$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/rt_E8Sz0cYNKaIr7hCOXVSW1YrU.roa File: rt_E8Sz0cYNKaIr7hCOXVSW1YrU.roa (raw, json) Hash identifier: mvVnJnLESsTFCaCZ6wimkj3xoIfDeRvoIGB7G/zMDwM= Subject key identifier: AE:DF:C4:F1:2C:F4:71:83:4A:68:8A:FB:84:23:97:55:25:B5:62:B5 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0E0C Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rt_E8Sz0cYNKaIr7hCOXVSW1YrU.roa Signing time: Fri 22 Aug 2025 08:50:59 +0000 ROA not before: Fri 22 Aug 2025 08:50:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9922 IP address blocks: 39.1.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3596 (0xe0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 22 08:50:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AEDFC4F12CF471834A688AFB8423975525B562B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:b7:93:07:d9:08:e2:98:64:b7:e0:f6:60: e5:96:83:fb:fe:c5:cc:11:38:75:8d:64:1f:bd:fb: 46:05:3d:08:1a:89:14:5d:d8:89:14:52:58:38:44: 1a:ef:2c:31:8d:73:a2:fd:83:9c:e2:b4:70:7d:fc: 9f:26:5d:9a:02:44:5b:7c:02:60:6d:33:50:23:e7: 54:46:f2:8d:fc:3a:22:90:ae:7f:3f:0a:4f:99:bb: db:23:10:ac:f9:e1:0f:c5:e0:a0:e0:65:5c:fe:49: d9:46:83:15:2f:9c:48:18:84:fe:a1:99:fc:90:a3: 22:1b:b4:0d:8e:51:0d:65:eb:77:7d:b1:0c:a6:76: 0e:86:99:e2:1a:25:d2:fe:9b:fb:84:e0:08:bf:d4: cc:c3:9b:74:7f:f5:5b:e8:86:aa:11:e0:5a:46:6c: af:5e:63:fa:f0:02:80:c1:b3:40:a1:97:b6:b8:ac: 3c:1c:67:ea:cf:b5:00:de:fa:f1:7d:e1:05:ee:ae: c2:e1:f2:d9:89:88:95:e2:f2:61:cf:52:54:e1:a5: 81:4b:70:8b:3d:10:c9:f7:04:b0:4b:70:36:ae:3d: 60:a0:ed:51:63:81:5f:22:0f:ef:c6:b6:96:90:1c: 9a:ce:a3:11:85:8d:e9:e2:b4:31:17:83:5c:de:ea: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DF:C4:F1:2C:F4:71:83:4A:68:8A:FB:84:23:97:55:25:B5:62:B5 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rt_E8Sz0cYNKaIr7hCOXVSW1YrU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.48.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:a3:2b:e9:37:1b:66:e4:a0:f1:95:2c:37:7f:ef:76:d1:41: 37:fd:79:1b:8a:1a:0f:d3:17:bd:ad:61:fd:94:9b:af:fb:e9: 56:6a:dc:43:ed:46:5d:d3:3f:46:c3:f5:09:3a:de:dc:c9:90: f8:83:bd:8e:b1:10:b8:41:03:d6:31:bb:d3:f7:7d:07:e0:bd: ad:17:c3:3c:5d:d2:c4:3f:57:fb:90:e1:0c:1d:1b:6c:45:49: 48:43:72:b5:b3:98:85:a9:42:4b:5f:fc:fa:6c:04:e4:50:fa: b2:ce:30:31:b3:4e:6c:ab:d1:d3:25:7b:bd:64:51:e2:31:67: e2:6f:05:24:2d:65:35:4d:e7:39:e2:56:92:2f:5d:62:ab:fd: d9:57:be:7b:1f:f8:f9:c2:d5:5d:33:f2:58:7b:9c:16:95:90: 69:cf:cf:8a:0c:fa:0d:54:f9:de:a5:68:06:4b:a1:be:ed:52: 21:18:77:81:d2:9e:97:b6:0d:bc:3b:94:cf:66:3b:7a:0a:99: 21:6d:7e:e5:f4:6d:2b:91:0a:9b:f3:80:a7:12:65:8c:74:5a: e3:8c:6c:69:a1:ac:2a:02:69:af:1b:e4:75:0a:6c:7e:bc:8c: cc:41:70:fd:f6:04:e1:6f:fe:b6:2d:8f:24:3d:29:7e:aa:0b: e7:c1:1c:89 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTA4MjIw ODUwNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFFREZDNEYxMkNGNDcx ODM0QTY4OEFGQjg0MjM5NzU1MjVCNTYyQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrZLeTB9kI4phkt+D2YOWWg/v+xcwROHWNZB+9+0YFPQgaiRRd 2IkUUlg4RBrvLDGNc6L9g5zitHB9/J8mXZoCRFt8AmBtM1Aj51RG8o38OiKQrn8/ Ck+Zu9sjEKz54Q/F4KDgZVz+SdlGgxUvnEgYhP6hmfyQoyIbtA2OUQ1l63d9sQym dg6GmeIaJdL+m/uE4Ai/1MzDm3R/9VvohqoR4FpGbK9eY/rwAoDBs0Chl7a4rDwc Z+rPtQDe+vF94QXursLh8tmJiJXi8mHPUlThpYFLcIs9EMn3BLBLcDauPWCg7VFj gV8iD+/GtpaQHJrOoxGFjenitDEXg1ze6qDZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUrt/E8Sz0cYNKaIr7hCOXVSW1YrUwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9ydF9FOFN6MGNZTkthSXI3aENP WFZTVzFZclUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwEw MA0GCSqGSIb3DQEBCwUAA4IBAQBuoyvpNxtm5KDxlSw3f+920UE3/XkbihoP0xe9 rWH9lJuv++lWatxD7UZd0z9Gw/UJOt7cyZD4g72OsRC4QQPWMbvT930H4L2tF8M8 XdLEP1f7kOEMHRtsRUlIQ3K1s5iFqUJLX/z6bATkUPqyzjAxs05sq9HTJXu9ZFHi MWfibwUkLWU1Tec54laSL11iq/3ZV757H/j5wtVdM/JYe5wWlZBpz8+KDPoNVPne pWgGS6G+7VIhGHeB0p6Xtg28O5TPZjt6CpkhbX7l9G0rkQqb84CnEmWMdFrjjGxp oawqAmmvG+R1Cmx+vIzMQXD99gThb/62LY8kPSl+qgvnwRyJ -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:17 2025 by rpki-client