$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/w6ejTEHgLBJsQfXPY2cxQbzN4BE.roa File: w6ejTEHgLBJsQfXPY2cxQbzN4BE.roa (raw, json) Hash identifier: 1oTfdk+6UnM78aXG3wzemSpX2DmkWueo/w8Km6FfMQs= Subject key identifier: C3:A7:A3:4C:41:E0:2C:12:6C:41:F5:CF:63:67:31:41:BC:CD:E0:11 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1412 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/w6ejTEHgLBJsQfXPY2cxQbzN4BE.roa Signing time: Fri 22 Aug 2025 09:00:03 +0000 ROA not before: Fri 22 Aug 2025 09:00:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131601 IP address blocks: 210.58.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5138 (0x1412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C3A7A34C41E02C126C41F5CF63673141BCCDE011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:6a:ec:d3:02:27:54:14:31:e8:fb:9d:04: 6d:80:e0:d5:bf:ff:17:ad:4d:0f:c8:ed:34:49:be: ba:93:86:0c:a3:79:7a:26:87:33:67:65:12:20:cd: 2b:46:ab:a4:5c:c3:4d:52:75:d3:ad:eb:fb:37:77: 55:f7:2f:01:22:92:fc:41:ee:83:20:da:24:cb:34: d6:39:6e:e0:82:c1:7d:48:ca:2f:fc:d3:79:94:a3: 89:01:79:2a:ce:85:1f:ab:6c:f8:00:67:0c:c1:2b: 2d:bb:a3:b1:6d:a8:eb:01:ca:91:d1:5d:ac:c2:44: e2:96:09:95:04:71:6c:7a:07:84:b8:05:27:0b:8d: 3c:5b:79:61:a2:35:24:7d:53:c7:c4:48:d7:21:fd: 99:98:69:40:4b:5d:1e:5f:5c:06:89:f9:9f:11:1b: 85:b6:c0:0c:2e:7e:85:43:86:f9:22:80:61:f8:8f: c4:e7:96:8b:6b:0d:dd:c7:01:94:d4:4e:60:eb:24: 2b:bb:7e:23:fa:6f:9a:00:a7:7f:d9:61:74:f5:74: 04:8a:a1:74:3e:68:13:e5:80:d5:e5:f6:fe:49:26: ca:9a:6c:1b:02:c3:f7:74:45:e9:54:ba:fc:1f:ac: 85:74:1f:48:66:b9:66:cf:d4:5e:9f:f4:6f:10:d0: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A7:A3:4C:41:E0:2C:12:6C:41:F5:CF:63:67:31:41:BC:CD:E0:11 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/w6ejTEHgLBJsQfXPY2cxQbzN4BE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.112.0/21 Signature Algorithm: sha256WithRSAEncryption 51:75:cb:d1:0e:4d:49:73:6f:e0:33:6f:76:e8:52:a4:aa:44: e1:f8:0c:0a:83:52:bd:f3:d2:12:d1:53:0a:21:0c:6e:f4:67: d4:c7:9a:e5:9c:8c:fe:f1:4f:c3:69:69:9d:8a:55:5c:43:f6: b7:f9:85:fa:19:08:41:20:7f:da:33:ac:2f:e3:85:ee:a9:42: 21:df:01:81:fc:b1:16:79:0c:c8:71:83:9e:c2:e8:34:24:bf: 3a:49:ef:83:0b:16:3e:64:43:32:d1:aa:a8:40:bb:9c:c3:d7: ac:44:c1:74:8f:8b:a4:ea:a2:30:2a:8a:5c:c5:a9:00:32:9a: 6e:59:15:65:25:f4:f8:61:df:8a:c9:1d:0b:60:2e:e1:80:b7: a1:98:0d:ea:d8:ec:2c:21:89:b6:7a:10:7b:08:9c:1f:ad:39: 4c:67:6e:4d:6a:16:3e:28:19:8d:bc:69:db:be:78:7f:c2:8b: 3e:27:0d:13:78:87:af:e7:c4:fa:cb:d6:1f:79:ba:ad:b2:98: 5f:ed:57:5c:6c:db:c1:4b:40:91:d8:15:98:85:16:f0:dc:d5: 4e:bc:12:56:fe:42:e7:c2:f7:30:3c:89:8e:e2:18:90:4b:99: 5f:7c:43:d3:eb:37:03:ff:6c:33:3a:e1:0d:28:ac:e3:b5:8d: fe:59:db:b2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMzQTdBMzRDNDFFMDJD MTI2QzQxRjVDRjYzNjczMTQxQkNDREUwMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPl2rs0wInVBQx6PudBG2A4NW//xetTQ/I7TRJvrqThgyjeXom hzNnZRIgzStGq6Rcw01SddOt6/s3d1X3LwEikvxB7oMg2iTLNNY5buCCwX1Iyi/8 03mUo4kBeSrOhR+rbPgAZwzBKy27o7FtqOsBypHRXazCROKWCZUEcWx6B4S4BScL jTxbeWGiNSR9U8fESNch/ZmYaUBLXR5fXAaJ+Z8RG4W2wAwufoVDhvkigGH4j8Tn lotrDd3HAZTUTmDrJCu7fiP6b5oAp3/ZYXT1dASKoXQ+aBPlgNXl9v5JJsqabBsC w/d0RelUuvwfrIV0H0hmuWbP1F6f9G8Q0M9tAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUw6ejTEHgLBJsQfXPY2cxQbzN4BEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3c2ZWpURUhnTEJKc1FmWFBZMmN4UWJ6 TjRCRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSOnAwDQYJ KoZIhvcNAQELBQADggEBAFF1y9EOTUlzb+Azb3boUqSqROH4DAqDUr3z0hLRUwoh DG70Z9THmuWcjP7xT8NpaZ2KVVxD9rf5hfoZCEEgf9ozrC/jhe6pQiHfAYH8sRZ5 DMhxg57C6DQkvzpJ74MLFj5kQzLRqqhAu5zD16xEwXSPi6TqojAqilzFqQAymm5Z FWUl9Phh34rJHQtgLuGAt6GYDerY7CwhibZ6EHsInB+tOUxnbk1qFj4oGY28adu+ eH/Ciz4nDRN4h6/nxPrL1h95uq2ymF/tV1xs28FLQJHYFZiFFvDc1U68Elb+QufC 9zA8iY7iGJBLmV98Q9PrNwP/bDM64Q0orOO1jf5Z27I= -----END CERTIFICATE-----Generated at Sun Aug 24 14:15:04 2025 by rpki-client