$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/slBt3UZ6OeqUrjtCUKj33l60UUs.roa File: slBt3UZ6OeqUrjtCUKj33l60UUs.roa (raw, json) Hash identifier: CZCP5Abpw/Iiia27K6Vo5S+3sKD6YM387itVpcBR7P0= Subject key identifier: B2:50:6D:DD:46:7A:39:EA:94:AE:3B:42:50:A8:F7:DE:5E:B4:51:4B Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0DB7 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/slBt3UZ6OeqUrjtCUKj33l60UUs.roa Signing time: Fri 22 Aug 2025 08:49:47 +0000 ROA not before: Fri 22 Aug 2025 08:49:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4781 IP address blocks: 210.63.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Aug 22 08:49:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B2506DDD467A39EA94AE3B4250A8F7DE5EB4514B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:d0:c7:67:01:cd:a2:59:56:9f:a0:7b:9e: be:56:4c:fc:cd:44:78:2e:79:ce:39:5b:fd:06:43: ef:97:4a:8a:fc:62:08:3a:fd:bc:b6:5a:23:bc:d9: 4f:26:53:6d:13:45:73:d4:94:d7:d0:0f:f8:c0:d6: b2:e8:cd:01:4b:58:42:22:33:08:db:62:45:bf:fd: 7a:c9:05:73:f7:1f:5e:d0:c6:24:5a:98:37:fc:6a: 95:69:fa:df:d5:c3:c6:7a:fa:dd:86:3e:bf:58:e8: 7a:bc:38:c3:e1:35:fc:21:f7:11:b7:7a:03:ff:46: 23:39:03:5b:dd:b0:8e:d0:1d:26:8f:43:ff:a8:ee: ad:2a:93:9a:95:31:4b:e9:7c:4e:b6:cd:5a:0e:46: 40:b2:aa:96:75:95:f0:0d:ab:41:d0:0b:86:ad:79: 2e:8f:53:e9:00:6b:5a:7d:e9:4e:af:2c:56:88:bb: ef:24:19:55:26:a7:a0:71:ce:d5:8a:ff:d2:c7:4f: 49:5b:17:da:75:25:d3:f8:8d:85:ab:80:fc:7e:64: 18:0f:dd:1b:d4:5e:da:00:7d:bb:29:98:b3:a5:d8: 6c:48:b3:84:3b:e4:61:4a:62:3f:e4:dc:3d:66:4b: 92:fa:62:7c:81:0f:b0:a2:48:cc:1d:88:4f:87:f8: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:50:6D:DD:46:7A:39:EA:94:AE:3B:42:50:A8:F7:DE:5E:B4:51:4B X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/slBt3UZ6OeqUrjtCUKj33l60UUs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.102.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:50:87:52:c9:60:4b:ce:34:c9:a1:7c:63:48:b5:d3:c3:09: a5:81:4b:e9:5c:56:00:fc:c1:76:6d:ea:9b:0b:48:8e:6e:90: c3:04:79:28:22:f7:7d:d3:f2:87:c9:bd:23:0f:78:21:29:5a: fa:bd:4b:27:20:b3:04:ae:ae:1f:f6:af:16:52:0c:3d:91:94: 42:95:f6:b1:9d:36:91:8b:4d:e7:06:82:fe:56:47:48:af:1d: 4a:60:71:68:93:96:9c:53:c4:59:65:d9:ab:a1:7d:d3:4f:d8: 5d:f6:5d:e9:e7:8d:d0:9a:93:e9:40:79:b3:c1:f0:f4:38:a7: 2b:12:bc:e2:04:40:55:27:23:73:f0:e8:43:c2:e9:cd:a6:93: 51:ab:9d:e2:29:d6:0f:31:0b:4f:fa:e4:c4:18:c5:ea:53:d8: 36:62:5d:e0:27:6c:76:45:11:1b:73:be:a8:91:13:e8:dd:99: 26:ed:04:3e:ce:a1:df:5e:5c:f7:9a:8e:e1:da:74:6a:d3:b8: b1:40:69:8b:32:6a:df:8f:8d:ed:1c:e4:e8:c9:d5:2b:ab:dd: 62:69:03:57:c8:2e:45:bb:c7:d9:ea:53:31:47:4a:ce:1c:9b: f1:35:21:16:7a:58:5f:5b:b8:60:3d:78:89:8b:4d:d3:77:35: bf:aa:96:ce -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTA4MjIw ODQ5NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIyNTA2RERENDY3QTM5 RUE5NEFFM0I0MjUwQThGN0RFNUVCNDUxNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCbtDHZwHNollWn6B7nr5WTPzNRHguec45W/0GQ++XSor8Ygg6 /by2WiO82U8mU20TRXPUlNfQD/jA1rLozQFLWEIiMwjbYkW//XrJBXP3H17QxiRa mDf8apVp+t/Vw8Z6+t2GPr9Y6Hq8OMPhNfwh9xG3egP/RiM5A1vdsI7QHSaPQ/+o 7q0qk5qVMUvpfE62zVoORkCyqpZ1lfANq0HQC4ateS6PU+kAa1p96U6vLFaIu+8k GVUmp6BxztWK/9LHT0lbF9p1JdP4jYWrgPx+ZBgP3RvUXtoAfbspmLOl2GxIs4Q7 5GFKYj/k3D1mS5L6YnyBD7CiSMwdiE+H+EU7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUslBt3UZ6OeqUrjtCUKj33l60UUswHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9zbEJ0M1VaNk9lcVVyanRDVUtq MzNsNjBVVXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9m MA0GCSqGSIb3DQEBCwUAA4IBAQBvUIdSyWBLzjTJoXxjSLXTwwmlgUvpXFYA/MF2 beqbC0iObpDDBHkoIvd90/KHyb0jD3ghKVr6vUsnILMErq4f9q8WUgw9kZRClfax nTaRi03nBoL+VkdIrx1KYHFok5acU8RZZdmroX3TT9hd9l3p543QmpPpQHmzwfD0 OKcrErziBEBVJyNz8OhDwunNppNRq53iKdYPMQtP+uTEGMXqU9g2Yl3gJ2x2RREb c76okRPo3Zkm7QQ+zqHfXlz3mo7h2nRq07ixQGmLMmrfj43tHOToydUrq91iaQNX yC5Fu8fZ6lMxR0rOHJvxNSEWelhfW7hgPXiJi03TdzW/qpbO -----END CERTIFICATE-----Generated at Sun Aug 24 09:44:50 2025 by rpki-client