$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9aurCPMSnEORBAb9yRlF_ffhQdI.roa File: 9aurCPMSnEORBAb9yRlF_ffhQdI.roa (raw, json) Hash identifier: Y6a01ZwNZNphTAADT+ZSUdszadP1nXixbLbOAwoBNGo= Subject key identifier: F5:AB:AB:08:F3:12:9C:43:91:04:06:FD:C9:19:45:FD:F7:E1:41:D2 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1096 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9aurCPMSnEORBAb9yRlF_ffhQdI.roa Signing time: Fri 22 Aug 2025 08:55:38 +0000 ROA not before: Fri 22 Aug 2025 08:55:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9916 IP address blocks: 120.126.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4246 (0x1096) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F5ABAB08F3129C43910406FDC91945FDF7E141D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:52:d9:f4:6c:f3:97:a0:cb:1f:2e:a5:d7: 87:81:68:dc:a7:1d:00:19:86:89:60:4b:96:d8:ae: 14:2c:0a:af:74:41:a0:4a:b7:b6:f8:32:f0:92:c7: 92:bc:87:c5:d2:96:dd:6d:b8:3d:c3:62:5c:b3:17: 3f:a5:0e:53:ef:a6:da:fc:86:cd:c5:c3:0e:45:d1: 2b:00:e3:fd:31:85:4d:e1:f4:28:e4:e9:02:27:a8: c6:b6:64:c1:fd:ef:af:c8:48:df:fd:d4:eb:12:63: e7:db:42:73:4e:c6:8d:13:7b:f3:f8:d5:92:e3:cd: 73:e9:92:53:31:b7:00:59:34:24:3b:65:27:98:c9: 89:67:c8:4f:d4:3f:d5:14:34:b3:7b:3f:8c:49:ef: 72:b6:4c:76:99:b9:1d:66:67:d4:3e:98:fb:b3:14: 30:56:0f:55:6c:21:d0:ab:7a:8b:8c:eb:47:53:bf: 6f:e3:4d:c8:6d:3e:52:73:30:af:3a:bc:b6:3d:85: cb:c9:c2:35:e6:79:d5:81:fa:21:42:08:64:fd:dd: 50:af:83:ce:ad:c8:9c:f8:53:4c:f3:37:06:e8:a0: 4c:ab:50:ec:35:39:f6:19:9e:b1:d6:c2:10:33:af: 40:86:f8:b7:24:fa:fa:85:8d:01:6e:42:b8:27:e3: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AB:AB:08:F3:12:9C:43:91:04:06:FD:C9:19:45:FD:F7:E1:41:D2 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9aurCPMSnEORBAb9yRlF_ffhQdI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.126.96.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:15:f9:5f:f0:1c:8d:9c:9e:d3:fc:ac:f7:a6:df:11:f7:e1: d4:f1:f6:71:31:30:a0:aa:05:ad:22:b8:c9:fb:54:5a:68:0a: e2:56:9c:3f:14:8a:0c:aa:d0:5a:21:7d:de:73:3e:b3:8f:38: 90:11:a8:13:9c:b8:30:f7:76:87:6d:f8:79:b8:d1:6c:73:70: 49:79:41:c8:8e:05:f0:64:79:31:fd:c2:87:17:15:04:2e:ee: 17:5a:54:bd:7c:e7:12:13:01:9b:64:85:7b:ee:4e:0f:aa:f4: 89:c2:8f:65:fa:d7:b1:a3:0e:88:63:18:9c:43:2c:71:de:67: 86:79:74:b1:58:bb:b3:97:74:6d:a3:bb:24:4c:f1:39:7a:cd: c9:2f:2b:ce:0c:c6:a1:2e:49:ff:15:49:80:b3:f8:cb:27:1b: b8:25:a2:d9:9c:33:48:36:13:82:50:62:1d:57:58:33:8c:96: 79:7f:c4:a4:9b:d7:24:2e:ac:2d:6e:8e:26:d6:55:ce:bd:17: ff:24:0f:3d:73:3f:00:e3:5b:ff:f2:5d:a0:5f:d7:ed:8d:bd: b9:af:ec:50:6f:b7:99:b4:78:f7:a3:ca:09:d0:4d:71:d7:5e: 1b:3c:4d:b7:22:71:b5:1c:c0:37:cb:a6:47:2e:d5:71:05:72: 0e:20:d7:bb -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY1QUJBQjA4RjMxMjlD NDM5MTA0MDZGREM5MTk0NUZERjdFMTQxRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCS1LZ9Gzzl6DLHy6l14eBaNynHQAZholgS5bYrhQsCq90QaBK t7b4MvCSx5K8h8XSlt1tuD3DYlyzFz+lDlPvptr8hs3Fww5F0SsA4/0xhU3h9Cjk 6QInqMa2ZMH976/ISN/91OsSY+fbQnNOxo0Te/P41ZLjzXPpklMxtwBZNCQ7ZSeY yYlnyE/UP9UUNLN7P4xJ73K2THaZuR1mZ9Q+mPuzFDBWD1VsIdCreouM60dTv2/j TchtPlJzMK86vLY9hcvJwjXmedWB+iFCCGT93VCvg86tyJz4U0zzNwbooEyrUOw1 OfYZnrHWwhAzr0CG+Lck+vqFjQFuQrgn47otAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU9aurCPMSnEORBAb9yRlF/ffhQdIwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC85YXVyQ1BNU25FT1JCQWI5eVJs Rl9mZmhRZEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEeH5g MA0GCSqGSIb3DQEBCwUAA4IBAQB9Fflf8ByNnJ7T/Kz3pt8R9+HU8fZxMTCgqgWt IrjJ+1RaaAriVpw/FIoMqtBaIX3ecz6zjziQEagTnLgw93aHbfh5uNFsc3BJeUHI jgXwZHkx/cKHFxUELu4XWlS9fOcSEwGbZIV77k4PqvSJwo9l+texow6IYxicQyxx 3meGeXSxWLuzl3Rto7skTPE5es3JLyvODMahLkn/FUmAs/jLJxu4JaLZnDNINhOC UGIdV1gzjJZ5f8Skm9ckLqwtbo4m1lXOvRf/JA89cz8A41v/8l2gX9ftjb25r+xQ b7eZtHj3o8oJ0E1x114bPE23InG1HMA3y6ZHLtVxBXIOINe7 -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:24 2025 by rpki-client