$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/tmonIDoTBxz80Rf4Cw3JREtdp98.roa File: tmonIDoTBxz80Rf4Cw3JREtdp98.roa (raw, json) Hash identifier: Dt0y86hRm4LS3ybuiAnGEmUpsvBW8FTHDawoPoFaQOM= Subject key identifier: B6:6A:27:20:3A:13:07:1C:FC:D1:17:F8:0B:0D:C9:44:4B:5D:A7:DF Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 106B Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tmonIDoTBxz80Rf4Cw3JREtdp98.roa Signing time: Fri 22 Aug 2025 08:54:14 +0000 ROA not before: Fri 22 Aug 2025 08:54:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 139.175.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4203 (0x106b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 22 08:54:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B66A27203A13071CFCD117F80B0DC9444B5DA7DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:e7:57:1b:ea:ba:30:35:c0:3b:02:fe:1a: b0:bf:db:f9:84:4b:69:6f:82:af:33:c3:1f:c0:aa: 7e:21:79:a6:88:b8:bb:55:df:49:2f:91:6b:8e:18: 27:76:fb:28:a2:cb:cf:ec:6c:26:c0:0c:6e:e5:7d: e8:67:1a:90:86:3a:da:7c:41:af:da:94:a6:89:8f: 25:6e:4f:58:9f:2f:b4:81:b2:0c:f1:79:b5:15:c5: c0:6b:6f:07:aa:09:5b:8e:da:4d:96:05:a6:8d:2d: 41:fa:e8:ee:b7:75:de:ae:d8:39:5a:58:c4:68:8a: 13:41:6e:d2:d2:01:42:f9:e2:cd:70:7a:bc:52:86: 7e:9d:c8:4e:e5:35:9b:ff:5d:28:45:8b:ed:ee:5a: 9f:9b:3a:c9:d6:a5:22:4d:52:62:41:61:f8:98:8f: e9:36:d9:0c:73:d8:a0:9d:a2:71:7d:5b:20:2f:00: 26:12:69:d2:ee:4e:9a:40:1f:9e:c7:df:df:65:67: 05:07:54:2f:4b:6b:95:3d:a1:c6:ed:fb:22:33:72: 5e:4a:44:38:65:92:f8:53:68:bf:07:4e:9d:03:18: fb:89:06:f1:6b:8f:c5:8c:7c:63:17:3a:f6:a6:d4: d8:ff:de:d7:88:29:c8:25:e1:89:e1:c4:9a:89:c2: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6A:27:20:3A:13:07:1C:FC:D1:17:F8:0B:0D:C9:44:4B:5D:A7:DF X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tmonIDoTBxz80Rf4Cw3JREtdp98.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 139.175.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:c8:78:b5:9d:a1:73:b0:8a:f6:7c:ee:29:35:19:49:6e:60: 83:f7:e0:51:99:98:10:09:34:e6:2d:58:e3:0a:b6:5f:e2:bc: be:94:2a:74:90:83:60:e6:a6:2d:66:da:5e:78:19:82:b5:8a: c4:2d:60:37:3c:75:23:c0:81:b0:2b:52:26:fc:34:57:ab:b0: 38:38:98:0c:80:c2:fb:21:68:23:27:cc:bd:6a:76:a7:9d:10: c3:2e:b6:c5:34:05:50:26:68:2f:d1:25:7a:6e:ad:fb:ea:fe: 31:18:5e:3f:ef:39:ad:a7:ef:94:08:d3:f2:41:65:e8:7c:12: 8e:bd:9d:a0:46:f9:63:9a:ab:07:29:5d:8a:7d:73:53:61:f1: 3e:dc:44:3e:15:8e:eb:21:c1:31:d3:eb:e3:15:d0:ed:b2:47: ed:95:10:54:32:8e:9c:b7:18:de:0c:5b:c7:17:19:78:a5:cf: 29:b4:22:6c:84:de:b8:0e:85:b5:79:e6:6c:98:8f:96:1b:a6: 72:fe:fa:69:85:9c:28:9e:dd:5c:bf:36:01:45:05:dc:37:42: fd:af:e4:52:5c:08:91:3f:76:4b:69:dc:c2:fa:02:05:4d:78: 7f:fe:2d:af:e2:78:c5:6c:6b:1f:3c:56:33:cf:cc:87:a3:f5: b2:0d:6c:7e -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTA4MjIw ODU0MTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI2NkEyNzIwM0ExMzA3 MUNGQ0QxMTdGODBCMERDOTQ0NEI1REE3REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy6udXG+q6MDXAOwL+GrC/2/mES2lvgq8zwx/Aqn4heaaIuLtV 30kvkWuOGCd2+yiiy8/sbCbADG7lfehnGpCGOtp8Qa/alKaJjyVuT1ifL7SBsgzx ebUVxcBrbweqCVuO2k2WBaaNLUH66O63dd6u2DlaWMRoihNBbtLSAUL54s1werxS hn6dyE7lNZv/XShFi+3uWp+bOsnWpSJNUmJBYfiYj+k22Qxz2KCdonF9WyAvACYS adLuTppAH57H399lZwUHVC9La5U9ocbt+yIzcl5KRDhlkvhTaL8HTp0DGPuJBvFr j8WMfGMXOvam1Nj/3teIKcgl4YnhxJqJwnAXAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUtmonIDoTBxz80Rf4Cw3JREtdp98wHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdG1vbklEb1RCeHo4MFJmNEN3M0pS RXRkcDk4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIuvMA0G CSqGSIb3DQEBCwUAA4IBAQANyHi1naFzsIr2fO4pNRlJbmCD9+BRmZgQCTTmLVjj CrZf4ry+lCp0kINg5qYtZtpeeBmCtYrELWA3PHUjwIGwK1Im/DRXq7A4OJgMgML7 IWgjJ8y9anannRDDLrbFNAVQJmgv0SV6bq376v4xGF4/7zmtp++UCNPyQWXofBKO vZ2gRvljmqsHKV2KfXNTYfE+3EQ+FY7rIcEx0+vjFdDtskftlRBUMo6ctxjeDFvH Fxl4pc8ptCJshN64DoW1eeZsmI+WG6Zy/vpphZwont1cvzYBRQXcN0L9r+RSXAiR P3ZLadzC+gIFTXh//i2v4njFbGsfPFYzz8yHo/WyDWx+ -----END CERTIFICATE-----Generated at Sun Aug 24 09:40:00 2025 by rpki-client