$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5p368WlDX4tn_0CDC2sgUsxYRMQ.roa File: 5p368WlDX4tn_0CDC2sgUsxYRMQ.roa (raw, json) Hash identifier: bhOsQVszHME/s7LtTWJMaZupkJWAJ4bRShRJ9IRfbWE= Subject key identifier: E6:9D:FA:F1:69:43:5F:8B:67:FF:40:83:0B:6B:20:52:CC:58:44:C4 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 107B Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5p368WlDX4tn_0CDC2sgUsxYRMQ.roa Signing time: Fri 22 Aug 2025 08:55:32 +0000 ROA not before: Fri 22 Aug 2025 08:55:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 120.109.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4219 (0x107b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E69DFAF169435F8B67FF40830B6B2052CC5844C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:a6:da:e1:70:48:4a:98:36:92:4d:09:a4: 48:f5:1e:0f:5e:4c:02:e6:72:cb:70:07:e7:23:77: 60:26:f8:69:e8:ed:3e:f7:78:44:43:bd:27:33:af: ab:e6:e7:7a:57:d9:6a:0f:80:a8:1b:8b:3b:6e:97: 43:f4:91:24:a5:99:0b:17:2b:61:99:fe:40:00:90: be:d6:9a:c7:a5:e4:dd:79:6c:37:2c:7b:29:f1:1f: c5:e6:9e:52:fc:4d:dc:4b:13:8d:79:a0:31:65:a2: 9c:f2:db:cb:2a:a2:15:b9:ab:01:af:48:ff:2d:09: dc:00:6e:20:8a:44:63:0b:b9:e7:36:f7:2e:ed:65: f9:8c:c7:87:9b:51:1a:87:16:b3:82:da:b0:67:dc: bb:85:e1:53:c2:b7:2e:fe:92:6c:5a:46:73:58:8a: 48:ad:8d:bd:48:37:a4:a8:32:81:f6:2e:aa:93:11: d0:b4:cb:fe:55:36:78:09:39:5e:a8:ac:e6:0d:97: c9:97:ef:c7:5a:ef:41:75:0c:6d:56:51:01:ed:ad: 8c:01:f3:5f:f4:7a:7d:72:aa:fd:a3:59:bf:4a:a9: 34:77:95:af:2c:ab:e4:8e:b3:8f:27:a6:53:1d:24: 1c:3b:f9:c1:85:8b:4c:62:86:90:b1:20:af:60:e0: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:FA:F1:69:43:5F:8B:67:FF:40:83:0B:6B:20:52:CC:58:44:C4 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5p368WlDX4tn_0CDC2sgUsxYRMQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.109.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:e6:b3:ed:78:dd:df:ea:9b:6e:04:b0:06:bd:98:ca:5d:fc: b3:a7:14:03:f0:25:14:b2:e9:a1:67:c8:29:bf:ad:bd:94:65: f8:ef:04:95:44:17:a3:ea:26:6b:82:85:4b:9b:2b:3c:12:fe: fb:c4:5e:39:43:f5:69:55:d1:5d:7e:be:3f:e1:09:0b:ab:10: fb:0b:40:9f:8b:70:cd:83:74:6a:b2:b7:28:db:3a:3e:dd:cf: 86:14:b4:eb:6f:34:21:d3:01:7e:d4:13:31:96:6c:b5:3e:db: f3:91:ee:1a:70:a5:0e:cf:02:8e:5a:be:88:97:65:85:0b:64: f6:ba:24:f2:3d:63:ab:11:dd:5c:da:67:2d:25:47:db:c3:9e: 29:ec:d9:5d:6c:c1:60:be:97:de:18:62:65:39:fc:c0:7e:50: a1:9e:9d:4d:f2:ac:be:68:8d:51:0d:50:d0:c5:cd:21:1e:3c: 7a:a2:ed:7d:96:57:2a:a9:57:dc:81:0a:f3:c2:7e:d9:e9:da: 5d:c8:8c:6d:89:ea:1c:50:d2:73:95:9a:9d:04:8c:54:9c:57: 5c:50:81:19:20:7d:44:a1:f5:0c:46:c7:ec:e8:ec:85:13:c0: 1e:ea:95:58:3a:47:fd:1e:79:8a:ae:78:2b:51:01:69:29:5f: 16:5b:44:4d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU2OURGQUYxNjk0MzVG OEI2N0ZGNDA4MzBCNkIyMDUyQ0M1ODQ0QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQL6ba4XBISpg2kk0JpEj1Hg9eTALmcstwB+cjd2Am+Gno7T73 eERDvSczr6vm53pX2WoPgKgbiztul0P0kSSlmQsXK2GZ/kAAkL7Wmsel5N15bDcs eynxH8XmnlL8TdxLE415oDFlopzy28sqohW5qwGvSP8tCdwAbiCKRGMLuec29y7t ZfmMx4ebURqHFrOC2rBn3LuF4VPCty7+kmxaRnNYikitjb1IN6SoMoH2LqqTEdC0 y/5VNngJOV6orOYNl8mX78da70F1DG1WUQHtrYwB81/0en1yqv2jWb9KqTR3la8s q+SOs48nplMdJBw7+cGFi0xihpCxIK9g4K5HAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU5p368WlDX4tn/0CDC2sgUsxYRMQwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC81cDM2OFdsRFg0dG5fMENEQzJz Z1VzeFlSTVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeG0w DQYJKoZIhvcNAQELBQADggEBAGrms+143d/qm24EsAa9mMpd/LOnFAPwJRSy6aFn yCm/rb2UZfjvBJVEF6PqJmuChUubKzwS/vvEXjlD9WlV0V1+vj/hCQurEPsLQJ+L cM2DdGqytyjbOj7dz4YUtOtvNCHTAX7UEzGWbLU+2/OR7hpwpQ7PAo5avoiXZYUL ZPa6JPI9Y6sR3VzaZy0lR9vDnins2V1swWC+l94YYmU5/MB+UKGenU3yrL5ojVEN UNDFzSEePHqi7X2WVyqpV9yBCvPCftnp2l3IjG2J6hxQ0nOVmp0EjFScV1xQgRkg fUSh9QxGx+zo7IUTwB7qlVg6R/0eeYqueCtRAWkpXxZbRE0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:18 2025 by rpki-client