$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/1AJXUsLCQrIc3ZKgP1HVLBuNsFU.roa File: 1AJXUsLCQrIc3ZKgP1HVLBuNsFU.roa (raw, json) Hash identifier: 6lfC/4nsfuHh14UpF2F+mgc2WHmjc+HzrK3Ig1Wm21c= Subject key identifier: D4:02:57:52:C2:C2:42:B2:1C:DD:92:A0:3F:51:D5:2C:1B:8D:B0:55 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 14A2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1AJXUsLCQrIc3ZKgP1HVLBuNsFU.roa Signing time: Fri 22 Aug 2025 09:00:38 +0000 ROA not before: Fri 22 Aug 2025 09:00:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 60.244.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5282 (0x14a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D4025752C2C242B21CDD92A03F51D52C1B8DB055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:9c:d6:57:26:d8:b7:30:f4:a5:de:50:8f: b1:37:38:c1:20:e7:51:8a:84:97:b1:9f:2a:ba:38: de:ba:e6:18:46:c9:88:a6:26:55:30:d9:6d:3b:ae: 61:65:56:36:40:27:f1:a3:27:9e:30:44:2c:9a:29: 2e:80:6e:5d:f7:9b:5d:0d:fe:58:d5:a6:5d:96:33: 70:78:50:71:e5:d4:a2:9b:83:77:46:52:e4:ab:3b: 48:a8:a7:5b:a4:64:a1:93:04:f9:95:ff:cd:dc:f6: 53:62:7c:70:29:7a:63:ea:a3:b1:9f:43:1a:04:4e: 20:ac:c5:14:fe:a8:01:f4:cb:58:8f:75:05:9e:82: 30:9a:f0:69:19:84:18:fd:88:71:3b:cc:fa:71:ce: 78:39:01:c4:6e:1a:6c:d8:84:21:88:89:dc:b7:74: 62:32:4f:ad:8d:16:69:46:ae:50:2c:cc:a4:02:13: ce:a3:5c:0d:bd:cd:76:ee:e3:e0:fc:72:29:bd:6e: 27:ca:f4:dd:3f:61:4c:03:eb:f1:70:72:0e:d5:b9: 2a:31:b4:ad:17:42:db:30:95:37:c9:04:ff:e2:b0: 51:8e:42:0b:5f:9d:45:85:61:e9:aa:69:ce:5a:da: e2:bc:50:59:8c:5c:3e:88:3b:03:d3:34:58:c8:27: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:02:57:52:C2:C2:42:B2:1C:DD:92:A0:3F:51:D5:2C:1B:8D:B0:55 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1AJXUsLCQrIc3ZKgP1HVLBuNsFU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.172.0/22 Signature Algorithm: sha256WithRSAEncryption 79:7c:ca:e6:7f:42:a1:f7:af:aa:88:86:8b:d4:18:bf:ee:19: d0:65:23:21:f4:74:30:ca:c2:e9:83:47:68:f4:e3:ea:1b:83: bf:03:5d:fd:ee:ae:20:c7:d0:c1:6e:31:70:5e:a1:25:14:6a: 6c:74:79:d8:58:5d:ae:17:90:8a:81:18:e8:1c:58:04:41:bc: 0d:99:ed:3a:41:d4:4a:46:11:6c:55:8e:5a:5f:c2:37:48:7e: 6f:22:75:12:18:4b:c6:32:af:8c:90:64:e6:20:dc:53:d4:86: bf:4b:56:17:2b:d7:99:55:4f:85:81:e9:b5:6b:e0:5b:63:a0: 81:ec:41:2a:44:ea:53:9a:87:07:ce:59:a8:4f:04:f5:ef:65: 02:c3:b4:fc:40:84:b3:56:91:1d:a0:3d:1b:41:4c:70:4c:74: 31:c7:3c:d7:8f:50:89:e4:f7:f3:cc:73:38:f2:a1:a1:60:35: fd:77:f3:d9:c6:93:aa:2a:6f:8b:6e:56:a5:bf:6b:92:9d:2d: 0e:71:87:b7:1c:28:2f:5c:18:13:17:86:5e:e4:97:b1:e5:49: 8e:bb:4f:6d:7f:1f:60:7d:b8:8a:01:c1:fb:8c:11:3c:e9:c0: 1c:60:22:70:a3:7d:ab:4e:6e:bc:46:61:16:75:35:fa:6f:de: 41:5d:85:10 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ0MDI1NzUyQzJDMjQy QjIxQ0REOTJBMDNGNTFENTJDMUI4REIwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwW5zWVybYtzD0pd5Qj7E3OMEg51GKhJexnyq6ON665hhGyYim JlUw2W07rmFlVjZAJ/GjJ54wRCyaKS6Abl33m10N/ljVpl2WM3B4UHHl1KKbg3dG UuSrO0iop1ukZKGTBPmV/83c9lNifHApemPqo7GfQxoETiCsxRT+qAH0y1iPdQWe gjCa8GkZhBj9iHE7zPpxzng5AcRuGmzYhCGIidy3dGIyT62NFmlGrlAszKQCE86j XA29zXbu4+D8cim9bifK9N0/YUwD6/Fwcg7VuSoxtK0XQtswlTfJBP/isFGOQgtf nUWFYemqac5a2uK8UFmMXD6IOwPTNFjIJzdJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU1AJXUsLCQrIc3ZKgP1HVLBuNsFUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzFBSlhVc0xDUXJJYzNaS2dQMUhWTEJ1 TnNGVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI89KwwDQYJ KoZIhvcNAQELBQADggEBAHl8yuZ/QqH3r6qIhovUGL/uGdBlIyH0dDDKwumDR2j0 4+obg78DXf3uriDH0MFuMXBeoSUUamx0edhYXa4XkIqBGOgcWARBvA2Z7TpB1EpG EWxVjlpfwjdIfm8idRIYS8Yyr4yQZOYg3FPUhr9LVhcr15lVT4WB6bVr4FtjoIHs QSpE6lOahwfOWahPBPXvZQLDtPxAhLNWkR2gPRtBTHBMdDHHPNePUInk9/PMczjy oaFgNf1389nGk6oqb4tuVqW/a5KdLQ5xh7ccKC9cGBMXhl7kl7HlSY67T21/H2B9 uIoBwfuMETzpwBxgInCjfatObrxGYRZ1Nfpv3kFdhRA= -----END CERTIFICATE-----Generated at Sun Aug 24 13:49:37 2025 by rpki-client