$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8Pev5cJdClnMy4TfEk54tLFnakI.roa File: 8Pev5cJdClnMy4TfEk54tLFnakI.roa (raw, json) Hash identifier: 02U5t3V98442eFvVKZJENjFexTQCV4zWsjTgVTCV6ZY= Subject key identifier: F0:F7:AF:E5:C2:5D:0A:59:CC:CB:84:DF:12:4E:78:B4:B1:67:6A:42 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1482 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8Pev5cJdClnMy4TfEk54tLFnakI.roa Signing time: Fri 22 Aug 2025 09:00:30 +0000 ROA not before: Fri 22 Aug 2025 09:00:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 210.200.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5250 (0x1482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F0F7AFE5C25D0A59CCCB84DF124E78B4B1676A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:b7:37:c3:74:57:8f:a6:a3:fe:3c:ec:e8: 50:47:fb:34:9d:a4:66:ee:28:ad:10:dc:63:eb:67: c1:af:8d:c0:75:f9:3a:c0:a6:14:8b:f4:a7:40:2f: 72:d6:73:da:73:6f:e9:ec:09:8c:59:d6:a9:60:fc: 42:0c:26:ab:e1:01:ab:f1:8a:d1:8e:b0:90:4d:89: 62:19:ab:1a:69:a5:b9:ea:0d:b2:4c:b1:78:97:95: 38:6c:d5:0e:a4:ad:c0:51:e7:f2:3c:0a:f1:e1:ea: a9:78:4e:8d:9a:68:34:7f:96:80:1b:a4:2c:bc:74: 91:0f:7b:36:04:1e:87:17:5e:94:3a:e7:07:12:3e: 46:a8:95:7f:d5:07:86:dd:cc:1f:ed:fc:33:7f:72: 2e:26:d5:68:72:56:ae:b4:2a:9a:8a:66:2d:94:4f: 80:99:00:92:e0:41:3f:84:5f:cd:61:e7:2d:9f:b1: 08:e7:b2:9a:0c:7c:08:ce:8c:de:36:34:2d:d0:6d: 34:b9:06:ad:70:ae:4f:76:2e:37:db:d5:c5:b6:de: 56:82:ac:5b:45:45:ba:72:b4:da:93:8c:40:7b:d0: 77:1a:bf:c0:6e:48:f6:8c:1a:71:80:47:5a:3b:82: 16:61:4e:3c:9e:ba:ac:6c:49:c8:2b:e5:18:5f:4a: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F7:AF:E5:C2:5D:0A:59:CC:CB:84:DF:12:4E:78:B4:B1:67:6A:42 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8Pev5cJdClnMy4TfEk54tLFnakI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:f0:65:4d:ef:a7:a3:00:26:24:74:5e:e6:2b:d6:91:e7:fc: 37:b6:4d:b7:10:54:84:26:ed:7d:a6:78:73:4c:5b:72:92:c8: 2b:e5:b0:62:fe:e7:17:33:a3:64:72:0b:1d:58:0d:6c:f8:3d: 3e:94:da:fa:83:5b:36:20:b7:7d:a9:9f:7e:37:1d:c5:2f:1a: 87:2b:40:0e:52:42:12:d7:74:63:3a:68:37:33:06:79:3e:f1: 48:d5:5a:92:14:cb:24:97:d0:82:87:a5:f0:56:68:3b:35:63: 14:cb:26:35:47:42:25:1e:1d:c9:10:ca:37:e5:e1:2a:e3:f2: 35:48:34:cd:2e:9d:f5:d0:c3:39:bc:07:d2:e4:76:98:56:84: 70:c8:5f:01:32:d3:7d:67:e1:40:5f:5d:73:27:bc:98:33:f6: 3a:ac:ac:a1:b4:d0:5c:ec:c8:34:d9:b9:3b:14:22:e5:21:a9: ca:52:56:61:83:1e:01:3d:97:34:5e:d6:03:b8:76:b1:f4:9a: cb:80:ef:8c:2f:a7:bd:46:57:ea:9e:4d:b1:a6:46:f2:d5:04: d9:10:e1:ea:03:ce:25:e6:6b:13:5a:08:9d:fd:5d:e5:a4:d5: e4:3f:fd:eb:bb:c7:6c:ac:c0:5c:61:b5:43:9d:1a:82:c7:97: 76:9e:66:fa -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYwRjdBRkU1QzI1RDBB NTlDQ0NCODRERjEyNEU3OEI0QjE2NzZBNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Lbc3w3RXj6aj/jzs6FBH+zSdpGbuKK0Q3GPrZ8GvjcB1+TrA phSL9KdAL3LWc9pzb+nsCYxZ1qlg/EIMJqvhAavxitGOsJBNiWIZqxpppbnqDbJM sXiXlThs1Q6krcBR5/I8CvHh6ql4To2aaDR/loAbpCy8dJEPezYEHocXXpQ65wcS PkaolX/VB4bdzB/t/DN/ci4m1WhyVq60KpqKZi2UT4CZAJLgQT+EX81h5y2fsQjn spoMfAjOjN42NC3QbTS5Bq1wrk92Ljfb1cW23laCrFtFRbpytNqTjEB70Hcav8Bu SPaMGnGAR1o7ghZhTjyeuqxsScgr5RhfSkiBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU8Pev5cJdClnMy4TfEk54tLFnakIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzhQZXY1Y0pkQ2xuTXk0VGZFazU0dExG bmFrSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyIAwDQYJ KoZIhvcNAQELBQADggEBAJ7wZU3vp6MAJiR0XuYr1pHn/De2TbcQVIQm7X2meHNM W3KSyCvlsGL+5xczo2RyCx1YDWz4PT6U2vqDWzYgt32pn343HcUvGocrQA5SQhLX dGM6aDczBnk+8UjVWpIUyySX0IKHpfBWaDs1YxTLJjVHQiUeHckQyjfl4Srj8jVI NM0unfXQwzm8B9LkdphWhHDIXwEy031n4UBfXXMnvJgz9jqsrKG00FzsyDTZuTsU IuUhqcpSVmGDHgE9lzRe1gO4drH0msuA74wvp71GV+qeTbGmRvLVBNkQ4eoDziXm axNaCJ39XeWk1eQ//eu7x2yswFxhtUOdGoLHl3aeZvo= -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:05 2025 by rpki-client