$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/VRs58Rvl4ge__QrWrNe8rgqG02Y.roa File: VRs58Rvl4ge__QrWrNe8rgqG02Y.roa (raw, json) Hash identifier: 3b+KltKorg1/q+mICPB4qGomgNO/guRIQbkI0vr+pmo= Subject key identifier: 55:1B:39:F1:1B:E5:E2:07:BF:FD:0A:D6:AC:D7:BC:AE:0A:86:D3:66 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1454 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VRs58Rvl4ge__QrWrNe8rgqG02Y.roa Signing time: Fri 22 Aug 2025 09:00:18 +0000 ROA not before: Fri 22 Aug 2025 09:00:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 219.91.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5204 (0x1454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=551B39F11BE5E207BFFD0AD6ACD7BCAE0A86D366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:4a:5b:67:32:67:78:b9:5e:fe:86:16:03: b1:1d:e6:08:55:9f:76:43:82:c2:72:14:76:99:68: 0e:88:a1:6b:51:59:6e:de:57:9b:5f:b6:3f:18:bd: 05:f7:fb:9b:50:ad:6b:0a:62:04:d0:0f:52:f5:d9: 74:c7:3a:0c:8a:ae:48:69:8d:2c:67:4c:76:c1:c3: 52:64:c9:d3:98:9b:cc:9b:cd:f3:c6:a2:5a:21:1e: 8c:2c:c4:24:11:1e:79:19:1e:85:4b:9f:de:29:97: df:1f:f5:47:54:22:59:c9:38:18:9c:11:e9:69:7f: 64:2f:a4:22:6c:09:60:34:ee:77:62:73:c8:82:78: 03:45:e6:71:eb:23:ed:a6:52:3d:bd:c6:81:6e:e7: ea:1b:75:7d:c7:d8:5b:97:f4:db:cf:22:53:9a:d6: 68:bb:6b:82:46:cb:d8:97:d6:d4:62:bb:b7:dd:8a: 67:dd:bb:5b:4c:a2:97:1f:0b:a3:6e:81:d7:e1:ac: 4a:7b:cd:10:5a:a3:16:60:08:81:af:a0:32:13:45: 20:40:2c:d4:51:76:bb:c0:fa:46:8a:24:3b:00:8a: ed:35:7d:a8:d4:7c:28:4e:26:a9:b5:af:a4:9c:1d: 8e:0f:61:6c:80:a3:9d:a2:ce:b8:7c:94:9c:58:cf: 79:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1B:39:F1:1B:E5:E2:07:BF:FD:0A:D6:AC:D7:BC:AE:0A:86:D3:66 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VRs58Rvl4ge__QrWrNe8rgqG02Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.0.0/18 Signature Algorithm: sha256WithRSAEncryption 22:bd:86:35:a9:cd:3e:e7:ab:4e:af:35:33:61:ac:05:f9:99: e7:c6:53:54:9e:d7:ef:f6:4f:2d:30:49:f6:ba:72:68:f6:b3: 85:56:63:52:07:36:bc:fa:a0:18:4c:03:20:bd:a8:0f:0a:da: 95:60:03:77:fa:c7:b8:70:45:b4:11:16:42:72:5b:f4:47:b3: 01:41:be:52:3a:20:2a:28:7b:1e:3e:70:fb:a1:5c:60:d0:e1: a8:5a:a2:1f:87:db:f5:87:d6:01:a0:a8:e8:12:21:23:1d:76: 0f:80:98:7d:d9:ec:81:7c:8d:ab:2d:80:be:ca:b2:58:c6:28: 71:1d:d6:45:05:2f:06:9d:0a:0e:43:a8:76:e4:cc:91:73:f6: fe:a3:16:ae:9a:30:f2:bf:e2:8a:fe:cb:11:34:66:97:db:0f: dd:e0:ce:97:6e:0e:fc:b9:c8:4c:f6:6f:af:f4:79:4d:92:3c: 6e:f1:73:4f:ff:81:07:2c:d6:ee:a0:7f:fc:dc:b5:01:0b:db: 46:87:0d:68:ef:f2:6b:a5:79:d3:d5:bc:a2:a0:ef:46:12:7b: 4c:92:d2:95:ed:8b:a9:38:0e:9d:2a:10:5e:e1:b2:a9:a5:16: 9e:07:1c:21:6e:e3:ae:9d:fc:3b:8d:91:25:78:73:f3:0d:cd: 84:52:c8:b8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU1MUIzOUYxMUJFNUUy MDdCRkZEMEFENkFDRDdCQ0FFMEE4NkQzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpP0pbZzJneLle/oYWA7Ed5ghVn3ZDgsJyFHaZaA6IoWtRWW7e V5tftj8YvQX3+5tQrWsKYgTQD1L12XTHOgyKrkhpjSxnTHbBw1JkydOYm8ybzfPG olohHowsxCQRHnkZHoVLn94pl98f9UdUIlnJOBicEelpf2QvpCJsCWA07ndic8iC eANF5nHrI+2mUj29xoFu5+obdX3H2FuX9NvPIlOa1mi7a4JGy9iX1tRiu7fdimfd u1tMopcfC6NugdfhrEp7zRBaoxZgCIGvoDITRSBALNRRdrvA+kaKJDsAiu01fajU fChOJqm1r6ScHY4PYWyAo52izrh8lJxYz3mNAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUVRs58Rvl4ge//QrWrNe8rgqG02YwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1ZSczU4UnZsNGdlX19RcldyTmU4cmdx RzAyWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbbWwAwDQYJ KoZIhvcNAQELBQADggEBACK9hjWpzT7nq06vNTNhrAX5mefGU1Se1+/2Ty0wSfa6 cmj2s4VWY1IHNrz6oBhMAyC9qA8K2pVgA3f6x7hwRbQRFkJyW/RHswFBvlI6ICoo ex4+cPuhXGDQ4ahaoh+H2/WH1gGgqOgSISMddg+AmH3Z7IF8jastgL7KsljGKHEd 1kUFLwadCg5DqHbkzJFz9v6jFq6aMPK/4or+yxE0ZpfbD93gzpduDvy5yEz2b6/0 eU2SPG7xc0//gQcs1u6gf/zctQEL20aHDWjv8muledPVvKKg70YSe0yS0pXti6k4 Dp0qEF7hsqmlFp4HHCFu466d/DuNkSV4c/MNzYRSyLg= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client