$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/glbt2c_muVMvzSAcT18_bM13RQA.roa File: glbt2c_muVMvzSAcT18_bM13RQA.roa (raw, json) Hash identifier: FnzYT1wmQzh59Z3PUgDHM0+yQEHwLsEZ4SanlmC8lpQ= Subject key identifier: 82:56:ED:D9:CF:E6:B9:53:2F:CD:20:1C:4F:5F:3F:6C:CD:77:45:00 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 140E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/glbt2c_muVMvzSAcT18_bM13RQA.roa Signing time: Fri 22 Aug 2025 09:00:02 +0000 ROA not before: Fri 22 Aug 2025 09:00:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 218.184.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5134 (0x140e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8256EDD9CFE6B9532FCD201C4F5F3F6CCD774500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:6f:17:15:74:aa:da:db:b6:b5:c6:25:df: 7c:9b:64:7f:ae:8d:98:15:a6:eb:50:db:cb:b5:47: a9:fe:e3:87:7c:24:5c:6c:0c:aa:7c:dd:22:da:5e: 04:9f:23:35:3c:3e:90:94:47:8a:fa:05:16:be:e1: 88:56:63:6b:d0:60:88:53:70:18:d1:94:c0:b4:52: 97:4a:2a:8d:df:ea:80:9f:03:de:34:b9:09:0f:d7: de:b0:9f:68:42:ac:77:69:2b:a7:1d:e5:a0:a9:ae: 28:09:d4:bc:eb:e9:1d:5f:4c:bf:52:82:cc:4f:ec: 7e:d7:35:d2:10:88:32:09:40:7d:88:63:58:bb:3a: 6e:4c:4e:8f:45:87:af:7f:bc:f3:54:91:8d:e2:42: 08:28:0d:be:5f:80:7f:01:d0:16:00:61:0c:a5:b6: 89:34:73:7d:32:88:21:3d:46:f9:f7:74:e5:ef:a6: e1:f6:46:13:7b:16:a3:f1:76:38:dd:3b:01:75:57: c1:25:03:26:74:1f:6b:39:62:2d:75:55:33:22:9e: 28:5f:a3:1c:1e:36:f8:52:e0:75:6e:68:7f:7c:16: d5:4b:05:64:57:a3:49:5c:00:fa:67:5a:a3:7f:ab: f7:d6:fb:ea:cf:17:c4:10:6b:98:a2:b5:12:af:7d: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:ED:D9:CF:E6:B9:53:2F:CD:20:1C:4F:5F:3F:6C:CD:77:45:00 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/glbt2c_muVMvzSAcT18_bM13RQA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.184.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:a4:dc:d3:72:91:53:79:69:28:01:de:e8:da:ad:3a:8d:99: 94:23:46:b8:88:08:20:03:a7:34:e0:8a:b5:10:d1:6a:ad:c8: a9:dd:6e:b7:9e:97:25:c2:ae:dd:c4:d3:cc:af:55:f5:e8:fd: e3:e0:48:de:07:d5:90:bd:27:01:14:4b:50:7c:f4:21:b0:a2: 9d:9a:83:4d:34:96:18:9e:74:9d:6d:7e:4f:26:6c:74:eb:09: 3c:f1:ac:0c:dd:37:56:28:65:92:11:45:f0:ba:33:eb:05:bc: 87:84:c8:47:d8:8d:f7:71:ef:e3:05:da:18:ab:0f:1b:91:ab: 6f:73:68:b9:e5:10:ef:91:35:d7:1c:d4:46:81:0f:93:8a:5b: ad:51:37:bf:57:17:59:8d:cd:2d:4b:9b:11:f4:e6:0b:10:f8: dc:be:93:8f:a0:31:eb:63:08:3f:76:c5:86:5a:7c:7d:4e:82: f2:3e:3f:61:01:e7:4d:ab:da:f3:8e:6f:ed:c9:b7:ca:c4:4a: fc:74:f3:3e:c5:54:e0:75:92:39:1a:8f:59:d1:88:c4:8d:45: bf:65:cb:68:e5:ce:35:a1:b1:78:0d:d6:21:90:27:4f:aa:d8: c2:d1:96:f5:20:ea:4e:a4:1d:4b:4a:bf:01:75:df:d2:3b:67: 5e:39:27:15 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICFA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgyNTZFREQ5Q0ZFNkI5 NTMyRkNEMjAxQzRGNUYzRjZDQ0Q3NzQ1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL8G8XFXSq2tu2tcYl33ybZH+ujZgVputQ28u1R6n+44d8JFxs DKp83SLaXgSfIzU8PpCUR4r6BRa+4YhWY2vQYIhTcBjRlMC0UpdKKo3f6oCfA940 uQkP196wn2hCrHdpK6cd5aCprigJ1Lzr6R1fTL9SgsxP7H7XNdIQiDIJQH2IY1i7 Om5MTo9Fh69/vPNUkY3iQggoDb5fgH8B0BYAYQyltok0c30yiCE9Rvn3dOXvpuH2 RhN7FqPxdjjdOwF1V8ElAyZ0H2s5Yi11VTMinihfoxweNvhS4HVuaH98FtVLBWRX o0lcAPpnWqN/q/fW++rPF8QQa5iitRKvfe4bAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUglbt2c/muVMvzSAcT18/bM13RQAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2dsYnQyY19tdVZNdnpTQWNUMThfYk0x M1JRQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDauDANBgkq hkiG9w0BAQsFAAOCAQEAdqTc03KRU3lpKAHe6NqtOo2ZlCNGuIgIIAOnNOCKtRDR aq3Iqd1ut56XJcKu3cTTzK9V9ej94+BI3gfVkL0nARRLUHz0IbCinZqDTTSWGJ50 nW1+TyZsdOsJPPGsDN03VihlkhFF8Loz6wW8h4TIR9iN93Hv4wXaGKsPG5Grb3No ueUQ75E11xzURoEPk4pbrVE3v1cXWY3NLUubEfTmCxD43L6Tj6Ax62MIP3bFhlp8 fU6C8j4/YQHnTava845v7cm3ysRK/HTzPsVU4HWSORqPWdGIxI1Fv2XLaOXONaGx eA3WIZAnT6rYwtGW9SDqTqQdS0q/AXXf0jtnXjknFQ== -----END CERTIFICATE-----Generated at Sun Aug 24 14:17:20 2025 by rpki-client