$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dgelEl12LfclKC14vubRIOhuwvk.roa File: dgelEl12LfclKC14vubRIOhuwvk.roa (raw, json) Hash identifier: DIIPeK+Bk8Km9GEySXWfKCy71eGM8gGqTo5tXQ5Z7cI= Subject key identifier: 76:07:A5:12:5D:76:2D:F7:25:28:2D:78:BE:E6:D1:20:E8:6E:C2:F9 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1424 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dgelEl12LfclKC14vubRIOhuwvk.roa Signing time: Fri 22 Aug 2025 09:00:07 +0000 ROA not before: Fri 22 Aug 2025 09:00:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 43.240.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5156 (0x1424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7607A5125D762DF725282D78BEE6D120E86EC2F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:8a:06:c7:4c:01:63:b5:a2:05:d9:f2:b5: 34:16:45:95:39:a3:38:11:27:64:44:3f:39:6b:84: 76:70:ca:bc:e4:5d:52:0e:24:70:0d:a2:57:67:2a: 75:99:2e:5f:58:e6:d6:7f:02:6b:1e:a4:58:ea:e8: 5c:4a:4f:ac:d1:cb:01:91:1d:d3:1c:ec:be:a4:85: c9:2d:55:16:b0:2d:8d:2d:41:ff:13:18:43:92:95: 10:18:74:cd:18:4b:8b:5d:ef:57:a1:8d:91:53:45: b5:7f:23:f7:aa:31:0e:2a:51:06:96:5c:8a:5d:2c: 97:4e:89:c4:f2:ce:3f:05:5a:72:96:f9:b4:a4:52: e8:6f:06:5a:03:e2:c4:46:2c:6a:cc:68:79:bc:cd: 3e:39:10:f0:6a:07:f1:84:8a:d5:b0:3e:9d:29:72: 49:2f:41:4e:53:49:20:05:fa:1c:59:ee:6d:18:b6: 0a:89:73:89:7a:2b:2d:ac:96:2b:15:7b:d6:3e:82: 6b:92:c7:34:ca:b7:9f:8e:ad:91:a7:41:9a:82:fb: 41:26:de:bc:a9:0b:e6:18:c7:cd:f7:ff:3e:99:27: bd:7a:24:11:63:6e:03:d1:bb:35:9f:66:ea:9f:3c: c0:6a:a5:c9:8b:bb:8b:d2:f7:69:d1:3f:6c:c6:ab: c3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:A5:12:5D:76:2D:F7:25:28:2D:78:BE:E6:D1:20:E8:6E:C2:F9 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dgelEl12LfclKC14vubRIOhuwvk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.240.104.0/22 Signature Algorithm: sha256WithRSAEncryption cc:a3:ce:d8:7e:d2:9a:21:80:64:02:46:b9:32:0f:af:7f:c3: 58:f4:e0:f6:50:40:6a:6b:c1:77:ea:fd:e9:3a:b3:d2:d0:62: 11:da:f0:01:72:62:f2:5f:e2:2e:02:78:a7:91:e5:a3:1c:3a: de:f5:55:ea:73:e0:00:2e:f1:e6:4d:e4:8c:4f:f9:5a:cb:b3: 64:cb:5e:fb:b1:30:2d:0d:b7:e0:b1:82:33:9b:48:f7:58:1d: 81:e9:96:56:fd:ac:4d:fa:cb:ee:3d:da:a4:2a:a2:c1:1b:dd: 9d:7a:86:1a:87:c3:65:a4:33:74:c0:12:24:8e:50:c9:6d:c4: 48:63:f4:fc:17:b4:90:2f:79:dd:69:13:15:d7:ff:c5:ea:3c: c8:9e:38:ec:90:dd:38:67:c8:22:6d:8f:cb:a3:98:1a:f2:79: d0:1d:e6:70:bd:ae:10:11:27:3a:25:f7:72:d1:9b:ed:1e:8b: 49:bd:22:ac:21:96:fd:e0:8c:86:44:63:8f:1b:37:10:e5:31: e7:5e:d8:f7:f4:51:84:02:90:28:74:d6:f2:56:63:70:bf:84: 24:61:43:c1:e6:51:6a:a9:d2:08:aa:7c:ab:e7:b0:3c:fc:d7: e0:52:e5:61:4c:36:bc:83:d3:58:38:4b:5a:34:90:52:87:54: f9:81:b4:43 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc2MDdBNTEyNUQ3NjJE RjcyNTI4MkQ3OEJFRTZEMTIwRTg2RUMyRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDReooGx0wBY7WiBdnytTQWRZU5ozgRJ2REPzlrhHZwyrzkXVIO JHANoldnKnWZLl9Y5tZ/AmsepFjq6FxKT6zRywGRHdMc7L6khcktVRawLY0tQf8T GEOSlRAYdM0YS4td71ehjZFTRbV/I/eqMQ4qUQaWXIpdLJdOicTyzj8FWnKW+bSk UuhvBloD4sRGLGrMaHm8zT45EPBqB/GEitWwPp0pckkvQU5TSSAF+hxZ7m0YtgqJ c4l6Ky2slisVe9Y+gmuSxzTKt5+OrZGnQZqC+0Em3rypC+YYx833/z6ZJ716JBFj bgPRuzWfZuqfPMBqpcmLu4vS92nRP2zGq8NlAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUdgelEl12LfclKC14vubRIOhuwvkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RnZWxFbDEyTGZjbEtDMTR2dWJSSU9o dXd2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr8GgwDQYJ KoZIhvcNAQELBQADggEBAMyjzth+0pohgGQCRrkyD69/w1j04PZQQGprwXfq/ek6 s9LQYhHa8AFyYvJf4i4CeKeR5aMcOt71Vepz4AAu8eZN5IxP+VrLs2TLXvuxMC0N t+CxgjObSPdYHYHpllb9rE36y+492qQqosEb3Z16hhqHw2WkM3TAEiSOUMltxEhj 9PwXtJAved1pExXX/8XqPMieOOyQ3ThnyCJtj8ujmBryedAd5nC9rhARJzol93LR m+0ei0m9Iqwhlv3gjIZEY48bNxDlMede2Pf0UYQCkCh01vJWY3C/hCRhQ8HmUWqp 0giqfKvnsDz81+BS5WFMNryD01g4S1o0kFKHVPmBtEM= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client