$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/oIRz6lciO8sUm0m_rrHR1b9Eno0.roa File: oIRz6lciO8sUm0m_rrHR1b9Eno0.roa (raw, json) Hash identifier: qn95R7gLiomvKADv2k/cdV7wu0PRNxshKylityYwn6Q= Subject key identifier: A0:84:73:EA:57:22:3B:CB:14:9B:49:BF:AE:B1:D1:D5:BF:44:9E:8D Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 106D Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oIRz6lciO8sUm0m_rrHR1b9Eno0.roa Signing time: Fri 22 Aug 2025 08:55:28 +0000 ROA not before: Fri 22 Aug 2025 08:55:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 163.25.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4205 (0x106d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A08473EA57223BCB149B49BFAEB1D1D5BF449E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:3c:84:52:92:b2:58:5d:bc:66:7a:cd:ba: a9:a8:65:67:37:1c:de:23:21:01:93:71:16:ff:9d: f1:21:01:49:4f:a7:c5:80:1c:22:65:e2:96:59:9a: 16:a8:10:78:f1:18:01:87:0b:5b:6c:42:e5:d8:60: 8b:0a:52:c2:6d:59:0d:00:11:d9:6f:77:1f:29:a6: d1:3b:83:ae:05:44:9a:0b:63:e1:65:32:be:41:d3: 56:75:5d:a4:90:9c:75:bb:cd:ae:57:03:81:69:2b: a3:7c:b3:e8:16:a4:41:c1:d7:3d:01:f1:0c:cf:a2: 57:e6:f5:ba:44:34:ae:52:22:17:00:4e:b2:46:a8: fc:c1:ef:d9:38:94:4b:f8:3d:38:10:ad:77:5f:06: 28:bd:23:27:a5:ec:7d:ea:dd:d3:b1:27:69:8e:9f: b4:f5:9a:2d:46:57:78:44:cf:5c:00:1b:2d:3b:01: 08:2d:b7:ef:ea:d7:6f:d5:eb:d3:b9:c8:df:4a:5c: f3:9e:e9:95:fe:56:6d:92:8c:a7:01:f5:08:89:b7: 92:f0:31:75:26:f3:d3:5a:36:43:fe:cf:97:9a:37: 20:55:4d:13:4c:74:fc:62:17:6c:63:10:be:4d:19: aa:f9:59:7e:df:1c:9c:df:d3:71:ce:bc:f9:e5:8d: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:84:73:EA:57:22:3B:CB:14:9B:49:BF:AE:B1:D1:D5:BF:44:9E:8D X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oIRz6lciO8sUm0m_rrHR1b9Eno0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.25.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:f8:4d:76:ff:66:d3:07:c1:93:2a:cf:a2:c5:92:af:78:ad: f5:bd:d5:3b:84:2e:d3:59:4a:b2:d3:24:0a:a5:46:9b:eb:5d: c3:ef:a0:c0:f5:a6:9b:86:db:82:d9:96:c1:89:85:fc:9d:41: 12:04:78:a3:47:c8:fb:70:ec:0d:f7:2b:12:9b:d4:aa:1b:e7: 90:c0:ee:48:97:1a:4d:17:63:50:5c:18:98:02:83:78:c2:da: 33:39:df:c3:27:13:cb:6e:f2:ab:94:55:bc:45:f4:24:81:c0: e9:e8:ca:76:bb:fb:c7:50:82:9d:cd:53:e2:fc:c5:30:63:27: 82:76:de:41:18:80:2c:4a:23:75:d9:8c:f7:54:47:39:28:bd: 2e:c6:f4:90:69:df:3a:b3:dc:72:7c:d3:fd:c6:87:93:3b:4a: 20:94:8e:db:09:b9:40:95:5a:96:d6:74:2f:e8:68:48:a2:77: 46:f3:72:fe:6f:34:4d:13:68:c1:46:63:5d:b7:b9:f2:d0:80: 8c:60:03:8f:54:5b:95:87:46:a6:57:fe:f1:46:19:b7:08:d0: 5f:44:f2:3d:75:e6:b9:f1:5b:c0:7c:c0:b6:1e:5c:0f:7c:58: 80:22:1d:d6:67:ea:b1:0b:df:2a:df:2a:8d:ce:06:60:d4:e6: 71:85:59:8b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwODQ3M0VBNTcyMjNC Q0IxNDlCNDlCRkFFQjFEMUQ1QkY0NDlFOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRgjyEUpKyWF28ZnrNuqmoZWc3HN4jIQGTcRb/nfEhAUlPp8WA HCJl4pZZmhaoEHjxGAGHC1tsQuXYYIsKUsJtWQ0AEdlvdx8pptE7g64FRJoLY+Fl Mr5B01Z1XaSQnHW7za5XA4FpK6N8s+gWpEHB1z0B8QzPolfm9bpENK5SIhcATrJG qPzB79k4lEv4PTgQrXdfBii9Iyel7H3q3dOxJ2mOn7T1mi1GV3hEz1wAGy07AQgt t+/q12/V69O5yN9KXPOe6ZX+Vm2SjKcB9QiJt5LwMXUm89NaNkP+z5eaNyBVTRNM dPxiF2xjEL5NGar5WX7fHJzf03HOvPnljbopAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUoIRz6lciO8sUm0m/rrHR1b9Eno0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9vSVJ6NmxjaU84c1VtMG1fcnJI UjFiOUVubzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxkw DQYJKoZIhvcNAQELBQADggEBAIr4TXb/ZtMHwZMqz6LFkq94rfW91TuELtNZSrLT JAqlRpvrXcPvoMD1ppuG24LZlsGJhfydQRIEeKNHyPtw7A33KxKb1Kob55DA7kiX Gk0XY1BcGJgCg3jC2jM538MnE8tu8quUVbxF9CSBwOnoyna7+8dQgp3NU+L8xTBj J4J23kEYgCxKI3XZjPdURzkovS7G9JBp3zqz3HJ80/3Gh5M7SiCUjtsJuUCVWpbW dC/oaEiid0bzcv5vNE0TaMFGY123ufLQgIxgA49UW5WHRqZX/vFGGbcI0F9E8j11 5rnxW8B8wLYeXA98WIAiHdZn6rEL3yrfKo3OBmDU5nGFWYs= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:23 2025 by rpki-client