$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/t1RRHmZXbwEE_lLIS1q4-U5JmsM.roa File: t1RRHmZXbwEE_lLIS1q4-U5JmsM.roa (raw, json) Hash identifier: My/suNHXiVJvYfsRVrGh4jUm/FIh26dGmb71N7j9tWw= Subject key identifier: B7:54:51:1E:66:57:6F:01:04:FE:52:C8:4B:5A:B8:F9:4E:49:9A:C3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1404 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/t1RRHmZXbwEE_lLIS1q4-U5JmsM.roa Signing time: Fri 22 Aug 2025 08:59:59 +0000 ROA not before: Fri 22 Aug 2025 08:59:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131142 IP address blocks: 223.22.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5124 (0x1404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B754511E66576F0104FE52C84B5AB8F94E499AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:9f:2c:b3:d2:eb:34:bf:98:0d:77:6f:20: be:62:5d:a6:9b:6b:55:d1:ed:4c:10:fb:df:97:1a: 98:65:20:a4:47:24:2c:fa:50:21:4f:15:cf:5b:74: b0:ef:ae:f2:fe:91:5e:b7:d8:76:56:44:1d:a2:b4: f0:96:ff:14:f6:f3:17:7a:f3:de:c2:83:14:a9:89: 2a:35:43:e0:bc:c3:16:bf:eb:6f:98:d0:48:6f:6a: 72:2a:e8:c6:07:93:09:aa:53:df:f3:0f:11:9b:79: a0:ee:80:df:96:6b:53:97:cd:56:f4:e2:1c:2b:06: 50:8a:86:c5:c6:2a:6f:7e:7e:9e:69:d8:a4:de:24: d6:4d:5a:e6:fc:df:df:70:f9:7c:5e:5e:68:de:18: e6:27:96:06:de:c2:d5:fb:23:47:ce:00:04:6a:82: 6d:1b:a9:a0:15:df:72:ce:ba:5b:1c:a6:b4:c9:9b: 0e:e0:27:5a:e3:d1:73:49:7a:e5:07:46:8e:3f:73: f0:81:bd:82:77:6e:56:26:98:df:6d:2e:85:22:b1: 79:d5:6f:9b:8d:c4:5a:11:7d:4a:3e:27:3c:7d:f2: 36:56:d0:d9:64:5f:8f:56:28:60:63:85:54:9b:9b: 16:a7:49:69:f9:a9:1b:2c:51:57:fa:a8:aa:46:ef: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:54:51:1E:66:57:6F:01:04:FE:52:C8:4B:5A:B8:F9:4E:49:9A:C3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/t1RRHmZXbwEE_lLIS1q4-U5JmsM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.252.0/22 Signature Algorithm: sha256WithRSAEncryption a6:7a:6b:77:40:d7:f9:d7:83:d2:48:1c:82:74:06:31:e6:54: 94:b2:5f:86:9e:cf:1c:dc:0c:8b:68:9f:1f:1b:1a:9f:f4:cb: ad:76:69:13:7d:62:f8:4b:57:a5:1f:cb:3d:1e:08:d9:0d:49: 28:35:7d:30:06:47:fd:da:89:1c:6c:ef:d5:f1:e4:66:dd:87: 05:4d:64:5a:24:3d:25:70:12:6c:3d:a9:be:bf:63:27:5f:54: dc:59:dc:1f:88:d5:18:0d:53:84:32:30:5a:04:cf:c4:41:2c: 27:2a:54:ad:ff:bf:cc:c0:89:f8:23:8b:fa:0f:c6:83:d1:84: f3:60:88:a2:8d:0c:91:61:38:da:a3:1b:69:4a:31:4c:56:fc: a9:6e:d5:f8:8c:c5:88:d6:90:1f:be:84:3a:f3:c6:ef:5e:7c: 7d:8c:66:cd:61:21:95:c9:07:de:9d:99:84:88:2d:4e:59:a7: 74:31:cb:8c:79:e5:35:6d:f5:11:33:95:8b:5e:68:9b:dd:1c: 2a:93:ab:4c:38:b9:22:a8:0b:1d:06:74:32:94:02:91:46:a7: d8:4c:f9:e0:93:e5:6e:12:09:de:1c:12:35:b3:f2:4c:86:67: 38:d7:25:5d:0c:2e:b5:51:b7:47:5a:cd:19:64:4d:bb:40:1a: c3:4b:a6:41 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI3NTQ1MTFFNjY1NzZG MDEwNEZFNTJDODRCNUFCOEY5NEU0OTlBQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwnp8ss9LrNL+YDXdvIL5iXaaba1XR7UwQ+9+XGphlIKRHJCz6 UCFPFc9bdLDvrvL+kV632HZWRB2itPCW/xT28xd6897CgxSpiSo1Q+C8wxa/62+Y 0EhvanIq6MYHkwmqU9/zDxGbeaDugN+Wa1OXzVb04hwrBlCKhsXGKm9+fp5p2KTe JNZNWub8399w+XxeXmjeGOYnlgbewtX7I0fOAARqgm0bqaAV33LOulscprTJmw7g J1rj0XNJeuUHRo4/c/CBvYJ3blYmmN9tLoUisXnVb5uNxFoRfUo+Jzx98jZW0Nlk X49WKGBjhVSbmxanSWn5qRssUVf6qKpG7/3tAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUt1RRHmZXbwEE/lLIS1q4+U5JmsMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3QxUlJIbVpYYndFRV9sTElTMXE0LVU1 Sm1zTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALfFvwwDQYJ KoZIhvcNAQELBQADggEBAKZ6a3dA1/nXg9JIHIJ0BjHmVJSyX4aezxzcDItonx8b Gp/0y612aRN9YvhLV6Ufyz0eCNkNSSg1fTAGR/3aiRxs79Xx5GbdhwVNZFokPSVw Emw9qb6/YydfVNxZ3B+I1RgNU4QyMFoEz8RBLCcqVK3/v8zAifgji/oPxoPRhPNg iKKNDJFhONqjG2lKMUxW/Klu1fiMxYjWkB++hDrzxu9efH2MZs1hIZXJB96dmYSI LU5Zp3Qxy4x55TVt9REzlYteaJvdHCqTq0w4uSKoCx0GdDKUApFGp9hM+eCT5W4S Cd4cEjWz8kyGZzjXJV0MLrVRt0dazRlkTbtAGsNLpkE= -----END CERTIFICATE-----Generated at Sun Aug 24 14:16:34 2025 by rpki-client