$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/4wCq-eBsPMD19oYU9gn5xa65yU4.roa File: 4wCq-eBsPMD19oYU9gn5xa65yU4.roa (raw, json) Hash identifier: sU+XR0K1HvJI4VzBHhAd0CjtNBRI5x41KE/dGyobpIM= Subject key identifier: E3:00:AA:F9:E0:6C:3C:C0:F5:F6:86:14:F6:09:F9:C5:AE:B9:C9:4E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1496 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4wCq-eBsPMD19oYU9gn5xa65yU4.roa Signing time: Fri 22 Aug 2025 09:00:35 +0000 ROA not before: Fri 22 Aug 2025 09:00:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 60.244.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5270 (0x1496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E300AAF9E06C3CC0F5F68614F609F9C5AEB9C94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:60:de:32:f2:1d:6c:89:7a:3e:39:f3:7d: 47:9d:df:da:8a:24:2e:48:0c:ec:14:0c:55:dd:8c: 9f:bf:32:22:29:15:09:fd:b7:1a:06:d0:c9:9f:de: 64:c5:d4:9b:0b:50:f6:54:ea:4c:88:fe:94:7f:85: 22:27:b6:f4:c9:93:b3:5c:11:40:0e:9c:ee:d6:04: 19:c5:b2:86:96:ca:db:4d:4f:7f:50:38:f7:a5:31: c8:85:e6:d1:8a:75:2a:49:b5:61:56:51:c1:39:0d: a3:f6:4c:c8:89:4a:07:ce:a2:c3:e1:b7:ee:b3:d6: af:35:11:a7:3d:bd:64:f9:b3:2b:15:a8:3d:6e:a9: 05:2e:3e:68:b4:7c:60:de:b3:2b:04:8b:89:77:59: 87:0a:bf:c5:a9:88:f1:c5:25:e1:c4:60:9f:de:d9: e9:58:9c:8a:3d:09:87:de:5d:ad:9e:32:69:1e:18: da:fc:5a:61:99:1f:20:dc:91:10:44:d0:20:06:ea: 19:57:a8:6f:59:63:97:87:39:8c:cf:66:b9:83:15: 8b:94:b5:47:1c:4a:87:98:ad:1a:ea:18:8a:a7:75: 93:31:26:f0:93:a7:bc:53:93:16:33:09:5c:29:9c: eb:c8:cb:2a:45:a8:07:f0:1b:e6:ad:9e:c2:0c:cf: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:00:AA:F9:E0:6C:3C:C0:F5:F6:86:14:F6:09:F9:C5:AE:B9:C9:4E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4wCq-eBsPMD19oYU9gn5xa65yU4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.176.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:f8:c7:87:0b:6e:8b:bb:32:f8:13:47:ae:24:39:c8:29:e7: 8f:4f:a4:29:90:4c:6d:d0:6e:de:61:c6:e2:3c:80:01:e6:f4: 42:2e:e2:54:11:c8:25:38:65:d7:51:5d:18:cc:0c:70:b6:7b: 93:89:e1:3a:b3:68:a2:74:a0:1c:cc:e9:fa:62:ab:68:cb:85: f4:5e:da:63:9d:47:44:e2:09:c2:0e:63:a1:a4:f6:7f:29:4f: 86:eb:64:21:d1:bc:b6:d1:83:15:34:36:dc:21:37:a2:be:ac: 14:ae:fa:d7:aa:d0:b7:58:b6:eb:70:50:5c:4a:87:d5:ef:de: b9:fb:ce:90:52:a1:30:26:17:63:4c:f3:54:a0:94:b9:bd:65: fa:94:1a:09:fb:01:02:c4:0b:8c:3a:6a:46:0f:d4:88:33:fa: 76:88:9a:53:27:8a:cc:e4:b8:b1:ad:a4:61:42:d6:04:ec:2f: 85:2f:eb:d3:12:e2:c1:15:82:54:cf:d1:59:65:d4:a7:35:0d: 3d:30:c3:b4:ce:81:ee:8f:77:50:82:70:a5:1e:2b:f4:d7:bf: 60:62:8e:ce:3a:72:49:5d:2a:28:14:fa:82:e0:7f:25:ba:f0: 0a:d4:6e:1a:20:a7:d4:15:de:45:1c:10:be:73:1b:6d:a7:17: 5c:ce:b5:09 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUzMDBBQUY5RTA2QzND QzBGNUY2ODYxNEY2MDlGOUM1QUVCOUM5NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrBmDeMvIdbIl6PjnzfUed39qKJC5IDOwUDFXdjJ+/MiIpFQn9 txoG0Mmf3mTF1JsLUPZU6kyI/pR/hSIntvTJk7NcEUAOnO7WBBnFsoaWyttNT39Q OPelMciF5tGKdSpJtWFWUcE5DaP2TMiJSgfOosPht+6z1q81Eac9vWT5sysVqD1u qQUuPmi0fGDesysEi4l3WYcKv8WpiPHFJeHEYJ/e2elYnIo9CYfeXa2eMmkeGNr8 WmGZHyDckRBE0CAG6hlXqG9ZY5eHOYzPZrmDFYuUtUccSoeYrRrqGIqndZMxJvCT p7xTkxYzCVwpnOvIyypFqAfwG+atnsIMz69TAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU4wCq+eBsPMD19oYU9gn5xa65yU4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzR3Q3EtZUJzUE1EMTlvWVU5Z241eGE2 NXlVNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI89LAwDQYJ KoZIhvcNAQELBQADggEBAD/4x4cLbou7MvgTR64kOcgp549PpCmQTG3Qbt5hxuI8 gAHm9EIu4lQRyCU4ZddRXRjMDHC2e5OJ4TqzaKJ0oBzM6fpiq2jLhfRe2mOdR0Ti CcIOY6Gk9n8pT4brZCHRvLbRgxU0NtwhN6K+rBSu+teq0LdYtutwUFxKh9Xv3rn7 zpBSoTAmF2NM81SglLm9ZfqUGgn7AQLEC4w6akYP1Igz+naImlMniszkuLGtpGFC 1gTsL4Uv69MS4sEVglTP0Vll1Kc1DT0ww7TOge6Pd1CCcKUeK/TXv2Bijs46ckld KigU+oLgfyW68ArUbhogp9QV3kUcEL5zG22nF1zOtQk= -----END CERTIFICATE-----Generated at Sun Aug 24 13:52:14 2025 by rpki-client