa File: ts3e05xzIIFV85zaohuJ3HyTL0I.roa (raw, json) Hash identifier: iDIbVKWpsJmKm91wPa1nep9av5e78l5rw+TlKCOpVSQ= Subject key identifier: B6:CD:DE:D3:9C:73:20:81:55:F3:9C:DA:A2:1B:89:DC:7C:93:2F:42 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1299 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ts3e05xzIIFV85zaohuJ3HyTL0I.roa Signing time: Fri 22 Aug 2025 08:49:30 +0000 ROA not before: Fri 22 Aug 2025 08:49:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.217.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4761 (0x1299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B6CDDED39C73208155F39CDAA21B89DC7C932F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:1b:21:ca:ac:73:85:5f:1d:57:b8:ce:b1: 81:fe:44:56:c8:51:54:44:57:ae:0c:1c:db:1d:96: 15:e0:d2:fa:44:ba:5a:6c:d0:87:17:18:d1:bb:a6: 58:31:9e:01:44:f7:50:3b:08:51:7f:fb:ea:04:a5: 5e:64:c7:b7:4a:8e:70:51:c6:fd:f7:b1:3c:30:25: 61:86:9f:0a:31:1a:a1:2f:f6:54:9b:25:c3:e9:00: 2d:54:1a:61:2b:ba:3d:b8:f0:05:a9:b4:98:62:62: 12:8e:9a:7e:bd:a4:a3:be:11:81:f4:77:01:76:d4: 8c:9a:1d:1c:c4:e5:7d:5f:75:b7:3e:60:45:a7:36: a4:00:6c:62:52:c2:61:ef:0d:d5:3f:b4:d3:a3:6e: c6:b4:4d:4e:21:01:88:2c:a9:9c:33:a5:86:c4:16: f9:d1:5f:b3:8f:68:d9:41:52:ed:d6:a4:a3:e8:35: 5b:e6:79:e0:ba:ca:10:54:04:21:11:2f:5c:28:b0: 23:3b:a4:69:5f:70:e7:9e:a0:70:79:53:0e:13:03: 4c:7e:c4:7d:8e:a5:c8:32:14:ca:9d:6f:5e:3e:64: 1b:33:67:c3:73:47:2b:c1:e2:9a:6b:d6:39:da:11: 25:c3:0d:9d:f0:dd:8b:0a:dd:de:ca:fa:53:5c:c5: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CD:DE:D3:9C:73:20:81:55:F3:9C:DA:A2:1B:89:DC:7C:93:2F:42 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ts3e05xzIIFV85zaohuJ3HyTL0I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.120.0/21 Signature Algorithm: sha256WithRSAEncryption a4:ed:a4:ca:af:01:5e:a9:41:f4:64:e0:8b:f5:a9:47:4c:a8: 68:13:05:e1:8f:35:cc:e6:6f:83:9f:53:90:3c:6a:dc:01:0c: 2f:ec:c1:26:02:32:fc:cf:c7:51:e9:78:8c:3c:4a:db:61:30: e0:87:d3:36:00:79:27:76:ac:b7:8a:b1:0a:54:9d:b6:71:b7: 9e:d8:5f:13:7c:f4:16:94:c3:5d:d2:6c:77:f1:da:9e:13:8d: 88:22:b1:4a:9e:8d:9e:bd:77:60:58:51:eb:6d:e6:9a:59:3b: 57:1b:88:4c:92:61:50:f0:5d:62:91:21:65:36:14:ea:fb:bc: 0d:85:37:82:9b:80:e4:32:8b:aa:6e:7a:5e:af:ad:f6:40:77: 9f:8d:6c:28:80:39:7b:e0:17:61:7e:99:5e:66:98:eb:7d:2d: 95:bf:21:81:e8:66:6e:31:ba:50:00:0a:b1:83:a5:b9:8d:7f: 48:8f:8d:66:f0:73:53:66:1f:33:bd:7c:99:76:de:30:a1:94: 8f:e1:70:37:b5:51:a4:6d:e5:5b:9c:98:6a:51:65:fb:fd:e5: b7:ec:60:1e:6a:87:5d:73:f4:ad:87:42:8f:9d:f3:36:72:10: 0c:22:fd:b5:07:ba:e5:11:b7:a7:22:3d:c0:ef:83:f6:c5:b6: 71:2e:b5:4b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEpkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI2Q0RERUQzOUM3MzIw ODE1NUYzOUNEQUEyMUI4OURDN0M5MzJGNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDUBshyqxzhV8dV7jOsYH+RFbIUVREV64MHNsdlhXg0vpEulps 0IcXGNG7plgxngFE91A7CFF/++oEpV5kx7dKjnBRxv33sTwwJWGGnwoxGqEv9lSb JcPpAC1UGmEruj248AWptJhiYhKOmn69pKO+EYH0dwF21IyaHRzE5X1fdbc+YEWn NqQAbGJSwmHvDdU/tNOjbsa0TU4hAYgsqZwzpYbEFvnRX7OPaNlBUu3WpKPoNVvm eeC6yhBUBCERL1wosCM7pGlfcOeeoHB5Uw4TA0x+xH2OpcgyFMqdb14+ZBszZ8Nz RyvB4ppr1jnaESXDDZ3w3YsK3d7K+lNcxVCDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUts3e05xzIIFV85zaohuJ3HyTL0IwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvdHMzZTA1eHpJSUZWODV6YW9odUoz SHlUTDBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8vZeDAN BgkqhkiG9w0BAQsFAAOCAQEApO2kyq8BXqlB9GTgi/WpR0yoaBMF4Y81zOZvg59T kDxq3AEML+zBJgIy/M/HUel4jDxK22Ew4IfTNgB5J3ast4qxClSdtnG3nthfE3z0 FpTDXdJsd/HanhONiCKxSp6Nnr13YFhR623mmlk7VxuITJJhUPBdYpEhZTYU6vu8 DYU3gpuA5DKLqm56Xq+t9kB3n41sKIA5e+AXYX6ZXmaY630tlb8hgehmbjG6UAAK sYOluY1/SI+NZvBzU2YfM718mXbeMKGUj+FwN7VRpG3lW5yYalFl+/3lt+xgHmqH XXP0rYdCj53zNnIQDCL9tQe65RG3pyI9wO+D9sW2cS61Sw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:15:05 2025 by rpki-client