$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/g4Fg-DYsVltvSKTYbss2TlfLNts.roa File: g4Fg-DYsVltvSKTYbss2TlfLNts.roa (raw, json) Hash identifier: l5V4xgsTkeCH79L9/3Dn0EYN8y+21NB7Ra9xQthJC6s= Subject key identifier: 83:81:60:F8:36:2C:56:5B:6F:48:A4:D8:6E:CB:36:4E:57:CB:36:DB Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0DEA Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/g4Fg-DYsVltvSKTYbss2TlfLNts.roa Signing time: Thu 11 Sep 2025 03:30:48 +0000 ROA not before: Thu 11 Sep 2025 03:30:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152626 IP address blocks: 210.67.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3562 (0xdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: Sep 11 03:30:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=838160F8362C565B6F48A4D86ECB364E57CB36DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:9f:6d:78:0e:8a:f3:69:60:bf:16:ab:01: ce:d6:7e:e4:78:48:0d:0b:8f:cf:7a:5f:61:90:9a: 15:65:52:5e:68:f4:34:e2:4a:8c:5b:42:d9:36:bd: 3d:1d:45:a6:90:d9:bd:ba:a6:e6:83:30:a4:50:fc: 83:3c:74:4e:db:7e:48:b8:27:51:1e:5d:e3:ab:37: 18:d4:58:3d:40:a7:b2:b5:f6:c8:38:13:7b:e8:5b: 46:55:eb:5f:70:21:ac:de:92:71:29:b5:9b:b3:63: 5a:e9:89:38:f3:0d:1c:fa:e0:d5:77:67:7a:5a:59: ce:9c:37:8f:9b:4f:5f:e7:47:90:98:cd:1a:51:eb: e4:a0:2f:12:90:52:b3:9a:da:25:29:1e:f3:ba:39: 2b:49:78:cc:33:85:8a:78:6d:3a:c3:44:f4:6e:9e: 69:27:38:4b:f5:74:e6:5f:8e:9b:ed:2b:5f:5f:4e: 53:c4:d3:a9:da:86:84:e6:63:8e:53:1a:4a:bd:1c: dc:2a:e5:ff:37:df:86:47:63:0e:f9:bd:73:93:ed: a4:91:31:74:17:80:10:a5:bf:b0:1e:a4:49:3b:07: eb:f3:32:9d:cf:6b:8f:45:c7:e3:1a:94:c2:79:e7: d3:69:88:50:8b:be:f8:32:f6:4e:f3:0a:e9:6a:e0: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:60:F8:36:2C:56:5B:6F:48:A4:D8:6E:CB:36:4E:57:CB:36:DB X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/g4Fg-DYsVltvSKTYbss2TlfLNts.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.140.0/23 Signature Algorithm: sha256WithRSAEncryption 33:a6:75:7e:94:99:3b:dd:0d:60:dd:a0:4a:38:9b:13:d8:8e: be:8c:e4:5d:ab:33:f8:82:63:45:91:6f:9d:cf:7e:c0:d1:1d: 60:4e:b9:3b:c6:b5:31:91:a5:f9:47:2e:9d:f9:91:07:21:5f: c2:c1:1c:79:97:d8:a9:c1:b8:fc:ba:90:25:9c:e2:66:74:f4: 7d:a6:82:85:07:c3:a7:a9:02:1d:1a:78:e6:cf:86:39:41:93: 89:0a:eb:05:b8:10:4c:e6:b7:43:d3:a6:d6:4f:2e:86:8e:4f: c3:c9:2e:57:c4:14:66:c4:45:2f:37:63:31:bc:1b:76:f0:0a: 54:2a:30:39:ba:6c:5f:f7:a2:5b:4b:52:a2:5c:e0:98:cb:ce: 01:e8:87:56:de:51:fe:63:33:f1:08:84:ad:68:e1:cc:30:e2: ff:31:5a:c9:e1:03:37:4c:75:07:37:ed:8e:8b:47:83:80:51: dc:bb:42:8c:49:44:1d:d8:bb:ce:e4:c3:87:27:07:8b:40:2b: 6c:cc:e6:e0:7c:70:bc:25:ad:28:16:3d:ea:e3:9a:d3:d8:a3: 82:8d:3b:8b:5b:4d:3c:ba:ee:4f:81:65:49:7a:4f:1f:2a:a6: f4:80:68:ae:4e:68:01:60:00:41:a0:a6:c2:70:80:bf:26:28: 77:97:6f:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yNTA5MTEw MzMwNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgzODE2MEY4MzYyQzU2 NUI2RjQ4QTREODZFQ0IzNjRFNTdDQjM2REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgQZ9teA6K82lgvxarAc7WfuR4SA0Lj896X2GQmhVlUl5o9DTi SoxbQtk2vT0dRaaQ2b26puaDMKRQ/IM8dE7bfki4J1EeXeOrNxjUWD1Ap7K19sg4 E3voW0ZV619wIazeknEptZuzY1rpiTjzDRz64NV3Z3paWc6cN4+bT1/nR5CYzRpR 6+SgLxKQUrOa2iUpHvO6OStJeMwzhYp4bTrDRPRunmknOEv1dOZfjpvtK19fTlPE 06nahoTmY45TGkq9HNwq5f8334ZHYw75vXOT7aSRMXQXgBClv7AepEk7B+vzMp3P a49Fx+MalMJ559NpiFCLvvgy9k7zCulq4NLLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUg4Fg+DYsVltvSKTYbss2TlfLNtswHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVUL2c0RmctRFlzVmx0dlNLVFli c3MyVGxmTE50cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHS Q4wwDQYJKoZIhvcNAQELBQADggEBADOmdX6UmTvdDWDdoEo4mxPYjr6M5F2rM/iC Y0WRb53PfsDRHWBOuTvGtTGRpflHLp35kQchX8LBHHmX2KnBuPy6kCWc4mZ09H2m goUHw6epAh0aeObPhjlBk4kK6wW4EEzmt0PTptZPLoaOT8PJLlfEFGbERS83YzG8 G3bwClQqMDm6bF/3oltLUqJc4JjLzgHoh1beUf5jM/EIhK1o4cww4v8xWsnhAzdM dQc37Y6LR4OAUdy7QoxJRB3Yu87kw4cnB4tAK2zM5uB8cLwlrSgWPerjmtPYo4KN O4tbTTy67k+BZUl6Tx8qpvSAaK5OaAFgAEGgpsJwgL8mKHeXbwo= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:55 2025 by rpki-client