$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTBC/geyAnWePQVANWv0a2eduoIFd5NM.roa File: geyAnWePQVANWv0a2eduoIFd5NM.roa (raw, json) Hash identifier: w5cOr879F54aNF1eWkEbn7gXIHTrmh/wSsFtvg+gnK0= Subject key identifier: 81:EC:80:9D:67:8F:41:50:0D:5A:FD:1A:D9:E7:6E:A0:81:5D:E4:D3 Certificate issuer: /CN=DBA793D0FFE611AC397F197570E19785046EE739 Certificate serial: 0D7F Authority key identifier: DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/geyAnWePQVANWv0a2eduoIFd5NM.roa Signing time: Fri 22 Aug 2025 09:01:50 +0000 ROA not before: Fri 22 Aug 2025 09:01:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 61.65.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA793D0FFE611AC397F197570E19785046EE739 Validity Not Before: Aug 22 09:01:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=81EC809D678F41500D5AFD1AD9E76EA0815DE4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5c:76:ab:7c:2d:46:6c:d4:03:a7:01:43:fa: 41:6b:5e:62:da:eb:53:8a:86:84:13:af:01:e5:79: ef:14:af:3f:36:c8:ee:75:05:34:d1:81:d5:c8:cd: 53:51:33:88:29:e5:41:fe:a0:90:8f:a0:20:ad:c7: e0:fc:70:f3:63:06:55:0f:f6:05:9c:01:86:2e:0d: db:3e:af:eb:43:19:26:26:b1:cd:72:0b:97:4d:69: 4c:48:66:41:91:55:75:83:e3:32:be:04:70:df:3b: 3e:00:cd:d8:f0:20:1a:9b:94:88:f4:2b:89:f9:57: a3:b3:36:7d:30:91:07:a5:14:9c:10:02:88:00:2f: 81:10:01:37:14:5c:d2:6a:e0:bf:0d:2f:a5:4d:ab: 8c:8d:dc:ed:ef:5f:40:bf:fc:3c:a2:35:a1:73:9c: d0:31:0d:bf:89:61:47:6c:14:1f:fe:43:95:31:0d: 55:cd:91:02:81:49:70:42:f6:87:18:9c:fb:ce:1c: 56:e2:9c:b2:8b:72:52:fc:cb:1f:f6:35:6f:44:26: dc:3a:29:9a:fd:05:79:1d:e6:25:91:61:e4:fc:c2: f3:70:44:d4:a7:63:17:0b:d2:f8:70:be:9c:d2:e5: c3:57:06:d4:c8:d7:de:2e:95:bd:fd:fe:89:39:47: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EC:80:9D:67:8F:41:50:0D:5A:FD:1A:D9:E7:6E:A0:81:5D:E4:D3 X509v3 Authority Key Identifier: keyid:DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/geyAnWePQVANWv0a2eduoIFd5NM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.65.208.0/20 Signature Algorithm: sha256WithRSAEncryption 04:b1:e8:9b:26:bc:0e:55:7c:f3:f1:0b:60:3b:27:89:62:36: 5e:85:ca:3f:29:27:da:19:9e:a0:3f:3d:1a:e1:71:2b:da:7d: 98:e8:cd:ec:70:e4:ec:be:68:6b:da:75:18:e6:49:bd:27:7e: 1e:4e:50:f3:7d:10:70:cc:4c:55:57:4e:e0:30:a6:cd:08:68: 56:71:49:79:08:15:61:ee:48:67:6e:e0:f3:ad:9f:81:71:dc: 25:01:36:f6:49:76:a0:ca:4d:ff:5c:e8:17:fd:96:36:e0:26: c2:b8:fb:46:7d:6c:70:bb:0c:32:b1:1b:2d:81:d9:c7:6c:38: 96:59:d1:31:8c:ed:ba:88:8a:f2:bb:9d:f1:5f:2f:53:3a:18: 6c:db:66:55:bb:df:0a:ac:03:30:1b:d1:76:47:f4:dc:e6:64: 8f:8c:09:91:27:70:7d:bf:e6:96:f8:49:83:ca:5e:5a:37:d1: e6:4e:3f:a1:7d:a4:45:c1:b5:1c:b2:a8:dc:f8:3b:c0:82:7b: 49:71:b3:da:98:9f:35:04:1d:76:24:9a:22:ae:78:18:36:b2: 63:8d:4c:7b:21:97:d4:80:9b:b2:6e:03:aa:06:54:eb:02:9c: 1d:4b:bd:44:e4:5c:a8:95:fe:33:f6:0c:92:a6:63:5a:86:33: 5f:42:db:32 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJB NzkzRDBGRkU2MTFBQzM5N0YxOTc1NzBFMTk3ODUwNDZFRTczOTAeFw0yNTA4MjIw OTAxNTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgxRUM4MDlENjc4RjQx NTAwRDVBRkQxQUQ5RTc2RUEwODE1REU0RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtXHarfC1GbNQDpwFD+kFrXmLa61OKhoQTrwHlee8Urz82yO51 BTTRgdXIzVNRM4gp5UH+oJCPoCCtx+D8cPNjBlUP9gWcAYYuDds+r+tDGSYmsc1y C5dNaUxIZkGRVXWD4zK+BHDfOz4AzdjwIBqblIj0K4n5V6OzNn0wkQelFJwQAogA L4EQATcUXNJq4L8NL6VNq4yN3O3vX0C//DyiNaFznNAxDb+JYUdsFB/+Q5UxDVXN kQKBSXBC9ocYnPvOHFbinLKLclL8yx/2NW9EJtw6KZr9BXkd5iWRYeT8wvNwRNSn YxcL0vhwvpzS5cNXBtTI194ulb39/ok5RxwxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUgeyAnWePQVANWv0a2eduoIFd5NMwHwYDVR0jBBgwFoAU26eT0P/mEaw5fxl1 cOGXhQRu5zkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1RCQy8y NmVUMFBfbUVhdzVmeGwxY09HWGhRUnU1emsuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzI2ZVQwUF9tRWF3NWZ4bDFjT0dYaFFSdTV6ay5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0dUQkMvZ2V5QW5XZVBRVkFOV3YwYTJlZHVv SUZkNU5NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD1B0DAN BgkqhkiG9w0BAQsFAAOCAQEABLHomya8DlV88/ELYDsniWI2XoXKPykn2hmeoD89 GuFxK9p9mOjN7HDk7L5oa9p1GOZJvSd+Hk5Q830QcMxMVVdO4DCmzQhoVnFJeQgV Ye5IZ27g862fgXHcJQE29kl2oMpN/1zoF/2WNuAmwrj7Rn1scLsMMrEbLYHZx2w4 llnRMYztuoiK8rud8V8vUzoYbNtmVbvfCqwDMBvRdkf03OZkj4wJkSdwfb/mlvhJ g8peWjfR5k4/oX2kRcG1HLKo3Pg7wIJ7SXGz2pifNQQddiSaIq54GDayY41MeyGX 1ICbsm4DqgZU6wKcHUu9RORcqJX+M/YMkqZjWoYzX0LbMg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:56 2025 by rpki-client