$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/QsntpS1QA9CsLAY82zfdarEAS1o.roa File: QsntpS1QA9CsLAY82zfdarEAS1o.roa (raw, json) Hash identifier: AG0NhcGkTbcO5Ze0M4UbIIBCpzgneq7mVEUAudvKQnI= Subject key identifier: 42:C9:ED:A5:2D:50:03:D0:AC:2C:06:3C:DB:37:DD:6A:B1:00:4B:5A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13D6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QsntpS1QA9CsLAY82zfdarEAS1o.roa Signing time: Fri 22 Aug 2025 08:59:47 +0000 ROA not before: Fri 22 Aug 2025 08:59:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 210.202.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5078 (0x13d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=42C9EDA52D5003D0AC2C063CDB37DD6AB1004B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:e4:e5:25:e2:9b:5d:a8:d1:04:90:ac:17: 97:38:3e:0d:5e:e3:38:e0:c6:05:f4:8e:df:b2:8f: f2:95:6d:b1:9d:57:05:84:e5:5a:c4:8c:64:c3:41: 33:a3:c6:42:19:b9:f8:7c:b9:23:aa:6d:96:bc:4a: 1c:56:57:a9:b0:f6:46:b7:1c:0d:4d:e5:e6:0a:d3: fd:dd:d5:10:f3:e4:b9:7d:86:b8:78:9c:87:54:a8: fa:c8:2c:6a:2c:9d:89:f4:d8:ff:c8:08:4e:7a:ae: 94:81:25:2a:3d:8e:c3:ae:c1:50:6f:87:43:90:7b: dc:64:f3:a0:e2:80:73:7c:11:f2:b0:17:ac:b6:e4: 72:e1:06:57:8b:d6:98:01:fa:a9:db:e8:6a:92:ac: 41:d9:6a:49:dd:e8:c2:b3:6f:83:8e:88:62:5c:6e: 78:0c:3a:f2:ff:8d:fd:0e:0e:e1:a8:cc:f0:86:f2: f0:bc:a9:39:6d:5f:5b:a2:f1:b8:4e:99:f6:98:48: b1:fc:1d:b8:b2:8c:1b:8e:2f:04:38:75:ac:75:c7: a0:25:da:ca:54:9b:7f:24:17:af:32:c6:bb:fc:e1: 1d:5b:36:6b:ea:d7:4c:a6:97:3c:02:57:b3:51:c0: 4c:bc:47:f8:0d:b8:65:48:25:85:7f:1d:4b:a2:91: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C9:ED:A5:2D:50:03:D0:AC:2C:06:3C:DB:37:DD:6A:B1:00:4B:5A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QsntpS1QA9CsLAY82zfdarEAS1o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.0.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:0d:6d:2a:93:a4:39:c2:6a:40:45:c9:32:19:4b:17:d1:b7: 97:58:42:eb:56:45:ff:0a:11:21:7d:9d:6d:a8:a7:f9:a7:13: 8b:dd:77:7c:1d:37:de:95:a6:68:72:5e:c4:66:bd:ca:04:bc: bd:16:69:78:44:d4:4b:45:c2:4d:17:39:d9:6b:d8:bd:86:d9: d2:a0:e1:df:d9:99:59:e5:0d:36:33:ff:af:8b:f4:a6:c0:3e: 20:47:a7:1b:9b:c9:0b:23:b9:7b:59:4d:f7:80:ad:ad:80:aa: 0c:cd:a0:16:7a:af:36:dd:a6:0f:8d:e8:94:d3:1d:83:49:82: 2e:fe:2e:e8:59:bd:33:4c:2c:d1:a1:de:05:f8:ac:d5:ea:5b: 92:67:e2:e3:c8:12:3e:56:69:8e:09:9b:1a:bb:71:6d:e6:37: 92:8f:08:8f:07:bb:a9:15:df:c8:e3:39:83:ad:94:8b:64:68: d6:5a:1f:68:52:5e:bf:65:56:92:f0:c8:d4:ea:6d:1c:63:5c: 86:a9:1f:81:f0:cb:bb:f2:63:0e:65:87:c7:20:dc:99:dc:0f: d7:81:02:71:e6:77:dc:73:04:cc:b0:14:2f:97:15:ef:5b:b3: 67:7c:64:77:87:fc:34:95:10:11:ed:77:0a:64:78:cf:71:31: a3:4c:de:2f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQyQzlFREE1MkQ1MDAz RDBBQzJDMDYzQ0RCMzdERDZBQjEwMDRCNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDll+TlJeKbXajRBJCsF5c4Pg1e4zjgxgX0jt+yj/KVbbGdVwWE 5VrEjGTDQTOjxkIZufh8uSOqbZa8ShxWV6mw9ka3HA1N5eYK0/3d1RDz5Ll9hrh4 nIdUqPrILGosnYn02P/ICE56rpSBJSo9jsOuwVBvh0OQe9xk86DigHN8EfKwF6y2 5HLhBleL1pgB+qnb6GqSrEHZaknd6MKzb4OOiGJcbngMOvL/jf0ODuGozPCG8vC8 qTltX1ui8bhOmfaYSLH8HbiyjBuOLwQ4dax1x6Al2spUm38kF68yxrv84R1bNmvq 10ymlzwCV7NRwEy8R/gNuGVIJYV/HUuikVMFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQsntpS1QA9CsLAY82zfdarEAS1owHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1FzbnRwUzFRQTlDc0xBWTgyemZkYXJF QVMxby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSygAwDQYJ KoZIhvcNAQELBQADggEBAF0NbSqTpDnCakBFyTIZSxfRt5dYQutWRf8KESF9nW2o p/mnE4vdd3wdN96VpmhyXsRmvcoEvL0WaXhE1EtFwk0XOdlr2L2G2dKg4d/ZmVnl DTYz/6+L9KbAPiBHpxubyQsjuXtZTfeAra2AqgzNoBZ6rzbdpg+N6JTTHYNJgi7+ LuhZvTNMLNGh3gX4rNXqW5Jn4uPIEj5WaY4Jmxq7cW3mN5KPCI8Hu6kV38jjOYOt lItkaNZaH2hSXr9lVpLwyNTqbRxjXIapH4Hwy7vyYw5lh8cg3JncD9eBAnHmd9xz BMywFC+XFe9bs2d8ZHeH/DSVEBHtdwpkeM9xMaNM3i8= -----END CERTIFICATE-----Generated at Sun Aug 24 14:16:34 2025 by rpki-client