$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/h21pnnElhjhiubpsLjdGcv_HoUw.roa File: h21pnnElhjhiubpsLjdGcv_HoUw.roa (raw, json) Hash identifier: fnsf06+zeatgdqZX+DZX8/9rAL76wuYMpisdn0D3DMc= Subject key identifier: 87:6D:69:9E:71:25:86:38:62:B9:BA:6C:2E:37:46:72:FF:C7:A1:4C Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 138D Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/h21pnnElhjhiubpsLjdGcv_HoUw.roa Signing time: Thu 02 Apr 2026 02:57:29 +0000 ROA not before: Thu 02 Apr 2026 02:57:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9416 IP address blocks: 113.61.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 20:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Apr 2 02:57:29 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=876D699E7125863862B9BA6C2E374672FFC7A14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:eb:85:fb:3c:99:66:e4:d5:30:e7:b4:6f: 85:75:7c:77:1d:50:f1:0c:3d:f3:97:f3:92:13:0d: 2c:6e:6a:de:4d:69:c1:c4:1a:29:1b:14:f1:8d:87: 83:77:89:b6:59:cb:ee:f0:50:8f:16:04:35:e4:6d: 80:6a:fc:88:4e:87:ad:20:68:35:94:49:ab:09:e0: 88:f2:7c:8c:eb:00:6f:37:85:00:85:98:23:8e:66: aa:38:63:2d:e1:6c:5a:28:ce:b1:a4:07:21:5a:b6: 74:a5:92:d4:5d:71:cf:c0:65:8f:12:cb:40:dc:41: cd:f6:6e:7f:e7:18:97:61:e9:2b:3d:1b:a8:d6:0d: a9:07:73:7b:68:f9:f4:27:e4:f0:fb:47:84:98:af: af:05:aa:76:e4:38:6d:c6:39:ba:5d:af:8f:62:97: 9f:2f:16:6c:38:b2:40:ab:4a:75:c1:ac:f3:e7:a8: 27:c3:d9:c6:ae:29:64:0b:f8:7a:7e:80:be:e6:2d: 27:9a:8e:0c:78:f1:47:dd:64:33:8e:c1:56:42:8c: 32:94:71:05:ea:da:82:55:fe:b7:83:98:d9:dd:c8: 2f:25:9e:06:0e:1e:ee:4d:92:94:ba:24:cc:2a:1c: 5d:11:c1:75:c8:f6:b4:eb:f4:92:28:8a:a7:aa:57: 4a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6D:69:9E:71:25:86:38:62:B9:BA:6C:2E:37:46:72:FF:C7:A1:4C X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/h21pnnElhjhiubpsLjdGcv_HoUw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.61.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0b:3b:ea:97:9d:cb:fb:a4:9c:29:5d:b5:51:ef:f3:0f:08:a4: 47:ba:a6:2a:90:50:ee:7a:4f:95:aa:b3:63:3b:c5:97:d4:ad: 45:cf:e5:61:66:32:cc:68:94:ba:b5:76:d8:20:1d:e7:01:d4: e5:25:60:4e:22:3f:2c:65:98:59:3c:6d:7c:20:b9:04:0b:da: 46:53:28:2f:34:ee:ef:40:01:72:41:a6:56:6c:f8:c0:cc:12: c7:29:f5:d2:81:62:7c:17:95:7a:d1:96:e4:41:e5:f5:fe:a2: d6:dd:82:f7:d0:62:7e:f2:f4:2a:c6:4f:0f:c2:15:30:50:9f: f9:57:eb:81:fa:08:4c:ca:ee:0f:f0:5a:02:17:e0:cf:2b:ca: c3:c4:c6:91:54:fc:91:f8:8f:67:f4:ff:5f:5a:44:ca:a0:27: e0:0b:52:e0:ac:37:98:38:e3:3d:e0:f0:49:f8:93:a4:cf:fa: 96:6a:ce:1a:95:bd:38:91:7d:a1:17:1a:03:14:21:53:d3:cb: 34:8e:80:34:51:e3:70:5d:3f:0c:3f:89:a4:86:e0:45:7a:f3: 6b:00:a7:a7:f9:5d:39:7f:d9:42:6e:fa:76:80:79:de:e2:9f: 3a:fc:91:08:2f:f5:f0:20:fd:d7:b9:3a:60:b3:8c:5f:3d:da: b3:3c:b9:d0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNjA0MDIw MjU3MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg3NkQ2OTlFNzEyNTg2 Mzg2MkI5QkE2QzJFMzc0NjcyRkZDN0ExNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEYOuF+zyZZuTVMOe0b4V1fHcdUPEMPfOX85ITDSxuat5NacHE GikbFPGNh4N3ibZZy+7wUI8WBDXkbYBq/IhOh60gaDWUSasJ4IjyfIzrAG83hQCF mCOOZqo4Yy3hbFoozrGkByFatnSlktRdcc/AZY8Sy0DcQc32bn/nGJdh6Ss9G6jW DakHc3to+fQn5PD7R4SYr68FqnbkOG3GObpdr49il58vFmw4skCrSnXBrPPnqCfD 2cauKWQL+Hp+gL7mLSeajgx48UfdZDOOwVZCjDKUcQXq2oJV/reDmNndyC8lngYO Hu5NkpS6JMwqHF0RwXXI9rTr9JIoiqeqV0ojAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUh21pnnElhjhiubpsLjdGcv/HoUwwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvaDIxcG5uRWxoamhpdWJwc0xqZEdj dl9Ib1V3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3E9gDAN BgkqhkiG9w0BAQsFAAOCAQEACzvql53L+6ScKV21Ue/zDwikR7qmKpBQ7npPlaqz YzvFl9StRc/lYWYyzGiUurV22CAd5wHU5SVgTiI/LGWYWTxtfCC5BAvaRlMoLzTu 70ABckGmVmz4wMwSxyn10oFifBeVetGW5EHl9f6i1t2C99BifvL0KsZPD8IVMFCf +VfrgfoITMruD/BaAhfgzyvKw8TGkVT8kfiPZ/T/X1pEyqAn4AtS4Kw3mDjjPeDw SfiTpM/6lmrOGpW9OJF9oRcaAxQhU9PLNI6ANFHjcF0/DD+JpIbgRXrzawCnp/ld OX/ZQm76doB53uKfOvyRCC/18CD917k6YLOMXz3aszy50A== -----END CERTIFICATE-----Generated at Fri Apr 17 17:12:04 2026 by rpki-client