$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa File: E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa (raw, json) Hash identifier: DOnWoTuUnMhp1zMSeb1FE4vy43lqSLX/0+8lmEPp0J8= Subject key identifier: 13:D3:6A:D3:87:C9:1C:83:41:A6:01:1E:27:9A:B6:9A:DF:21:A0:86 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13FF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa Signing time: Fri 22 Aug 2025 08:59:58 +0000 ROA not before: Fri 22 Aug 2025 08:59:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1131591 IP address blocks: 103.231.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5119 (0x13ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=13D36AD387C91C8341A6011E279AB69ADF21A086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:d4:ec:a4:0a:b7:06:1d:5b:cf:6e:33:41: 8e:5c:48:f0:4a:9d:e7:0d:32:24:d8:be:33:05:16: b7:c5:bb:63:16:cc:ca:2b:c2:ea:f1:5c:93:56:1b: b0:12:d6:1f:e1:2c:55:68:4e:62:b7:a3:fb:a7:c8: 47:28:0b:cc:f3:cc:e4:1e:a7:3c:b9:7b:1a:f9:db: 43:73:4b:d8:a3:c4:92:df:2a:6f:1d:67:4b:be:94: 15:13:0b:80:70:c4:b6:af:2d:82:04:03:30:1d:1e: 7b:3e:5e:39:52:c3:35:c4:b0:d2:07:5c:27:93:bf: d8:10:f1:cb:a4:b9:99:07:8b:c3:8f:dc:83:53:12: fc:43:ae:ed:f8:41:fc:cc:0c:2d:db:37:9f:48:e9: 37:fa:83:93:32:28:da:68:d1:24:2c:f0:56:d6:61: 9e:aa:13:bf:8a:60:fd:52:15:fa:5e:a6:1c:56:19: dd:79:fa:de:36:d3:c1:ac:e2:5a:1e:81:82:1b:fe: f8:8d:a1:83:e5:09:43:ef:38:4c:fc:76:d7:f3:34: d1:6f:0a:d0:e4:a2:cd:74:f3:74:9f:0c:6d:29:7e: f7:80:6e:eb:90:91:f6:71:24:8a:95:74:5a:e3:17: af:e7:aa:f7:fb:6c:77:f1:b3:5b:ed:ba:b3:9d:75: ec:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:6A:D3:87:C9:1C:83:41:A6:01:1E:27:9A:B6:9A:DF:21:A0:86 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E9Nq04fJHINBpgEeJ5q2mt8hoIY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.231.51.0/24 Signature Algorithm: sha256WithRSAEncryption c8:d7:43:46:5a:c0:3f:be:d3:76:9d:45:f3:4a:64:64:8b:73: ed:6f:9d:5e:aa:aa:6e:9d:eb:35:19:e3:19:d5:4f:0c:94:de: 43:22:af:16:44:02:8e:42:2b:45:49:f6:e1:b9:09:84:aa:07: 88:83:ae:9e:39:5c:d1:8d:ff:fd:09:61:c3:3c:8c:e8:e4:8c: 70:30:95:7c:d0:ce:49:39:e2:dd:4c:f9:0d:e8:7a:82:9d:74: 61:ef:e4:bb:70:72:4c:ed:f2:b1:02:ca:0a:37:3c:f1:b3:e1: 5e:77:60:7e:b1:4e:e4:16:ea:c7:e3:fb:be:ed:b7:12:29:c7: c4:c7:2f:13:f1:f0:c7:af:ee:14:13:85:c6:a1:78:36:95:5f: dc:88:88:62:3a:0b:e5:6a:e0:5a:6e:74:1a:d1:8f:98:24:f9: 0d:3d:56:0b:46:5e:13:e3:4d:8b:40:2e:85:74:b0:e4:d2:4e: 86:11:fb:b0:8b:82:4f:98:75:2c:a4:75:bf:8d:a8:cf:a9:b7: 5a:32:0d:a9:7c:9c:f1:5d:9e:92:30:b7:78:d2:ed:89:b9:5e: 0c:a5:65:6b:70:2c:b1:16:20:75:4d:6e:ff:40:5f:97:ab:a9: 5c:05:57:92:de:c2:16:e6:b1:89:04:85:2e:a5:5d:ca:a7:93: f8:07:9b:9a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEzRDM2QUQzODdDOTFD ODM0MUE2MDExRTI3OUFCNjlBREYyMUEwODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/GNTspAq3Bh1bz24zQY5cSPBKnecNMiTYvjMFFrfFu2MWzMor wurxXJNWG7AS1h/hLFVoTmK3o/unyEcoC8zzzOQepzy5exr520NzS9ijxJLfKm8d Z0u+lBUTC4BwxLavLYIEAzAdHns+XjlSwzXEsNIHXCeTv9gQ8cukuZkHi8OP3INT EvxDru34QfzMDC3bN59I6Tf6g5MyKNpo0SQs8FbWYZ6qE7+KYP1SFfpephxWGd15 +t4208Gs4loegYIb/viNoYPlCUPvOEz8dtfzNNFvCtDkos1083SfDG0pfveAbuuQ kfZxJIqVdFrjF6/nqvf7bHfxs1vturOddeyJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUE9Nq04fJHINBpgEeJ5q2mt8hoIYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0U5TnEwNGZKSElOQnBnRWVKNXEybXQ4 aG9JWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn5zMwDQYJ KoZIhvcNAQELBQADggEBAMjXQ0ZawD++03adRfNKZGSLc+1vnV6qqm6d6zUZ4xnV TwyU3kMirxZEAo5CK0VJ9uG5CYSqB4iDrp45XNGN//0JYcM8jOjkjHAwlXzQzkk5 4t1M+Q3oeoKddGHv5Ltwckzt8rECygo3PPGz4V53YH6xTuQW6sfj+77ttxIpx8TH LxPx8Mev7hQThcaheDaVX9yIiGI6C+Vq4FpudBrRj5gk+Q09VgtGXhPjTYtALoV0 sOTSToYR+7CLgk+YdSykdb+NqM+pt1oyDal8nPFdnpIwt3jS7Ym5XgylZWtwLLEW IHVNbv9AX5erqVwFV5LewhbmsYkEhS6lXcqnk/gHm5o= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:04 2025 by rpki-client