$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/G1A53IcjA4h3ALkwTKNj7y49MsQ.roa File: G1A53IcjA4h3ALkwTKNj7y49MsQ.roa (raw, json) Hash identifier: PstHa8drSDvmRBNIM7qaKd+iWEsp3+4H4ddmQdQtStE= Subject key identifier: 1B:50:39:DC:87:23:03:88:77:00:B9:30:4C:A3:63:EF:2E:3D:32:C4 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FEA Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/G1A53IcjA4h3ALkwTKNj7y49MsQ.roa Signing time: Fri 22 Aug 2025 08:55:44 +0000 ROA not before: Fri 22 Aug 2025 08:55:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17712 IP address blocks: 140.123.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4074 (0xfea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1B5039DC872303887700B9304CA363EF2E3D32C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:af:d7:e1:60:c9:49:f1:a5:a2:15:58:8e: 46:86:b9:a4:db:34:45:62:12:bd:94:59:83:89:15: c1:5b:73:d0:d5:20:3c:10:cc:85:9f:aa:3e:fa:22: cb:d0:3e:38:18:da:91:48:12:a6:50:14:31:aa:2c: 85:a2:cb:b0:c4:46:70:3c:be:ed:57:46:49:03:5b: 7d:18:8c:c9:aa:84:7b:6c:18:bb:54:73:86:1e:d1: c1:7c:12:9a:08:03:ff:9f:0e:64:8f:66:d7:f9:ad: c3:82:1b:28:a6:de:21:3e:b6:47:a2:ef:49:ef:bd: 4d:9e:55:87:2e:e5:72:f9:4f:67:33:1e:a8:5b:54: cc:11:19:10:bf:ff:4f:d2:ea:3e:77:d1:9d:45:75: ec:1b:fa:06:be:a3:9f:b0:40:0f:77:be:57:cd:fc: 1b:91:06:a8:62:ae:82:db:2a:cd:9a:5c:38:47:84: d7:c1:04:a1:ee:8b:12:01:98:9c:11:7f:f5:e7:d6: 3d:2a:3e:09:f6:4e:c8:b2:47:93:d4:a2:74:a1:3c: cf:f5:7c:0b:7f:92:82:e8:66:cf:bd:a0:88:77:06: 55:9e:4b:4b:99:db:f1:57:ad:2c:4f:a2:4d:94:9e: 23:43:af:a8:9a:79:77:97:4c:d5:d8:67:22:15:36: 50:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:50:39:DC:87:23:03:88:77:00:B9:30:4C:A3:63:EF:2E:3D:32:C4 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/G1A53IcjA4h3ALkwTKNj7y49MsQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.123.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:e2:b3:0d:dd:ec:1a:c5:b0:da:cc:b8:fa:7c:3a:7b:71:68: 3e:90:0d:b4:72:97:f0:fa:0d:ae:f4:6d:6e:f0:04:d9:66:55: b1:13:8d:1d:c6:b5:0d:3b:54:c5:c8:47:75:b4:8a:83:db:4d: b7:e4:8e:37:d0:d3:ae:fa:bb:af:0b:8a:7d:79:ca:89:06:93: 61:5b:23:f7:3b:a1:21:c3:de:b3:b4:3a:2c:95:75:31:52:57: 7d:15:bc:85:65:b1:c5:bf:44:2f:b2:db:34:c9:19:f2:2b:7a: 74:60:f2:2d:21:6d:e0:03:e6:ed:46:04:3f:cf:2d:ed:ff:93: e5:9b:c8:b2:b4:65:c0:b1:45:b1:dc:e5:1b:ee:d5:9c:26:b0: a5:98:70:b9:07:a1:39:d3:69:d7:2c:a6:d7:f5:e8:80:de:20: 2a:c0:b3:95:16:ad:4d:c7:6b:aa:95:fc:8e:ec:2b:e2:df:7d: 1c:e0:70:2d:bc:3d:65:42:13:a6:3e:6d:df:87:93:40:2d:a2: c5:24:9c:1d:b5:15:4c:91:a3:b4:9a:37:dc:09:da:d3:d4:04: d3:18:5e:7c:f5:81:33:c6:b6:86:3d:88:70:49:e9:7e:de:5f: eb:72:1a:08:6e:64:e8:4a:57:cc:3b:7c:0e:a1:1e:a7:f8:ca: 4e:c0:03:c4 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD+owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFCNTAzOURDODcyMzAz ODg3NzAwQjkzMDRDQTM2M0VGMkUzRDMyQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgQK/X4WDJSfGlohVYjkaGuaTbNEViEr2UWYOJFcFbc9DVIDwQ zIWfqj76IsvQPjgY2pFIEqZQFDGqLIWiy7DERnA8vu1XRkkDW30YjMmqhHtsGLtU c4Ye0cF8EpoIA/+fDmSPZtf5rcOCGyim3iE+tkei70nvvU2eVYcu5XL5T2czHqhb VMwRGRC//0/S6j530Z1Fdewb+ga+o5+wQA93vlfN/BuRBqhiroLbKs2aXDhHhNfB BKHuixIBmJwRf/Xn1j0qPgn2TsiyR5PUonShPM/1fAt/koLoZs+9oIh3BlWeS0uZ 2/FXrSxPok2UniNDr6iaeXeXTNXYZyIVNlCLAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUG1A53IcjA4h3ALkwTKNj7y49MsQwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9HMUE1M0ljakE0aDNBTGt3VEtO ajd5NDlNc1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjHsw DQYJKoZIhvcNAQELBQADggEBAA3isw3d7BrFsNrMuPp8OntxaD6QDbRyl/D6Da70 bW7wBNlmVbETjR3GtQ07VMXIR3W0ioPbTbfkjjfQ0676u68Lin15yokGk2FbI/c7 oSHD3rO0OiyVdTFSV30VvIVlscW/RC+y2zTJGfIrenRg8i0hbeAD5u1GBD/PLe3/ k+WbyLK0ZcCxRbHc5Rvu1ZwmsKWYcLkHoTnTadcsptf16IDeICrAs5UWrU3Ha6qV /I7sK+LffRzgcC28PWVCE6Y+bd+Hk0AtosUknB21FUyRo7SaN9wJ2tPUBNMYXnz1 gTPGtoY9iHBJ6X7eX+tyGghuZOhKV8w7fA6hHqf4yk7AA8Q= -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:18 2025 by rpki-client