$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/fvQ8lH94vzlqNmHJuzxl58FVXe8.roa File: fvQ8lH94vzlqNmHJuzxl58FVXe8.roa (raw, json) Hash identifier: VjujLi6p7BVIOZ6q4Ta+q+S8c7rY2jdoj8xkUwMzGZU= Subject key identifier: 7E:F4:3C:94:7F:78:BF:39:6A:36:61:C9:BB:3C:65:E7:C1:55:5D:EF Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1383 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fvQ8lH94vzlqNmHJuzxl58FVXe8.roa Signing time: Fri 22 Aug 2025 08:59:22 +0000 ROA not before: Fri 22 Aug 2025 08:59:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131597 IP address blocks: 218.35.32.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4995 (0x1383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7EF43C947F78BF396A3661C9BB3C65E7C1555DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:22:32:85:78:d5:db:15:49:5f:af:a2:ad: eb:fc:bb:31:d8:ae:e6:01:40:f9:59:94:22:53:3f: 0c:6f:39:2e:62:e0:d2:91:98:d7:92:f2:ed:d3:3d: 4a:db:4e:f9:c4:63:bd:c4:ff:65:13:65:c5:10:bc: 95:4e:2e:d2:48:7e:fe:67:25:f5:36:05:8c:97:37: 12:2d:e4:7b:31:e7:15:09:5e:ff:6b:fe:cd:24:3a: bf:4c:72:75:43:b5:7b:66:2b:3d:fc:1d:36:21:fc: 21:b2:26:5c:12:07:e0:16:22:f2:aa:e9:c9:66:a2: 7a:ee:a4:17:bc:44:d4:39:51:f2:db:a2:e6:06:c4: 16:26:31:b3:51:d7:16:8c:3e:30:b0:cd:59:c4:1a: da:41:8c:7c:55:70:93:e0:a0:8a:d5:60:ce:08:e5: ac:f2:c0:2c:e6:b4:45:c6:6c:a5:36:05:41:6a:c1: 74:34:bb:71:2b:13:3c:38:d0:ce:d0:49:9a:d0:31: 5c:97:ac:16:41:a2:8a:fe:82:5e:1a:ba:8b:77:fd: 48:00:d8:79:ef:53:00:a7:90:52:6e:b0:82:fb:2d: 64:11:c3:94:ba:91:f6:64:15:40:04:5d:fd:de:3d: 6c:4a:b6:3f:44:e0:3b:ab:1a:6d:50:7d:b6:0b:db: 04:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F4:3C:94:7F:78:BF:39:6A:36:61:C9:BB:3C:65:E7:C1:55:5D:EF X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fvQ8lH94vzlqNmHJuzxl58FVXe8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.32.0/19 Signature Algorithm: sha256WithRSAEncryption 06:4a:71:a8:d3:62:d8:20:21:81:5f:06:89:71:f4:48:fa:ba: b7:4a:b9:10:66:19:1a:82:f5:b9:45:db:65:c9:79:94:9c:4e: b0:16:d6:d8:6d:7a:58:51:a6:58:b5:28:4c:bf:d8:50:b2:16: aa:02:9d:5b:bb:ce:eb:fc:84:55:18:fa:45:aa:d1:46:bd:55: c8:11:12:a8:ad:cb:dd:16:ed:49:ee:9b:4b:e1:07:f0:ec:66: 6f:f3:2e:f1:6a:63:12:23:f4:e4:d4:46:80:d0:dd:46:15:39: dc:ca:bc:6b:ad:67:bb:dd:1c:ac:89:9f:87:6e:ec:6b:3e:88: 6f:9a:db:22:b5:b5:3e:98:66:23:13:ba:ad:17:ce:cb:ba:e6: fb:06:3d:56:74:dd:50:e8:8f:3c:f1:e5:d7:db:6c:21:db:76: 27:54:89:5a:dc:6d:36:35:a5:ee:c6:8f:94:93:3c:f5:b4:65: fe:c3:64:cb:c2:84:0f:a4:ab:22:56:9e:e7:73:83:40:de:7b: 7e:df:28:b0:be:2a:1d:84:f4:00:cf:18:c1:fd:51:1b:57:2c: 6f:c2:4e:04:0b:a5:f4:03:60:19:f5:11:a8:55:20:48:c3:82: d6:67:fd:2b:55:b7:0c:62:af:57:cb:c2:f5:24:b0:71:9d:89: cc:e2:50:0c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdFRjQzQzk0N0Y3OEJG Mzk2QTM2NjFDOUJCM0M2NUU3QzE1NTVERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqniIyhXjV2xVJX6+irev8uzHYruYBQPlZlCJTPwxvOS5i4NKR mNeS8u3TPUrbTvnEY73E/2UTZcUQvJVOLtJIfv5nJfU2BYyXNxIt5Hsx5xUJXv9r /s0kOr9McnVDtXtmKz38HTYh/CGyJlwSB+AWIvKq6clmonrupBe8RNQ5UfLbouYG xBYmMbNR1xaMPjCwzVnEGtpBjHxVcJPgoIrVYM4I5azywCzmtEXGbKU2BUFqwXQ0 u3ErEzw40M7QSZrQMVyXrBZBoor+gl4auot3/UgA2HnvUwCnkFJusIL7LWQRw5S6 kfZkFUAEXf3ePWxKtj9E4DurGm1QfbYL2wTVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUfvQ8lH94vzlqNmHJuzxl58FVXe8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2Z2UThsSDk0dnpscU5tSEp1enhsNThG VlhlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaIyAwDQYJ KoZIhvcNAQELBQADggEBAAZKcajTYtggIYFfBolx9Ej6urdKuRBmGRqC9blF22XJ eZScTrAW1thtelhRpli1KEy/2FCyFqoCnVu7zuv8hFUY+kWq0Ua9VcgREqity90W 7Unum0vhB/DsZm/zLvFqYxIj9OTURoDQ3UYVOdzKvGutZ7vdHKyJn4du7Gs+iG+a 2yK1tT6YZiMTuq0Xzsu65vsGPVZ03VDojzzx5dfbbCHbdidUiVrcbTY1pe7Gj5ST PPW0Zf7DZMvChA+kqyJWnudzg0Dee37fKLC+Kh2E9ADPGMH9URtXLG/CTgQLpfQD YBn1EahVIEjDgtZn/StVtwxir1fLwvUksHGdicziUAw= -----END CERTIFICATE-----Generated at Sun Aug 24 11:54:13 2025 by rpki-client