$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/z_e7YbqhffBnjrCkqZYMQjnIXn4.roa File: z_e7YbqhffBnjrCkqZYMQjnIXn4.roa (raw, json) Hash identifier: UhaoTnFgaMlmTpyAbcmsNWOSSvg9OpyCM5xCi/VpNnY= Subject key identifier: CF:F7:BB:61:BA:A1:7D:F0:67:8E:B0:A4:A9:96:0C:42:39:C8:5E:7E Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Certificate serial: 1238 Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/z_e7YbqhffBnjrCkqZYMQjnIXn4.roa Signing time: Fri 22 Aug 2025 08:49:07 +0000 ROA not before: Fri 22 Aug 2025 08:49:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17809 IP address blocks: 210.209.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4664 (0x1238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6 Validity Not Before: Aug 22 08:49:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CFF7BB61BAA17DF0678EB0A4A9960C4239C85E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:9a:b2:c0:fd:3d:b0:4a:0a:2c:2f:08:cb: 5d:9e:62:3f:53:a8:d5:91:03:f0:51:d1:b5:2a:38: 15:9b:22:cc:43:ed:4f:6b:5a:a9:87:72:97:59:52: 54:6b:fb:1b:2d:96:5c:47:33:6b:85:27:8c:2a:03: cc:de:97:33:47:9d:dd:d7:54:c2:d5:b0:4a:a3:37: af:71:aa:58:bd:27:e1:9d:1e:ec:b9:ce:63:71:be: 00:43:9b:bc:73:59:9e:5b:58:00:b3:b8:a0:8b:48: e9:b7:e1:2f:f4:e3:1a:25:66:f0:0e:4b:26:73:23: e0:35:21:00:48:87:c8:e5:1a:bd:bb:c3:2a:1c:e0: 2c:23:8b:c2:00:4a:db:14:24:0c:02:54:33:b3:0c: d1:4c:ec:15:e0:aa:09:75:5c:9b:cc:77:83:b2:d3: 58:1d:1b:a5:03:6b:a0:c0:34:f7:67:20:5e:3e:5f: 3e:54:4d:28:0d:bb:e3:60:ed:4a:46:b8:71:49:48: e2:59:8f:bd:b6:90:ac:65:cc:62:33:18:36:6b:b1: 46:2f:c4:06:33:cc:de:62:83:30:81:95:9e:79:67: 96:db:24:bf:7f:93:6d:8a:35:cf:a1:b3:9b:a2:4b: 98:07:f7:2e:62:f2:17:9c:c6:f3:68:0c:fc:05:e8: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F7:BB:61:BA:A1:7D:F0:67:8E:B0:A4:A9:96:0C:42:39:C8:5E:7E X509v3 Authority Key Identifier: keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/z_e7YbqhffBnjrCkqZYMQjnIXn4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.209.128.0/19 Signature Algorithm: sha256WithRSAEncryption 83:a9:3c:d7:f4:a4:72:a0:2e:f0:c3:bb:16:1b:78:63:34:ce: e9:96:ae:46:fb:72:c1:08:eb:4b:1e:1c:b2:b0:fb:c3:be:dc: c6:07:3f:c6:16:0a:dc:a9:9d:66:87:2f:ce:af:05:68:c3:4b: eb:d6:66:97:ee:4c:b3:2a:68:c2:28:3b:37:d5:95:fd:da:45: 71:df:23:88:21:1e:90:8a:d3:70:60:60:78:68:dc:e4:bc:e9: 5d:e6:88:39:48:81:a5:2d:11:7b:f4:83:ed:d1:7a:15:11:a7: 41:b0:d2:c0:b2:dc:b0:66:14:3b:52:68:c4:2e:7b:5c:29:a0: 24:b2:3b:5c:41:ff:27:c0:59:21:86:97:2f:a5:8c:86:e7:3b: c2:ec:2b:97:8d:7a:2a:3c:90:46:80:66:e8:4a:b0:16:c2:17: d5:88:67:db:0f:4a:74:01:3d:87:97:2e:6d:73:a6:f5:ae:4d: 13:0f:7e:6f:0b:8d:7f:1e:79:93:85:2b:da:e0:f7:78:a8:7c: 0a:0a:4e:9c:8f:ae:27:49:72:26:e8:70:c8:9f:9c:53:81:13: a6:91:41:bb:fc:21:56:d0:d6:41:48:ad:1a:c6:b7:ad:26:58: 8b:1c:05:47:5f:31:28:f1:90:3e:48:b9:42:3e:c1:21:2b:62: 76:75:e9:5a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0 NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTA4MjIw ODQ5MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENGRjdCQjYxQkFBMTdE RjA2NzhFQjBBNEE5OTYwQzQyMzlDODVFN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAcJqywP09sEoKLC8Iy12eYj9TqNWRA/BR0bUqOBWbIsxD7U9r WqmHcpdZUlRr+xstllxHM2uFJ4wqA8zelzNHnd3XVMLVsEqjN69xqli9J+GdHuy5 zmNxvgBDm7xzWZ5bWACzuKCLSOm34S/04xolZvAOSyZzI+A1IQBIh8jlGr27wyoc 4Cwji8IAStsUJAwCVDOzDNFM7BXgqgl1XJvMd4Oy01gdG6UDa6DANPdnIF4+Xz5U TSgNu+Ng7UpGuHFJSOJZj722kKxlzGIzGDZrsUYvxAYzzN5igzCBlZ55Z5bbJL9/ k22KNc+hs5uiS5gH9y5i8hecxvNoDPwF6ABXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUz/e7YbqhffBnjrCkqZYMQjnIXn4wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId 1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvel9lN1licWhmZkJuanJDa3FaWU1R am5JWG40LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdLRgDAN BgkqhkiG9w0BAQsFAAOCAQEAg6k81/SkcqAu8MO7Fht4YzTO6ZauRvtywQjrSx4c srD7w77cxgc/xhYK3KmdZocvzq8FaMNL69Zml+5Msypowig7N9WV/dpFcd8jiCEe kIrTcGBgeGjc5LzpXeaIOUiBpS0Re/SD7dF6FRGnQbDSwLLcsGYUO1JoxC57XCmg JLI7XEH/J8BZIYaXL6WMhuc7wuwrl416KjyQRoBm6EqwFsIX1Yhn2w9KdAE9h5cu bXOm9a5NEw9+bwuNfx55k4Ur2uD3eKh8CgpOnI+uJ0lyJuhwyJ+cU4ETppFBu/wh VtDWQUitGsa3rSZYixwFR18xKPGQPki5Qj7BIStidnXpWg== -----END CERTIFICATE-----Generated at Wed Nov 5 21:25:00 2025 by rpki-client