$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/nH_EeIqpZitsexD_yyYfxUlKq5g.roa File: nH_EeIqpZitsexD_yyYfxUlKq5g.roa (raw, json) Hash identifier: v3xP68DZPu5xwoolvKM9IAnJBJHIeoAGI6cRMernU4Y= Subject key identifier: 9C:7F:C4:78:8A:A9:66:2B:6C:7B:10:FF:CB:26:1F:C5:49:4A:AB:98 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 108F Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nH_EeIqpZitsexD_yyYfxUlKq5g.roa Signing time: Fri 22 Aug 2025 08:55:36 +0000 ROA not before: Fri 22 Aug 2025 08:55:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 210.62.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4239 (0x108f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9C7FC4788AA9662B6C7B10FFCB261FC5494AAB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:6c:89:cc:ab:f8:15:3d:87:f0:ad:52:68: e7:71:78:81:2b:fa:c0:5f:47:4e:0e:ba:2d:14:2e: e2:52:80:c0:3c:fb:11:50:2f:af:98:fa:be:e6:a5: b3:8a:5e:88:dd:f9:9b:df:f2:f1:36:1f:c1:db:a2: e3:41:f7:fb:25:53:7c:fb:e1:bd:ab:7b:3f:e7:c3: 34:c6:d0:bd:03:f6:82:48:e5:a7:04:70:b3:58:23: 6c:c1:92:0d:ca:72:10:c0:32:4f:63:0c:6a:2d:33: 56:f9:37:a6:fa:11:fc:72:dc:be:9f:58:ac:50:5e: 6f:72:04:c5:8d:76:50:cb:d3:8e:71:d9:19:2b:74: 11:14:0d:60:3e:fb:ec:c9:b3:6f:cd:f6:ef:57:e6: 54:85:16:12:71:7b:e8:b1:79:b2:c6:ad:4d:2d:32: 25:a4:05:07:7f:cc:a5:11:11:68:15:7b:34:21:21: 07:41:a8:ff:a6:1d:89:78:d5:ed:5b:fa:87:16:1b: a5:1c:04:52:de:02:21:92:24:6e:c8:01:85:e6:41: 5f:4f:9d:56:f6:d7:52:48:55:ac:97:68:15:a8:b9: af:c3:ac:e0:de:fd:c2:85:87:b7:11:63:bc:97:ea: d0:4e:28:bd:5e:3d:69:02:37:e1:63:5b:4d:0c:0f: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7F:C4:78:8A:A9:66:2B:6C:7B:10:FF:CB:26:1F:C5:49:4A:AB:98 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nH_EeIqpZitsexD_yyYfxUlKq5g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.240.0/21 Signature Algorithm: sha256WithRSAEncryption b2:66:2a:5d:48:0d:79:8c:36:81:75:c9:8c:23:b6:f5:31:51: 83:60:8e:d1:b6:d2:ad:6d:83:08:13:4e:45:8e:0b:a4:4c:1c: 3c:38:9b:57:85:b1:70:66:e4:9f:72:d3:a1:f7:ff:75:1c:e2: 7a:cb:4a:b7:e7:94:69:99:f9:d8:30:ac:85:a5:87:6b:3b:37: 92:0d:6c:a3:ce:d5:a0:51:1b:2c:22:f1:af:8b:c6:d5:8b:e4: e8:83:a6:d8:83:57:2d:93:c2:86:69:b9:a1:63:4c:84:e5:b7: 8f:a9:46:97:8d:8f:e0:e0:28:a9:43:85:9e:e4:60:76:bb:c0: 2a:2d:bd:c4:12:12:2a:d7:7d:e2:ba:e5:74:ca:90:29:3d:b9: 6d:74:3a:5b:82:24:53:31:15:d2:82:e1:f4:d3:3b:4e:9f:49: 2d:ad:47:8a:f7:60:af:a6:56:c0:0e:78:46:e0:43:3e:f6:5c: c1:83:f1:d4:2b:04:a7:57:45:e6:f9:42:40:64:75:95:ac:33: 08:54:26:71:09:06:bc:d1:73:ed:61:02:cf:56:c5:b1:0b:10: ed:ce:44:47:22:c5:69:d2:6c:e6:ac:fe:3b:96:15:55:b0:96: 91:8f:51:f7:d6:8c:2a:59:8d:cb:13:50:79:d5:1e:b1:d8:f6: c4:02:f7:0e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlDN0ZDNDc4OEFBOTY2 MkI2QzdCMTBGRkNCMjYxRkM1NDk0QUFCOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCteWyJzKv4FT2H8K1SaOdxeIEr+sBfR04Oui0ULuJSgMA8+xFQ L6+Y+r7mpbOKXojd+Zvf8vE2H8HbouNB9/slU3z74b2rez/nwzTG0L0D9oJI5acE cLNYI2zBkg3KchDAMk9jDGotM1b5N6b6Efxy3L6fWKxQXm9yBMWNdlDL045x2Rkr dBEUDWA+++zJs2/N9u9X5lSFFhJxe+ixebLGrU0tMiWkBQd/zKUREWgVezQhIQdB qP+mHYl41e1b+ocWG6UcBFLeAiGSJG7IAYXmQV9PnVb211JIVayXaBWoua/DrODe /cKFh7cRY7yX6tBOKL1ePWkCN+FjW00MD8k/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUnH/EeIqpZitsexD/yyYfxUlKq5gwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9uSF9FZUlxcFppdHNleERfeXlZ ZnhVbEtxNWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0j7w MA0GCSqGSIb3DQEBCwUAA4IBAQCyZipdSA15jDaBdcmMI7b1MVGDYI7RttKtbYMI E05FjgukTBw8OJtXhbFwZuSfctOh9/91HOJ6y0q355RpmfnYMKyFpYdrOzeSDWyj ztWgURssIvGvi8bVi+Tog6bYg1ctk8KGabmhY0yE5bePqUaXjY/g4CipQ4We5GB2 u8AqLb3EEhIq133iuuV0ypApPbltdDpbgiRTMRXSguH00ztOn0ktrUeK92CvplbA DnhG4EM+9lzBg/HUKwSnV0Xm+UJAZHWVrDMIVCZxCQa80XPtYQLPVsWxCxDtzkRH IsVp0mzmrP47lhVVsJaRj1H31owqWY3LE1B51R6x2PbEAvcO -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:19 2025 by rpki-client