$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/y-KwzyvbjfoF-m-JJih_T85eWsM.roa File: y-KwzyvbjfoF-m-JJih_T85eWsM.roa (raw, json) Hash identifier: a9PGb6GCiS8Kok+/vE0ZJ+/GoVJV0D+kiVTOXLMbPK4= Subject key identifier: CB:E2:B0:CF:2B:DB:8D:FA:05:FA:6F:89:26:28:7F:4F:CE:5E:5A:C3 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1091 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/y-KwzyvbjfoF-m-JJih_T85eWsM.roa Signing time: Fri 22 Aug 2025 08:55:37 +0000 ROA not before: Fri 22 Aug 2025 08:55:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 120.96.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4241 (0x1091) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CBE2B0CF2BDB8DFA05FA6F8926287F4FCE5E5AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:68:61:ee:d7:de:3c:58:30:84:b5:1a:c5: 5e:58:20:a4:3e:7a:2e:a1:aa:c5:82:ad:4a:33:d8: 6e:5e:5b:24:72:94:73:ab:d5:a8:58:11:a9:0c:aa: d1:ba:61:32:68:a8:a3:08:e2:3a:50:5b:ca:bc:68: 10:39:cc:46:4d:43:83:cf:6f:68:42:c3:2e:d1:32: 92:dd:69:ef:ab:61:cf:b6:8c:3c:11:fa:38:49:6a: 0a:ef:50:b1:b1:3e:af:bb:e4:74:42:d1:99:55:a7: ac:6d:6d:1b:fc:89:e0:5f:e8:45:3e:5d:40:ad:a5: 58:53:b3:74:09:96:6c:9b:f1:86:ab:bf:4f:a6:8c: cf:55:af:5b:cf:c2:f7:e1:ac:38:55:2e:8d:6e:70: b2:e0:d9:0a:9e:6a:06:f3:45:80:6c:49:d2:38:34: 42:fb:15:c2:7f:cd:d0:a9:d4:77:89:10:3c:99:05: ae:34:d0:55:20:d4:14:f1:f9:cb:21:9e:88:00:7f: 27:3d:50:f0:01:a8:2a:03:37:e1:fa:05:fa:fa:e7: 45:e7:73:08:52:46:d2:62:1b:7b:95:88:98:17:72: f5:c5:ae:8b:77:c7:cf:ff:81:73:86:22:55:29:c2: 30:37:ec:3f:bf:07:20:bc:fb:db:82:d1:4f:eb:95: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E2:B0:CF:2B:DB:8D:FA:05:FA:6F:89:26:28:7F:4F:CE:5E:5A:C3 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/y-KwzyvbjfoF-m-JJih_T85eWsM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.96.0.0/11 Signature Algorithm: sha256WithRSAEncryption 7e:cc:3f:0d:43:36:46:48:dd:d9:da:cf:c8:8d:58:4c:1a:d7: 51:2c:6e:ce:8c:ea:d9:4d:59:91:fa:b6:03:6f:b1:ec:7f:29: 1b:61:09:ae:f3:df:6e:0f:1a:97:d4:46:82:b7:88:f4:f5:eb: e9:22:c3:af:e3:66:ca:ca:1e:1b:53:9d:6d:d0:9a:9d:9f:d9: 99:f5:8f:18:cd:fa:bc:a6:a9:1a:0a:30:27:1c:aa:b9:85:c6: ff:41:90:12:de:72:2d:25:25:cd:13:8e:6b:1a:40:80:53:23: 9b:f7:52:35:92:13:24:19:bc:f6:89:29:65:8c:c0:54:1d:a0: 44:24:94:2b:0f:f2:94:aa:d7:13:ba:fd:44:6c:a1:5f:48:03: c0:af:c7:71:f0:5c:98:a7:f4:af:e7:8b:e7:07:89:bb:20:b2: b6:8a:27:72:16:f2:14:2d:4e:bc:3d:a3:7e:a2:59:2b:48:7c: 65:65:07:3c:aa:e5:ee:b6:99:0f:5b:4d:1e:cb:ce:b1:a5:1d: 6f:27:74:1a:9c:93:e5:c0:c3:7d:18:db:c6:09:f8:c3:a0:51: 6c:ba:67:51:6e:d2:65:3b:38:d9:38:c9:3e:71:45:ac:0c:06: d0:87:fa:80:07:c4:63:b6:0b:26:b4:1a:10:dd:1c:be:b6:1d: b2:1c:6d:ea -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENCRTJCMENGMkJEQjhE RkEwNUZBNkY4OTI2Mjg3RjRGQ0U1RTVBQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4zWhh7tfePFgwhLUaxV5YIKQ+ei6hqsWCrUoz2G5eWyRylHOr 1ahYEakMqtG6YTJoqKMI4jpQW8q8aBA5zEZNQ4PPb2hCwy7RMpLdae+rYc+2jDwR +jhJagrvULGxPq+75HRC0ZlVp6xtbRv8ieBf6EU+XUCtpVhTs3QJlmyb8Yarv0+m jM9Vr1vPwvfhrDhVLo1ucLLg2QqeagbzRYBsSdI4NEL7FcJ/zdCp1HeJEDyZBa40 0FUg1BTx+cshnogAfyc9UPABqCoDN+H6Bfr650XncwhSRtJiG3uViJgXcvXFrot3 x8//gXOGIlUpwjA37D+/ByC8+9uC0U/rlYY1AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUy+KwzyvbjfoF+m+JJih/T85eWsMwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC95LUt3enl2Ympmb0YtbS1KSmlo X1Q4NWVXc00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFeGAw DQYJKoZIhvcNAQELBQADggEBAH7MPw1DNkZI3dnaz8iNWEwa11Esbs6M6tlNWZH6 tgNvsex/KRthCa7z324PGpfURoK3iPT16+kiw6/jZsrKHhtTnW3Qmp2f2Zn1jxjN +rymqRoKMCccqrmFxv9BkBLeci0lJc0TjmsaQIBTI5v3UjWSEyQZvPaJKWWMwFQd oEQklCsP8pSq1xO6/URsoV9IA8Cvx3HwXJin9K/ni+cHibsgsraKJ3IW8hQtTrw9 o36iWStIfGVlBzyq5e62mQ9bTR7LzrGlHW8ndBqck+XAw30Y28YJ+MOgUWy6Z1Fu 0mU7ONk4yT5xRawMBtCH+oAHxGO2Cya0GhDdHL62HbIcbeo= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:23 2025 by rpki-client