$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/alNerYyytTpvoXvkHEnUUOUDZm8.roa File: alNerYyytTpvoXvkHEnUUOUDZm8.roa (raw, json) Hash identifier: q4zdllZWoEbN8iuOgpkpsyVdi4gKCdoouuKFr/N3Ap4= Subject key identifier: 6A:53:5E:AD:8C:B2:B5:3A:6F:A1:7B:E4:1C:49:D4:50:E5:03:66:6F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13EB Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/alNerYyytTpvoXvkHEnUUOUDZm8.roa Signing time: Fri 22 Aug 2025 08:59:52 +0000 ROA not before: Fri 22 Aug 2025 08:59:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 203.79.128.0/17 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5099 (0x13eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6A535EAD8CB2B53A6FA17BE41C49D450E503666F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:7b:65:b2:5c:ba:9e:4e:c1:56:b4:b6:8c: 11:bb:ca:29:ae:b3:61:83:e0:86:31:8e:cf:d0:20: eb:89:eb:3a:15:ea:ad:69:7c:13:2c:7a:0a:38:98: da:85:6f:2d:84:11:2a:83:62:82:17:7a:01:37:f7: 66:53:8f:04:3a:d8:cb:d4:dc:fa:6d:55:5d:0f:67: 9d:f6:26:05:44:2a:eb:15:c8:b6:60:1f:ad:bd:1e: 16:fb:40:1a:c7:ef:26:b6:ca:4c:5e:cb:46:8c:40: 0d:76:47:19:2e:fd:55:f3:a3:a2:be:47:ab:09:ca: 95:29:7b:be:73:4e:b6:85:e0:b5:18:ba:8a:1b:b5: ba:c9:20:63:ed:a2:24:0c:9b:07:c1:5e:42:18:60: 4b:17:7c:71:e4:de:ff:79:6b:53:85:9c:d5:8c:24: 58:d0:50:de:21:8a:a4:59:55:13:b6:84:dd:1d:ba: 2c:b3:93:37:9e:83:c9:b1:18:db:0a:68:58:d7:c2: 33:ef:a0:f0:c9:4d:d5:74:ff:01:29:72:d7:c0:46: 77:db:8a:e7:98:ca:6b:b9:1d:b0:06:d2:a0:4f:5e: 9d:ab:36:0b:10:3f:fb:5f:9a:62:0d:c5:82:2e:4a: 10:1b:6c:bd:cf:ba:7f:0e:0c:a3:44:ae:05:53:01: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:53:5E:AD:8C:B2:B5:3A:6F:A1:7B:E4:1C:49:D4:50:E5:03:66:6F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/alNerYyytTpvoXvkHEnUUOUDZm8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption bf:be:bc:89:17:b9:fb:04:ed:3f:8b:bf:77:a8:88:1b:78:97: 87:85:c1:fb:e6:3b:26:ac:b6:84:9b:2a:85:35:8e:44:04:ad: fb:cf:7e:e4:6d:87:ef:02:ba:2e:a5:5c:7d:10:2f:2a:a9:e4: 20:51:08:1f:1e:76:40:69:d7:02:21:1a:51:e5:ff:60:0c:46: d9:d7:75:c6:77:7e:3c:ad:1c:dc:52:61:e6:59:87:6b:a9:9c: e2:56:33:49:8e:f3:d7:8b:5a:f2:36:a6:ee:eb:2c:a7:51:1e: ae:05:91:55:9a:37:c3:0b:d7:eb:15:2c:ed:0f:b6:2c:11:39: 80:33:89:c9:c4:1a:33:aa:86:ae:e6:99:20:9b:d8:80:80:7a: 1a:82:47:26:f7:c1:2a:e6:c1:8b:2a:15:e2:a3:56:37:3f:9f: 0e:92:13:72:c6:cb:7d:38:63:24:5f:ed:e0:de:17:50:ec:7f: 83:d5:21:f4:28:ea:01:e2:41:76:11:fe:27:60:eb:30:0d:8c: df:73:68:80:92:06:c8:80:c0:0f:7f:b5:37:e8:6c:7e:4f:d8: 4f:d9:77:10:7e:66:39:e2:87:11:6f:77:f9:9d:32:6b:91:dd: 7a:b9:93:9f:2e:32:d4:25:03:52:21:95:d0:4e:ef:1a:91:b1: 63:e1:ee:7c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZBNTM1RUFEOENCMkI1 M0E2RkExN0JFNDFDNDlENDUwRTUwMzY2NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe3Xtlsly6nk7BVrS2jBG7yimus2GD4IYxjs/QIOuJ6zoV6q1p fBMsego4mNqFby2EESqDYoIXegE392ZTjwQ62MvU3PptVV0PZ532JgVEKusVyLZg H629Hhb7QBrH7ya2ykxey0aMQA12Rxku/VXzo6K+R6sJypUpe75zTraF4LUYuoob tbrJIGPtoiQMmwfBXkIYYEsXfHHk3v95a1OFnNWMJFjQUN4hiqRZVRO2hN0duiyz kzeeg8mxGNsKaFjXwjPvoPDJTdV0/wEpctfARnfbiueYymu5HbAG0qBPXp2rNgsQ P/tfmmINxYIuShAbbL3Pun8ODKNErgVTAS31AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUalNerYyytTpvoXvkHEnUUOUDZm8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2FsTmVyWXl5dFRwdm9YdmtIRW5VVU9V RFptOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfLT4AwDQYJ KoZIhvcNAQELBQADggEBAL++vIkXufsE7T+Lv3eoiBt4l4eFwfvmOyastoSbKoU1 jkQErfvPfuRth+8Cui6lXH0QLyqp5CBRCB8edkBp1wIhGlHl/2AMRtnXdcZ3fjyt HNxSYeZZh2upnOJWM0mO89eLWvI2pu7rLKdRHq4FkVWaN8ML1+sVLO0PtiwROYAz icnEGjOqhq7mmSCb2ICAehqCRyb3wSrmwYsqFeKjVjc/nw6SE3LGy304YyRf7eDe F1Dsf4PVIfQo6gHiQXYR/idg6zANjN9zaICSBsiAwA9/tTfobH5P2E/ZdxB+Zjni hxFvd/mdMmuR3Xq5k58uMtQlA1IhldBO7xqRsWPh7nw= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client