$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ZeKUKAWbHTKzUmXipJlxPi61Cqs.roa File: ZeKUKAWbHTKzUmXipJlxPi61Cqs.roa (raw, json) Hash identifier: ApCYZoLtmH3XbrtqcHH6nqXSIZcA3RC0EzGDrhhgj10= Subject key identifier: 65:E2:94:28:05:9B:1D:32:B3:52:65:E2:A4:99:71:3E:2E:B5:0A:AB Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13C1 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZeKUKAWbHTKzUmXipJlxPi61Cqs.roa Signing time: Fri 22 Aug 2025 08:59:41 +0000 ROA not before: Fri 22 Aug 2025 08:59:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5057 (0x13c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=65E29428059B1D32B35265E2A499713E2EB50AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:e8:3a:c0:66:4c:5a:1b:8d:27:fb:44:97: 1a:fc:e2:3c:ea:b8:ed:67:d1:1c:bb:04:4a:f7:4f: 8e:f4:58:09:e4:5f:f3:e2:b8:07:7f:f4:e8:21:f9: 69:f9:80:c1:85:6b:0f:fa:d6:e7:36:19:1f:9b:1d: 13:67:de:f6:ca:c3:43:5f:18:78:13:89:50:13:ae: fb:8b:59:9e:18:45:c1:15:4e:f6:d6:a5:ab:d8:7a: 7d:5a:9e:28:47:28:85:66:eb:18:b8:e0:b7:2f:7a: cf:0c:a8:1a:c8:c5:20:d7:cb:f5:f5:b7:cd:ec:a1: 8a:57:49:4e:0c:60:f5:87:4e:30:26:ea:97:61:f4: a9:09:e8:0d:a1:c4:25:b4:61:9d:19:03:55:3e:d2: 2d:15:09:0e:b9:af:e8:c0:96:d8:b7:90:7d:88:ea: 24:9c:88:07:4e:7b:e4:06:02:74:7c:bf:68:6f:7f: 15:00:7c:9f:b8:82:22:a6:16:da:2f:fa:25:09:93: 20:f1:8a:0c:79:d7:66:7e:fd:9c:27:62:17:cc:6a: f8:72:24:b5:26:aa:11:60:fa:33:1d:3a:93:b9:f7: 42:48:04:40:f1:4f:53:dd:bc:c3:29:4b:97:e6:d0: 74:ab:89:70:c0:8b:09:5b:50:17:dd:0e:3a:46:06: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E2:94:28:05:9B:1D:32:B3:52:65:E2:A4:99:71:3E:2E:B5:0A:AB X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZeKUKAWbHTKzUmXipJlxPi61Cqs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.120.0/24 Signature Algorithm: sha256WithRSAEncryption 07:9b:09:a7:11:95:37:1a:8c:00:c8:ae:3e:4a:07:65:59:7c: 61:dd:59:09:92:4b:24:34:73:c0:16:15:a2:b9:f4:de:2c:23: 29:d3:e1:b7:c7:0e:58:37:93:df:6f:e4:77:4a:a1:55:65:f7: 2c:18:d3:77:51:56:32:c3:40:4f:6f:15:5d:ea:3c:d5:8f:c0: 78:ac:e6:2c:1e:84:59:00:12:f2:33:80:af:db:0c:5a:25:76: 4d:b9:17:77:32:2a:81:40:eb:93:6b:73:fd:ae:72:ba:69:fe: da:ea:a8:24:17:04:be:21:89:d7:2c:4d:82:aa:b3:54:52:24: fd:fb:80:33:c7:55:71:18:1c:3a:ea:45:19:3e:dd:cb:42:6b: a5:18:f9:b5:bc:37:f3:0b:5e:74:39:be:1a:41:95:a0:54:46: 49:1b:a9:2e:17:93:3e:aa:8b:46:0b:1e:4c:07:bc:73:e7:9b: 1a:ad:a8:5a:51:77:25:2f:21:0c:17:bf:36:be:3b:da:af:20: 09:a1:a6:3d:8b:f2:01:ad:3f:20:f8:e2:e2:17:06:ea:1b:bc: f7:db:63:5a:6b:a3:90:1d:80:fd:4f:49:fd:45:9d:24:43:e7: a0:0b:28:61:a5:d2:b8:dc:92:90:0c:94:69:c7:f7:9e:ce:f3: eb:20:f9:99 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE8EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1RTI5NDI4MDU5QjFE MzJCMzUyNjVFMkE0OTk3MTNFMkVCNTBBQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDU+g6wGZMWhuNJ/tElxr84jzquO1n0Ry7BEr3T470WAnkX/Pi uAd/9Ogh+Wn5gMGFaw/61uc2GR+bHRNn3vbKw0NfGHgTiVATrvuLWZ4YRcEVTvbW pavYen1anihHKIVm6xi44Lcves8MqBrIxSDXy/X1t83soYpXSU4MYPWHTjAm6pdh 9KkJ6A2hxCW0YZ0ZA1U+0i0VCQ65r+jAlti3kH2I6iSciAdOe+QGAnR8v2hvfxUA fJ+4giKmFtov+iUJkyDxigx512Z+/ZwnYhfMavhyJLUmqhFg+jMdOpO590JIBEDx T1PdvMMpS5fm0HSriXDAiwlbUBfdDjpGBuHHAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZeKUKAWbHTKzUmXipJlxPi61CqswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1plS1VLQVdiSFRLelVtWGlwSmx4UGk2 MUNxcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOngwDQYJ KoZIhvcNAQELBQADggEBAAebCacRlTcajADIrj5KB2VZfGHdWQmSSyQ0c8AWFaK5 9N4sIynT4bfHDlg3k99v5HdKoVVl9ywY03dRVjLDQE9vFV3qPNWPwHis5iwehFkA EvIzgK/bDFoldk25F3cyKoFA65Nrc/2ucrpp/trqqCQXBL4hidcsTYKqs1RSJP37 gDPHVXEYHDrqRRk+3ctCa6UY+bW8N/MLXnQ5vhpBlaBURkkbqS4Xkz6qi0YLHkwH vHPnmxqtqFpRdyUvIQwXvza+O9qvIAmhpj2L8gGtPyD44uIXBuobvPfbY1pro5Ad gP1PSf1FnSRD56ALKGGl0rjckpAMlGnH957O8+sg+Zk= -----END CERTIFICATE-----Generated at Sun Aug 24 14:15:04 2025 by rpki-client