$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/a_2YjzwzMKrJSxHOuqvqTl_ZHZ8.roa File: a_2YjzwzMKrJSxHOuqvqTl_ZHZ8.roa (raw, json) Hash identifier: siDZyijVWW04qYXlz1B0ZejhJRSDshfSYJCU8YmhJGM= Subject key identifier: 6B:FD:98:8F:3C:33:30:AA:C9:4B:11:CE:BA:AB:EA:4E:5F:D9:1D:9F Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FE7 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/a_2YjzwzMKrJSxHOuqvqTl_ZHZ8.roa Signing time: Fri 22 Aug 2025 08:55:44 +0000 ROA not before: Fri 22 Aug 2025 08:55:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9916 IP address blocks: 140.126.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4071 (0xfe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6BFD988F3C3330AAC94B11CEBAABEA4E5FD91D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:d6:29:82:6e:e7:6d:ad:0c:e5:34:15:16: 57:b8:15:bd:2a:a0:37:1b:4f:50:fa:02:d2:6b:6f: b7:ae:79:c0:30:12:de:ae:06:89:e1:89:5a:1a:79: e1:25:5d:c9:04:09:1f:4a:bc:8e:94:61:eb:90:2a: f1:57:14:05:fe:f2:8b:de:b4:01:7e:2c:84:f6:09: ad:f7:77:a6:ff:b6:2e:81:ea:18:e8:3b:30:1b:4a: 5a:2a:2a:da:15:25:79:1d:44:10:e5:04:99:5c:d5: 07:bf:a0:a0:af:bf:3d:50:10:f1:a6:82:85:43:ba: 7c:dd:0c:62:60:de:af:ac:57:47:f0:09:f0:eb:e3: bf:cc:a6:c2:19:eb:eb:9c:ca:9e:28:4c:cd:c5:af: 74:50:2d:cc:e8:43:a6:77:ce:de:3e:45:b4:75:ce: f4:b7:ec:fe:06:45:4e:ea:53:2e:e6:1d:9c:85:fb: 59:9b:57:7f:85:83:e8:32:f6:06:74:79:9d:f3:b6: 05:35:89:15:ea:2d:03:d4:70:eb:bf:97:71:6b:1b: a3:01:08:e1:7c:60:b6:ad:d3:e3:c0:35:c9:33:02: c2:7b:60:b9:15:e5:5a:86:bd:76:b8:40:c5:11:96: 02:7d:95:e9:f8:6a:e4:a6:73:3b:57:d3:0e:ae:17: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FD:98:8F:3C:33:30:AA:C9:4B:11:CE:BA:AB:EA:4E:5F:D9:1D:9F X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/a_2YjzwzMKrJSxHOuqvqTl_ZHZ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:a8:80:40:be:b5:19:70:e9:96:0c:f1:7c:82:80:67:e5:3a: eb:f1:ed:d3:84:07:86:dd:5f:a2:c5:d1:6c:d6:74:1a:71:f5: 1e:40:32:d4:06:33:0b:c4:9f:95:82:07:4b:a0:0f:f4:a3:8b: 17:e4:ff:7e:7d:fc:04:66:0a:16:65:29:ce:3d:87:de:b9:62: 5e:56:58:b7:39:dd:2f:e6:12:05:f8:e6:25:db:79:3e:e1:f7: 85:a8:60:d9:ee:59:bd:c5:54:3a:b9:c7:2e:d5:39:06:c2:41: 52:6e:8e:15:93:f4:f6:c9:08:a3:83:33:d5:3d:50:f5:4a:35: 42:29:87:9d:df:00:35:1d:7b:5e:14:06:d0:4c:77:2a:f9:83: b0:5d:dd:30:fd:01:34:15:9d:eb:c0:66:8c:be:25:57:18:d2: e3:f3:06:b5:72:55:01:68:8e:c7:d9:e1:65:5b:ba:67:e0:49: 26:82:7e:f0:aa:8d:ed:0f:e9:37:14:10:e0:2f:ed:25:0a:ff: 32:2e:c8:38:d5:94:7f:ad:93:d4:5b:2a:25:42:76:0d:2b:c9: b6:d2:68:f4:60:6f:de:e4:cb:35:6b:77:4f:63:ba:15:5a:78: 8b:c8:f0:0b:ca:cb:3b:b3:e3:57:cd:4f:40:ff:7f:44:68:a1: 8d:0c:d5:d6 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZCRkQ5ODhGM0MzMzMw QUFDOTRCMTFDRUJBQUJFQTRFNUZEOTFEOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0CtYpgm7nba0M5TQVFle4Fb0qoDcbT1D6AtJrb7euecAwEt6u BonhiVoaeeElXckECR9KvI6UYeuQKvFXFAX+8ovetAF+LIT2Ca33d6b/ti6B6hjo OzAbSloqKtoVJXkdRBDlBJlc1Qe/oKCvvz1QEPGmgoVDunzdDGJg3q+sV0fwCfDr 47/MpsIZ6+ucyp4oTM3Fr3RQLczoQ6Z3zt4+RbR1zvS37P4GRU7qUy7mHZyF+1mb V3+Fg+gy9gZ0eZ3ztgU1iRXqLQPUcOu/l3FrG6MBCOF8YLat0+PANckzAsJ7YLkV 5VqGvXa4QMURlgJ9len4auSmcztX0w6uF+oBAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUa/2YjzwzMKrJSxHOuqvqTl/ZHZ8wHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9hXzJZanp3ek1LckpTeEhPdXF2 cVRsX1pIWjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjH4w DQYJKoZIhvcNAQELBQADggEBAECogEC+tRlw6ZYM8XyCgGflOuvx7dOEB4bdX6LF 0WzWdBpx9R5AMtQGMwvEn5WCB0ugD/Sjixfk/359/ARmChZlKc49h965Yl5WWLc5 3S/mEgX45iXbeT7h94WoYNnuWb3FVDq5xy7VOQbCQVJujhWT9PbJCKODM9U9UPVK NUIph53fADUde14UBtBMdyr5g7Bd3TD9ATQVnevAZoy+JVcY0uPzBrVyVQFojsfZ 4WVbumfgSSaCfvCqje0P6TcUEOAv7SUK/zIuyDjVlH+tk9RbKiVCdg0rybbSaPRg b97kyzVrd09juhVaeIvI8AvKyzuz41fNT0D/f0RooY0M1dY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:57 2025 by rpki-client