$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xsx53tCNKcOYTEqlo-GvCaQ5d0Y.roa File: xsx53tCNKcOYTEqlo-GvCaQ5d0Y.roa (raw, json) Hash identifier: FeTu5mRt1rzQSgDPtxmAKlwmCwCF6Ws6jvnayIrFEoM= Subject key identifier: C6:CC:79:DE:D0:8D:29:C3:98:4C:4A:A5:A3:E1:AF:09:A4:39:77:46 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 143C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xsx53tCNKcOYTEqlo-GvCaQ5d0Y.roa Signing time: Fri 22 Aug 2025 09:00:12 +0000 ROA not before: Fri 22 Aug 2025 09:00:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.58.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5180 (0x143c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C6CC79DED08D29C3984C4AA5A3E1AF09A4397746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:60:ed:31:07:ea:c2:b3:60:e5:4c:84:8d: a0:f9:e2:64:d6:38:57:90:b0:9d:91:b6:90:b9:65: ba:f3:4c:71:12:f2:7a:90:d4:87:27:c1:0b:32:7c: 96:99:cb:f5:41:08:be:bc:28:7d:e3:b4:aa:f4:b4: 9c:30:dd:ba:5c:1e:00:bb:0f:e3:16:8f:9c:fb:b6: 66:00:5f:9f:a3:d7:01:fc:b2:0f:9c:50:12:66:e5: 72:09:c0:27:68:3c:ff:b2:06:7c:0a:67:e9:e5:d7: 19:59:ce:a8:3f:22:38:b6:27:00:93:35:c2:5c:12: ed:dd:e5:32:62:fd:f7:13:ec:ca:0e:f7:26:99:73: 6d:f5:0a:3e:68:75:05:07:63:41:03:3d:d0:1b:16: 84:c7:ce:4b:d8:ce:5f:8c:d0:37:28:17:6f:a8:e6: 79:4d:2b:44:f8:7f:1f:52:79:97:f0:25:3b:27:7e: 8b:a2:d7:18:fa:4c:60:a3:68:e8:a2:85:4d:cf:b3: e8:51:b6:a4:26:0d:87:4b:9d:d9:6d:19:db:19:79: a8:42:da:44:2c:a1:99:58:ed:ab:91:cd:67:26:04: 97:62:63:0b:bb:da:a5:a1:e1:a9:5b:69:91:04:de: a1:9a:5b:a9:1a:c7:62:ce:08:69:b5:08:6d:43:28: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CC:79:DE:D0:8D:29:C3:98:4C:4A:A5:A3:E1:AF:09:A4:39:77:46 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xsx53tCNKcOYTEqlo-GvCaQ5d0Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.104.0/22 Signature Algorithm: sha256WithRSAEncryption 94:b0:ef:2d:a8:66:ab:6d:45:c8:a8:00:56:d8:5b:da:58:e9: a5:b2:04:ae:5d:ea:39:3c:35:bd:93:1e:e9:46:77:30:bc:68: 34:68:7a:39:a6:81:6e:1d:f7:fc:2a:28:af:84:42:40:e8:b4: e8:24:f3:bb:61:4b:04:44:41:8a:6b:12:30:81:06:94:03:b8: c1:d7:9d:db:fd:62:7c:6f:03:da:b0:87:0f:48:18:a0:86:08: 74:b2:d1:53:c4:73:fb:26:28:9e:65:c6:f7:b9:ab:14:c7:63: 31:f6:e1:d7:cb:f0:06:a5:4d:2e:6f:97:cc:e6:45:cf:ce:8f: 60:f1:8b:5d:c0:bf:c8:e5:c1:83:26:10:e9:26:d2:e1:0b:7e: 0d:c8:a3:92:3d:73:94:5d:24:fe:a9:dc:97:0c:7f:a3:e0:32: 7b:b3:2a:ac:32:66:af:71:46:73:fb:39:80:72:e6:ee:c6:fb: c9:82:59:c5:43:c3:72:c6:98:dc:55:b2:35:cb:90:91:bb:3f: 3f:a4:10:ee:82:c5:46:8b:ff:dc:08:df:cc:7b:e0:b3:7c:7c: 82:9d:ad:43:71:1c:d2:3b:5e:e3:52:45:43:47:f3:48:3e:18: b4:77:e4:c2:91:44:ff:60:6f:fd:e3:a5:f3:c5:97:af:9a:5a: ea:26:fd:b5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2Q0M3OURFRDA4RDI5 QzM5ODRDNEFBNUEzRTFBRjA5QTQzOTc3NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuhmDtMQfqwrNg5UyEjaD54mTWOFeQsJ2RtpC5ZbrzTHES8nqQ 1IcnwQsyfJaZy/VBCL68KH3jtKr0tJww3bpcHgC7D+MWj5z7tmYAX5+j1wH8sg+c UBJm5XIJwCdoPP+yBnwKZ+nl1xlZzqg/Iji2JwCTNcJcEu3d5TJi/fcT7MoO9yaZ c231Cj5odQUHY0EDPdAbFoTHzkvYzl+M0DcoF2+o5nlNK0T4fx9SeZfwJTsnfoui 1xj6TGCjaOiihU3Ps+hRtqQmDYdLndltGdsZeahC2kQsoZlY7auRzWcmBJdiYwu7 2qWh4albaZEE3qGaW6kax2LOCGm1CG1DKEUNAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxsx53tCNKcOYTEqlo+GvCaQ5d0YwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3hzeDUzdENOS2NPWVRFcWxvLUd2Q2FR NWQwWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSOmgwDQYJ KoZIhvcNAQELBQADggEBAJSw7y2oZqttRcioAFbYW9pY6aWyBK5d6jk8Nb2THulG dzC8aDRoejmmgW4d9/wqKK+EQkDotOgk87thSwREQYprEjCBBpQDuMHXndv9Ynxv A9qwhw9IGKCGCHSy0VPEc/smKJ5lxve5qxTHYzH24dfL8AalTS5vl8zmRc/Oj2Dx i13Av8jlwYMmEOkm0uELfg3Io5I9c5RdJP6p3JcMf6PgMnuzKqwyZq9xRnP7OYBy 5u7G+8mCWcVDw3LGmNxVsjXLkJG7Pz+kEO6CxUaL/9wI38x74LN8fIKdrUNxHNI7 XuNSRUNH80g+GLR35MKRRP9gb/3jpfPFl6+aWuom/bU= -----END CERTIFICATE-----Generated at Sun Aug 24 14:23:18 2025 by rpki-client