$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/aVgvYuH5mqDNAknvRRG8QJRB_fo.roa File: aVgvYuH5mqDNAknvRRG8QJRB_fo.roa (raw, json) Hash identifier: HZBCn7rlmkjdYKYwq31T1rqQc9gvODFhzjrSpTbz+tA= Subject key identifier: 69:58:2F:62:E1:F9:9A:A0:CD:02:49:EF:45:11:BC:40:94:41:FD:FA Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC Certificate serial: 022C Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/aVgvYuH5mqDNAknvRRG8QJRB_fo.roa Signing time: Fri 22 Aug 2025 09:01:08 +0000 ROA not before: Fri 22 Aug 2025 09:01:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9299 IP address blocks: 180.94.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC Validity Not Before: Aug 22 09:01:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=69582F62E1F99AA0CD0249EF4511BC409441FDFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:43:8c:e6:13:05:2a:72:cc:45:e5:4b:b5:e8: 66:ca:dd:4f:b8:c9:17:7f:ab:d3:2e:9b:cc:24:a9: da:2e:6a:3b:52:7d:e1:a9:00:f2:dc:0a:0e:92:c1: de:73:99:ea:69:1a:fb:70:0a:90:8f:25:41:ab:51: b1:8f:a8:b5:87:a7:dd:e8:2b:e1:a3:41:9a:43:79: 2e:15:d4:0b:aa:59:13:4a:e8:c6:10:34:2d:c2:7a: ed:dc:3c:29:6f:04:bc:7b:5b:e6:25:6e:81:0a:8a: 73:82:ad:96:65:41:eb:e8:f3:fb:9a:2b:36:8f:12: b2:cb:28:1d:c0:a2:88:ce:cb:35:a0:f2:2e:75:70: c2:f5:e7:8a:58:8b:46:d3:df:c3:3d:fa:6d:14:2a: 7d:c4:dc:9f:07:66:68:7c:cf:25:c4:f0:7a:29:b8: f5:0f:88:94:dc:35:df:f0:69:53:e8:9c:b3:42:20: 24:3f:ae:e8:0b:fb:8e:a1:7e:b2:4e:42:af:c9:f5: f6:6d:65:4a:56:8c:32:9b:a9:30:ac:9a:7b:c1:87: dc:12:43:bf:83:77:2c:c8:9c:5b:59:23:c0:5c:a8: 45:83:56:b2:65:37:41:cd:16:d8:f9:bb:98:a4:1c: b8:b2:db:1f:15:af:b2:b6:82:9c:27:bb:89:92:73: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:58:2F:62:E1:F9:9A:A0:CD:02:49:EF:45:11:BC:40:94:41:FD:FA X509v3 Authority Key Identifier: keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/aVgvYuH5mqDNAknvRRG8QJRB_fo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.94.30.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:5d:09:b2:33:c8:c3:f7:55:84:f2:7e:e2:9b:79:b4:37:ae: b2:b4:00:a4:8b:cd:d6:fa:50:6f:43:15:a0:74:6b:20:30:b8: ea:87:f5:33:8a:99:43:22:1e:53:18:23:42:67:ab:62:67:1f: 4b:02:3e:3f:0f:f3:b5:51:2a:83:fd:82:39:c3:5f:52:4a:e5: 3d:fb:7e:53:60:18:31:1a:94:49:4c:64:bf:ee:92:b5:76:3e: 45:07:7c:aa:1e:1c:27:11:2b:f2:d8:ab:38:8b:df:ff:df:09: 82:24:b5:96:8d:92:22:4f:8b:0e:49:0b:75:7e:4d:fa:b3:26: fc:c1:ef:4a:a6:4d:64:a1:89:54:ed:ad:32:e9:da:68:2b:a4: 24:01:00:c5:86:e3:1f:a0:c1:0b:d3:df:ea:8a:a5:d4:3a:b7: cb:22:9b:e0:9a:9a:49:0a:db:e3:87:0e:c1:89:61:77:6e:86: 44:d5:33:e6:ae:ed:33:d7:b4:4d:0e:d2:e3:87:03:66:52:1e: 91:03:cd:4e:34:fa:2c:65:ef:3d:56:e8:36:09:33:48:6a:30: d3:2e:4e:b7:4a:ca:1a:c4:6b:65:e9:b3:f9:88:57:15:12:b0: cf:84:27:ce:5d:68:72:3a:c0:fd:93:ec:12:ad:85:f6:b8:6a: 9f:35:64:cd -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzJD NDM2QkU5MkFFMEFEQ0IzMTRFQkMxQUNFMzE5RkY3N0JEQTNGQzAeFw0yNTA4MjIw OTAxMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5NTgyRjYyRTFGOTlB QTBDRDAyNDlFRjQ1MTFCQzQwOTQ0MUZERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcQ4zmEwUqcsxF5Uu16GbK3U+4yRd/q9Mum8wkqdouajtSfeGp APLcCg6Swd5zmeppGvtwCpCPJUGrUbGPqLWHp93oK+GjQZpDeS4V1AuqWRNK6MYQ NC3Ceu3cPClvBLx7W+YlboEKinOCrZZlQevo8/uaKzaPErLLKB3AoojOyzWg8i51 cML154pYi0bT38M9+m0UKn3E3J8HZmh8zyXE8HopuPUPiJTcNd/waVPonLNCICQ/ rugL+46hfrJOQq/J9fZtZUpWjDKbqTCsmnvBh9wSQ7+DdyzInFtZI8BcqEWDVrJl N0HNFtj5u5ikHLiy2x8Vr7K2gpwnu4mScz+7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUaVgvYuH5mqDNAknvRRG8QJRB/fowHwYDVR0jBBgwFoAUcsQ2vpKuCtyzFOvB rOMZ/3e9o/wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkdaL2Nz UTJ2cEt1Q3R5ekZPdkJyT01aXzNlOW9fdy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Y3NRMnZwS3VDdHl6Rk92QnJPTVpfM2U5b193LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkdaL2FWZ3ZZdUg1bXFETkFrbnZSUkc4UUpS Ql9mby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0Xh4wDQYJ KoZIhvcNAQELBQADggEBAC5dCbIzyMP3VYTyfuKbebQ3rrK0AKSLzdb6UG9DFaB0 ayAwuOqH9TOKmUMiHlMYI0Jnq2JnH0sCPj8P87VRKoP9gjnDX1JK5T37flNgGDEa lElMZL/ukrV2PkUHfKoeHCcRK/LYqziL3//fCYIktZaNkiJPiw5JC3V+TfqzJvzB 70qmTWShiVTtrTLp2mgrpCQBAMWG4x+gwQvT3+qKpdQ6t8sim+CamkkK2+OHDsGJ YXduhkTVM+au7TPXtE0O0uOHA2ZSHpEDzU40+ixl7z1W6DYJM0hqMNMuTrdKyhrE a2Xps/mIVxUSsM+EJ85daHI6wP2T7BKthfa4ap81ZM0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:41 2025 by rpki-client