$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/EBOQGqAp5OzwMSRFX11dN00hlt8.roa File: EBOQGqAp5OzwMSRFX11dN00hlt8.roa (raw, json) Hash identifier: Yr46Sa12j4zMGEw0zJWYtfybkUfB6Ka1OYVTolG7Hl4= Subject key identifier: 10:13:90:1A:A0:29:E4:EC:F0:31:24:45:5F:5D:5D:37:4D:21:96:DF Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13F1 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EBOQGqAp5OzwMSRFX11dN00hlt8.roa Signing time: Fri 22 Aug 2025 08:59:54 +0000 ROA not before: Fri 22 Aug 2025 08:59:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 210.200.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5105 (0x13f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1013901AA029E4ECF03124455F5D5D374D2196DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:2a:b4:5d:b1:e4:43:24:39:e0:d3:ad:3d: dc:b5:a3:a2:64:f3:99:b4:f0:6b:1f:f7:52:05:32: 4a:df:60:d3:08:75:6b:d1:bc:e6:14:96:dc:8d:79: 9f:5f:36:1e:ee:0d:8e:24:8f:f8:10:b9:19:07:ff: 42:cc:62:55:a6:c2:7f:f0:6e:dc:40:f1:db:64:c4: a8:0b:46:76:d1:70:b8:52:2d:b9:de:7c:ec:ad:16: 36:8f:5c:b5:fe:b8:b2:a2:f7:4b:3e:ca:e6:fd:d6: e9:68:aa:76:fc:95:a0:11:20:57:0f:92:c1:d1:e2: 1c:09:83:7d:a9:ba:ef:16:cd:c9:26:8a:5d:5f:55: 98:b4:fc:e8:26:9b:ec:4e:c4:c0:8c:de:a5:21:4d: 01:4a:53:22:ed:49:93:5e:ae:89:51:4a:14:2e:4a: a3:5d:0f:e3:74:a1:d5:1a:81:8f:03:97:6a:a0:f7: 69:54:f6:c0:1d:02:5e:3d:f1:3e:44:63:84:63:a8: 47:a3:dc:42:7c:57:87:96:d9:58:0d:fa:31:ba:cb: 10:eb:cb:f5:4d:3d:fe:c3:b9:ef:d3:e4:aa:96:4b: 1c:79:d5:8d:17:2b:5b:57:f7:e8:7a:d2:f5:f5:bf: b5:b0:dc:3a:cd:c9:19:ed:11:59:28:61:fd:57:bf: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:13:90:1A:A0:29:E4:EC:F0:31:24:45:5F:5D:5D:37:4D:21:96:DF X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EBOQGqAp5OzwMSRFX11dN00hlt8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.0.0/19 Signature Algorithm: sha256WithRSAEncryption 89:2c:e0:24:e3:08:f7:be:59:cc:3a:14:b3:99:93:48:ce:06: 97:45:33:32:4c:15:8c:f1:6b:70:0b:d5:d7:1e:4a:29:7a:3a: 39:85:4e:e0:00:e0:e7:73:c1:2d:3a:90:8e:2b:95:ce:81:7b: ea:d8:e3:26:a5:2b:c7:8a:2b:ea:f4:eb:9f:b9:17:20:3f:3f: e7:9e:0a:d1:93:09:69:33:f1:7a:b7:59:1e:52:81:a4:a8:9c: b6:3c:94:14:d1:b7:de:d5:ab:dd:10:fc:34:d5:18:3e:03:67: fb:9a:19:9c:a1:3b:cc:ed:a8:c5:05:1f:66:7b:c2:6a:2a:df: b9:64:4d:ef:dd:9a:f5:49:03:4f:82:f3:0b:ef:5d:57:af:28: 0a:89:1e:80:d0:30:41:96:3e:4f:ec:82:05:b3:86:4f:14:19: 33:4a:5a:85:7d:2d:ee:92:ef:d6:2c:34:1e:0a:f5:f8:c1:27: 47:fd:45:62:01:ed:e0:67:b2:77:77:2d:50:04:43:3b:70:ec: 92:94:01:b7:fc:91:70:80:6d:09:6c:68:b9:07:4e:ee:43:d3: 12:d9:25:b6:b0:81:3a:f8:34:26:fc:60:20:5a:86:5e:b0:bd: 47:e2:bc:af:f2:6f:a2:0c:a9:76:6e:cc:ff:35:9c:4c:d7:74: 19:b6:e2:99 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEwMTM5MDFBQTAyOUU0 RUNGMDMxMjQ0NTVGNUQ1RDM3NEQyMTk2REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGuiq0XbHkQyQ54NOtPdy1o6Jk85m08Gsf91IFMkrfYNMIdWvR vOYUltyNeZ9fNh7uDY4kj/gQuRkH/0LMYlWmwn/wbtxA8dtkxKgLRnbRcLhSLbne fOytFjaPXLX+uLKi90s+yub91uloqnb8laARIFcPksHR4hwJg32puu8Wzckmil1f VZi0/Ogmm+xOxMCM3qUhTQFKUyLtSZNerolRShQuSqNdD+N0odUagY8Dl2qg92lU 9sAdAl498T5EY4RjqEej3EJ8V4eW2VgN+jG6yxDry/VNPf7Due/T5KqWSxx51Y0X K1tX9+h60vX1v7Ww3DrNyRntEVkoYf1Xv8OVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUEBOQGqAp5OzwMSRFX11dN00hlt8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0VCT1FHcUFwNU96d01TUkZYMTFkTjAw aGx0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSyAAwDQYJ KoZIhvcNAQELBQADggEBAIks4CTjCPe+Wcw6FLOZk0jOBpdFMzJMFYzxa3AL1dce Sil6OjmFTuAA4OdzwS06kI4rlc6Be+rY4yalK8eKK+r065+5FyA/P+eeCtGTCWkz 8Xq3WR5SgaSonLY8lBTRt97Vq90Q/DTVGD4DZ/uaGZyhO8ztqMUFH2Z7wmoq37lk Te/dmvVJA0+C8wvvXVevKAqJHoDQMEGWPk/sggWzhk8UGTNKWoV9Le6S79YsNB4K 9fjBJ0f9RWIB7eBnsnd3LVAEQztw7JKUAbf8kXCAbQlsaLkHTu5D0xLZJbawgTr4 NCb8YCBahl6wvUfivK/yb6IMqXZuzP81nEzXdBm24pk= -----END CERTIFICATE-----Generated at Sun Aug 24 14:15:03 2025 by rpki-client