$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/0PZHOcwfMCKIa5goT1wNnvBPRtw.roa File: 0PZHOcwfMCKIa5goT1wNnvBPRtw.roa (raw, json) Hash identifier: qjQhyNySjmZxH7tKdomhJ6x3lFg3ItWHhkP2vr2/ttw= Subject key identifier: D0:F6:47:39:CC:1F:30:22:88:6B:98:28:4F:5C:0D:9E:F0:4F:46:DC Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1385 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0PZHOcwfMCKIa5goT1wNnvBPRtw.roa Signing time: Fri 22 Aug 2025 08:59:23 +0000 ROA not before: Fri 22 Aug 2025 08:59:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131142 IP address blocks: 210.200.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4997 (0x1385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D0F64739CC1F3022886B98284F5C0D9EF04F46DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:0f:30:fb:ea:41:9c:7a:54:0a:ce:82:30: b7:97:3b:89:ad:d6:ad:61:1f:bf:1e:26:dd:fd:d4: 9c:98:4d:55:10:3b:b3:c8:9a:fe:53:49:5f:c9:cb: d0:71:76:85:b9:62:19:8c:73:98:c9:b9:40:a2:e0: 91:31:92:ca:0c:76:2c:7e:04:6a:a8:3b:b4:67:c5: 7d:58:b5:c4:20:45:9b:30:48:bb:1d:e2:4e:98:32: 41:9a:3d:b1:bc:d6:1f:92:be:14:71:7b:32:35:7a: 46:1e:5c:78:41:3d:7e:48:59:98:74:ae:d8:25:1c: d3:72:07:dd:6d:fe:29:9d:23:46:c1:88:f3:8a:9f: 8b:86:b2:c4:3e:90:ab:86:2c:6a:bb:e9:15:bb:77: b2:01:27:1e:b3:83:15:df:80:c1:3a:ce:97:04:fb: 02:90:5d:94:80:12:34:74:7b:ab:46:47:17:4c:05: 2c:2c:67:9a:d0:9e:48:51:61:91:cf:8c:ce:6d:80: 99:e0:d6:4e:5c:20:1c:e6:d4:1c:90:9d:42:11:4c: f3:9f:e5:75:d3:67:f2:55:9e:ac:47:f9:67:21:d0: 00:b5:c8:99:9b:a9:80:b6:96:3e:d2:6f:7e:b9:e9: ea:78:6b:eb:b4:1f:bc:6d:ca:b3:38:3a:61:e6:0c: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F6:47:39:CC:1F:30:22:88:6B:98:28:4F:5C:0D:9E:F0:4F:46:DC X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0PZHOcwfMCKIa5goT1wNnvBPRtw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.80.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:e6:22:3a:d5:44:91:ab:a6:95:c5:50:69:37:f1:d7:d8:ea: 11:de:35:b7:1c:8e:5a:df:59:d6:77:58:dd:2e:fc:79:9f:d7: cb:54:55:1a:93:f1:6b:5e:f9:4f:b0:27:f1:cc:2f:04:c9:c4: 15:8f:7d:e4:1f:0d:1c:dd:63:2a:a8:7f:46:b3:64:cd:1c:8d: 09:46:8f:ec:bd:88:f0:0d:d2:c1:64:41:94:75:93:3a:76:8f: 9b:47:ce:5e:38:91:b6:50:0b:16:fe:dc:97:17:4e:53:2b:60: 8d:f7:58:79:e6:d0:aa:90:7a:23:35:ad:ad:6c:17:c2:fc:db: a3:c4:2b:d0:34:95:40:1d:68:9e:81:ca:9c:eb:8e:1d:dc:f9: b1:a3:9f:ee:48:19:bf:b7:73:c6:2f:bc:0a:fd:49:a1:54:11: 7e:b1:6a:22:a1:ad:bc:33:9b:91:63:fd:fc:3a:bc:07:26:a7: 1e:e1:62:f2:0b:94:08:b0:1c:5d:34:d0:8d:1d:cd:04:be:a6: 2e:77:a6:e2:36:a8:93:62:46:33:a5:ab:dd:33:6c:d1:0e:1c: 2e:5b:6f:54:63:1e:03:bc:85:6a:d1:7b:a2:ff:b9:ea:c3:ff: ba:c5:c1:15:a2:7c:26:0f:a8:f1:1f:b0:f3:c3:fe:33:47:dc: 2e:01:8c:1b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwRjY0NzM5Q0MxRjMw MjI4ODZCOTgyODRGNUMwRDlFRjA0RjQ2REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi3w8w++pBnHpUCs6CMLeXO4mt1q1hH78eJt391JyYTVUQO7PI mv5TSV/Jy9BxdoW5YhmMc5jJuUCi4JExksoMdix+BGqoO7RnxX1YtcQgRZswSLsd 4k6YMkGaPbG81h+SvhRxezI1ekYeXHhBPX5IWZh0rtglHNNyB91t/imdI0bBiPOK n4uGssQ+kKuGLGq76RW7d7IBJx6zgxXfgME6zpcE+wKQXZSAEjR0e6tGRxdMBSws Z5rQnkhRYZHPjM5tgJng1k5cIBzm1ByQnUIRTPOf5XXTZ/JVnqxH+Wch0AC1yJmb qYC2lj7Sb3656ep4a+u0H7xtyrM4OmHmDBMTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU0PZHOcwfMCKIa5goT1wNnvBPRtwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzBQWkhPY3dmTUNLSWE1Z29UMXdObnZC UFJ0dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyFAwDQYJ KoZIhvcNAQELBQADggEBAE/mIjrVRJGrppXFUGk38dfY6hHeNbccjlrfWdZ3WN0u /Hmf18tUVRqT8Wte+U+wJ/HMLwTJxBWPfeQfDRzdYyqof0azZM0cjQlGj+y9iPAN 0sFkQZR1kzp2j5tHzl44kbZQCxb+3JcXTlMrYI33WHnm0KqQeiM1ra1sF8L826PE K9A0lUAdaJ6Bypzrjh3c+bGjn+5IGb+3c8YvvAr9SaFUEX6xaiKhrbwzm5Fj/fw6 vAcmpx7hYvILlAiwHF000I0dzQS+pi53puI2qJNiRjOlq90zbNEOHC5bb1RjHgO8 hWrRe6L/uerD/7rFwRWifCYPqPEfsPPD/jNH3C4BjBs= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client