$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/IXrt12n9SgQ6zy_yGNY-HGnD8I8.roa File: IXrt12n9SgQ6zy_yGNY-HGnD8I8.roa (raw, json) Hash identifier: K9ChL6j8a/nTXPxb6JCwEMWbPyIgmkEeJQnoLaY6Woo= Subject key identifier: 21:7A:ED:D7:69:FD:4A:04:3A:CF:2F:F2:18:D6:3E:1C:69:C3:F0:8F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13A4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/IXrt12n9SgQ6zy_yGNY-HGnD8I8.roa Signing time: Fri 22 Aug 2025 08:59:32 +0000 ROA not before: Fri 22 Aug 2025 08:59:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 210.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5028 (0x13a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=217AEDD769FD4A043ACF2FF218D63E1C69C3F08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:88:3e:6c:49:67:ec:31:09:0b:65:77:32: 88:eb:54:bd:7f:c7:6b:dd:ae:56:a2:52:f5:59:70: af:18:a5:c1:cd:74:4e:99:aa:7d:86:db:bf:96:d8: 8a:2e:20:9e:23:18:e3:ed:69:d4:96:e1:4b:af:c2: 29:50:51:64:c1:41:0e:a4:27:47:3f:ee:7a:0e:0a: ec:bc:80:50:9f:c4:38:8b:45:76:b6:b4:87:7e:a2: da:76:a2:e5:cc:3f:54:f3:9e:c1:78:59:f9:22:a4: f1:3e:82:2a:49:4d:73:e7:f1:3e:38:42:82:33:e8: 4a:7d:a8:a3:7b:3e:a4:8d:c1:77:83:9c:ce:e1:c6: 35:8a:3b:21:31:23:7d:33:b0:f0:1b:8d:37:86:c1: f9:90:45:9e:9f:60:18:a6:84:6d:12:4f:e4:de:e1: 89:5d:8d:6c:21:6f:7b:b9:3d:20:1d:e6:95:09:02: 63:94:7f:a4:dc:d4:64:70:b1:0f:36:22:10:d2:83: 5b:32:09:56:79:28:36:70:77:4f:7b:ce:1a:98:4d: 9a:1f:5b:61:79:e9:c9:da:59:6e:a0:c2:2c:d4:d3: 44:1d:d5:68:ba:d7:97:ab:63:41:e6:3c:17:33:f4: b7:87:51:79:3f:fb:8a:c0:08:9c:28:38:13:92:16: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7A:ED:D7:69:FD:4A:04:3A:CF:2F:F2:18:D6:3E:1C:69:C3:F0:8F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/IXrt12n9SgQ6zy_yGNY-HGnD8I8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:a5:f3:02:5c:d5:d8:dc:78:e6:05:5d:aa:40:ea:46:7e:1e: 5d:e6:e3:98:e5:53:26:26:29:51:85:85:b1:7c:b1:04:5d:a3: 26:29:63:da:c9:7a:d7:a9:da:7e:87:31:74:79:b0:9c:d6:4f: 5a:ef:ec:d6:94:37:94:45:31:ea:65:5b:41:49:00:fc:cc:30: f6:ef:6a:a6:06:09:56:0d:d5:f6:a2:a0:c1:da:d8:2a:74:7e: 09:d4:46:98:5e:cb:4f:5e:93:27:95:3a:37:ae:f5:42:df:9e: 9c:48:2b:27:ae:14:fe:18:82:19:2f:52:51:d4:ff:f6:b1:9e: 47:53:bf:67:95:01:4c:03:87:c6:b8:82:61:86:e1:02:19:3b: ae:f2:fa:26:28:3e:18:e2:be:f6:94:5a:4f:6f:4d:74:66:c7: 9e:2c:2f:e2:8a:c9:3c:a4:1b:02:27:1b:e6:42:68:04:0f:81: 36:d6:fe:da:58:24:02:c4:d4:1c:6a:d4:6c:c8:6c:1b:11:1d: 3c:17:47:cf:64:a9:44:eb:63:bf:c2:83:0a:d7:27:7d:fa:e5: f5:07:86:94:f4:92:d4:35:7f:0e:fe:1f:b1:c1:0f:c7:47:4e: cb:8a:43:df:2f:cb:a1:80:31:65:66:f2:b6:7c:10:5f:b6:85: d9:92:62:2f -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICE6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIxN0FFREQ3NjlGRDRB MDQzQUNGMkZGMjE4RDYzRTFDNjlDM0YwOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE6og+bEln7DEJC2V3MojrVL1/x2vdrlaiUvVZcK8YpcHNdE6Z qn2G27+W2IouIJ4jGOPtadSW4UuvwilQUWTBQQ6kJ0c/7noOCuy8gFCfxDiLRXa2 tId+otp2ouXMP1TznsF4WfkipPE+gipJTXPn8T44QoIz6Ep9qKN7PqSNwXeDnM7h xjWKOyExI30zsPAbjTeGwfmQRZ6fYBimhG0ST+Te4YldjWwhb3u5PSAd5pUJAmOU f6Tc1GRwsQ82IhDSg1syCVZ5KDZwd097zhqYTZofW2F56cnaWW6gwizU00Qd1Wi6 15erY0HmPBcz9LeHUXk/+4rACJwoOBOSFh89AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUIXrt12n9SgQ6zy/yGNY+HGnD8I8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0lYcnQxMm45U2dRNnp5X3lHTlktSEdu RDhJOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSyDANBgkq hkiG9w0BAQsFAAOCAQEAQaXzAlzV2Nx45gVdqkDqRn4eXebjmOVTJiYpUYWFsXyx BF2jJilj2sl616nafocxdHmwnNZPWu/s1pQ3lEUx6mVbQUkA/Mww9u9qpgYJVg3V 9qKgwdrYKnR+CdRGmF7LT16TJ5U6N671Qt+enEgrJ64U/hiCGS9SUdT/9rGeR1O/ Z5UBTAOHxriCYYbhAhk7rvL6Jig+GOK+9pRaT29NdGbHniwv4orJPKQbAicb5kJo BA+BNtb+2lgkAsTUHGrUbMhsGxEdPBdHz2SpROtjv8KDCtcnffrl9QeGlPSS1DV/ Dv4fscEPx0dOy4pD3y/LoYAxZWbytnwQX7aF2ZJiLw== -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:45 2025 by rpki-client