$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/gpE7I7exoYWVhICr4FIIBZGC91g.roa File: gpE7I7exoYWVhICr4FIIBZGC91g.roa (raw, json) Hash identifier: 4bl9A+W2LKtv4vP8S4QdbJKJFJS4ZmM6UxIN0lGE/Qg= Subject key identifier: 82:91:3B:23:B7:B1:A1:85:95:84:80:AB:E0:52:08:05:91:82:F7:58 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1416 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gpE7I7exoYWVhICr4FIIBZGC91g.roa Signing time: Fri 22 Aug 2025 09:00:03 +0000 ROA not before: Fri 22 Aug 2025 09:00:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131142 IP address blocks: 210.200.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5142 (0x1416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=82913B23B7B1A185958480ABE05208059182F758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:fa:4d:59:c3:5e:05:7f:00:41:e7:48:9e: 18:d4:cd:d8:13:56:c8:d1:ee:56:d3:86:7e:25:7c: 80:94:cc:ff:0e:39:b6:f2:ce:a7:57:a1:3f:ba:92: 24:9c:41:69:8a:5b:0b:2a:7c:fd:12:20:9b:78:c3: 23:e3:7c:32:b5:6b:4b:a9:bd:ee:80:03:8e:60:f1: 4e:79:2b:db:bd:f3:d7:34:e6:98:47:73:d4:e9:e4: c2:aa:c1:3c:53:ee:07:f7:64:a1:39:8a:cf:55:f0: 66:97:6c:86:e1:26:a1:f9:dc:95:47:61:a6:7a:61: aa:f5:f2:d9:47:18:07:0f:57:c3:92:9c:87:ad:d5: 5e:02:36:35:fe:00:4d:e5:94:6b:02:a8:d3:0c:15: 6c:fa:9e:72:0a:f0:88:b2:65:d0:18:74:bf:a3:63: f2:71:2a:01:08:04:77:41:18:af:95:42:b5:bb:41: 4b:ad:a2:d7:f1:29:cb:a0:45:f1:1e:ca:2f:9e:50: e4:6b:18:62:1f:8b:1e:f2:56:3f:02:99:6b:bf:68: 19:9f:00:e4:c5:8a:3e:f2:46:2d:e6:3d:1c:15:70: ae:b3:34:22:a5:9e:74:80:a0:e8:09:d7:19:63:ac: 29:96:19:d8:70:65:bb:d9:34:ce:3c:9c:b0:8b:9a: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:3B:23:B7:B1:A1:85:95:84:80:AB:E0:52:08:05:91:82:F7:58 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gpE7I7exoYWVhICr4FIIBZGC91g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.64.0/20 Signature Algorithm: sha256WithRSAEncryption 86:62:2d:d4:2b:43:d5:11:47:ef:22:0f:98:5b:a5:6e:c0:be: 79:98:1e:b4:b9:2b:f9:d5:5c:d9:7c:74:fa:a9:9e:2b:6d:44: 49:4b:c5:78:15:86:52:8c:3d:cd:4f:5a:2b:6d:7e:66:f8:57: 24:96:a8:9a:75:fc:95:48:be:06:04:92:82:b0:98:30:5a:fb: f7:e0:36:6f:4d:7f:80:9a:2a:1c:47:28:14:6c:99:f9:a4:7f: 7e:db:92:bd:fc:a3:6d:7d:22:5e:99:e9:ab:b7:c4:50:34:38: 91:9d:09:45:8a:1c:bc:86:7e:f7:00:ea:11:bb:97:6b:34:cb: b8:0a:58:96:0d:1d:6c:18:e7:0a:06:65:64:4a:0a:46:92:e7: b8:d3:90:49:bd:1c:4d:27:82:0a:bc:2b:ca:c9:28:6a:2d:e8: 0b:9c:c7:b7:42:62:3f:ff:e2:b6:5d:df:f9:cd:1d:57:71:93: 87:13:7b:c1:90:85:54:05:2b:9d:d5:71:3f:53:65:cc:94:e4: 47:ac:0e:54:93:a1:dc:4d:90:70:14:52:57:4e:55:ed:de:37: ee:12:1c:71:f9:34:1e:9d:8a:ab:1a:58:d1:d2:f2:2d:80:90: 6e:6a:ac:d5:30:eb:0a:4b:97:16:28:8d:2f:06:a8:97:09:db: 6f:ac:fa:58 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgyOTEzQjIzQjdCMUEx ODU5NTg0ODBBQkUwNTIwODA1OTE4MkY3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9BfpNWcNeBX8AQedInhjUzdgTVsjR7lbThn4lfICUzP8OObby zqdXoT+6kiScQWmKWwsqfP0SIJt4wyPjfDK1a0upve6AA45g8U55K9u989c05phH c9Tp5MKqwTxT7gf3ZKE5is9V8GaXbIbhJqH53JVHYaZ6Yar18tlHGAcPV8OSnIet 1V4CNjX+AE3llGsCqNMMFWz6nnIK8IiyZdAYdL+jY/JxKgEIBHdBGK+VQrW7QUut otfxKcugRfEeyi+eUORrGGIfix7yVj8CmWu/aBmfAOTFij7yRi3mPRwVcK6zNCKl nnSAoOgJ1xljrCmWGdhwZbvZNM48nLCLmlKTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUgpE7I7exoYWVhICr4FIIBZGC91gwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2dwRTdJN2V4b1lXVmhJQ3I0RklJQlpH QzkxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSyEAwDQYJ KoZIhvcNAQELBQADggEBAIZiLdQrQ9URR+8iD5hbpW7AvnmYHrS5K/nVXNl8dPqp nittRElLxXgVhlKMPc1PWittfmb4VySWqJp1/JVIvgYEkoKwmDBa+/fgNm9Nf4Ca KhxHKBRsmfmkf37bkr38o219Il6Z6au3xFA0OJGdCUWKHLyGfvcA6hG7l2s0y7gK WJYNHWwY5woGZWRKCkaS57jTkEm9HE0nggq8K8rJKGot6Aucx7dCYj//4rZd3/nN HVdxk4cTe8GQhVQFK53VcT9TZcyU5EesDlSTodxNkHAUUldOVe3eN+4SHHH5NB6d iqsaWNHS8i2AkG5qrNUw6wpLlxYojS8GqJcJ22+s+lg= -----END CERTIFICATE-----Generated at Sun Aug 24 14:15:04 2025 by rpki-client