$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/WKJ9tkBxgE38i1wvwAHmmFHZnnQ.roa File: WKJ9tkBxgE38i1wvwAHmmFHZnnQ.roa (raw, json) Hash identifier: 0hFgDv5vmnXi2dzD7RqlO2RQbSJ9ZmXnsQe1tz1JbeY= Subject key identifier: 58:A2:7D:B6:40:71:80:4D:FC:8B:5C:2F:C0:01:E6:98:51:D9:9E:74 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1087 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WKJ9tkBxgE38i1wvwAHmmFHZnnQ.roa Signing time: Fri 22 Aug 2025 08:55:34 +0000 ROA not before: Fri 22 Aug 2025 08:55:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 203.68.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4231 (0x1087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=58A27DB64071804DFC8B5C2FC001E69851D99E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:a4:ab:ab:10:89:54:16:41:ce:9a:b4:69: 5b:cb:69:3d:9f:a0:21:79:eb:89:72:59:fe:88:b7: 61:5e:96:7c:d0:18:6b:c9:37:97:32:fd:1d:e5:2a: 78:87:58:0a:48:93:50:b5:46:b0:65:85:ed:58:23: 46:9e:d7:26:83:57:94:40:a3:7b:51:2c:0e:b5:16: fb:c5:d4:ac:1b:1f:08:4c:98:51:25:86:f0:a6:48: 19:c8:0c:e6:51:4d:2c:57:43:e1:26:47:65:84:3e: e1:01:1b:0b:da:80:b0:14:fc:7d:f6:1c:e9:cf:5a: f1:47:77:a0:f9:cd:cf:13:b5:78:6f:f7:c2:2c:7f: 1c:94:f6:15:43:30:c2:e6:cb:98:30:0a:02:98:fb: 19:ef:ff:41:d3:c3:16:85:33:a3:0b:99:4d:59:11: 91:ac:7d:83:68:f2:8a:7d:67:44:31:65:e8:8c:27: e5:7b:37:7e:c8:26:f8:dd:f1:14:c6:ed:96:9f:29: a2:21:df:3f:97:e3:15:e1:13:91:4e:3f:d9:4b:2f: 6a:60:9d:91:ca:f5:1c:d8:6a:02:b5:4b:94:4c:96: f8:9b:26:df:07:d6:d5:da:bb:94:bc:91:06:30:7f: a8:fd:14:f4:02:61:c0:4d:71:bd:3f:4e:e9:24:91: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A2:7D:B6:40:71:80:4D:FC:8B:5C:2F:C0:01:E6:98:51:D9:9E:74 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WKJ9tkBxgE38i1wvwAHmmFHZnnQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.68.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:ee:ca:11:6b:60:48:f0:46:df:d5:15:76:6b:88:86:b4:ba: 0c:67:14:37:9c:a2:e1:7b:8a:69:22:f9:a9:24:7f:dc:07:fb: 4b:1a:a5:ed:51:ab:55:b6:d1:64:91:59:52:07:4f:7b:ae:71: 80:6f:f7:56:29:d7:fa:8b:46:ea:c8:ad:36:d2:6b:2a:40:53: f3:24:cf:97:9a:b6:47:bc:6a:eb:6d:15:bc:c9:d6:0a:cc:24: e1:4f:04:a1:df:0c:68:ab:38:85:9b:24:f6:05:57:92:5d:51: ff:f1:a5:67:72:a6:5e:24:c5:d6:a9:e5:e9:cc:30:51:59:93: 67:90:8c:09:d3:e9:98:e5:3e:f5:94:61:97:d8:36:5e:99:a2: 66:52:78:a3:2d:e6:47:f7:72:c9:41:8b:3b:f5:a7:f4:03:56: a7:23:6a:5c:ab:36:fd:dd:f4:aa:f8:c2:7a:78:be:a8:5f:7d: 0a:b3:4a:fa:e3:d5:be:b1:ef:e6:bd:a4:4e:a2:f8:a6:33:39: 51:f2:f0:99:36:ed:af:12:0b:8a:97:79:17:13:6b:0c:c5:25: 4b:13:26:0a:45:2c:ae:c9:a0:a2:2d:28:09:f3:bc:0a:08:8b: 7a:80:69:db:66:9f:28:a1:8c:3d:81:3f:af:e3:5a:cf:eb:70: 55:29:8a:c1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4QTI3REI2NDA3MTgw NERGQzhCNUMyRkMwMDFFNjk4NTFEOTlFNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx7qSrqxCJVBZBzpq0aVvLaT2foCF564lyWf6It2FelnzQGGvJ N5cy/R3lKniHWApIk1C1RrBlhe1YI0ae1yaDV5RAo3tRLA61FvvF1KwbHwhMmFEl hvCmSBnIDOZRTSxXQ+EmR2WEPuEBGwvagLAU/H32HOnPWvFHd6D5zc8TtXhv98Is fxyU9hVDMMLmy5gwCgKY+xnv/0HTwxaFM6MLmU1ZEZGsfYNo8op9Z0QxZeiMJ+V7 N37IJvjd8RTG7ZafKaIh3z+X4xXhE5FOP9lLL2pgnZHK9RzYagK1S5RMlvibJt8H 1tXau5S8kQYwf6j9FPQCYcBNcb0/TukkkT97AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUWKJ9tkBxgE38i1wvwAHmmFHZnnQwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9XS0o5dGtCeGdFMzhpMXd2d0FI bW1GSFpublEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0Qw DQYJKoZIhvcNAQELBQADggEBAGDuyhFrYEjwRt/VFXZriIa0ugxnFDecouF7imki +akkf9wH+0sape1Rq1W20WSRWVIHT3uucYBv91Yp1/qLRurIrTbSaypAU/Mkz5ea tke8auttFbzJ1grMJOFPBKHfDGirOIWbJPYFV5JdUf/xpWdypl4kxdap5enMMFFZ k2eQjAnT6ZjlPvWUYZfYNl6ZomZSeKMt5kf3cslBizv1p/QDVqcjalyrNv3d9Kr4 wnp4vqhffQqzSvrj1b6x7+a9pE6i+KYzOVHy8Jk27a8SC4qXeRcTawzFJUsTJgpF LK7JoKItKAnzvAoIi3qAadtmnyihjD2BP6/jWs/rcFUpisE= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:18 2025 by rpki-client