$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/g2zTZnLUjRxz7OLfd8uont-CrqM.roa File: g2zTZnLUjRxz7OLfd8uont-CrqM.roa (raw, json) Hash identifier: GlSjrsVm0ix+fzZx0R6+aU13XL2O0mjxuHp1f12RyMA= Subject key identifier: 83:6C:D3:66:72:D4:8D:1C:73:EC:E2:DF:77:CB:A8:9E:DF:82:AE:A3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 149F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/g2zTZnLUjRxz7OLfd8uont-CrqM.roa Signing time: Fri 22 Aug 2025 09:00:37 +0000 ROA not before: Fri 22 Aug 2025 09:00:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 210.200.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5279 (0x149f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=836CD36672D48D1C73ECE2DF77CBA89EDF82AEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:8c:65:db:e7:1a:53:ab:e4:aa:fa:23:cd: d9:1f:90:26:35:cd:3a:f4:84:21:3b:67:d2:f8:38: a3:b4:07:78:5c:f8:26:31:33:71:50:fd:c2:ba:b1: 5d:8b:59:b2:fa:e3:49:b3:c8:62:a4:23:c4:19:2f: 6f:20:72:aa:af:48:fc:37:ea:58:9c:90:2c:49:88: 41:25:c7:13:10:63:70:3b:0c:ed:4f:64:84:0f:17: e4:04:5f:04:69:2e:45:33:ef:cc:ed:24:05:e4:16: 68:79:4c:ae:0c:ad:dc:f7:94:cd:11:e7:b2:17:2b: 57:82:ee:a4:c6:6d:d1:db:b5:48:cf:59:42:97:70: d0:07:52:3c:bf:13:98:8d:63:7d:ea:af:15:a2:77: b2:08:76:e3:b9:55:1b:35:6f:22:aa:72:db:e0:05: 40:0c:98:5f:33:2d:81:e5:20:bf:3e:81:13:d1:1e: d5:39:72:02:09:7e:fb:55:db:f5:d0:32:25:33:33: f8:17:49:ed:4b:31:fa:9b:35:54:b8:bb:c6:d3:4e: 46:07:08:8d:39:b9:9e:d7:ad:10:d9:88:e0:1f:80: 5e:01:0b:ca:2e:c1:50:93:f9:d2:f5:42:52:4e:a9: 4c:14:2a:0d:7d:59:75:30:46:58:c7:9a:7b:35:14: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6C:D3:66:72:D4:8D:1C:73:EC:E2:DF:77:CB:A8:9E:DF:82:AE:A3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/g2zTZnLUjRxz7OLfd8uont-CrqM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.8.0/21 Signature Algorithm: sha256WithRSAEncryption 36:a6:fc:77:2b:b4:54:6d:48:6a:b8:e7:cd:2d:be:5f:80:c8: 1f:59:83:1c:8c:d0:75:9d:95:55:13:19:c7:c6:07:f0:5c:b3: 01:08:e7:8a:ac:46:a1:17:7c:95:4e:e3:fb:51:89:3b:01:a4: 24:e1:d8:ed:dd:16:30:cc:19:c9:6e:2f:50:d4:1c:65:82:97: f5:4c:66:a3:c6:b5:66:05:88:44:1d:51:2d:81:cb:d8:f6:19: 0d:91:81:c7:43:21:a5:3f:79:4b:11:1a:82:99:b0:de:d3:75: 88:ad:42:e9:e3:f6:f0:f6:54:f3:c7:e0:3c:fc:8b:3f:bc:7f: 77:ba:ae:46:fa:76:3b:df:5c:7e:f9:1c:03:0e:e8:ed:93:00: ac:52:55:44:60:39:67:2d:3c:08:56:65:4b:b8:c3:4c:d2:6f: 18:bd:e5:b2:14:7e:bd:72:41:a8:02:b2:6e:eb:67:8c:0f:fc: 5c:cc:23:dd:bb:62:56:fa:04:c7:db:64:c9:e0:a9:c9:5d:ec: 88:92:74:dd:ca:7c:30:d0:b6:64:56:88:51:91:0a:88:1e:9b: a8:92:c4:0a:9f:4f:39:d9:4a:42:76:c5:23:da:32:11:e5:7e: 8d:bf:27:5e:db:dd:d2:ed:45:55:12:05:d0:5a:bd:74:c5:9a: d8:78:49:9d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgzNkNEMzY2NzJENDhE MUM3M0VDRTJERjc3Q0JBODlFREY4MkFFQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHQoxl2+caU6vkqvojzdkfkCY1zTr0hCE7Z9L4OKO0B3hc+CYx M3FQ/cK6sV2LWbL640mzyGKkI8QZL28gcqqvSPw36lickCxJiEElxxMQY3A7DO1P ZIQPF+QEXwRpLkUz78ztJAXkFmh5TK4Mrdz3lM0R57IXK1eC7qTGbdHbtUjPWUKX cNAHUjy/E5iNY33qrxWid7IIduO5VRs1byKqctvgBUAMmF8zLYHlIL8+gRPRHtU5 cgIJfvtV2/XQMiUzM/gXSe1LMfqbNVS4u8bTTkYHCI05uZ7XrRDZiOAfgF4BC8ou wVCT+dL1QlJOqUwUKg19WXUwRljHmns1FBOdAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUg2zTZnLUjRxz7OLfd8uont+CrqMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2cyelRabkxValJ4ejdPTGZkOHVvbnQt Q3JxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSyAgwDQYJ KoZIhvcNAQELBQADggEBADam/HcrtFRtSGq4580tvl+AyB9ZgxyM0HWdlVUTGcfG B/BcswEI54qsRqEXfJVO4/tRiTsBpCTh2O3dFjDMGcluL1DUHGWCl/VMZqPGtWYF iEQdUS2By9j2GQ2RgcdDIaU/eUsRGoKZsN7TdYitQunj9vD2VPPH4Dz8iz+8f3e6 rkb6djvfXH75HAMO6O2TAKxSVURgOWctPAhWZUu4w0zSbxi95bIUfr1yQagCsm7r Z4wP/FzMI927Ylb6BMfbZMngqcld7IiSdN3KfDDQtmRWiFGRCogem6iSxAqfTznZ SkJ2xSPaMhHlfo2/J17b3dLtRVUSBdBavXTFmth4SZ0= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client