$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/YO3ys3h2xKTdQQjp3BHJjidNa7g.roa File: YO3ys3h2xKTdQQjp3BHJjidNa7g.roa (raw, json) Hash identifier: oSN4zSqPGf17rFABztyQsKuA/j+2CI1GXaTYVF/1h+Y= Subject key identifier: 60:ED:F2:B3:78:76:C4:A4:DD:41:08:E9:DC:11:C9:8E:27:4D:6B:B8 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1076 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/YO3ys3h2xKTdQQjp3BHJjidNa7g.roa Signing time: Fri 22 Aug 2025 08:55:30 +0000 ROA not before: Fri 22 Aug 2025 08:55:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18177 IP address blocks: 120.116.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4214 (0x1076) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=60EDF2B37876C4A4DD4108E9DC11C98E274D6BB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:57:fd:38:32:4a:1d:61:68:bb:f0:8f:0a: 33:66:15:05:89:35:a6:03:eb:83:db:89:72:0c:d4: 35:29:7e:37:7c:c3:38:d1:d9:d5:6f:61:97:3d:fc: fc:dd:75:ea:4d:2e:5b:62:b3:87:5c:6d:cf:3b:be: 28:b7:90:90:ad:b4:42:b4:96:e8:7b:8a:dc:38:bb: ed:c6:84:99:e4:84:16:a1:7d:90:d6:9e:8c:01:a7: 2d:c0:cf:da:ad:bb:44:bf:4b:28:39:5e:50:82:0f: 79:45:78:a7:92:9e:87:09:26:0d:ee:48:01:8d:ed: da:6c:a0:bb:15:86:8f:97:de:b6:22:55:a2:2b:c8: 78:68:14:5b:49:55:93:cb:5b:ec:b0:68:33:a2:2e: 45:d3:f1:bc:3e:62:a2:c3:18:b7:5a:b3:b5:42:8d: 97:85:33:be:9f:29:36:11:b7:13:2b:8d:89:c7:a8: a3:af:e1:44:3b:f4:ca:f0:25:6c:e3:d5:a7:95:0f: 86:04:59:5e:bd:39:d4:3f:c4:92:bf:ca:29:91:29: 18:77:8e:d5:48:29:56:c7:a0:75:80:48:36:b7:3f: b4:66:d2:96:02:f0:b6:22:6c:47:72:75:6d:df:c0: 8d:4d:d0:cc:8b:05:2f:ba:83:6e:0e:c5:c1:a4:79: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:ED:F2:B3:78:76:C4:A4:DD:41:08:E9:DC:11:C9:8E:27:4D:6B:B8 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/YO3ys3h2xKTdQQjp3BHJjidNa7g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.116.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:37:3d:4a:03:ff:50:cc:86:98:46:1b:07:4c:d9:c5:fe:52: eb:4e:5d:70:a5:6a:08:a6:ef:ed:69:18:8b:c4:41:04:d3:55: da:18:76:89:6f:43:05:5b:2b:f3:e4:7e:d3:42:33:2b:19:3f: 30:34:2c:3a:84:8f:05:de:0d:9f:bc:61:87:6c:3f:dd:84:57: c8:81:3d:9b:55:d5:5e:54:11:45:25:8a:91:7c:2c:b2:25:ce: 4f:4a:14:36:3c:b0:72:89:df:02:13:ac:83:56:cc:8f:4e:f0: 25:21:58:b3:98:20:2d:89:f6:62:01:cb:3a:d4:10:c9:21:2b: ed:5c:a9:e9:c2:70:93:03:27:6e:0f:5c:9a:5a:91:4d:2e:1e: 58:f7:78:37:c6:d9:88:6d:c8:e6:08:94:9f:81:9c:36:13:27: f8:af:9f:a8:69:d4:d9:59:d2:a9:3d:90:b3:48:d0:23:4c:58: 79:62:25:2c:a7:59:6b:ad:9a:7e:9b:2b:1d:0b:4f:4a:08:e6: 75:89:42:8c:9c:ef:0b:0c:4d:b7:f2:d6:e7:dc:96:01:6f:20: bf:a6:e5:72:03:10:53:69:f2:43:db:f4:00:ee:d6:5d:01:53: 56:d3:05:80:0e:08:d9:7c:e7:c5:b3:46:3c:6b:74:10:8b:58: b8:cc:44:14 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYwRURGMkIzNzg3NkM0 QTRERDQxMDhFOURDMTFDOThFMjc0RDZCQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5A1f9ODJKHWFou/CPCjNmFQWJNaYD64PbiXIM1DUpfjd8wzjR 2dVvYZc9/PzddepNLltis4dcbc87vii3kJCttEK0luh7itw4u+3GhJnkhBahfZDW nowBpy3Az9qtu0S/Syg5XlCCD3lFeKeSnocJJg3uSAGN7dpsoLsVho+X3rYiVaIr yHhoFFtJVZPLW+ywaDOiLkXT8bw+YqLDGLdas7VCjZeFM76fKTYRtxMrjYnHqKOv 4UQ79MrwJWzj1aeVD4YEWV69OdQ/xJK/yimRKRh3jtVIKVbHoHWASDa3P7Rm0pYC 8LYibEdydW3fwI1N0MyLBS+6g24OxcGkeXjLAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUYO3ys3h2xKTdQQjp3BHJjidNa7gwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9ZTzN5czNoMnhLVGRRUWpwM0JI SmppZE5hN2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeHQw DQYJKoZIhvcNAQELBQADggEBAHQ3PUoD/1DMhphGGwdM2cX+UutOXXClagim7+1p GIvEQQTTVdoYdolvQwVbK/PkftNCMysZPzA0LDqEjwXeDZ+8YYdsP92EV8iBPZtV 1V5UEUUlipF8LLIlzk9KFDY8sHKJ3wITrINWzI9O8CUhWLOYIC2J9mIByzrUEMkh K+1cqenCcJMDJ24PXJpakU0uHlj3eDfG2YhtyOYIlJ+BnDYTJ/ivn6hp1NlZ0qk9 kLNI0CNMWHliJSynWWutmn6bKx0LT0oI5nWJQoyc7wsMTbfy1ufclgFvIL+m5XID EFNp8kPb9ADu1l0BU1bTBYAOCNl858WzRjxrdBCLWLjMRBQ= -----END CERTIFICATE-----Generated at Sun Aug 24 13:38:06 2025 by rpki-client