$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/W4Js_TMj6rFyhhKKF_0uqBl5xCo.roa File: W4Js_TMj6rFyhhKKF_0uqBl5xCo.roa (raw, json) Hash identifier: cQl2fGOeuH1VY9p7nyqPl22tfmJQeKUdwe0A7naktjk= Subject key identifier: 5B:82:6C:FD:33:23:EA:B1:72:86:12:8A:17:FD:2E:A8:19:79:C4:2A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1406 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/W4Js_TMj6rFyhhKKF_0uqBl5xCo.roa Signing time: Fri 22 Aug 2025 09:00:00 +0000 ROA not before: Fri 22 Aug 2025 09:00:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 222.156.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5126 (0x1406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5B826CFD3323EAB17286128A17FD2EA81979C42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:6b:5c:20:0f:3f:cd:90:49:f1:4a:7d:78: 7a:5b:0d:07:05:c4:b0:f7:48:f4:b3:e8:ef:22:8f: 09:fc:5d:03:87:0d:cf:79:06:72:16:c7:ff:91:21: c9:f2:83:e9:16:da:1b:c3:13:6d:ef:e2:d1:04:83: 36:a0:46:95:11:1b:1d:ec:a6:d4:22:32:a0:ec:0b: d3:09:46:1a:7b:24:db:0f:a8:85:15:83:03:ea:f4: 80:49:b5:b7:90:4d:e2:c2:e0:83:a8:33:3d:7f:5b: bc:82:5c:ca:08:1b:0b:ad:a7:7e:94:a1:0d:19:b0: a3:0f:23:b9:98:5f:31:85:33:25:91:67:53:a5:5c: 11:e6:7e:80:83:bc:cc:d5:45:29:a1:c4:44:fb:e2: 84:2a:b8:31:20:88:b1:a0:6d:c5:67:d9:07:f7:72: 89:3a:72:27:e4:98:aa:d7:20:68:82:d1:ce:16:ea: 4a:06:7a:31:e5:cb:4f:d1:e7:aa:9f:03:bd:f7:e8: ed:9c:0f:eb:fe:8a:6d:f3:44:15:8b:bc:85:35:c4: 9b:c7:c7:6a:4a:05:38:2d:94:a0:30:61:fb:bd:80: 30:29:56:02:6c:e1:f4:25:0e:28:1e:51:06:70:ed: f6:cb:7a:33:12:cd:4d:ab:f8:96:20:ea:e6:34:f5: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:82:6C:FD:33:23:EA:B1:72:86:12:8A:17:FD:2E:A8:19:79:C4:2A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/W4Js_TMj6rFyhhKKF_0uqBl5xCo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9e:96:fe:d1:18:78:e7:96:ce:30:2e:80:ce:03:c2:55:cb:32: b7:82:42:96:2f:84:b9:8b:01:32:e0:0b:9b:bc:37:05:aa:db: 3b:7f:60:3c:6f:07:02:2c:e7:1b:c1:d6:3f:50:0e:b9:78:00: 09:c0:8c:b4:57:0d:3f:24:6c:30:29:b2:25:d4:69:86:cb:a6: a6:6e:f4:4a:d9:5d:1c:41:7c:6c:8b:55:82:8b:67:e0:c4:a2: e9:5d:04:22:b3:ec:db:80:cc:d1:89:36:b3:82:dd:cf:d3:ba: 5d:41:48:7a:0c:92:c5:4a:a9:bb:c6:e5:86:11:23:83:57:f0: b4:97:52:e7:92:9c:2f:22:f5:c0:3f:10:c2:6a:a1:81:af:72: aa:02:cd:b5:ae:4c:d9:53:b3:cf:bb:70:03:e0:aa:53:07:0d: 2e:fa:92:d5:b4:cf:ce:91:97:39:78:d3:4f:4f:8a:47:52:c0: 52:0b:13:e0:a8:2f:2f:93:e6:85:2b:91:ad:1c:c8:c4:b7:0e: 2a:4f:8d:fd:62:c1:f0:9c:9d:7d:3e:89:50:03:18:85:4b:c3: b6:8e:7f:13:e4:47:2f:07:81:40:da:50:af:53:cf:21:e1:56: 84:cf:78:dc:5a:01:31:39:42:0f:13:8b:76:04:3e:fb:fa:98: c5:32:e3:30 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICFAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVCODI2Q0ZEMzMyM0VB QjE3Mjg2MTI4QTE3RkQyRUE4MTk3OUM0MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT5mtcIA8/zZBJ8Up9eHpbDQcFxLD3SPSz6O8ijwn8XQOHDc95 BnIWx/+RIcnyg+kW2hvDE23v4tEEgzagRpURGx3sptQiMqDsC9MJRhp7JNsPqIUV gwPq9IBJtbeQTeLC4IOoMz1/W7yCXMoIGwutp36UoQ0ZsKMPI7mYXzGFMyWRZ1Ol XBHmfoCDvMzVRSmhxET74oQquDEgiLGgbcVn2Qf3cok6cifkmKrXIGiC0c4W6koG ejHly0/R56qfA7336O2cD+v+im3zRBWLvIU1xJvHx2pKBTgtlKAwYfu9gDApVgJs 4fQlDigeUQZw7fbLejMSzU2r+JYg6uY09R+HAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUW4Js/TMj6rFyhhKKF/0uqBl5xCowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1c0SnNfVE1qNnJGeWhoS0tGXzB1cUJs NXhDby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenDANBgkq hkiG9w0BAQsFAAOCAQEAnpb+0Rh455bOMC6AzgPCVcsyt4JCli+EuYsBMuALm7w3 BarbO39gPG8HAiznG8HWP1AOuXgACcCMtFcNPyRsMCmyJdRphsumpm70StldHEF8 bItVgotn4MSi6V0EIrPs24DM0Yk2s4Ldz9O6XUFIegySxUqpu8blhhEjg1fwtJdS 55KcLyL1wD8Qwmqhga9yqgLNta5M2VOzz7twA+CqUwcNLvqS1bTPzpGXOXjTT0+K R1LAUgsT4KgvL5PmhSuRrRzIxLcOKk+N/WLB8JydfT6JUAMYhUvDto5/E+RHLweB QNpQr1PPIeFWhM943FoBMTlCDxOLdgQ++/qYxTLjMA== -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:05 2025 by rpki-client