$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/XdIarowpjqqua7Sl_ICgGawR9oo.roa File: XdIarowpjqqua7Sl_ICgGawR9oo.roa (raw, json) Hash identifier: 6OQNn/uVugVv06u8vDTMDq1ZVPiisvMC2//+50uc/RM= Subject key identifier: 5D:D2:1A:AE:8C:29:8E:AA:AE:6B:B4:A5:FC:80:A0:19:AC:11:F6:8A Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1092 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XdIarowpjqqua7Sl_ICgGawR9oo.roa Signing time: Fri 22 Aug 2025 08:55:37 +0000 ROA not before: Fri 22 Aug 2025 08:55:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 163.30.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4242 (0x1092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5DD21AAE8C298EAAAE6BB4A5FC80A019AC11F68A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:bd:55:99:fa:51:f9:f2:32:b4:eb:61:b7: a7:cc:90:26:16:c5:bd:f5:65:d3:85:f0:40:16:3f: 56:28:4d:67:d0:8a:ce:0d:40:5e:89:89:ce:60:a4: 0a:e4:8f:fe:b3:cc:cc:bb:0d:99:f0:0d:e7:df:3e: 03:48:28:ca:ac:c9:37:3f:dc:2a:8f:16:45:a8:2c: 95:a6:84:f7:a3:79:bc:2d:79:75:5f:47:15:b0:07: 77:50:9f:fd:60:17:32:e4:b4:64:20:e1:d8:b7:46: b9:7d:3b:9c:57:63:b0:08:7b:ab:69:cb:e7:03:fe: 5c:a3:15:83:d0:58:14:89:6e:6d:ee:1e:79:d6:66: 1a:48:1a:b7:64:30:4b:f7:32:3e:ac:e1:9a:6a:d3: 76:0f:f1:5b:fc:c4:bb:86:ec:b6:ab:c9:e6:de:27: 4a:90:73:db:7c:05:f8:be:c1:9d:38:7a:18:d7:ab: 4c:a0:13:ea:4f:60:f9:78:9f:5a:da:e5:fb:98:f7: 86:03:52:b3:55:e4:0b:fc:2f:f4:e8:ea:ae:6d:d1: 99:ad:20:9b:1d:40:dc:96:37:29:33:01:bd:5c:f2: 2c:17:ae:53:49:62:c5:e8:62:a6:d0:ae:24:b1:26: 6e:93:65:da:50:a0:1c:a3:39:08:c6:1f:40:f9:85: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:1A:AE:8C:29:8E:AA:AE:6B:B4:A5:FC:80:A0:19:AC:11:F6:8A X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XdIarowpjqqua7Sl_ICgGawR9oo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.30.0.0/15 Signature Algorithm: sha256WithRSAEncryption 31:72:e6:33:3a:b9:54:bd:75:a2:b6:c2:c3:55:3c:d6:28:41: 51:88:fd:4e:da:90:e2:cd:6f:54:47:da:73:bd:c3:c7:ad:3b: 7d:18:23:8d:b1:e9:7f:8c:f2:24:8d:d6:9e:e3:3f:86:3c:c9: d8:dc:c8:f5:c7:38:67:91:62:44:ee:26:c6:a3:b4:79:73:71: cf:5f:cf:4e:26:15:bb:9f:ef:06:2c:1e:ff:a3:bc:3b:b2:a4: 70:c5:95:ad:2e:e7:f3:d8:4b:1f:6e:d7:c7:b2:b3:8a:a1:28: fa:9b:ee:b8:3c:a6:b1:9f:26:a2:31:ca:b2:7a:15:bb:3d:db: f8:3d:bf:2d:d2:75:1b:e8:4c:b1:84:20:87:87:e7:58:8b:06: d3:65:d2:18:20:fe:99:e0:56:1c:76:9c:1a:3b:66:0d:57:fd: d5:2d:2f:89:27:d5:d5:16:83:64:87:c1:28:93:2c:7c:88:ed: 15:6e:20:9c:50:28:c0:77:bf:d7:74:d2:1c:c9:c2:8c:c1:4e: de:c3:1a:f0:21:6d:b5:76:11:00:59:5e:eb:7d:95:88:eb:fa: 28:96:65:af:8b:5c:1f:97:c6:3c:74:66:9c:b9:28:65:2b:6e: 22:88:f4:12:ba:85:42:78:a3:fc:99:b0:c6:8d:35:7a:cf:25: 5f:51:87:92 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVERDIxQUFFOEMyOThF QUFBRTZCQjRBNUZDODBBMDE5QUMxMUY2OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDGb1VmfpR+fIytOtht6fMkCYWxb31ZdOF8EAWP1YoTWfQis4N QF6Jic5gpArkj/6zzMy7DZnwDeffPgNIKMqsyTc/3CqPFkWoLJWmhPejebwteXVf RxWwB3dQn/1gFzLktGQg4di3Rrl9O5xXY7AIe6tpy+cD/lyjFYPQWBSJbm3uHnnW ZhpIGrdkMEv3Mj6s4Zpq03YP8Vv8xLuG7LaryebeJ0qQc9t8Bfi+wZ04ehjXq0yg E+pPYPl4n1ra5fuY94YDUrNV5Av8L/To6q5t0ZmtIJsdQNyWNykzAb1c8iwXrlNJ YsXoYqbQriSxJm6TZdpQoByjOQjGH0D5heC1AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUXdIarowpjqqua7Sl/ICgGawR9oowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9YZElhcm93cGpxcXVhN1NsX0lD Z0dhd1I5b28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBox4w DQYJKoZIhvcNAQELBQADggEBADFy5jM6uVS9daK2wsNVPNYoQVGI/U7akOLNb1RH 2nO9w8etO30YI42x6X+M8iSN1p7jP4Y8ydjcyPXHOGeRYkTuJsajtHlzcc9fz04m Fbuf7wYsHv+jvDuypHDFla0u5/PYSx9u18eys4qhKPqb7rg8prGfJqIxyrJ6Fbs9 2/g9vy3SdRvoTLGEIIeH51iLBtNl0hgg/pngVhx2nBo7Zg1X/dUtL4kn1dUWg2SH wSiTLHyI7RVuIJxQKMB3v9d00hzJwozBTt7DGvAhbbV2EQBZXut9lYjr+iiWZa+L XB+Xxjx0Zpy5KGUrbiKI9BK6hUJ4o/yZsMaNNXrPJV9Rh5I= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:20 2025 by rpki-client