$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/VasZn__Agfy2agUw16bbaGZ5keY.roa File: VasZn__Agfy2agUw16bbaGZ5keY.roa (raw, json) Hash identifier: PmevYwl7rT2xg6Zv1PB+4FBCA9g6VEL6mKMQ/A3acT8= Subject key identifier: 55:AB:19:9F:FF:C0:81:FC:B6:6A:05:30:D7:A6:DB:68:66:79:91:E6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 148D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VasZn__Agfy2agUw16bbaGZ5keY.roa Signing time: Fri 22 Aug 2025 09:00:32 +0000 ROA not before: Fri 22 Aug 2025 09:00:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 218.35.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5261 (0x148d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=55AB199FFFC081FCB66A0530D7A6DB68667991E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:95:33:f8:7e:cb:29:1a:8d:f2:48:cc:3f: 7d:9f:47:ad:a2:ce:b1:12:c2:85:67:75:45:a9:59: 9b:ed:b4:fd:c7:62:14:bc:9e:17:80:0e:80:31:6e: 27:02:1e:f2:48:4b:c8:19:83:12:96:01:7f:b3:bb: 47:ae:c1:3f:29:99:8a:c9:b0:5b:bf:2b:e1:f2:3c: 6c:2f:60:df:37:dd:5c:c7:9a:61:13:6c:c2:2b:5c: 71:65:15:f0:c7:9d:08:82:71:c2:3c:08:07:c0:4e: a8:32:5b:08:18:d0:74:b9:4f:0d:3c:d5:df:b6:78: 01:b5:d7:13:51:44:8f:6d:cb:4f:3a:fe:53:8c:43: 05:2a:12:d6:e9:6a:d7:8f:87:4a:5c:ae:a2:be:18: 73:ae:0b:37:a4:ea:b4:7b:80:a1:ac:ca:be:7f:54: b7:a0:d3:17:d7:23:54:9f:83:f8:32:8a:92:5b:a2: b6:db:45:02:f9:51:69:17:ab:7f:bf:b4:39:fb:d6: c4:87:bf:91:3b:69:ca:38:2c:da:23:3c:a7:fb:8a: 13:8c:96:07:f1:c4:60:40:7c:a2:01:8f:10:d9:41: 79:66:4f:35:fa:cd:11:e9:74:32:4b:46:34:34:c5: 27:95:89:5a:8e:77:3a:f0:32:7c:a7:f4:64:63:e9: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AB:19:9F:FF:C0:81:FC:B6:6A:05:30:D7:A6:DB:68:66:79:91:E6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VasZn__Agfy2agUw16bbaGZ5keY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.192.0/18 Signature Algorithm: sha256WithRSAEncryption 44:45:52:86:ac:2c:ce:c2:af:d7:16:db:a7:bb:c7:0c:64:39: 0f:4e:fe:e6:de:43:4e:20:ba:2c:1a:4b:99:12:06:10:37:4c: 58:cf:0f:79:30:cc:db:0e:21:13:95:35:d5:42:fd:48:f1:82: e5:d0:38:95:a6:0c:15:dc:d2:66:0d:9f:8c:9c:13:2d:f8:3a: 42:23:79:e9:f3:07:95:81:e3:cd:5c:3c:5d:75:1c:f6:11:31: 54:ea:6e:cc:ea:89:1e:ed:5e:fd:3d:28:f5:87:8d:6f:cc:9f: ca:d1:eb:ae:57:75:36:f2:c8:79:4a:05:03:36:4c:f3:3c:04: e4:22:e4:66:c7:2c:73:1f:95:6a:8b:02:a8:61:0c:bc:ca:2b: 79:c5:a8:19:2a:4d:d4:c9:54:a4:0a:63:a8:29:15:24:b2:cf: a9:20:25:ba:69:62:07:24:8a:78:ba:a0:f7:91:47:db:39:a8: 1f:3d:d7:92:b3:dc:46:54:94:56:68:9c:78:ea:d3:d7:ee:38: 41:aa:a2:78:fd:37:15:32:ef:12:7d:69:ad:c9:67:e0:63:73: 62:21:60:b4:df:3e:84:c5:d9:f0:c7:1d:4e:17:2b:d0:8f:eb: 26:c0:60:02:0d:62:47:61:c7:61:ff:fa:a2:f9:5f:66:0e:78: 7e:a4:35:24 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU1QUIxOTlGRkZDMDgx RkNCNjZBMDUzMEQ3QTZEQjY4NjY3OTkxRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgSZUz+H7LKRqN8kjMP32fR62izrESwoVndUWpWZvttP3HYhS8 nheADoAxbicCHvJIS8gZgxKWAX+zu0euwT8pmYrJsFu/K+HyPGwvYN833VzHmmET bMIrXHFlFfDHnQiCccI8CAfATqgyWwgY0HS5Tw081d+2eAG11xNRRI9ty086/lOM QwUqEtbpatePh0pcrqK+GHOuCzek6rR7gKGsyr5/VLeg0xfXI1Sfg/gyipJborbb RQL5UWkXq3+/tDn71sSHv5E7aco4LNojPKf7ihOMlgfxxGBAfKIBjxDZQXlmTzX6 zRHpdDJLRjQ0xSeViVqOdzrwMnyn9GRj6VcJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUVasZn//Agfy2agUw16bbaGZ5keYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Zhc1puX19BZ2Z5MmFnVXcxNmJiYUda NWtlWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbaI8AwDQYJ KoZIhvcNAQELBQADggEBAERFUoasLM7Cr9cW26e7xwxkOQ9O/ubeQ04guiwaS5kS BhA3TFjPD3kwzNsOIROVNdVC/UjxguXQOJWmDBXc0mYNn4ycEy34OkIjeenzB5WB 481cPF11HPYRMVTqbszqiR7tXv09KPWHjW/Mn8rR665XdTbyyHlKBQM2TPM8BOQi 5GbHLHMflWqLAqhhDLzKK3nFqBkqTdTJVKQKY6gpFSSyz6kgJbppYgckini6oPeR R9s5qB8915Kz3EZUlFZonHjq09fuOEGqonj9NxUy7xJ9aa3JZ+Bjc2IhYLTfPoTF 2fDHHU4XK9CP6ybAYAINYkdhx2H/+qL5X2YOeH6kNSQ= -----END CERTIFICATE-----Generated at Sun Aug 24 13:52:14 2025 by rpki-client