$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/zGqeiiPruSr2biU_XbPbul94r88.roa File: zGqeiiPruSr2biU_XbPbul94r88.roa (raw, json) Hash identifier: CIv1CpocJOY5qfjKr/7KVEEXmefn7kWMA6n1EjHrA9U= Subject key identifier: CC:6A:9E:8A:23:EB:B9:2A:F6:6E:25:3F:5D:B3:DB:BA:5F:78:AF:CF Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1276 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zGqeiiPruSr2biU_XbPbul94r88.roa Signing time: Fri 22 Aug 2025 08:49:22 +0000 ROA not before: Fri 22 Aug 2025 08:49:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 113.61.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4726 (0x1276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CC6A9E8A23EBB92AF66E253F5DB3DBBA5F78AFCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c9:5e:b4:6c:a0:81:1f:54:4c:9e:be:14:a3: 7a:9e:06:ec:c1:67:40:d6:98:04:86:11:97:ce:71: 9b:54:1c:45:a4:38:f8:64:1d:e7:b4:95:4d:64:5f: 2b:23:0b:90:e1:56:3f:4f:72:ed:df:c4:23:fa:d2: d9:02:8f:b5:db:63:b7:0d:06:10:01:31:56:35:ef: d0:47:9b:24:37:17:40:91:f3:ce:56:2b:d0:ca:3a: b7:23:b5:24:85:c0:be:86:86:a3:b4:7b:b2:b4:b6: 8f:07:c9:c3:c8:54:48:eb:ae:8c:d2:3b:5e:a5:2e: 30:77:c2:cb:af:46:be:fd:7e:0a:bb:9e:c9:8c:67: 73:d5:f4:19:e4:54:d3:1a:82:47:05:32:03:a9:26: 90:84:1c:4c:1e:a9:6d:39:1c:94:d8:45:c2:11:a0: 14:8d:3e:74:3d:65:11:1f:11:ab:a1:20:f0:78:9f: 78:e4:39:73:e4:7c:94:39:47:23:7a:66:22:aa:b6: 99:88:26:e4:ae:7a:3d:ae:2a:38:b6:fd:b5:c8:4a: 6d:23:0d:54:53:50:38:be:3e:b7:af:d0:a1:d5:2f: ac:c9:a8:c8:40:84:8d:b0:27:a1:e0:d6:cc:05:bf: 36:e4:ef:ff:a4:eb:b2:e9:6d:b5:82:fa:f5:33:b1: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6A:9E:8A:23:EB:B9:2A:F6:6E:25:3F:5D:B3:DB:BA:5F:78:AF:CF X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zGqeiiPruSr2biU_XbPbul94r88.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.208.0/20 Signature Algorithm: sha256WithRSAEncryption 99:a2:ae:05:fb:96:b6:68:8f:c5:3c:8a:29:5f:3b:de:ab:3d: 91:82:b3:03:6f:c1:3f:6d:86:6d:3e:12:e0:2d:49:96:83:a4: e4:34:d2:15:bf:e1:7a:c9:1a:e6:05:55:75:ab:97:89:3b:de: 6a:5a:53:f6:38:8c:75:a8:76:94:1c:8e:05:bf:f0:2e:36:55: 10:45:d8:7f:b7:b1:af:37:91:ba:94:0c:47:c5:e0:4f:07:cd: 9d:be:e8:ab:4b:b2:e9:68:42:5d:1f:15:75:41:bd:a3:a7:a1: 53:63:ef:5c:b9:66:42:f2:4f:04:bf:26:35:c8:d2:01:df:dc: 20:4d:3b:16:4e:77:c4:cd:cb:ff:d6:f0:23:8a:61:a3:12:d4: d3:5f:c9:be:0e:f4:84:a9:ca:1f:4f:61:5e:a1:62:6c:75:11: 6c:63:a7:19:2f:b1:e9:c7:86:fe:a6:b5:6c:27:ac:6c:b4:a8: 8c:b6:13:ff:24:d9:c6:ca:4b:15:7d:71:39:35:9d:19:87:86: d3:f3:5d:a9:ef:64:78:e4:6f:1c:1e:1f:4f:37:ac:fc:a6:28: 49:f8:e0:98:fa:a9:fc:2c:76:15:b0:bd:89:89:0c:b7:42:e8: 06:ce:89:a2:df:2e:ea:d0:d9:36:dc:2e:ce:cc:a0:2c:26:b4: 0e:07:3d:d6 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEnYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENDNkE5RThBMjNFQkI5 MkFGNjZFMjUzRjVEQjNEQkJBNUY3OEFGQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuyV60bKCBH1RMnr4Uo3qeBuzBZ0DWmASGEZfOcZtUHEWkOPhk Hee0lU1kXysjC5DhVj9Pcu3fxCP60tkCj7XbY7cNBhABMVY179BHmyQ3F0CR885W K9DKOrcjtSSFwL6GhqO0e7K0to8HycPIVEjrrozSO16lLjB3wsuvRr79fgq7nsmM Z3PV9BnkVNMagkcFMgOpJpCEHEweqW05HJTYRcIRoBSNPnQ9ZREfEauhIPB4n3jk OXPkfJQ5RyN6ZiKqtpmIJuSuej2uKji2/bXISm0jDVRTUDi+Prev0KHVL6zJqMhA hI2wJ6Hg1swFvzbk7/+k67LpbbWC+vUzsc4XAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUzGqeiiPruSr2biU/XbPbul94r88wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvekdxZWlpUHJ1U3IyYmlVX1hiUGJ1 bDk0cjg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE90DAN BgkqhkiG9w0BAQsFAAOCAQEAmaKuBfuWtmiPxTyKKV873qs9kYKzA2/BP22GbT4S 4C1JloOk5DTSFb/heska5gVVdauXiTvealpT9jiMdah2lByOBb/wLjZVEEXYf7ex rzeRupQMR8XgTwfNnb7oq0uy6WhCXR8VdUG9o6ehU2PvXLlmQvJPBL8mNcjSAd/c IE07Fk53xM3L/9bwI4phoxLU01/Jvg70hKnKH09hXqFibHURbGOnGS+x6ceG/qa1 bCesbLSojLYT/yTZxspLFX1xOTWdGYeG0/Ndqe9keORvHB4fTzes/KYoSfjgmPqp /Cx2FbC9iYkMt0LoBs6Jot8u6tDZNtwuzsygLCa0Dgc91g== -----END CERTIFICATE-----Generated at Mon Oct 20 17:40:34 2025 by rpki-client