$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/wga_sZ4-14OdhRTh1rl8clYXJb0.roa File: wga_sZ4-14OdhRTh1rl8clYXJb0.roa (raw, json) Hash identifier: aHZtasensEyjUiyaz284GPYCLA44IA4pD0xpX51CnYk= Subject key identifier: C2:06:BF:B1:9E:3E:D7:83:9D:85:14:E1:D6:B9:7C:72:56:17:25:BD Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 138F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/wga_sZ4-14OdhRTh1rl8clYXJb0.roa Signing time: Fri 22 Aug 2025 08:59:25 +0000 ROA not before: Fri 22 Aug 2025 08:59:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9674 IP address blocks: 106.64.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5007 (0x138f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C206BFB19E3ED7839D8514E1D6B97C72561725BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:e7:2a:3a:15:e1:f5:78:b1:25:76:17:06: cb:da:ef:02:aa:09:5d:3c:8b:37:46:91:71:e5:d1: 27:20:cb:9b:e7:28:fa:77:ab:a3:f1:f5:81:7b:70: aa:12:fb:01:1e:44:e5:99:49:a2:77:2a:aa:01:63: 60:25:48:37:b5:b8:2e:7c:31:13:cf:43:43:17:46: 05:3b:a1:17:ce:4b:35:b9:97:1d:80:90:d4:ad:89: 78:b5:a8:7c:00:c0:f9:a0:3a:4f:7a:59:1f:e5:a4: b0:f1:72:28:ff:a1:df:26:06:3a:3f:12:13:df:78: fa:22:50:46:5b:8d:3b:50:d9:4e:05:25:cc:6e:9e: 3c:82:46:14:7f:2f:40:11:7e:df:36:6e:17:a6:00: d6:1a:39:37:b6:a0:88:97:ed:29:70:d4:e4:5b:06: 37:a9:9a:be:57:f2:e5:3e:55:19:fa:97:0c:95:74: 7a:7a:51:08:75:40:57:ba:d8:70:d5:af:e8:c3:db: b3:00:74:56:f9:45:c5:14:47:ac:26:8f:69:20:fa: 41:4b:50:63:ca:96:bd:9f:63:01:8a:92:03:24:24: d6:88:79:c7:85:1c:28:55:23:e4:67:0c:f2:be:86: a6:49:68:d4:da:af:57:1d:ac:a5:03:44:de:72:b6: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:BF:B1:9E:3E:D7:83:9D:85:14:E1:D6:B9:7C:72:56:17:25:BD X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/wga_sZ4-14OdhRTh1rl8clYXJb0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.64.0.0/15 Signature Algorithm: sha256WithRSAEncryption c8:3a:04:a4:11:b8:73:25:fb:39:e7:4a:03:3b:f6:e1:5e:93: f0:b2:af:cf:6e:27:44:cd:5e:80:76:56:9c:4b:02:16:98:4c: cf:49:73:26:2b:5d:d6:13:68:ac:62:1f:fe:c9:75:ba:bd:74: 30:35:e0:fc:aa:34:24:86:a8:93:f2:0d:50:6a:01:ff:45:1a: 5b:01:d1:60:45:ec:b5:47:35:04:89:25:fe:46:fb:ea:fc:d5: 81:48:47:88:b5:74:9e:23:5e:98:d9:08:b4:39:10:c0:29:e5: 0f:df:f4:34:1a:58:02:a4:56:72:e8:07:be:f3:28:71:b9:8e: aa:de:3a:07:97:f9:fa:20:e1:ad:08:63:59:33:8e:5b:d9:cf: c0:80:52:d2:8b:c0:04:05:94:29:1c:b4:ec:5a:39:8e:92:ae: c7:c2:c4:03:de:73:cd:8f:86:b0:05:51:d1:ea:79:4b:64:80: d2:05:e1:a9:d3:f9:0f:8d:92:3d:52:f2:1e:fe:0f:8a:87:ec: ce:d6:63:eb:c9:60:ce:76:b5:c9:e8:16:c6:1e:ff:2c:5f:f7: c9:dc:ac:a2:ed:38:93:34:05:0f:6d:fb:94:78:c1:ea:97:d5: 02:e0:48:bc:12:5b:87:65:20:df:10:ff:f2:7d:38:f2:a6:2b: df:92:40:c6 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICE48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyMDZCRkIxOUUzRUQ3 ODM5RDg1MTRFMUQ2Qjk3QzcyNTYxNzI1QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1U+cqOhXh9XixJXYXBsva7wKqCV08izdGkXHl0Scgy5vnKPp3 q6Px9YF7cKoS+wEeROWZSaJ3KqoBY2AlSDe1uC58MRPPQ0MXRgU7oRfOSzW5lx2A kNStiXi1qHwAwPmgOk96WR/lpLDxcij/od8mBjo/EhPfePoiUEZbjTtQ2U4FJcxu njyCRhR/L0ARft82bhemANYaOTe2oIiX7Slw1ORbBjepmr5X8uU+VRn6lwyVdHp6 UQh1QFe62HDVr+jD27MAdFb5RcUUR6wmj2kg+kFLUGPKlr2fYwGKkgMkJNaIeceF HChVI+RnDPK+hqZJaNTar1cdrKUDRN5ytotDAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUwga/sZ4+14OdhRTh1rl8clYXJb0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3dnYV9zWjQtMTRPZGhSVGgxcmw4Y2xZ WEpiMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwFqQDANBgkq hkiG9w0BAQsFAAOCAQEAyDoEpBG4cyX7OedKAzv24V6T8LKvz24nRM1egHZWnEsC FphMz0lzJitd1hNorGIf/sl1ur10MDXg/Ko0JIaok/INUGoB/0UaWwHRYEXstUc1 BIkl/kb76vzVgUhHiLV0niNemNkItDkQwCnlD9/0NBpYAqRWcugHvvMocbmOqt46 B5f5+iDhrQhjWTOOW9nPwIBS0ovABAWUKRy07Fo5jpKux8LEA95zzY+GsAVR0ep5 S2SA0gXhqdP5D42SPVLyHv4PiofsztZj68lgzna1yegWxh7/LF/3ydysou04kzQF D237lHjB6pfVAuBIvBJbh2Ug3xD/8n048qYr35JAxg== -----END CERTIFICATE-----Generated at Sun Aug 24 14:17:19 2025 by rpki-client