$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/R9DB_EtrVob8Sp37bbT64A14cwo.roa File: R9DB_EtrVob8Sp37bbT64A14cwo.roa (raw, json) Hash identifier: 9/r0xVg4bMPe7jFwApgwTroVfVrAit+O0mVU4gvpcgk= Subject key identifier: 47:D0:C1:FC:4B:6B:56:86:FC:4A:9D:FB:6D:B4:FA:E0:0D:78:73:0A Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1097 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/R9DB_EtrVob8Sp37bbT64A14cwo.roa Signing time: Fri 22 Aug 2025 08:55:38 +0000 ROA not before: Fri 22 Aug 2025 08:55:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9916 IP address blocks: 120.126.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4247 (0x1097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=47D0C1FC4B6B5686FC4A9DFB6DB4FAE00D78730A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:e9:87:4f:1d:a9:d8:78:f8:e5:96:e7:46: 1d:8f:b1:a3:a7:0b:49:10:e0:36:08:5b:73:ff:bf: 53:05:6c:23:80:36:c5:9b:f4:8d:8d:46:0a:3b:83: 03:8f:96:97:99:2f:ed:ea:54:d4:c6:46:fa:a7:10: 03:39:6f:b5:93:7f:a3:30:b9:25:67:f9:2c:45:a0: 32:76:24:04:48:88:c5:b6:9b:16:2c:26:84:2d:fa: 85:38:2a:8b:f9:21:22:0e:37:e6:93:e9:61:c8:08: 5e:ff:e0:e2:a2:55:b0:56:98:9e:44:81:cc:aa:99: e2:21:2c:07:c2:a6:37:c8:5f:57:25:0d:30:73:15: 2b:ba:36:a6:de:e7:42:67:85:85:73:da:23:10:fa: 80:05:e0:b6:1f:45:62:20:59:1b:29:7e:67:5b:c8: ee:37:42:ec:05:b3:db:53:6a:4f:f6:8c:a1:00:ce: 5a:39:f0:a7:99:eb:72:c6:65:f0:09:5a:32:2b:bf: f7:f7:40:df:5f:e3:b3:2e:23:34:ec:1a:90:aa:1d: bd:9e:34:0a:1b:7a:97:b4:b1:04:cb:83:c6:1c:4a: 1d:60:9b:f3:21:b5:48:86:2f:bd:b9:d7:f1:67:10: 2a:17:38:1b:9e:0f:5f:5d:a7:db:b3:01:9f:00:9e: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D0:C1:FC:4B:6B:56:86:FC:4A:9D:FB:6D:B4:FA:E0:0D:78:73:0A X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/R9DB_EtrVob8Sp37bbT64A14cwo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.126.32.0/19 Signature Algorithm: sha256WithRSAEncryption a3:06:5d:ee:04:a9:45:78:88:05:ba:83:45:31:4d:4a:93:ba: 41:d6:bc:8c:2e:ae:c8:df:c6:ce:79:c6:a0:c8:24:bd:24:48: 34:e9:f1:ca:b2:ce:64:40:c1:2f:a9:b0:62:48:35:34:06:f3: f5:3f:e8:78:81:2d:8f:09:89:aa:4b:5a:bc:f1:66:5f:c2:4a: 84:8c:f0:d3:a3:37:2b:e6:fb:98:55:88:bd:64:b8:29:84:d1: a2:cc:63:65:22:75:a7:f1:64:46:1c:a1:d7:82:1f:a8:e5:53: a0:df:a6:d0:3f:b6:e6:a7:22:3b:c3:0a:ae:6c:1a:bb:66:0e: f6:80:e1:1d:ec:54:1a:47:ad:a6:bd:60:45:4c:cd:fc:57:14: fc:32:a1:15:da:a0:13:c4:45:47:38:7b:60:ee:7b:ce:ca:19: 83:c7:3e:b3:5a:fd:c4:e5:f6:3e:27:0e:eb:7b:2b:e0:87:17: 2e:f7:e7:7c:a1:a6:16:3c:e0:d1:05:1e:4e:a0:1c:b7:eb:1b: 85:b2:b8:15:e5:23:4e:7e:18:1e:6d:2c:81:66:f2:01:45:21: a3:93:58:ab:c4:dd:fa:ba:f7:73:87:fc:0f:3d:d3:d7:cf:09: 7b:24:ac:5b:c2:7c:4d:55:f8:8e:89:07:de:5f:21:fc:44:d6: c7:27:84:ef -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ3RDBDMUZDNEI2QjU2 ODZGQzRBOURGQjZEQjRGQUUwMEQ3ODczMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhqemHTx2p2Hj45ZbnRh2PsaOnC0kQ4DYIW3P/v1MFbCOANsWb 9I2NRgo7gwOPlpeZL+3qVNTGRvqnEAM5b7WTf6MwuSVn+SxFoDJ2JARIiMW2mxYs JoQt+oU4Kov5ISION+aT6WHICF7/4OKiVbBWmJ5EgcyqmeIhLAfCpjfIX1clDTBz FSu6Nqbe50JnhYVz2iMQ+oAF4LYfRWIgWRspfmdbyO43QuwFs9tTak/2jKEAzlo5 8KeZ63LGZfAJWjIrv/f3QN9f47MuIzTsGpCqHb2eNAobepe0sQTLg8YcSh1gm/Mh tUiGL7251/FnECoXOBueD19dp9uzAZ8Anp27AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUR9DB/EtrVob8Sp37bbT64A14cwowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9SOURCX0V0clZvYjhTcDM3YmJU NjRBMTRjd28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeH4g MA0GCSqGSIb3DQEBCwUAA4IBAQCjBl3uBKlFeIgFuoNFMU1Kk7pB1ryMLq7I38bO ecagyCS9JEg06fHKss5kQMEvqbBiSDU0BvP1P+h4gS2PCYmqS1q88WZfwkqEjPDT ozcr5vuYVYi9ZLgphNGizGNlInWn8WRGHKHXgh+o5VOg36bQP7bmpyI7wwqubBq7 Zg72gOEd7FQaR62mvWBFTM38VxT8MqEV2qATxEVHOHtg7nvOyhmDxz6zWv3E5fY+ Jw7reyvghxcu9+d8oaYWPODRBR5OoBy36xuFsrgV5SNOfhgebSyBZvIBRSGjk1ir xN36uvdzh/wPPdPXzwl7JKxbwnxNVfiOiQfeXyH8RNbHJ4Tv -----END CERTIFICATE-----Generated at Sun Aug 24 13:36:49 2025 by rpki-client