$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mUTuj6ZTgtgpXQazsdQQTTE3uqs.roa File: mUTuj6ZTgtgpXQazsdQQTTE3uqs.roa (raw, json) Hash identifier: 6by9gqrr+X2+H9UUv+XFpSIysiRVFV3KjuytLCfrC2w= Subject key identifier: 99:44:EE:8F:A6:53:82:D8:29:5D:06:B3:B1:D4:10:4D:31:37:BA:AB Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FE4 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mUTuj6ZTgtgpXQazsdQQTTE3uqs.roa Signing time: Fri 22 Aug 2025 08:55:43 +0000 ROA not before: Fri 22 Aug 2025 08:55:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17712 IP address blocks: 140.130.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4068 (0xfe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9944EE8FA65382D8295D06B3B1D4104D3137BAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:79:be:c6:44:07:7c:bd:80:8c:c7:f6:6a: ab:a5:26:33:35:1d:7a:4d:a5:a9:36:3c:a0:af:a4: af:8e:02:f6:0b:aa:13:b1:11:8f:fc:e6:cb:f7:07: 50:00:a8:44:a2:92:9d:b4:fe:73:fb:00:e8:c8:63: d4:4b:db:f1:38:bd:89:36:45:45:fd:ed:1f:44:ba: 03:57:18:9a:04:4d:4d:57:0b:9b:5b:40:ed:e2:27: b9:30:d9:20:35:be:55:22:b2:92:29:42:d0:57:9f: 7b:78:0a:a7:49:ee:d3:2b:a8:34:20:46:bf:36:fd: 1f:45:9b:34:35:91:8a:23:2a:79:eb:18:d6:b5:65: 2a:56:fb:b5:7e:2a:59:a7:f5:2f:6a:90:a9:d6:04: d0:1b:ca:a8:1c:5a:33:4e:ec:86:41:db:99:64:5c: 7a:66:24:10:8b:b1:1f:5c:c4:5a:e6:20:b3:31:c3: cb:31:0c:62:32:57:80:bb:c5:44:5e:a7:cb:3e:f9: 85:16:1a:f2:1a:a2:3e:f3:34:af:3d:5b:73:aa:2b: 25:47:60:b7:23:a5:5f:4b:f3:d5:ac:99:fd:fb:5a: fd:56:15:f5:4a:d2:e7:c3:ed:5f:ae:3c:0f:f1:c5: 1b:dc:21:03:fc:97:65:78:ed:ea:cc:18:5a:90:1e: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:44:EE:8F:A6:53:82:D8:29:5D:06:B3:B1:D4:10:4D:31:37:BA:AB X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mUTuj6ZTgtgpXQazsdQQTTE3uqs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.130.0.0/16 Signature Algorithm: sha256WithRSAEncryption 63:7f:14:0c:d9:7a:83:30:93:31:28:1a:0d:34:e9:79:7b:4c: e0:7b:31:e7:80:71:c1:73:ca:1c:23:8a:b5:1c:6e:21:05:f0: 8a:40:06:c3:2d:d8:15:f9:38:56:68:ef:ca:4b:4f:9e:03:f1: a7:ac:5e:6b:43:f5:f9:ef:42:ef:fb:d2:04:58:c9:5a:04:a5: ad:3b:70:ff:2d:ec:f6:8e:17:c7:42:a2:69:8d:87:49:b7:33: 68:13:c6:a0:70:84:0d:5e:55:80:af:58:63:49:56:d6:61:6f: 22:fc:20:21:f8:ba:dd:da:e9:71:72:1f:3b:ab:ee:18:9a:e5: ff:36:a0:b8:06:69:32:e8:74:48:50:b5:e5:89:08:e4:ad:22: cb:e4:37:c0:ca:a0:cb:e2:32:44:d3:0c:f9:d7:60:06:60:9a: 21:5d:49:b0:f1:b4:08:aa:0e:cc:17:7e:76:db:92:d1:8a:c1: 89:1e:a1:d9:05:b4:be:79:c9:39:36:19:55:21:d6:c0:3b:65: cc:04:7c:cb:1a:ed:6a:e4:e6:4e:c8:7a:27:b0:af:44:ea:57: cf:84:ad:20:f5:8e:21:5c:ea:40:45:33:3e:5d:f9:b9:25:c2: 26:80:f4:7e:39:5f:82:29:11:25:59:78:6e:c5:a3:7b:0b:db: 04:2b:57:6f -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk5NDRFRThGQTY1Mzgy RDgyOTVEMDZCM0IxRDQxMDREMzEzN0JBQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk6Hm+xkQHfL2AjMf2aqulJjM1HXpNpak2PKCvpK+OAvYLqhOx EY/85sv3B1AAqESikp20/nP7AOjIY9RL2/E4vYk2RUX97R9EugNXGJoETU1XC5tb QO3iJ7kw2SA1vlUispIpQtBXn3t4CqdJ7tMrqDQgRr82/R9FmzQ1kYojKnnrGNa1 ZSpW+7V+Klmn9S9qkKnWBNAbyqgcWjNO7IZB25lkXHpmJBCLsR9cxFrmILMxw8sx DGIyV4C7xURep8s++YUWGvIaoj7zNK89W3OqKyVHYLcjpV9L89Wsmf37Wv1WFfVK 0ufD7V+uPA/xxRvcIQP8l2V47erMGFqQHlcnAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUmUTuj6ZTgtgpXQazsdQQTTE3uqswHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9tVVR1ajZaVGd0Z3BYUWF6c2RR UVRURTN1cXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjIIw DQYJKoZIhvcNAQELBQADggEBAGN/FAzZeoMwkzEoGg006Xl7TOB7MeeAccFzyhwj irUcbiEF8IpABsMt2BX5OFZo78pLT54D8aesXmtD9fnvQu/70gRYyVoEpa07cP8t 7PaOF8dCommNh0m3M2gTxqBwhA1eVYCvWGNJVtZhbyL8ICH4ut3a6XFyHzur7hia 5f82oLgGaTLodEhQteWJCOStIsvkN8DKoMviMkTTDPnXYAZgmiFdSbDxtAiqDswX fnbbktGKwYkeodkFtL55yTk2GVUh1sA7ZcwEfMsa7Wrk5k7Ieiewr0TqV8+ErSD1 jiFc6kBFMz5d+bklwiaA9H45X4IpESVZeG7Fo3sL2wQrV28= -----END CERTIFICATE-----Generated at Sun Aug 24 07:29:36 2025 by rpki-client