$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/D7Twn9-jniaEJHjNJ_cdGktPTvE.roa File: D7Twn9-jniaEJHjNJ_cdGktPTvE.roa (raw, json) Hash identifier: uI29F4YzkQ1EtTJFqmjUtOXz5j8RFunlTP1eleHRA8U= Subject key identifier: 0F:B4:F0:9F:DF:A3:9E:26:84:24:78:CD:27:F7:1D:1A:4B:4F:4E:F1 Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25 Certificate serial: 0D99 Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/D7Twn9-jniaEJHjNJ_cdGktPTvE.roa Signing time: Fri 22 Aug 2025 08:52:51 +0000 ROA not before: Fri 22 Aug 2025 08:52:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 10135 IP address blocks: 202.168.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3481 (0xd99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25 Validity Not Before: Aug 22 08:52:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0FB4F09FDFA39E26842478CD27F71D1A4B4F4EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:8c:a5:3f:96:05:36:8b:ab:a6:c3:84:d1: a3:d1:26:3d:fd:25:1a:c2:dd:82:37:59:14:dc:bb: a4:38:8c:c8:2a:20:06:ff:55:86:6a:05:5e:73:32: ec:dc:48:f9:e7:90:6b:cd:27:05:2b:05:1b:71:cd: 0d:26:19:29:26:18:7b:f7:ec:e9:fd:12:dd:38:6e: d5:ac:ad:4d:04:dc:23:d8:5f:6e:54:df:70:fd:83: 11:67:ae:4e:81:5f:e8:22:87:60:1d:e2:26:df:1a: 19:f3:50:0c:7e:ff:e5:d4:32:4d:86:a5:7b:6c:94: 4f:ec:03:3d:ca:d1:5e:9f:88:18:ef:6f:2e:19:a8: 08:de:e6:4e:3b:b5:44:0a:b5:6d:df:c7:a2:9f:e9: 7c:86:aa:54:f1:61:e3:5e:c7:c5:8b:3c:3f:6f:c2: 0c:b6:c7:59:a8:76:c2:44:87:6d:b6:d8:9b:42:03: f3:d4:fc:49:94:03:de:da:4a:5c:4c:c4:ef:54:7d: 64:3f:4d:9f:83:4f:85:62:c7:79:7c:67:85:cc:99: 7b:88:dd:fe:44:8f:7a:4a:0d:39:9c:07:80:59:a4: fc:8a:86:1d:63:3e:c5:49:ba:f9:e3:f1:94:3d:23: 8d:5a:f5:2e:b0:a0:bc:03:e8:06:5a:d9:87:5f:73: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:F0:9F:DF:A3:9E:26:84:24:78:CD:27:F7:1D:1A:4B:4F:4E:F1 X509v3 Authority Key Identifier: keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/D7Twn9-jniaEJHjNJ_cdGktPTvE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.168.192.0/20 Signature Algorithm: sha256WithRSAEncryption 17:42:7d:06:59:f1:f8:fc:62:29:76:d1:d5:d4:e3:f2:8e:42: 26:c7:e7:97:66:aa:62:8b:44:42:50:52:84:0a:bb:ee:9e:fa: 2e:cb:ab:9e:34:a2:f1:5e:1e:4f:d0:29:f2:be:dc:63:de:03: db:13:e4:69:dd:02:73:a2:24:bf:3f:52:05:7d:e0:39:95:45: e5:26:3b:43:ff:ad:e7:51:e1:c0:7d:09:89:49:69:82:a4:2f: 3f:7c:a1:49:91:10:1f:c9:5c:45:a5:1c:78:15:2c:a9:1d:e8: b2:0e:44:6b:50:58:7a:c7:d0:7d:05:08:ac:f1:3a:71:83:93: cc:88:e8:8a:08:3b:07:9a:f9:60:32:fa:54:dd:9e:3b:33:eb: fe:63:59:8f:5d:7c:af:52:eb:06:97:ee:38:e1:9c:bf:64:cc: 7d:81:50:d0:14:d6:04:ce:69:01:62:70:0c:c3:45:0f:e8:fd: 6a:eb:b0:83:1d:76:6d:f1:6f:a6:29:07:b4:74:6f:38:ef:a2: 14:11:22:d8:95:a6:ac:fe:63:82:64:11:70:86:99:f5:4c:09: 60:db:18:71:6e:33:f9:9b:4e:3f:df:53:73:a8:a9:a5:25:41: 5b:ba:ef:1f:e0:6a:40:e9:74:5e:a7:84:72:be:fc:44:e9:f6: 71:82:d2:87 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTUy QjE2MTY0QzM2MTA0MEQ4OEYzMkQzNjUwOTQ0OENGM0JCOUQyNTAeFw0yNTA4MjIw ODUyNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBGQjRGMDlGREZBMzlF MjY4NDI0NzhDRDI3RjcxRDFBNEI0RjRFRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDR+4ylP5YFNourpsOE0aPRJj39JRrC3YI3WRTcu6Q4jMgqIAb/ VYZqBV5zMuzcSPnnkGvNJwUrBRtxzQ0mGSkmGHv37On9Et04btWsrU0E3CPYX25U 33D9gxFnrk6BX+gih2Ad4ibfGhnzUAx+/+XUMk2GpXtslE/sAz3K0V6fiBjvby4Z qAje5k47tUQKtW3fx6Kf6XyGqlTxYeNex8WLPD9vwgy2x1modsJEh2222JtCA/PU /EmUA97aSlxMxO9UfWQ/TZ+DT4Vix3l8Z4XMmXuI3f5Ej3pKDTmcB4BZpPyKhh1j PsVJuvnj8ZQ9I41a9S6woLwD6AZa2Ydfc76/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUD7Twn9+jniaEJHjNJ/cdGktPTvEwHwYDVR0jBBgwFoAUVSsWFkw2EEDYjzLT ZQlEjPO7nSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRUFTUE5F VC9WU3NXRmt3MkVFRFlqekxUWlFsRWpQTzduU1UuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1ZTc1dGa3cyRUVEWWp6TFRaUWxFalBPN25TVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0VBU1BORVQvRDdUd245LWpuaWFFSkhq TkpfY2RHa3RQVHZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BMqowDANBgkqhkiG9w0BAQsFAAOCAQEAF0J9Blnx+PxiKXbR1dTj8o5CJsfnl2aq YotEQlBShAq77p76LsurnjSi8V4eT9Ap8r7cY94D2xPkad0Cc6Ikvz9SBX3gOZVF 5SY7Q/+t51HhwH0JiUlpgqQvP3yhSZEQH8lcRaUceBUsqR3osg5Ea1BYesfQfQUI rPE6cYOTzIjoigg7B5r5YDL6VN2eOzPr/mNZj118r1LrBpfuOOGcv2TMfYFQ0BTW BM5pAWJwDMNFD+j9auuwgx12bfFvpikHtHRvOO+iFBEi2JWmrP5jgmQRcIaZ9UwJ YNsYcW4z+ZtOP99Tc6ippSVBW7rvH+BqQOl0XqeEcr78ROn2cYLShw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:37:53 2025 by rpki-client