$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4ZquMrDim6vEbY5v354ZmXcA9ww.roa File: 4ZquMrDim6vEbY5v354ZmXcA9ww.roa (raw, json) Hash identifier: bZB0RcCSq1agYtANJAQPWHSgxv+HxLCxTBNORZaz4Gs= Subject key identifier: E1:9A:AE:32:B0:E2:9B:AB:C4:6D:8E:6F:DF:9E:19:99:77:00:F7:0C Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FE2 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4ZquMrDim6vEbY5v354ZmXcA9ww.roa Signing time: Fri 22 Aug 2025 08:55:42 +0000 ROA not before: Fri 22 Aug 2025 08:55:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 140.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4066 (0xfe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E19AAE32B0E29BABC46D8E6FDF9E19997700F70C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:de:38:f8:6a:98:4d:d0:9c:c2:6c:8f:b3:b4: 67:c4:29:a3:1a:75:ba:96:52:55:2c:69:56:44:3b: f2:81:d8:ee:01:1b:76:7d:22:f9:9e:f8:b7:0c:d2: 07:56:97:08:b2:6c:bf:2e:97:2e:67:f3:d4:27:f4: 7a:f5:73:86:eb:c4:e6:0a:2f:be:bf:f7:da:ba:c3: 51:d5:38:71:d1:6f:c3:fb:d5:1f:64:57:d0:6c:f4: 68:67:12:67:ec:c1:22:93:89:85:83:28:73:25:d6: db:22:91:e1:5e:47:cd:91:ab:38:c6:d3:26:b2:7e: 61:60:d7:ae:ff:e0:7b:8f:52:24:6b:71:85:98:8a: be:b3:79:e4:82:36:72:82:a6:8b:7a:cb:f3:f9:ff: 33:d7:bd:50:aa:d6:1f:0d:d4:9e:b1:b9:47:95:c0: 1f:c8:e5:69:04:b1:8a:9f:9a:36:cd:7e:cd:5c:03: d1:ac:b6:fb:94:d3:53:1f:46:50:2f:e2:52:40:e2: 64:67:ad:b6:ae:9a:76:ec:2f:94:43:5f:1a:67:13: 29:93:e7:45:a9:bc:45:a0:46:92:14:18:80:e7:a1: f3:78:00:e2:f4:06:8c:3f:66:f1:7c:d6:26:b8:a9: 34:de:34:bd:b7:d3:67:48:4d:8f:31:52:a6:f1:d7: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:AE:32:B0:E2:9B:AB:C4:6D:8E:6F:DF:9E:19:99:77:00:F7:0C X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4ZquMrDim6vEbY5v354ZmXcA9ww.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:90:4e:a0:b4:80:9b:6c:4a:1c:56:b6:97:14:ab:fa:53:4a: a6:c0:29:9a:78:76:10:1a:50:0d:11:ec:da:e7:ac:5d:f4:bd: e6:6b:66:1f:6d:03:5c:eb:8d:c8:ab:f8:20:25:e7:de:8c:b1: cf:b9:93:23:89:3e:f6:f0:c5:5d:a8:79:6c:19:1a:ac:04:0f: f3:fc:17:11:b7:a0:d4:78:19:87:24:c9:89:3a:00:7e:b5:52: 6a:99:18:68:1a:dc:55:8b:fb:fc:f0:f9:3b:53:e9:5a:a9:b0: 53:f2:6e:b2:07:55:4a:c1:1b:7c:b5:f8:c9:84:9c:34:f3:b8: e1:89:f5:78:bd:29:c7:d6:37:f8:86:1a:f8:e5:cf:f3:04:fb: 36:65:cb:a0:82:21:af:4d:3c:3b:88:7e:f7:f5:78:43:3c:d0: 54:01:5a:42:d6:6c:9e:54:fd:9a:7e:bd:00:db:03:f1:83:78: 27:f2:ee:29:79:e8:65:a0:ac:21:fc:44:5a:b7:3f:3e:fa:48: 22:c9:9b:6a:a4:a1:31:62:1a:a0:09:12:35:ba:b3:57:dc:f5: e3:75:78:01:94:e5:32:ee:11:51:ab:f5:56:5a:e5:93:b7:da: 38:73:1f:64:be:01:f2:35:e9:4c:1c:37:94:7a:ef:2b:02:af: 0f:7c:21:3c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUxOUFBRTMyQjBFMjlC QUJDNDZEOEU2RkRGOUUxOTk5NzcwMEY3MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS3jj4aphN0JzCbI+ztGfEKaMadbqWUlUsaVZEO/KB2O4BG3Z9 Ivme+LcM0gdWlwiybL8uly5n89Qn9Hr1c4brxOYKL76/99q6w1HVOHHRb8P71R9k V9Bs9GhnEmfswSKTiYWDKHMl1tsikeFeR82RqzjG0yayfmFg167/4HuPUiRrcYWY ir6zeeSCNnKCpot6y/P5/zPXvVCq1h8N1J6xuUeVwB/I5WkEsYqfmjbNfs1cA9Gs tvuU01MfRlAv4lJA4mRnrbaumnbsL5RDXxpnEymT50WpvEWgRpIUGIDnofN4AOL0 Bow/ZvF81ia4qTTeNL2302dITY8xUqbx1w1PAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU4ZquMrDim6vEbY5v354ZmXcA9wwwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC80WnF1TXJEaW02dkViWTV2MzU0 Wm1YY0E5d3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjIQw DQYJKoZIhvcNAQELBQADggEBAGeQTqC0gJtsShxWtpcUq/pTSqbAKZp4dhAaUA0R 7NrnrF30veZrZh9tA1zrjcir+CAl596Msc+5kyOJPvbwxV2oeWwZGqwED/P8FxG3 oNR4GYckyYk6AH61UmqZGGga3FWL+/zw+TtT6VqpsFPybrIHVUrBG3y1+MmEnDTz uOGJ9Xi9KcfWN/iGGvjlz/ME+zZly6CCIa9NPDuIfvf1eEM80FQBWkLWbJ5U/Zp+ vQDbA/GDeCfy7il56GWgrCH8RFq3Pz76SCLJm2qkoTFiGqAJEjW6s1fc9eN1eAGU 5TLuEVGr9VZa5ZO32jhzH2S+AfI16UwcN5R67ysCrw98ITw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:16 2025 by rpki-client