$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/FQ4JVO1honhWK2HCLAgpGWuGsQI.roa File: FQ4JVO1honhWK2HCLAgpGWuGsQI.roa (raw, json) Hash identifier: JEJpoY3O9lZE5uCrbjUDUKCn7d/XsB2UzkNb7/ayaTc= Subject key identifier: 15:0E:09:54:ED:61:A2:78:56:2B:61:C2:2C:08:29:19:6B:86:B1:02 Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25 Certificate serial: 0D9A Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/FQ4JVO1honhWK2HCLAgpGWuGsQI.roa Signing time: Fri 22 Aug 2025 08:52:51 +0000 ROA not before: Fri 22 Aug 2025 08:52:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 10135 IP address blocks: 2405:5600::/32 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25 Validity Not Before: Aug 22 08:52:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=150E0954ED61A278562B61C22C0829196B86B102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c7:12:3d:30:1b:68:f8:1d:12:dd:e2:e1:2f: c8:41:1d:11:88:6b:54:83:ae:ec:f8:30:08:91:f1: 8b:ae:0e:24:a2:5a:b4:32:9e:24:1e:48:e0:08:d9: 09:f5:92:fc:2d:d9:72:db:0c:db:e8:fb:a9:83:75: 64:7b:bb:d0:3b:d0:de:8c:cc:ae:ff:a0:06:b8:95: fc:fa:89:f6:9f:1b:be:db:ca:4e:57:07:02:3f:18: 63:ea:dc:e0:fd:9f:10:ed:d6:2a:bf:11:d4:03:0c: 38:6f:30:36:cb:88:99:5e:8f:9a:3c:29:e7:5d:ba: 77:c1:97:1c:0b:e6:36:1e:e5:9d:a0:f6:44:b8:bc: 33:a3:5c:ef:98:35:eb:c9:ee:52:d2:a7:84:93:ed: 70:92:36:ed:65:8d:88:6f:94:d8:37:35:b5:31:0f: a2:51:4e:0c:ac:03:eb:45:8c:c1:55:eb:f4:0e:2f: ac:10:c6:03:b4:6c:86:2c:08:bf:d8:b4:a2:a7:b0: c9:51:73:47:1a:6e:88:d4:4e:dd:ca:e2:4e:f1:e9: 45:ea:90:30:fa:64:7a:49:a1:d7:f8:c9:1d:84:dd: ff:00:8d:29:d5:4b:83:3a:fc:c1:5d:29:92:47:47: 94:97:7f:87:15:6e:a3:3a:b4:4d:da:c8:8f:a3:c1: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0E:09:54:ED:61:A2:78:56:2B:61:C2:2C:08:29:19:6B:86:B1:02 X509v3 Authority Key Identifier: keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/FQ4JVO1honhWK2HCLAgpGWuGsQI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:5600::/32 Signature Algorithm: sha256WithRSAEncryption 9e:09:53:a6:45:14:24:ae:11:8c:79:93:b7:80:70:b0:fa:2f: 28:c8:5f:4a:75:d0:3c:34:a7:5b:c6:8d:38:e3:17:b4:b7:9d: 00:e0:0a:a5:c7:1e:d2:6e:13:ec:04:e7:f3:da:4e:62:42:c3: d5:18:86:dd:b5:d9:ff:5a:58:9a:05:87:04:cf:d0:01:68:2e: 2f:3c:56:fa:b6:f2:2a:7f:9e:5e:32:22:74:f5:ee:d5:e5:37: c5:05:e5:15:52:11:d0:db:5c:8a:c2:00:2b:be:52:de:75:7c: 85:08:a0:c8:55:79:ad:49:3b:96:55:44:9e:d0:13:81:4f:bf: 30:fe:a5:16:37:1d:95:53:aa:99:f2:fa:f9:71:dc:be:9a:f2: 5a:5e:a1:61:73:a5:7f:dd:8c:6b:2a:b4:ea:3a:4a:bf:56:2b: 18:57:d0:ce:6e:f5:4e:f8:f9:df:a3:7c:f7:d2:bb:d1:29:f7: 0c:e4:ab:fa:f5:bb:ab:e6:80:4d:ba:23:20:3b:b4:48:46:02: c1:95:ed:37:1a:96:a8:13:e1:8a:12:7d:51:ab:07:77:28:1e: e6:4f:ba:0b:01:1a:55:7e:e6:91:fe:3f:00:f8:7f:33:89:9b: 62:6d:99:8c:9e:a4:18:62:9e:00:f7:ee:3d:96:20:dd:ac:c1: 53:62:cf:8e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTUy QjE2MTY0QzM2MTA0MEQ4OEYzMkQzNjUwOTQ0OENGM0JCOUQyNTAeFw0yNTA4MjIw ODUyNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE1MEUwOTU0RUQ2MUEy Nzg1NjJCNjFDMjJDMDgyOTE5NkI4NkIxMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyxxI9MBto+B0S3eLhL8hBHRGIa1SDruz4MAiR8YuuDiSiWrQy niQeSOAI2Qn1kvwt2XLbDNvo+6mDdWR7u9A70N6MzK7/oAa4lfz6ifafG77byk5X BwI/GGPq3OD9nxDt1iq/EdQDDDhvMDbLiJlej5o8KeddunfBlxwL5jYe5Z2g9kS4 vDOjXO+YNevJ7lLSp4ST7XCSNu1ljYhvlNg3NbUxD6JRTgysA+tFjMFV6/QOL6wQ xgO0bIYsCL/YtKKnsMlRc0cabojUTt3K4k7x6UXqkDD6ZHpJodf4yR2E3f8AjSnV S4M6/MFdKZJHR5SXf4cVbqM6tE3ayI+jwQeZAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFQ4JVO1honhWK2HCLAgpGWuGsQIwHwYDVR0jBBgwFoAUVSsWFkw2EEDYjzLT ZQlEjPO7nSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRUFTUE5F VC9WU3NXRmt3MkVFRFlqekxUWlFsRWpQTzduU1UuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1ZTc1dGa3cyRUVEWWp6TFRaUWxFalBPN25TVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0VBU1BORVQvRlE0SlZPMWhvbmhXSzJI Q0xBZ3BHV3VHc1FJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQFVgAwDQYJKoZIhvcNAQELBQADggEBAJ4JU6ZFFCSuEYx5k7eAcLD6LyjIX0p1 0Dw0p1vGjTjjF7S3nQDgCqXHHtJuE+wE5/PaTmJCw9UYht212f9aWJoFhwTP0AFo Li88Vvq28ip/nl4yInT17tXlN8UF5RVSEdDbXIrCACu+Ut51fIUIoMhVea1JO5ZV RJ7QE4FPvzD+pRY3HZVTqpny+vlx3L6a8lpeoWFzpX/djGsqtOo6Sr9WKxhX0M5u 9U74+d+jfPfSu9Ep9wzkq/r1u6vmgE26IyA7tEhGAsGV7TcalqgT4YoSfVGrB3co HuZPugsBGlV+5pH+PwD4fzOJm2JtmYyepBhingD37j2WIN2swVNiz44= -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:22 2025 by rpki-client