$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/EmdpMiGtDWj6UDXU7fAuQB58YNY.roa File: EmdpMiGtDWj6UDXU7fAuQB58YNY.roa (raw, json) Hash identifier: 855lOrthtcjqCVJVA3+ITwDrJCMf5XQutu3Bgy2jZkM= Subject key identifier: 12:67:69:32:21:AD:0D:68:FA:50:35:D4:ED:F0:2E:40:1E:7C:60:D6 Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6 Certificate serial: 1002 Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/EmdpMiGtDWj6UDXU7fAuQB58YNY.roa Signing time: Fri 22 Aug 2025 08:44:15 +0000 ROA not before: Fri 22 Aug 2025 08:44:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17502 IP address blocks: 103.136.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4098 (0x1002) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6 Validity Not Before: Aug 22 08:44:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1267693221AD0D68FA5035D4EDF02E401E7C60D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:24:17:f6:9b:13:5f:27:5e:f9:7a:cd:1c: 57:e1:6e:20:ba:2f:c0:44:97:a5:52:61:9b:b2:58: 9e:26:dc:fd:c7:d4:59:92:bf:f3:38:a5:d6:9c:45: be:65:57:42:4e:60:dc:2f:14:d9:b5:79:d1:11:78: ce:ee:74:2b:54:6a:06:7b:c2:e3:01:5a:91:d6:b1: 5e:63:0d:4c:a8:dd:6d:60:1b:4d:a8:ff:a0:14:72: 38:a4:b6:51:b9:81:32:90:c0:c3:15:08:cb:72:f8: e5:cd:0d:c8:c6:11:e0:39:ca:b4:6d:ea:fc:85:9e: 26:a5:42:62:21:06:e7:b6:ac:5e:a4:5c:d3:2b:4a: 48:cb:c4:e1:67:35:61:27:18:f3:ed:cf:e0:6d:62: c9:3f:cd:2f:5c:14:d9:74:c6:57:16:9d:b0:83:48: d6:84:2a:0d:b7:f6:b0:a6:1e:da:31:24:0b:c1:f5: 63:9f:a6:d7:8e:84:15:21:54:68:be:d3:6f:3e:c4: 07:ff:ef:36:66:3f:11:19:72:06:00:ab:f4:7b:61: 53:ab:ae:23:c9:83:c2:c7:74:06:10:df:d2:2c:fd: f4:63:ca:e6:00:34:f9:bc:b1:d3:0e:d1:d9:d6:7c: 81:6d:79:69:a5:bc:5f:93:83:11:8e:a5:8d:9f:40: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:67:69:32:21:AD:0D:68:FA:50:35:D4:ED:F0:2E:40:1E:7C:60:D6 X509v3 Authority Key Identifier: keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/EmdpMiGtDWj6UDXU7fAuQB58YNY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.210.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:f3:03:1c:03:b9:0e:4b:3b:df:03:39:65:2a:b2:82:b2:1c: 78:9b:39:3d:33:58:a0:0a:2d:f9:13:12:ec:69:9d:04:45:c9: ce:74:14:22:72:f2:c0:28:09:12:97:9f:b5:ab:04:54:aa:de: dc:80:65:1a:a6:d4:7e:5f:76:f1:a8:5e:06:13:c3:84:12:30: 60:84:4c:10:0b:03:90:eb:4c:ec:37:54:d3:54:90:f9:31:81: a8:18:77:fe:97:92:1f:1e:d3:a1:68:a7:6c:41:69:98:c8:fb: e0:67:43:09:0b:16:f3:8f:45:0f:92:63:48:ed:fb:52:f5:ab: 83:59:a7:1d:80:5d:2d:a8:9f:d4:68:c1:e9:11:37:ce:04:96: 87:44:f1:3f:d4:e1:1b:95:f0:c1:28:c9:51:fc:7c:ae:88:49: 43:0f:4b:91:13:05:58:98:50:f8:b7:58:13:b5:13:31:33:10: 94:74:1a:8e:9f:07:f4:a1:60:a7:76:17:41:be:27:81:6e:9f: 5a:21:9a:ce:21:6d:d0:e7:dc:0f:ec:61:ca:0e:8e:fc:b9:f0: f7:a3:8b:24:12:44:12:a8:75:fb:7e:be:17:c6:9f:21:82:09: 87:45:29:82:ee:b0:9d:6d:68:e9:28:be:42:4e:72:bc:90:9c: 65:66:0d:a4 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjcx MDlBRTI1MEVGMkVDQUY3OUJGNDg5MEYwRDZDQkU1RTJEN0NDNjAeFw0yNTA4MjIw ODQ0MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEyNjc2OTMyMjFBRDBE NjhGQTUwMzVENEVERjAyRTQwMUU3QzYwRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJQSQX9psTXyde+XrNHFfhbiC6L8BEl6VSYZuyWJ4m3P3H1FmS v/M4pdacRb5lV0JOYNwvFNm1edEReM7udCtUagZ7wuMBWpHWsV5jDUyo3W1gG02o /6AUcjiktlG5gTKQwMMVCMty+OXNDcjGEeA5yrRt6vyFnialQmIhBue2rF6kXNMr SkjLxOFnNWEnGPPtz+BtYsk/zS9cFNl0xlcWnbCDSNaEKg239rCmHtoxJAvB9WOf pteOhBUhVGi+028+xAf/7zZmPxEZcgYAq/R7YVOrriPJg8LHdAYQ39Is/fRjyuYA NPm8sdMO0dnWfIFteWmlvF+TgxGOpY2fQGG7AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUEmdpMiGtDWj6UDXU7fAuQB58YNYwHwYDVR0jBBgwFoAUJxCa4lDvLsr3m/SJ Dw1svl4tfMYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1VBTkdT SElIL0p4Q2E0bER2THNyM21fU0pEdzFzdmw0dGZNWS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvSnhDYTRsRHZMc3IzbV9TSkR3MXN2bDR0Zk1ZLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1VBTkdTSElIL0VtZHBNaUd0RFdq NlVEWFU3ZkF1UUI1OFlOWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFniNIwDQYJKoZIhvcNAQELBQADggEBAG7zAxwDuQ5LO98DOWUqsoKyHHib OT0zWKAKLfkTEuxpnQRFyc50FCJy8sAoCRKXn7WrBFSq3tyAZRqm1H5fdvGoXgYT w4QSMGCETBALA5DrTOw3VNNUkPkxgagYd/6Xkh8e06Fop2xBaZjI++BnQwkLFvOP RQ+SY0jt+1L1q4NZpx2AXS2on9RowekRN84ElodE8T/U4RuV8MEoyVH8fK6ISUMP S5ETBViYUPi3WBO1EzEzEJR0Go6fB/ShYKd2F0G+J4Fun1ohms4hbdDn3A/sYcoO jvy58PejiyQSRBKodft+vhfGnyGCCYdFKYLusJ1taOkovkJOcryQnGVmDaQ= -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:04 2025 by rpki-client