$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/e9ztbKn32n0ypGfjgeEb0Ry-LK0.roa File: e9ztbKn32n0ypGfjgeEb0Ry-LK0.roa (raw, json) Hash identifier: OR7ByThYT9j9dGf3uFwmStcD5zJsBhmGvc9Edog0E6c= Subject key identifier: 7B:DC:ED:6C:A9:F7:DA:7D:32:A4:67:E3:81:E1:1B:D1:1C:BE:2C:AD Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FF2 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/e9ztbKn32n0ypGfjgeEb0Ry-LK0.roa Signing time: Fri 22 Aug 2025 08:55:46 +0000 ROA not before: Fri 22 Aug 2025 08:55:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9916 IP address blocks: 140.129.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4082 (0xff2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7BDCED6CA9F7DA7D32A467E381E11BD11CBE2CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:93:f7:c8:1d:19:1c:a3:b9:63:fb:51:87: 07:15:19:b0:ca:c1:ab:dd:c8:2b:1d:0d:70:f2:06: cf:db:b4:51:e1:c7:6c:9b:7b:50:11:42:66:54:0e: 46:44:f2:2d:e2:bf:ce:96:6b:65:70:22:73:2f:6a: 0e:7a:da:93:39:1d:dd:06:0e:7d:1b:87:96:e8:83: d4:bf:01:da:b0:70:fe:48:70:39:69:34:ad:94:cd: 68:e5:19:e2:7f:05:ca:af:e3:a2:be:c0:02:c9:43: c7:f2:98:19:06:0e:dd:17:0f:55:52:5c:de:c9:05: 3d:e3:ac:33:57:06:0e:f5:0b:9d:0f:43:2b:d8:e0: 12:e1:8f:15:7c:26:b6:4a:e5:f8:d3:10:90:2b:bf: a5:6f:74:a7:10:77:65:d5:c6:2f:8a:56:d4:e0:98: 6d:d7:64:ef:24:17:83:a3:e5:db:72:de:25:17:27: ed:d8:f3:07:ba:11:a8:e0:b1:d5:2f:7d:5f:85:84: c4:bd:8b:98:10:a6:19:f1:97:51:e6:11:d2:22:d7: be:75:32:7f:2d:64:12:af:de:00:d3:db:fa:5e:75: 8d:b2:e0:14:c6:e7:9f:21:47:12:8e:44:9b:20:38: ae:38:4e:45:a6:62:fb:43:44:2b:41:a4:dd:e7:13: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DC:ED:6C:A9:F7:DA:7D:32:A4:67:E3:81:E1:1B:D1:1C:BE:2C:AD X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/e9ztbKn32n0ypGfjgeEb0Ry-LK0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.129.64.0/20 Signature Algorithm: sha256WithRSAEncryption 73:37:db:c4:76:73:e0:46:a4:6d:71:c4:d8:66:2f:e8:df:47: 63:60:34:85:b4:7b:8e:ae:71:4c:d9:00:db:08:b6:d6:46:22: c7:3b:50:eb:33:3a:2c:19:76:c2:2a:d4:8d:88:59:3f:d4:78: fb:c6:09:be:67:07:25:b1:6b:a4:38:b4:0c:ad:45:59:18:99: b6:e6:d3:f3:96:d6:db:7f:c7:e9:d3:f6:3b:4b:7c:2c:2a:00: 4c:ab:31:ef:50:75:67:07:c9:72:c5:2b:1f:0c:70:39:7f:59: 5e:1d:46:5c:1d:bc:8f:cc:cc:cb:71:8f:4f:02:47:72:0a:16: 7b:88:56:ab:ad:a3:53:71:ff:0b:a1:c9:e1:7d:29:bb:14:d4: 31:b5:c5:a8:f3:34:66:d7:06:63:bf:9c:74:e2:0c:88:bd:f7: ca:bd:88:87:6b:23:86:f0:b7:a3:95:66:c0:a1:60:80:ef:b1: 84:74:d4:0f:6e:1d:68:69:ae:1d:04:11:34:fc:2b:06:09:da: 5a:80:a5:9c:04:1e:5c:b4:5b:df:d8:3d:b6:b4:39:90:aa:37: 32:f6:b2:4e:10:c6:8b:90:a3:d9:46:86:81:4f:27:ca:48:9f: 0a:5a:82:80:ed:17:96:87:1a:b8:08:15:cb:f1:d4:fe:97:e8: 6a:21:de:71 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdCRENFRDZDQTlGN0RB N0QzMkE0NjdFMzgxRTExQkQxMUNCRTJDQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMHpP3yB0ZHKO5Y/tRhwcVGbDKwavdyCsdDXDyBs/btFHhx2yb e1ARQmZUDkZE8i3iv86Wa2VwInMvag562pM5Hd0GDn0bh5bog9S/AdqwcP5IcDlp NK2UzWjlGeJ/Bcqv46K+wALJQ8fymBkGDt0XD1VSXN7JBT3jrDNXBg71C50PQyvY 4BLhjxV8JrZK5fjTEJArv6VvdKcQd2XVxi+KVtTgmG3XZO8kF4Oj5dty3iUXJ+3Y 8we6EajgsdUvfV+FhMS9i5gQphnxl1HmEdIi1751Mn8tZBKv3gDT2/pedY2y4BTG 558hRxKORJsgOK44TkWmYvtDRCtBpN3nEyJdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUe9ztbKn32n0ypGfjgeEb0Ry+LK0wHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9lOXp0YktuMzJuMHlwR2ZqZ2VF YjBSeS1MSzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjIFA MA0GCSqGSIb3DQEBCwUAA4IBAQBzN9vEdnPgRqRtccTYZi/o30djYDSFtHuOrnFM 2QDbCLbWRiLHO1DrMzosGXbCKtSNiFk/1Hj7xgm+ZwclsWukOLQMrUVZGJm25tPz ltbbf8fp0/Y7S3wsKgBMqzHvUHVnB8lyxSsfDHA5f1leHUZcHbyPzMzLcY9PAkdy ChZ7iFarraNTcf8LocnhfSm7FNQxtcWo8zRm1wZjv5x04gyIvffKvYiHayOG8Lej lWbAoWCA77GEdNQPbh1oaa4dBBE0/CsGCdpagKWcBB5ctFvf2D22tDmQqjcy9rJO EMaLkKPZRoaBTyfKSJ8KWoKA7ReWhxq4CBXL8dT+l+hqId5x -----END CERTIFICATE-----Generated at Sun Aug 24 07:33:18 2025 by rpki-client