$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/UCOblxKtxktU49E3y9EG-EtM4wk.roa File: UCOblxKtxktU49E3y9EG-EtM4wk.roa (raw, json) Hash identifier: iPJNuTEnrsFqdZgAogcTWisbW0omXPjGIjaWTwgXSjc= Subject key identifier: 50:23:9B:97:12:AD:C6:4B:54:E3:D1:37:CB:D1:06:F8:4B:4C:E3:09 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1469 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UCOblxKtxktU49E3y9EG-EtM4wk.roa Signing time: Fri 22 Aug 2025 09:00:23 +0000 ROA not before: Fri 22 Aug 2025 09:00:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 210.200.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5225 (0x1469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=50239B9712ADC64B54E3D137CBD106F84B4CE309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:46:b4:32:27:b2:1c:05:02:c7:47:fe:fc:f3: e7:7c:81:e0:e0:8e:0a:80:c8:62:af:3f:f8:48:6e: 51:f2:18:38:79:2e:f3:a8:1e:05:db:4d:a5:6d:b3: 14:3d:0f:7e:94:52:3e:83:1c:66:75:69:bb:cd:bf: 84:64:a6:e2:5f:e6:46:42:4a:87:c1:b5:76:ce:63: 98:20:d1:ef:48:b2:9b:78:14:4d:6a:3c:64:fc:95: 88:24:b0:3c:a6:f1:bb:c6:c4:e3:6b:10:c8:a9:21: 93:54:28:71:1d:f7:67:86:2d:22:3a:88:87:17:76: 22:91:22:69:97:40:54:bd:24:59:6c:a2:99:c3:41: 14:72:b5:4d:77:a3:5e:57:5d:70:7b:04:39:a9:3c: 26:14:fb:db:af:1c:f6:96:a6:08:e3:4e:8e:7a:72: 84:96:62:ee:4e:d2:30:71:07:81:1c:33:b0:ac:a6: 1a:a6:73:ee:7f:a2:f0:f5:92:7a:d8:84:d9:0e:ff: 14:10:bc:07:cf:31:74:9d:bf:2c:32:14:da:f7:d3: a7:1f:6d:6d:f3:90:83:00:7a:0d:89:4d:a1:29:7b: 31:fc:b2:84:92:50:9c:aa:f9:31:64:72:d3:f1:28: b2:bd:5c:cc:7e:ba:29:0e:c3:7c:c4:81:2d:95:01: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:9B:97:12:AD:C6:4B:54:E3:D1:37:CB:D1:06:F8:4B:4C:E3:09 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UCOblxKtxktU49E3y9EG-EtM4wk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.4.0/22 Signature Algorithm: sha256WithRSAEncryption 76:b7:c9:58:d2:49:a7:22:42:c5:ab:11:e0:a6:89:f8:ba:9a: 3d:6d:33:18:94:6b:05:94:a0:a4:7e:67:1b:25:a5:11:ba:25: 9b:57:db:4b:1f:20:d1:7d:b8:23:15:57:22:f0:42:67:29:52: 36:36:48:b1:e0:18:87:98:b8:6d:fe:89:a9:13:51:6d:58:e6: 3a:39:70:c4:30:2f:7c:65:bb:81:a7:2f:80:dd:19:e3:ba:37: b9:81:c0:ec:ea:54:54:de:68:64:42:6f:0d:44:a1:0a:6c:d3: 70:00:ff:f4:b9:04:40:15:54:49:21:6c:95:94:40:cc:04:3c: 30:e1:50:6f:aa:55:d0:1f:57:99:e2:79:ab:9b:5f:b1:f1:d2: d0:54:84:ac:4a:66:d6:4d:2a:31:2b:99:6b:b8:83:8f:70:51: 14:15:a5:c0:f5:69:3a:43:fd:79:f1:d5:82:c1:6b:3a:18:7f: 53:18:72:07:03:78:c5:81:70:19:a6:39:2d:6f:9a:f0:91:9d: e5:14:ab:6c:fc:c9:51:8d:08:46:cb:a2:38:7b:22:fa:5f:b0: d2:2f:95:28:bf:26:bd:e2:bd:f4:04:c3:08:ee:9d:b4:28:3c: 82:aa:64:be:9e:bd:76:c9:41:7d:9b:b8:ce:ac:74:ea:bb:1d: 1a:d2:ce:74 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUwMjM5Qjk3MTJBREM2 NEI1NEUzRDEzN0NCRDEwNkY4NEI0Q0UzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVRrQyJ7IcBQLHR/788+d8geDgjgqAyGKvP/hIblHyGDh5LvOo HgXbTaVtsxQ9D36UUj6DHGZ1abvNv4RkpuJf5kZCSofBtXbOY5gg0e9Ispt4FE1q PGT8lYgksDym8bvGxONrEMipIZNUKHEd92eGLSI6iIcXdiKRImmXQFS9JFlsopnD QRRytU13o15XXXB7BDmpPCYU+9uvHPaWpgjjTo56coSWYu5O0jBxB4EcM7Csphqm c+5/ovD1knrYhNkO/xQQvAfPMXSdvywyFNr306cfbW3zkIMAeg2JTaEpezH8soSS UJyq+TFkctPxKLK9XMx+uikOw3zEgS2VAS4pAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUUCOblxKtxktU49E3y9EG+EtM4wkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1VDT2JseEt0eGt0VTQ5RTN5OUVHLUV0 TTR3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyAQwDQYJ KoZIhvcNAQELBQADggEBAHa3yVjSSaciQsWrEeCmifi6mj1tMxiUawWUoKR+Zxsl pRG6JZtX20sfINF9uCMVVyLwQmcpUjY2SLHgGIeYuG3+iakTUW1Y5jo5cMQwL3xl u4GnL4DdGeO6N7mBwOzqVFTeaGRCbw1EoQps03AA//S5BEAVVEkhbJWUQMwEPDDh UG+qVdAfV5nieaubX7Hx0tBUhKxKZtZNKjErmWu4g49wURQVpcD1aTpD/Xnx1YLB azoYf1MYcgcDeMWBcBmmOS1vmvCRneUUq2z8yVGNCEbLojh7IvpfsNIvlSi/Jr3i vfQEwwjunbQoPIKqZL6evXbJQX2buM6sdOq7HRrSznQ= -----END CERTIFICATE-----Generated at Sun Aug 24 14:17:20 2025 by rpki-client