$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/1zyt-MPfnNegn0wpDlp7lBrievs.roa File: 1zyt-MPfnNegn0wpDlp7lBrievs.roa (raw, json) Hash identifier: JxTBN7ERGzJ/+6CmmFasGdhhsVpofeibDrGcVImYfz0= Subject key identifier: D7:3C:AD:F8:C3:DF:9C:D7:A0:9F:4C:29:0E:5A:7B:94:1A:E2:7A:FB Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 109B Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1zyt-MPfnNegn0wpDlp7lBrievs.roa Signing time: Fri 22 Aug 2025 08:55:39 +0000 ROA not before: Fri 22 Aug 2025 08:55:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9916 IP address blocks: 120.126.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4251 (0x109b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D73CADF8C3DF9CD7A09F4C290E5A7B941AE27AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cd:45:54:56:4a:09:97:1a:8c:2e:cf:09:35: 6f:59:61:85:74:5e:67:d9:39:fa:c0:e0:6a:50:34: 45:24:0b:ec:20:8c:26:eb:93:5e:96:74:68:96:65: a6:cc:95:7f:87:66:3f:f8:1b:52:e4:ea:e3:07:fc: 1c:85:b9:c9:e0:51:a5:00:cd:26:2e:78:1d:91:6d: ec:88:85:f0:ff:4d:7a:f2:12:13:7d:c0:0b:44:ef: bd:82:1c:3a:af:9b:b4:53:a1:82:67:67:ec:43:ee: a6:84:c5:ba:b8:08:a8:5f:15:06:bb:e5:62:8a:e2: fb:3f:f0:32:3e:9d:3b:6f:d9:8a:67:8f:35:96:1f: 88:f4:a3:c0:73:9d:e2:1f:34:7d:a8:80:43:0f:9d: 2f:bd:72:03:a8:3d:4e:c3:47:91:bc:18:80:c6:f2: cb:f5:55:9a:d0:ef:81:e1:50:8d:2e:2a:79:f8:37: 68:a6:eb:fb:e0:46:d5:a9:85:79:8e:3a:a4:a6:b0: 0a:d5:ce:ed:cb:70:3b:e3:33:bc:61:49:56:1c:95: 8c:30:79:42:8e:00:a6:d8:80:cb:b1:2a:48:ce:6a: e6:a2:49:39:17:35:58:fa:41:c3:04:a7:1c:9b:bc: 3e:3f:58:1b:d6:8f:ae:27:0e:19:c6:35:89:1b:f3: 3b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3C:AD:F8:C3:DF:9C:D7:A0:9F:4C:29:0E:5A:7B:94:1A:E2:7A:FB X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1zyt-MPfnNegn0wpDlp7lBrievs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.126.64.0/19 Signature Algorithm: sha256WithRSAEncryption 00:3e:bd:49:b9:a0:25:ab:fd:12:bf:1a:53:e2:22:7a:2c:46: ce:f2:14:ee:8c:7d:92:54:e8:98:27:f1:32:e3:0f:9d:3e:78: 2d:0a:a9:42:36:58:51:b8:aa:36:9f:f3:e4:c1:0d:62:3d:d7: 40:5a:12:fb:d1:08:aa:3c:d2:07:43:c7:24:d7:85:f4:43:69: fc:9d:37:d0:ad:34:9f:b5:94:b6:ee:c0:8c:14:f9:3e:e1:40: cb:78:94:c0:5d:ef:5e:ef:e4:30:36:8c:bf:2a:42:8a:a1:79: 55:ac:2d:91:e6:35:89:29:cc:02:de:a4:2b:fa:5e:c7:d2:eb: 57:ed:b4:9c:2c:7d:d2:0b:d8:1a:8c:b0:64:4d:63:40:43:79: 15:85:7b:0f:30:d2:09:29:b2:c0:2f:a4:f2:ef:c4:05:fd:a3: 8b:93:8a:5e:ce:e4:3f:be:85:d3:79:dc:e9:7a:28:66:a0:59: 13:e0:9a:5e:59:55:1f:bc:38:d0:20:cf:62:3d:97:f6:51:0c: 70:74:60:d5:b6:ac:13:f6:29:d5:58:7d:33:33:63:7c:7a:c0: d6:8f:cc:39:44:ef:97:7e:20:99:1d:76:8a:7c:47:d1:49:16: 7b:d5:b7:6f:19:02:f5:db:be:86:15:44:f1:3e:e2:0d:22:8b: f2:42:ed:ca -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ3M0NBREY4QzNERjlD RDdBMDlGNEMyOTBFNUE3Qjk0MUFFMjdBRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdzUVUVkoJlxqMLs8JNW9ZYYV0XmfZOfrA4GpQNEUkC+wgjCbr k16WdGiWZabMlX+HZj/4G1Lk6uMH/ByFucngUaUAzSYueB2RbeyIhfD/TXryEhN9 wAtE772CHDqvm7RToYJnZ+xD7qaExbq4CKhfFQa75WKK4vs/8DI+nTtv2YpnjzWW H4j0o8BzneIfNH2ogEMPnS+9cgOoPU7DR5G8GIDG8sv1VZrQ74HhUI0uKnn4N2im 6/vgRtWphXmOOqSmsArVzu3LcDvjM7xhSVYclYwweUKOAKbYgMuxKkjOauaiSTkX NVj6QcMEpxybvD4/WBvWj64nDhnGNYkb8zuFAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU1zyt+MPfnNegn0wpDlp7lBrievswHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8xenl0LU1QZm5OZWduMHdwRGxw N2xCcmlldnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeH5A MA0GCSqGSIb3DQEBCwUAA4IBAQAAPr1JuaAlq/0SvxpT4iJ6LEbO8hTujH2SVOiY J/Ey4w+dPngtCqlCNlhRuKo2n/PkwQ1iPddAWhL70QiqPNIHQ8ck14X0Q2n8nTfQ rTSftZS27sCMFPk+4UDLeJTAXe9e7+QwNoy/KkKKoXlVrC2R5jWJKcwC3qQr+l7H 0utX7bScLH3SC9gajLBkTWNAQ3kVhXsPMNIJKbLAL6Ty78QF/aOLk4pezuQ/voXT edzpeihmoFkT4JpeWVUfvDjQIM9iPZf2UQxwdGDVtqwT9inVWH0zM2N8esDWj8w5 RO+XfiCZHXaKfEfRSRZ71bdvGQL1276GFUTxPuINIovyQu3K -----END CERTIFICATE-----Generated at Sun Aug 24 13:36:49 2025 by rpki-client