$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa File: yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa (raw, json) Hash identifier: RIHWCqhtt1KLhihrevVIANWbxdErCTwA4k8UX53fSzI= Subject key identifier: C8:D2:D6:B6:A6:9A:58:E0:59:07:3D:BD:88:13:2D:2E:9E:3F:13:E6 Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 123B Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa Signing time: Fri 22 Aug 2025 08:49:08 +0000 ROA not before: Fri 22 Aug 2025 08:49:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 203.217.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4667 (0x123b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C8D2D6B6A69A58E059073DBD88132D2E9E3F13E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:7c:2e:2d:73:0c:e3:b4:fb:fa:1b:a8:01: 4c:e3:b9:33:db:d7:a0:b6:d0:f7:38:5c:59:61:aa: 22:63:9d:6e:d8:3a:fc:52:cd:1e:a4:58:db:f2:34: d8:54:b1:35:07:1e:02:11:aa:89:19:b3:53:06:aa: f2:51:73:64:a1:2c:d8:04:e6:5c:6f:63:33:0d:b0: 78:08:69:56:30:a6:c9:c3:49:ce:8a:0a:cc:c7:65: 1c:e7:a4:ea:6f:95:e5:e8:6c:56:9c:2d:4f:1b:9a: 4e:f1:49:a3:9c:27:45:e4:e9:16:98:1f:1d:6a:02: ad:ac:a9:92:ff:6c:03:06:07:60:11:b3:dc:b6:81: cb:33:d1:1e:f2:8d:4c:22:b5:97:49:00:81:d2:c0: ce:9f:5b:fa:80:eb:e6:7c:32:58:ee:35:ab:7b:13: ff:c5:51:27:9a:a0:e8:bf:20:b2:43:15:f9:e6:b3: cc:68:df:a5:08:3a:7e:50:90:c6:1b:25:6d:d8:27: 4a:1f:07:10:df:26:e0:e7:f5:51:d4:63:8f:0b:15: 73:59:4a:69:f7:72:c3:2d:58:37:4c:59:52:98:26: 80:52:0b:00:2f:f5:f8:e6:8e:b1:37:db:df:d3:b9: 6b:b1:60:8d:2e:3a:ee:c8:95:73:d7:b1:f3:0a:40: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D2:D6:B6:A6:9A:58:E0:59:07:3D:BD:88:13:2D:2E:9E:3F:13:E6 X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yNLWtqaaWOBZBz29iBMtLp4_E-Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.217.96.0/19 Signature Algorithm: sha256WithRSAEncryption 00:6a:3d:a3:aa:9f:f3:c4:57:b0:6f:cc:67:d2:b6:7d:03:60: 8f:05:a6:7b:fc:5e:8a:d0:76:4c:fc:92:f4:f6:58:df:f3:0d: dd:2f:a6:f8:81:9d:9a:67:50:3f:8a:5c:08:3f:33:b7:01:e7: 07:46:7d:92:2d:0b:b1:4e:c3:ea:e0:08:c3:c8:51:ae:f4:62: 4e:f6:c9:93:72:ff:6d:ea:21:bd:26:e9:d8:84:90:b0:6a:b4: fc:ed:ec:4f:bb:6d:41:ce:5d:4a:e2:bd:81:19:42:68:6f:4a: cc:5c:83:07:45:bc:6d:a3:87:9c:f6:05:4b:1f:4e:7a:75:19: 4b:eb:a2:48:68:d8:ca:bd:05:ca:79:a2:41:fc:d9:23:a8:30: 86:3a:75:85:1c:81:11:71:b7:42:62:b0:76:ea:cd:cb:6e:ea: 55:85:fc:f3:35:d8:09:b1:30:67:56:98:db:d5:3e:ad:4e:6d: 46:00:0c:a8:3b:01:ec:dc:d7:74:10:d9:95:77:e7:ac:44:dc: 04:69:4e:14:ff:27:6b:0c:54:b6:fe:5b:54:77:ed:cd:a8:50: 89:ac:91:e0:00:a7:17:8d:44:d7:3d:e2:3e:b5:f1:56:49:05: e9:ec:1e:3f:93:28:53:1c:00:ef:a1:f1:a7:db:9c:81:ba:48: 06:9f:9b:fa -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM4RDJENkI2QTY5QTU4 RTA1OTA3M0RCRDg4MTMyRDJFOUUzRjEzRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwYHwuLXMM47T7+huoAUzjuTPb16C20Pc4XFlhqiJjnW7YOvxS zR6kWNvyNNhUsTUHHgIRqokZs1MGqvJRc2ShLNgE5lxvYzMNsHgIaVYwpsnDSc6K CszHZRznpOpvleXobFacLU8bmk7xSaOcJ0Xk6RaYHx1qAq2sqZL/bAMGB2ARs9y2 gcsz0R7yjUwitZdJAIHSwM6fW/qA6+Z8MljuNat7E//FUSeaoOi/ILJDFfnms8xo 36UIOn5QkMYbJW3YJ0ofBxDfJuDn9VHUY48LFXNZSmn3csMtWDdMWVKYJoBSCwAv 9fjmjrE329/TuWuxYI0uOu7IlXPXsfMKQEU5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUyNLWtqaaWOBZBz29iBMtLp4/E+YwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgveU5MV3RxYWFXT0JaQnoyOWlCTXRM cDRfRS1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcvZYDAN BgkqhkiG9w0BAQsFAAOCAQEAAGo9o6qf88RXsG/MZ9K2fQNgjwWme/xeitB2TPyS 9PZY3/MN3S+m+IGdmmdQP4pcCD8ztwHnB0Z9ki0LsU7D6uAIw8hRrvRiTvbJk3L/ beohvSbp2ISQsGq0/O3sT7ttQc5dSuK9gRlCaG9KzFyDB0W8baOHnPYFSx9OenUZ S+uiSGjYyr0FynmiQfzZI6gwhjp1hRyBEXG3QmKwdurNy27qVYX88zXYCbEwZ1aY 29U+rU5tRgAMqDsB7NzXdBDZlXfnrETcBGlOFP8nawxUtv5bVHftzahQiayR4ACn F41E1z3iPrXxVkkF6eweP5MoUxwA76Hxp9ucgbpIBp+b+g== -----END CERTIFICATE-----Generated at Mon Oct 20 17:39:51 2025 by rpki-client