$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GA2y2ZYLHhKsi46J550ESvQwuT0.roa File: GA2y2ZYLHhKsi46J550ESvQwuT0.roa (raw, json) Hash identifier: kLxrYmNUxjWAdbUaSajYMJ+NgkfMA3tBo5tSZt4H0F8= Subject key identifier: 18:0D:B2:D9:96:0B:1E:12:AC:8B:8E:89:E7:9D:04:4A:F4:30:B9:3D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13E6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GA2y2ZYLHhKsi46J550ESvQwuT0.roa Signing time: Fri 22 Aug 2025 08:59:51 +0000 ROA not before: Fri 22 Aug 2025 08:59:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 210.63.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5094 (0x13e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=180DB2D9960B1E12AC8B8E89E79D044AF430B93D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:14:ac:8c:a0:e2:d4:79:2a:d6:0e:25:70: 71:a7:9b:f7:0e:ae:55:87:ce:0d:40:19:5c:d4:3e: 35:01:00:a3:c1:ec:a4:90:c8:b3:88:6d:ce:7c:19: e3:c3:82:2b:09:c1:40:43:6a:8d:76:57:b6:80:5d: eb:cf:e0:95:f4:45:ab:18:9f:7b:84:84:a3:b0:b1: 44:c8:51:f2:7b:17:69:d3:fb:3e:72:f5:c6:37:0a: 31:3e:4f:f1:af:40:55:16:fa:63:26:a5:21:15:a7: c8:d4:75:3e:0e:b1:1f:ec:25:8c:11:a3:37:50:7d: bf:ab:ae:7b:eb:f8:72:10:60:a3:ea:40:4c:20:8f: 26:36:09:bb:b4:3f:b8:e5:f3:b2:dd:40:e3:16:05: 8b:2f:2e:c2:23:63:39:89:a7:a7:d4:3c:ce:df:08: 9f:45:10:a4:22:8a:38:1d:4b:ed:e3:3d:e4:cf:4e: c1:f9:89:b3:74:df:5e:51:24:b6:ea:cc:28:73:ad: 2d:bc:49:d7:e7:fa:31:2a:5c:be:18:98:05:ce:c2: 17:66:99:d6:67:b9:3e:ea:01:81:1b:c0:57:66:16: 99:8d:5a:7f:c8:be:d1:7d:98:fa:a9:b1:5f:a4:58: e2:f7:18:f7:3e:64:b7:17:a6:06:37:12:ef:cd:83: d8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0D:B2:D9:96:0B:1E:12:AC:8B:8E:89:E7:9D:04:4A:F4:30:B9:3D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GA2y2ZYLHhKsi46J550ESvQwuT0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.192.0/19 Signature Algorithm: sha256WithRSAEncryption 23:cc:e7:70:60:77:3b:f8:1c:3c:b3:98:06:41:96:33:dd:91: 2c:cf:b1:ab:16:d1:71:26:bd:d5:a1:4a:7f:91:11:53:e4:13: 14:94:a2:34:85:6a:93:a5:03:4b:d9:e3:75:d6:4d:aa:c2:d8: b7:23:90:05:24:1e:87:99:58:04:0d:ac:5c:c8:a7:4e:88:38: e4:28:a4:d0:e8:e3:81:e3:fa:70:f8:e7:f3:d6:b1:6f:b3:80: e8:56:f1:f0:3d:5d:8e:61:c8:63:77:60:ac:8c:af:2e:bd:ce: cf:f1:e7:d8:5d:1e:56:d0:b2:4e:7f:f5:8c:7d:6f:10:fe:9c: 51:41:38:51:06:f1:3a:a2:b3:08:9a:d2:c1:24:85:5c:78:ef: ba:fb:a9:63:14:3e:23:26:96:75:22:8f:a6:1d:a1:6d:d3:9f: 2c:93:01:61:05:7b:16:72:a9:a5:77:77:a3:10:85:1b:df:a0: 13:b4:a3:9c:72:6b:8f:4c:8a:c8:3d:b6:44:58:4e:a2:bd:ac: 6d:7f:55:92:78:d8:95:55:e3:3d:aa:38:35:4a:5e:5d:68:23: 01:15:8d:f3:3a:44:ff:df:f3:e6:3a:86:07:2a:54:8c:42:83: 28:43:4d:47:f4:0c:b6:76:bf:3a:7d:a4:d4:ba:43:a9:bc:dc: 98:aa:ef:63 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4MERCMkQ5OTYwQjFF MTJBQzhCOEU4OUU3OUQwNDRBRjQzMEI5M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpthSsjKDi1Hkq1g4lcHGnm/cOrlWHzg1AGVzUPjUBAKPB7KSQ yLOIbc58GePDgisJwUBDao12V7aAXevP4JX0RasYn3uEhKOwsUTIUfJ7F2nT+z5y 9cY3CjE+T/GvQFUW+mMmpSEVp8jUdT4OsR/sJYwRozdQfb+rrnvr+HIQYKPqQEwg jyY2Cbu0P7jl87LdQOMWBYsvLsIjYzmJp6fUPM7fCJ9FEKQiijgdS+3jPeTPTsH5 ibN0315RJLbqzChzrS28Sdfn+jEqXL4YmAXOwhdmmdZnuT7qAYEbwFdmFpmNWn/I vtF9mPqpsV+kWOL3GPc+ZLcXpgY3Eu/Ng9jfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUGA2y2ZYLHhKsi46J550ESvQwuT0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0dBMnkyWllMSGhLc2k0Nko1NTBFU3ZR d3VUMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSP8AwDQYJ KoZIhvcNAQELBQADggEBACPM53Bgdzv4HDyzmAZBljPdkSzPsasW0XEmvdWhSn+R EVPkExSUojSFapOlA0vZ43XWTarC2LcjkAUkHoeZWAQNrFzIp06IOOQopNDo44Hj +nD45/PWsW+zgOhW8fA9XY5hyGN3YKyMry69zs/x59hdHlbQsk5/9Yx9bxD+nFFB OFEG8Tqiswia0sEkhVx477r7qWMUPiMmlnUij6YdoW3TnyyTAWEFexZyqaV3d6MQ hRvfoBO0o5xya49Misg9tkRYTqK9rG1/VZJ42JVV4z2qODVKXl1oIwEVjfM6RP/f 8+Y6hgcqVIxCgyhDTUf0DLZ2vzp9pNS6Q6m83Jiq72M= -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:05 2025 by rpki-client