$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/aTdTjPf_59wvQZYB-T3KkCCxN_Q.roa File: aTdTjPf_59wvQZYB-T3KkCCxN_Q.roa (raw, json) Hash identifier: 5DH5BZihDE75wxu4trZy4q0J9qm6YFXvHuroyMgesmg= Subject key identifier: 69:37:53:8C:F7:FF:E7:DC:2F:41:96:01:F9:3D:CA:90:20:B1:37:F4 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1099 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/aTdTjPf_59wvQZYB-T3KkCCxN_Q.roa Signing time: Fri 22 Aug 2025 08:55:38 +0000 ROA not before: Fri 22 Aug 2025 08:55:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 210.67.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4249 (0x1099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6937538CF7FFE7DC2F419601F93DCA9020B137F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:c8:f5:02:cd:76:80:db:56:e3:25:b0:8e: 55:b8:55:5a:8b:97:d5:8e:db:0b:4f:09:ce:e5:81: 7d:69:4c:68:5d:50:21:3b:50:65:78:b4:6e:de:85: 0d:f4:00:0e:cc:b8:f6:76:72:c5:08:db:f2:a6:11: 9e:dc:28:29:d6:ce:05:e5:5c:2c:db:82:c2:01:e6: 1c:9d:d8:de:f0:28:84:b6:3b:b6:30:09:2e:86:a9: 95:96:5e:19:cf:43:d1:c8:7e:10:eb:18:11:bc:41: 1c:df:ae:d3:12:11:bd:b6:30:f5:8a:f4:07:73:42: 7d:0a:a5:c3:85:28:f7:bc:18:8c:ad:c9:31:88:06: 2b:8e:c3:0b:92:d0:d1:43:40:bb:79:ca:a0:55:a9: 8c:e1:27:d5:e9:25:f5:0d:e7:75:80:75:ce:6d:3e: 21:2c:17:80:55:f8:b6:6f:3c:dd:fd:89:00:14:d6: b4:b8:67:37:99:56:8d:31:02:4d:7d:89:87:19:f8: 96:62:7c:17:09:52:98:79:8b:98:24:c5:af:a3:95: 98:2d:88:e3:95:71:f0:a9:4c:3b:75:7d:c4:71:db: 6d:49:10:4d:98:73:a3:05:a2:e3:d1:45:48:19:bf: de:dc:d2:54:16:c5:00:05:f1:d8:9a:23:73:ad:82: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:53:8C:F7:FF:E7:DC:2F:41:96:01:F9:3D:CA:90:20:B1:37:F4 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/aTdTjPf_59wvQZYB-T3KkCCxN_Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.248.0/21 Signature Algorithm: sha256WithRSAEncryption 89:4a:e5:10:36:a4:e0:03:03:66:e6:d5:2a:b1:0d:2f:96:45: 2c:2e:d4:c9:64:01:a5:6b:cc:37:7e:ff:21:92:ab:93:9e:17: 51:6b:94:62:ae:69:e7:82:92:7a:8b:7f:5a:71:cf:17:32:17: ae:f7:4a:e1:34:f8:1a:83:54:95:5f:63:a7:68:4d:64:bf:22: 27:4f:21:6c:39:ee:dd:12:db:08:75:d4:13:64:e2:a0:8d:67: 50:a5:66:d2:f0:fa:05:aa:ad:2c:37:25:8b:fe:49:5b:66:cc: ee:77:09:da:6f:67:af:14:e9:dd:f3:42:5c:0f:f9:08:1b:71: 00:bb:64:9e:65:dd:5b:39:e0:80:7d:ce:3b:8e:10:c6:e3:96: 8a:80:f7:cd:b7:cf:50:00:a3:67:36:c8:93:86:60:07:18:bd: 57:01:2b:28:44:f0:f3:ee:19:15:de:fd:bc:e0:31:7d:27:7a: 6a:a6:21:b8:f4:ab:0b:0a:3a:cc:f1:f5:d0:6b:fd:08:ec:34: 44:f6:d5:cb:d5:a4:c1:1a:78:ca:6f:5c:9a:58:b2:15:5d:4c: 5f:79:2c:cb:1b:d7:a4:e7:c3:6c:b3:be:96:23:86:6c:cd:51: e0:cb:fc:f3:63:d2:df:37:b3:5b:43:eb:9b:91:85:20:90:1d: 49:3a:82:7c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5Mzc1MzhDRjdGRkU3 REMyRjQxOTYwMUY5M0RDQTkwMjBCMTM3RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClgcj1As12gNtW4yWwjlW4VVqLl9WO2wtPCc7lgX1pTGhdUCE7 UGV4tG7ehQ30AA7MuPZ2csUI2/KmEZ7cKCnWzgXlXCzbgsIB5hyd2N7wKIS2O7Yw CS6GqZWWXhnPQ9HIfhDrGBG8QRzfrtMSEb22MPWK9AdzQn0KpcOFKPe8GIytyTGI BiuOwwuS0NFDQLt5yqBVqYzhJ9XpJfUN53WAdc5tPiEsF4BV+LZvPN39iQAU1rS4 ZzeZVo0xAk19iYcZ+JZifBcJUph5i5gkxa+jlZgtiOOVcfCpTDt1fcRx221JEE2Y c6MFouPRRUgZv97c0lQWxQAF8diaI3OtgpXbAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUaTdTjPf/59wvQZYB+T3KkCCxN/QwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9hVGRUalBmXzU5d3ZRWllCLVQz S2tDQ3hOX1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0kP4 MA0GCSqGSIb3DQEBCwUAA4IBAQCJSuUQNqTgAwNm5tUqsQ0vlkUsLtTJZAGla8w3 fv8hkquTnhdRa5RirmnngpJ6i39acc8XMheu90rhNPgag1SVX2OnaE1kvyInTyFs Oe7dEtsIddQTZOKgjWdQpWbS8PoFqq0sNyWL/klbZszudwnab2evFOnd80JcD/kI G3EAu2SeZd1bOeCAfc47jhDG45aKgPfNt89QAKNnNsiThmAHGL1XASsoRPDz7hkV 3v284DF9J3pqpiG49KsLCjrM8fXQa/0I7DRE9tXL1aTBGnjKb1yaWLIVXUxfeSzL G9ek58Nss76WI4ZszVHgy/zzY9LfN7NbQ+ubkYUgkB1JOoJ8 -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:19 2025 by rpki-client