$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/B7PG2nPEX5MHqKxBxi1HpXt7XUE.roa File: B7PG2nPEX5MHqKxBxi1HpXt7XUE.roa (raw, json) Hash identifier: eHJGFfhRPVKaEQyYp4c1CIUrP0tuHhZ7ZS7zcM5vKik= Subject key identifier: 07:B3:C6:DA:73:C4:5F:93:07:A8:AC:41:C6:2D:47:A5:7B:7B:5D:41 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1079 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/B7PG2nPEX5MHqKxBxi1HpXt7XUE.roa Signing time: Fri 22 Aug 2025 08:55:31 +0000 ROA not before: Fri 22 Aug 2025 08:55:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17712 IP address blocks: 120.113.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4217 (0x1079) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=07B3C6DA73C45F9307A8AC41C62D47A57B7B5D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:e8:33:c9:03:6b:6e:f8:21:3e:8a:fd:8e: bb:f6:09:ec:bb:9e:bd:1d:b4:cc:a4:95:c1:9d:9a: 96:4b:5e:83:63:23:d6:a1:6a:34:1f:c3:1d:e8:0b: ca:07:86:fc:1a:14:82:6e:30:f0:c7:96:8f:d6:5a: 9f:fc:01:79:12:4a:61:09:4f:20:dc:d5:1d:24:58: e3:16:07:2b:00:bc:93:ee:c7:e9:01:7c:b3:3f:e4: d0:c9:40:e7:85:a6:a9:6b:d5:fb:76:8a:be:20:26: 71:96:1c:e7:ed:92:eb:ae:38:b5:88:3e:37:1d:f4: c0:82:d5:bc:4e:16:a6:d7:1b:21:e8:31:f2:42:4e: eb:06:c8:4a:28:ee:f8:a6:18:d5:34:85:f4:2f:95: 4f:c0:ce:6e:89:01:be:13:75:eb:9c:4d:04:5f:c9: 14:f3:e3:60:27:47:7c:2c:1c:0a:8b:ff:89:6e:75: 55:53:eb:89:74:77:76:ad:a6:b8:af:db:6d:e3:05: cc:bb:51:ac:98:21:29:10:d2:d7:83:2e:15:09:aa: 42:97:56:5e:a1:e2:19:2e:f4:b7:4f:3a:5d:ea:c2: 47:91:2e:19:ef:58:e8:82:61:5f:d5:07:ba:16:f5: 9d:b1:60:a0:91:72:48:65:d2:07:f3:41:d4:ef:31: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:C6:DA:73:C4:5F:93:07:A8:AC:41:C6:2D:47:A5:7B:7B:5D:41 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/B7PG2nPEX5MHqKxBxi1HpXt7XUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.113.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:12:a9:82:96:7d:a5:04:51:c5:37:d4:7f:5b:69:6f:ad:8b: 53:5a:a1:f9:ee:fb:0c:a8:91:a2:ce:bb:42:7d:81:c1:41:1e: 95:8e:55:18:69:f3:ab:24:bd:d2:9f:49:43:95:81:9c:37:78: a2:2f:9b:63:75:cd:eb:af:3b:9a:6f:99:76:6f:f3:68:06:3a: d5:6e:64:37:f5:66:76:28:a3:58:32:90:b1:27:d0:df:41:ea: 9b:0a:89:cf:66:d1:d0:56:75:fc:ff:33:fb:64:bf:d5:88:42: 2a:dd:80:9f:1a:e9:ec:19:71:9d:ed:e8:a5:51:2e:00:ac:6a: bf:7d:ae:d4:52:e1:d9:ca:51:06:ee:4b:be:df:ed:db:19:96: 14:77:d2:a4:9e:74:27:af:77:b0:12:cd:c1:65:c1:4f:4e:9e: bd:32:f6:3c:98:9b:ed:00:54:69:7d:11:5b:09:0d:55:5d:30: 23:34:5a:01:41:97:5e:7a:75:e8:e6:c6:9b:19:a6:b7:71:b9: cd:02:f9:08:59:b0:4d:50:2a:f9:cb:d1:cf:04:83:88:21:79: 2b:44:98:03:fd:e2:a8:66:01:20:32:e6:61:11:f6:04:18:f6: 4a:6e:76:b8:d5:a7:6f:b6:d8:3f:5a:c9:92:ae:28:f0:8b:0b: ab:5f:ef:87 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA3QjNDNkRBNzNDNDVG OTMwN0E4QUM0MUM2MkQ0N0E1N0I3QjVENDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5DegzyQNrbvghPor9jrv2Cey7nr0dtMyklcGdmpZLXoNjI9ah ajQfwx3oC8oHhvwaFIJuMPDHlo/WWp/8AXkSSmEJTyDc1R0kWOMWBysAvJPux+kB fLM/5NDJQOeFpqlr1ft2ir4gJnGWHOftkuuuOLWIPjcd9MCC1bxOFqbXGyHoMfJC TusGyEoo7vimGNU0hfQvlU/Azm6JAb4TdeucTQRfyRTz42AnR3wsHAqL/4ludVVT 64l0d3atpriv223jBcy7UayYISkQ0teDLhUJqkKXVl6h4hku9LdPOl3qwkeRLhnv WOiCYV/VB7oW9Z2xYKCRckhl0gfzQdTvMXsLAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUB7PG2nPEX5MHqKxBxi1HpXt7XUEwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9CN1BHMm5QRVg1TUhxS3hCeGkx SHBYdDdYVUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeHEw DQYJKoZIhvcNAQELBQADggEBAGUSqYKWfaUEUcU31H9baW+ti1Naofnu+wyokaLO u0J9gcFBHpWOVRhp86skvdKfSUOVgZw3eKIvm2N1zeuvO5pvmXZv82gGOtVuZDf1 ZnYoo1gykLEn0N9B6psKic9m0dBWdfz/M/tkv9WIQirdgJ8a6ewZcZ3t6KVRLgCs ar99rtRS4dnKUQbuS77f7dsZlhR30qSedCevd7ASzcFlwU9Onr0y9jyYm+0AVGl9 EVsJDVVdMCM0WgFBl156dejmxpsZprdxuc0C+QhZsE1QKvnL0c8Eg4gheStEmAP9 4qhmASAy5mER9gQY9kpudrjVp2+22D9ayZKuKPCLC6tf74c= -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:19 2025 by rpki-client