$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/7sWHqjtuFZF6vfze4cooKQTNG84.roa File: 7sWHqjtuFZF6vfze4cooKQTNG84.roa (raw, json) Hash identifier: zNpZoBqha6lP0xYX43TwKvMCr3L1XS7tZ2T4cGBMoy8= Subject key identifier: EE:C5:87:AA:3B:6E:15:91:7A:BD:FC:DE:E1:CA:28:29:04:CD:1B:CE Certificate issuer: /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Certificate serial: 0232 Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/7sWHqjtuFZF6vfze4cooKQTNG84.roa Signing time: Fri 22 Aug 2025 08:50:12 +0000 ROA not before: Fri 22 Aug 2025 08:50:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 32595 IP address blocks: 36.50.249.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Validity Not Before: Aug 22 08:50:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EEC587AA3B6E15917ABDFCDEE1CA282904CD1BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:0a:6c:cd:b1:69:d9:71:c6:0a:87:a6:b4: d1:d0:a0:7e:18:08:83:1d:c5:c3:4f:62:c8:c4:a9: 78:0c:52:79:4f:d5:0c:78:af:32:36:03:00:5b:a1: 7f:df:9a:32:35:4c:44:04:1f:3e:e8:17:77:d4:3e: 30:9e:f2:f8:07:e7:b0:24:58:dc:20:ae:35:64:4b: 2d:61:30:7b:3f:31:9d:7b:13:85:25:a9:8d:28:ae: 47:21:52:56:31:20:5c:8a:c1:70:d8:7d:30:95:f8: ab:05:3b:29:97:08:bd:fc:5e:bb:d3:9c:82:63:ef: d2:7c:5c:e7:40:21:11:f0:5e:ab:1c:8e:29:b2:d4: 12:c1:28:73:ff:19:e9:9b:9e:8f:b3:ad:09:48:80: 83:55:fe:2c:ba:f2:a4:8e:7e:71:ab:b4:6b:e0:10: 44:d0:e0:af:73:25:b3:c0:22:8c:77:c1:7e:b0:7e: c2:9c:21:e6:05:41:21:57:e3:6f:79:95:17:38:1b: 0c:50:8a:e5:4b:a3:a3:63:38:5d:ee:33:3a:f8:a0: 24:81:c7:87:19:b0:7b:c3:5b:64:5a:80:72:59:f1: 7c:a2:a2:22:40:18:22:a9:a6:4e:5d:f5:d1:82:67: a7:3c:3a:47:f0:02:8b:75:b1:13:04:85:14:96:b4: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C5:87:AA:3B:6E:15:91:7A:BD:FC:DE:E1:CA:28:29:04:CD:1B:CE X509v3 Authority Key Identifier: keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/7sWHqjtuFZF6vfze4cooKQTNG84.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.50.249.0/24 Signature Algorithm: sha256WithRSAEncryption 72:2e:3f:f5:d9:48:d2:74:12:a0:4e:c4:2f:6c:aa:d0:7d:0e: 69:fa:eb:3a:19:d0:7c:eb:ff:27:9a:82:a6:d0:05:d8:e8:49: e2:0a:78:31:7d:26:2e:6e:8c:6f:04:1b:4e:b3:14:95:6f:2b: ef:33:b0:05:36:4f:16:fb:73:a5:2a:5e:f1:25:ad:2b:60:d3: 67:4b:49:cf:25:d6:a6:3b:26:c4:61:3d:eb:ab:52:00:89:fd: 99:09:8c:e5:41:0b:95:ce:42:07:31:a5:8e:90:c1:57:9d:3d: f8:c6:b0:04:b8:77:63:3e:24:a8:37:29:87:a3:a0:56:06:51: c5:d2:c2:d7:d0:37:62:59:4c:de:15:45:82:bf:54:ac:5d:2d: 67:1a:0e:f6:c7:ad:6d:07:b7:b7:60:12:4c:80:40:a3:82:68: 90:ca:c3:09:2a:ef:87:ad:d1:54:27:56:60:52:9f:ed:95:d3: a0:c4:61:50:ce:97:1a:d4:6b:fa:c4:6e:81:d8:98:10:55:82: 43:5d:9e:0c:fd:cb:21:db:9c:5e:95:d7:5f:cb:7d:92:84:ed: a4:f0:7a:e0:71:2a:95:38:09:f5:52:5d:ea:97:99:d7:73:78: e8:75:f4:65:bd:20:4a:3b:2c:ff:82:fa:a9:2e:df:58:3e:ad: d6:b4:74:86 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVG RjkwMzA2QjQ3QTdERTAzMDdGMEUzMzVCNERDN0YyN0RFQTRGQjAeFw0yNTA4MjIw ODUwMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVFQzU4N0FBM0I2RTE1 OTE3QUJERkNERUUxQ0EyODI5MDRDRDFCQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcLgpszbFp2XHGCoemtNHQoH4YCIMdxcNPYsjEqXgMUnlP1Qx4 rzI2AwBboX/fmjI1TEQEHz7oF3fUPjCe8vgH57AkWNwgrjVkSy1hMHs/MZ17E4Ul qY0orkchUlYxIFyKwXDYfTCV+KsFOymXCL38XrvTnIJj79J8XOdAIRHwXqscjimy 1BLBKHP/Gembno+zrQlIgINV/iy68qSOfnGrtGvgEETQ4K9zJbPAIox3wX6wfsKc IeYFQSFX4295lRc4GwxQiuVLo6NjOF3uMzr4oCSBx4cZsHvDW2RagHJZ8XyioiJA GCKppk5d9dGCZ6c8OkfwAot1sRMEhRSWtBkjAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU7sWHqjtuFZF6vfze4cooKQTNG84wHwYDVR0jBBgwFoAUNf+QMGtHp94DB/Dj NbTcfyfepPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJSklD T0xURC9OZi1RTUd0SHA5NERCX0RqTmJUY2Z5ZmVwUHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL05mLVFNR3RIcDk0REJfRGpOYlRjZnlmZXBQcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NISUpJQ09MVEQvN3NXSHFqdHVG WkY2dmZ6ZTRjb29LUVRORzg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACQy+TANBgkqhkiG9w0BAQsFAAOCAQEAci4/9dlI0nQSoE7EL2yq0H0O afrrOhnQfOv/J5qCptAF2OhJ4gp4MX0mLm6MbwQbTrMUlW8r7zOwBTZPFvtzpSpe 8SWtK2DTZ0tJzyXWpjsmxGE966tSAIn9mQmM5UELlc5CBzGljpDBV509+MawBLh3 Yz4kqDcph6OgVgZRxdLC19A3YllM3hVFgr9UrF0tZxoO9setbQe3t2ASTIBAo4Jo kMrDCSrvh63RVCdWYFKf7ZXToMRhUM6XGtRr+sRugdiYEFWCQ12eDP3LIducXpXX X8t9koTtpPB64HEqlTgJ9VJd6peZ13N46HX0Zb0gSjss/4L6qS7fWD6t1rR0hg== -----END CERTIFICATE-----Generated at Sun Aug 24 05:19:46 2025 by rpki-client