$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/r5Ce0aNh9zfRiSKhu4BY6Aylzrg.roa File: r5Ce0aNh9zfRiSKhu4BY6Aylzrg.roa (raw, json) Hash identifier: CG2x+WV0gJq6BqSuSuYP3Gz33Q+B9JAQJYD8lv8GmiM= Subject key identifier: AF:90:9E:D1:A3:61:F7:37:D1:89:22:A1:BB:80:58:E8:0C:A5:CE:B8 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 144F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/r5Ce0aNh9zfRiSKhu4BY6Aylzrg.roa Signing time: Fri 22 Aug 2025 09:00:18 +0000 ROA not before: Fri 22 Aug 2025 09:00:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 60.244.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5199 (0x144f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AF909ED1A361F737D18922A1BB8058E80CA5CEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:7d:de:8c:60:2a:4b:0f:75:71:04:b1:52: bd:a1:e3:b8:01:52:08:45:05:c9:c1:83:33:d8:93: 72:9c:10:98:3b:e5:68:67:29:90:bc:32:17:c7:46: 15:e5:b1:2d:95:11:75:06:5f:f2:22:ec:f2:d2:4a: b8:c7:1e:ec:2b:54:dc:7d:6b:34:b2:e5:ba:a4:48: 89:2e:6a:32:41:9c:40:74:a6:ce:0c:c1:ed:23:b6: 23:b7:40:f7:41:31:18:f4:e3:b7:ad:b3:e6:56:3d: d1:ee:b3:1b:2d:6c:c5:e9:9c:27:83:01:7c:c9:26: de:d8:56:55:f0:69:82:35:aa:de:38:15:5e:87:99: e6:41:37:13:79:1e:32:45:ad:9f:4d:50:36:ea:c7: 02:72:25:08:a4:b5:8e:8f:58:90:21:3a:fc:29:4d: a4:18:e7:82:3d:01:1e:a2:0b:d7:84:cd:1d:f9:71: ff:aa:7b:14:1f:cf:08:31:b4:e7:4d:8b:7f:34:7c: b3:0d:77:17:0f:e5:2b:02:31:95:2b:73:6f:f8:59: eb:10:27:8f:56:1c:71:25:77:6d:89:4f:e5:07:a1: dc:09:ce:5c:34:4d:22:49:f4:42:2e:89:c8:10:df: 97:1b:4c:52:00:29:31:8d:78:5f:3c:df:f5:92:f1: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:9E:D1:A3:61:F7:37:D1:89:22:A1:BB:80:58:E8:0C:A5:CE:B8 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/r5Ce0aNh9zfRiSKhu4BY6Aylzrg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:6a:d7:15:2d:70:02:e4:77:bf:1b:88:2c:fb:46:fb:3c:49: 91:ce:7e:09:03:c6:e0:7c:e5:51:50:29:fb:27:80:e2:46:aa: ab:15:7e:ce:d6:3e:c6:4a:11:90:1b:18:db:7d:a7:5a:09:ff: e9:a4:75:ae:25:27:7b:7d:7f:78:9b:86:df:b4:40:58:87:fe: a5:14:ad:bb:28:5e:02:e8:16:3b:39:4e:f6:2f:54:6c:86:70: 14:36:d6:95:b2:7a:62:93:62:d6:fa:23:c6:7b:de:23:ab:a0: 24:5a:1a:38:9b:fd:3e:27:ca:5d:d8:62:ca:2a:10:32:80:01: b2:a0:56:81:67:3a:9c:07:42:16:12:90:74:38:87:ff:bd:41: 0c:3a:8f:d9:c0:1e:40:ee:2f:3f:cd:8f:70:57:18:a4:cf:74: 74:33:5d:38:23:c3:26:c8:f3:56:04:de:38:8c:a6:70:bb:7d: c2:8e:e0:9f:95:6a:8c:a2:20:7e:3a:c4:56:93:18:f0:c9:4a: ab:10:fa:8d:f2:d7:7e:1b:0f:ee:a5:83:fb:be:a0:6a:71:f0: 13:2d:12:5d:e3:11:65:84:ab:b8:e5:6b:dc:57:5a:e4:2c:71: 8d:e7:10:3c:6f:b2:a2:93:e2:73:66:31:a3:89:81:f5:c1:e2: 3f:f6:0a:20 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGOTA5RUQxQTM2MUY3 MzdEMTg5MjJBMUJCODA1OEU4MENBNUNFQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLOH3ejGAqSw91cQSxUr2h47gBUghFBcnBgzPYk3KcEJg75Whn KZC8MhfHRhXlsS2VEXUGX/Ii7PLSSrjHHuwrVNx9azSy5bqkSIkuajJBnEB0ps4M we0jtiO3QPdBMRj047ets+ZWPdHusxstbMXpnCeDAXzJJt7YVlXwaYI1qt44FV6H meZBNxN5HjJFrZ9NUDbqxwJyJQiktY6PWJAhOvwpTaQY54I9AR6iC9eEzR35cf+q exQfzwgxtOdNi380fLMNdxcP5SsCMZUrc2/4WesQJ49WHHEld22JT+UHodwJzlw0 TSJJ9EIuicgQ35cbTFIAKTGNeF883/WS8X6LAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUr5Ce0aNh9zfRiSKhu4BY6AylzrgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3I1Q2UwYU5oOXpmUmlTS2h1NEJZNkF5 bHpyZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY89AAwDQYJ KoZIhvcNAQELBQADggEBAHpq1xUtcALkd78biCz7Rvs8SZHOfgkDxuB85VFQKfsn gOJGqqsVfs7WPsZKEZAbGNt9p1oJ/+mkda4lJ3t9f3ibht+0QFiH/qUUrbsoXgLo Fjs5TvYvVGyGcBQ21pWyemKTYtb6I8Z73iOroCRaGjib/T4nyl3YYsoqEDKAAbKg VoFnOpwHQhYSkHQ4h/+9QQw6j9nAHkDuLz/Nj3BXGKTPdHQzXTgjwybI81YE3jiM pnC7fcKO4J+VaoyiIH46xFaTGPDJSqsQ+o3y134bD+6lg/u+oGpx8BMtEl3jEWWE q7jla9xXWuQscY3nEDxvsqKT4nNmMaOJgfXB4j/2CiA= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:44 2025 by rpki-client