$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/cV1GApm4gaemONxCzehkQ6oVZ6c.roa File: cV1GApm4gaemONxCzehkQ6oVZ6c.roa (raw, json) Hash identifier: CdDSIv2HA0S43TkHRsh3P8rgBjCYakVPJFXPTf8cq3A= Subject key identifier: 71:5D:46:02:99:B8:81:A7:A6:38:DC:42:CD:E8:64:43:AA:15:67:A7 Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0DB6 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/cV1GApm4gaemONxCzehkQ6oVZ6c.roa Signing time: Fri 22 Aug 2025 08:49:47 +0000 ROA not before: Fri 22 Aug 2025 08:49:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4781 IP address blocks: 210.63.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Aug 22 08:49:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=715D460299B881A7A638DC42CDE86443AA1567A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:9c:41:23:79:bf:93:77:e0:0d:ce:33:4d: f2:99:ef:c8:48:91:97:7c:ed:47:a8:0e:3f:b4:60: a1:cd:8c:6f:c7:f7:af:76:5f:9c:a6:de:db:01:1d: 8c:17:fb:04:84:b7:45:2e:fd:c0:9b:5d:15:52:de: 8e:33:45:a1:26:4b:7b:35:e8:88:5a:17:32:5e:19: 68:eb:df:fd:e1:2f:b2:e5:5d:70:29:8b:3d:ba:7b: da:c6:86:39:c3:e0:d9:70:cb:48:97:37:c1:3e:ca: c3:11:e8:dd:9c:d1:aa:30:7a:bf:51:93:22:83:c1: 7a:09:ec:3e:89:94:3a:ef:df:84:11:0b:8c:73:10: 40:d9:00:3d:8d:be:7a:20:52:48:d8:26:57:13:d2: 57:3d:ff:78:c4:5e:96:55:06:99:cb:d7:ce:55:a6: a2:40:a0:12:a3:99:ac:11:e3:0c:cb:37:96:5b:1b: 66:1d:38:d6:cb:1e:b8:23:fc:ea:c2:1d:10:a5:3a: 7c:85:b4:9f:ed:0f:d5:9b:a6:66:41:6d:6d:cb:2c: f9:e3:b0:f0:99:c1:3a:91:04:cc:69:7d:53:a5:9e: d4:1a:57:96:a7:06:89:07:29:66:87:ed:29:18:a8: ee:a3:d8:1e:b9:15:e0:52:ab:a6:5c:bb:4d:23:83: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5D:46:02:99:B8:81:A7:A6:38:DC:42:CD:E8:64:43:AA:15:67:A7 X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/cV1GApm4gaemONxCzehkQ6oVZ6c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.100.0/24 Signature Algorithm: sha256WithRSAEncryption 61:86:e2:e1:3c:b7:c7:dc:5c:29:71:4c:75:6f:fd:66:94:e6: 1a:9e:49:9d:cb:35:08:2f:0a:5b:69:a4:87:a6:9d:cc:90:8a: 93:39:b2:8c:07:6e:7f:37:cf:47:6c:47:53:54:54:75:9d:85: 40:90:84:c5:8a:38:22:4f:08:4b:cb:1f:22:19:0a:fd:da:e8: 7a:a3:cf:f2:75:de:60:2a:3a:be:ea:d3:cd:57:c5:fa:29:c5: 9e:2c:b0:27:0a:37:30:d3:3b:63:f2:69:58:7b:5e:95:84:bc: 93:14:0a:57:35:73:04:cc:91:b2:2c:e0:0d:ae:f7:e5:ed:68: be:97:7f:9e:8d:11:ce:0f:f0:37:32:6d:07:a8:84:6b:fb:c6: 79:6e:00:3b:1b:ee:da:4b:da:d9:45:6f:8b:c2:f2:b1:70:7c: b8:99:ac:49:58:d5:71:09:78:4b:f2:cd:bf:5f:48:dc:d5:8d: 5d:92:47:5f:a5:0b:60:ff:37:c4:e6:b4:23:93:1b:28:00:1e: 68:33:e6:bf:52:71:31:e3:29:4e:02:f2:4b:04:df:ab:58:94: 62:27:14:c9:26:0b:75:53:55:79:27:8b:c7:70:2c:e9:8b:67: 04:0e:b2:38:66:25:50:c0:5a:86:c9:4d:49:10:85:50:f6:d0: 6b:40:00:b5 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTA4MjIw ODQ5NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcxNUQ0NjAyOTlCODgx QTdBNjM4REM0MkNERTg2NDQzQUExNTY3QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0eZxBI3m/k3fgDc4zTfKZ78hIkZd87UeoDj+0YKHNjG/H9692 X5ym3tsBHYwX+wSEt0Uu/cCbXRVS3o4zRaEmS3s16IhaFzJeGWjr3/3hL7LlXXAp iz26e9rGhjnD4Nlwy0iXN8E+ysMR6N2c0aower9RkyKDwXoJ7D6JlDrv34QRC4xz EEDZAD2NvnogUkjYJlcT0lc9/3jEXpZVBpnL185VpqJAoBKjmawR4wzLN5ZbG2Yd ONbLHrgj/OrCHRClOnyFtJ/tD9WbpmZBbW3LLPnjsPCZwTqRBMxpfVOlntQaV5an BokHKWaH7SkYqO6j2B65FeBSq6Zcu00jg5L1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUcV1GApm4gaemONxCzehkQ6oVZ6cwHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9jVjFHQXBtNGdhZW1PTnhDemVo a1E2b1ZaNmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9k MA0GCSqGSIb3DQEBCwUAA4IBAQBhhuLhPLfH3FwpcUx1b/1mlOYankmdyzUILwpb aaSHpp3MkIqTObKMB25/N89HbEdTVFR1nYVAkITFijgiTwhLyx8iGQr92uh6o8/y dd5gKjq+6tPNV8X6KcWeLLAnCjcw0ztj8mlYe16VhLyTFApXNXMEzJGyLOANrvfl 7Wi+l3+ejRHOD/A3Mm0HqIRr+8Z5bgA7G+7aS9rZRW+LwvKxcHy4maxJWNVxCXhL 8s2/X0jc1Y1dkkdfpQtg/zfE5rQjkxsoAB5oM+a/UnEx4ylOAvJLBN+rWJRiJxTJ Jgt1U1V5J4vHcCzpi2cEDrI4ZiVQwFqGyU1JEIVQ9tBrQAC1 -----END CERTIFICATE-----Generated at Sun Aug 24 11:44:03 2025 by rpki-client