$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/51AqDuFJIjXXhkTOUO3F3SR6mI4.roa File: 51AqDuFJIjXXhkTOUO3F3SR6mI4.roa (raw, json) Hash identifier: Bbc2b2Li0JP2+zdZexsBtBEkCj1VzrCV/jeC/WswpAI= Subject key identifier: E7:50:2A:0E:E1:49:22:35:D7:86:44:CE:50:ED:C5:DD:24:7A:98:8E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 148A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/51AqDuFJIjXXhkTOUO3F3SR6mI4.roa Signing time: Fri 22 Aug 2025 09:00:32 +0000 ROA not before: Fri 22 Aug 2025 09:00:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 222.250.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5258 (0x148a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E7502A0EE1492235D78644CE50EDC5DD247A988E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:32:ef:6d:52:50:e4:c7:f6:36:b5:7d:cf: c7:0e:1d:16:31:74:6f:cb:e0:92:aa:d2:09:e8:46: 00:b9:e7:f4:99:b2:e3:bc:5f:a6:28:de:48:f1:8b: a5:55:f9:04:e0:02:95:0c:b2:44:82:8e:6f:bd:6a: 89:94:32:03:9f:f2:4c:36:aa:ec:7e:f1:15:4a:53: b3:0f:d4:98:8e:2d:fe:5a:dc:89:91:e7:99:1c:44: c0:1e:bd:05:f9:d2:dc:af:5b:04:2f:f2:c1:f6:44: 4c:84:a3:c1:33:e7:4c:92:e7:ae:a7:aa:64:38:24: ae:c1:ee:e2:3d:77:37:2d:7e:81:8c:19:0e:f3:ab: 36:74:6c:a5:15:cf:89:b5:d9:ab:9e:d1:95:5f:7b: 81:24:14:27:b3:13:3d:88:a9:08:a5:26:3d:4a:32: a2:04:67:9c:d9:02:ed:2e:2d:fb:4f:06:1f:7e:ba: 91:ae:0f:a3:aa:4c:fe:27:32:0c:a0:08:6b:76:f8: f2:1f:55:01:e4:36:30:c7:02:50:c3:4c:23:16:7d: 03:f4:77:81:70:4e:41:1d:0b:ae:a5:f9:b1:6e:9a: 03:03:7f:ff:68:b0:2c:ab:9a:c2:9e:18:16:4a:22: 22:8f:2b:24:92:53:6d:28:0e:18:61:07:ff:f3:8e: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:50:2A:0E:E1:49:22:35:D7:86:44:CE:50:ED:C5:DD:24:7A:98:8E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/51AqDuFJIjXXhkTOUO3F3SR6mI4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.250.192.0/22 Signature Algorithm: sha256WithRSAEncryption b6:ec:12:ab:3c:c4:79:90:76:57:8e:68:65:c9:31:71:f7:90: c3:ab:91:48:d6:07:d6:d7:fc:ff:8a:17:c1:63:50:42:9a:35: b1:f9:45:fe:e7:e2:39:d5:bd:f2:57:a9:92:68:53:18:2f:2c: 3e:42:7b:0c:06:93:70:dc:1d:df:ab:bd:e9:2f:80:29:ec:d1: 16:b7:03:db:aa:26:cc:3f:d2:c6:aa:93:f1:b4:4e:cb:14:37: ad:38:8b:67:b9:5c:dd:d5:b8:07:82:9f:b0:96:68:02:49:a0: ec:d3:16:25:e7:2b:f6:0c:03:ec:d4:58:15:3f:ae:de:66:44: 56:79:00:2f:9c:94:3a:c5:ce:3e:11:6c:4d:ea:25:4e:47:25: c6:2a:e1:5c:12:25:0a:54:5c:4a:8c:8d:42:8c:c1:24:09:58: 93:ab:9e:b9:0c:ad:45:7f:d8:c6:05:3f:ee:fc:6d:e1:93:06: af:cb:31:9b:b7:e6:c6:c1:9b:03:76:60:a4:7d:1e:e8:9e:b9: 44:e3:e0:63:bb:0b:29:50:b9:ec:2c:17:70:d4:9f:d2:c4:a2: 34:d1:8d:1a:d2:3a:82:c9:ac:08:6f:e4:a1:a9:f3:6d:48:ea: b9:ba:da:36:1a:2c:b1:5f:ad:7b:87:ee:e0:40:32:f1:dc:27: 8d:e9:a2:0f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU3NTAyQTBFRTE0OTIy MzVENzg2NDRDRTUwRURDNUREMjQ3QTk4OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQQjLvbVJQ5Mf2NrV9z8cOHRYxdG/L4JKq0gnoRgC55/SZsuO8 X6Yo3kjxi6VV+QTgApUMskSCjm+9aomUMgOf8kw2qux+8RVKU7MP1JiOLf5a3ImR 55kcRMAevQX50tyvWwQv8sH2REyEo8Ez50yS566nqmQ4JK7B7uI9dzctfoGMGQ7z qzZ0bKUVz4m12aue0ZVfe4EkFCezEz2IqQilJj1KMqIEZ5zZAu0uLftPBh9+upGu D6OqTP4nMgygCGt2+PIfVQHkNjDHAlDDTCMWfQP0d4FwTkEdC66l+bFumgMDf/9o sCyrmsKeGBZKIiKPKySSU20oDhhhB//zjg65AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU51AqDuFJIjXXhkTOUO3F3SR6mI4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzUxQXFEdUZKSWpYWGhrVE9VTzNGM1NS Nm1JNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALe+sAwDQYJ KoZIhvcNAQELBQADggEBALbsEqs8xHmQdleOaGXJMXH3kMOrkUjWB9bX/P+KF8Fj UEKaNbH5Rf7n4jnVvfJXqZJoUxgvLD5CewwGk3DcHd+rvekvgCns0Ra3A9uqJsw/ 0saqk/G0TssUN604i2e5XN3VuAeCn7CWaAJJoOzTFiXnK/YMA+zUWBU/rt5mRFZ5 AC+clDrFzj4RbE3qJU5HJcYq4VwSJQpUXEqMjUKMwSQJWJOrnrkMrUV/2MYFP+78 beGTBq/LMZu35sbBmwN2YKR9HuieuUTj4GO7CylQuewsF3DUn9LEojTRjRrSOoLJ rAhv5KGp821I6rm62jYaLLFfrXuH7uBAMvHcJ43pog8= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:47 2025 by rpki-client