$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ztwB_s5SRCrWo-FLSdgcIveybDE.roa File: ztwB_s5SRCrWo-FLSdgcIveybDE.roa (raw, json) Hash identifier: /1wRhF7/blGlTV8LXqX0BKCynNYkagaPghF3RdocMPc= Subject key identifier: CE:DC:01:FE:CE:52:44:2A:D6:A3:E1:4B:49:D8:1C:22:F7:B2:6C:31 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 106E Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ztwB_s5SRCrWo-FLSdgcIveybDE.roa Signing time: Fri 22 Aug 2025 08:55:28 +0000 ROA not before: Fri 22 Aug 2025 08:55:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 163.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4206 (0x106e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CEDC01FECE52442AD6A3E14B49D81C22F7B26C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:c8:29:cb:aa:d8:69:dc:41:6c:28:e6:c0: 05:ea:d5:52:a0:8a:91:d9:48:fa:bb:03:fd:4a:98: d8:96:64:a3:f2:b2:13:53:b6:27:22:c6:e8:e7:59: 61:80:5f:04:1e:5a:5a:56:6f:2a:96:6a:ed:f4:2f: 67:71:95:2b:bc:fa:c4:9a:61:8f:73:5a:cd:6e:a2: b1:eb:0f:53:c6:fb:4f:a1:94:68:73:d9:de:cf:46: ce:31:6d:48:7f:f8:1d:07:28:96:6b:4f:98:f0:55: 33:69:54:bf:a3:fb:67:5e:41:83:9d:4b:ef:3e:0e: c0:5d:f7:3b:f2:d1:47:0c:30:40:b5:ef:48:96:48: af:12:aa:db:5a:e0:9b:a0:90:3e:b3:4f:e0:59:14: 3c:a9:1d:27:d8:42:25:41:7f:f9:04:40:06:e3:57: ed:ad:4b:b3:d9:79:b2:51:13:dc:54:ac:91:bd:10: 2d:cf:b0:c2:e3:ba:e8:50:a9:14:f5:dc:8b:6e:18: 5e:ee:a0:2f:9e:01:6a:07:74:e5:0a:4b:62:3e:78: 4c:7f:9b:1f:e5:16:76:3d:ac:3d:71:65:fe:16:81: b9:cf:43:80:7a:88:a7:47:06:72:4d:cf:c7:85:e9: 95:48:47:3c:2d:bc:2a:ba:2d:8c:6e:e9:3d:1d:0d: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DC:01:FE:CE:52:44:2A:D6:A3:E1:4B:49:D8:1C:22:F7:B2:6C:31 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ztwB_s5SRCrWo-FLSdgcIveybDE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:2f:df:33:80:3c:93:47:65:21:81:6a:1f:83:3f:bf:ca:de: ba:40:fd:f2:7b:10:f3:4b:54:99:26:1b:de:4f:93:98:54:45: 2a:f8:07:64:90:2a:15:5e:43:9f:51:0f:93:9f:c3:b1:94:55: 35:09:69:c5:f4:ba:f9:10:f0:56:e9:e1:fe:a4:b2:84:4a:14: b2:99:2f:36:90:da:81:ff:45:dd:3c:90:2e:af:0f:7a:1b:da: f4:49:52:b7:fe:e3:b3:22:4c:33:1c:d7:bd:d0:2d:bd:16:19: d7:92:4e:d3:fd:25:f5:11:55:3d:a0:ba:ee:c0:00:28:20:f1: 29:87:31:93:6d:2f:ad:12:d6:f2:9d:bd:a8:d4:5a:cc:4e:85: 9d:a3:48:fb:3e:b4:10:8c:fe:89:0f:5a:6e:27:d1:2d:01:ca: 0a:e6:f4:e5:16:ae:a8:ba:e1:77:2c:7c:d6:d4:b5:f7:4e:57: e8:21:af:c2:38:74:22:5d:57:e3:d5:c0:cf:29:d2:39:36:42: f0:8f:0e:05:82:6b:48:db:f8:71:90:25:b1:e9:7c:38:b7:9f: cd:06:41:5c:46:60:30:df:7c:4b:6f:ea:48:5c:33:44:83:5e: 33:a7:ae:13:b7:5e:bd:bb:be:33:9a:32:86:8d:86:a9:87:2b: 93:80:62:ad -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENFREMwMUZFQ0U1MjQ0 MkFENkEzRTE0QjQ5RDgxQzIyRjdCMjZDMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjW8gpy6rYadxBbCjmwAXq1VKgipHZSPq7A/1KmNiWZKPyshNT ticixujnWWGAXwQeWlpWbyqWau30L2dxlSu8+sSaYY9zWs1uorHrD1PG+0+hlGhz 2d7PRs4xbUh/+B0HKJZrT5jwVTNpVL+j+2deQYOdS+8+DsBd9zvy0UcMMEC170iW SK8Sqtta4JugkD6zT+BZFDypHSfYQiVBf/kEQAbjV+2tS7PZebJRE9xUrJG9EC3P sMLjuuhQqRT13ItuGF7uoC+eAWoHdOUKS2I+eEx/mx/lFnY9rD1xZf4WgbnPQ4B6 iKdHBnJNz8eF6ZVIRzwtvCq6LYxu6T0dDWqRAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUztwB/s5SRCrWo+FLSdgcIveybDEwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC96dHdCX3M1U1JDcldvLUZMU2Rn Y0l2ZXliREUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxYw DQYJKoZIhvcNAQELBQADggEBAGgv3zOAPJNHZSGBah+DP7/K3rpA/fJ7EPNLVJkm G95Pk5hURSr4B2SQKhVeQ59RD5Ofw7GUVTUJacX0uvkQ8Fbp4f6ksoRKFLKZLzaQ 2oH/Rd08kC6vD3ob2vRJUrf+47MiTDMc173QLb0WGdeSTtP9JfURVT2guu7AACgg 8SmHMZNtL60S1vKdvajUWsxOhZ2jSPs+tBCM/okPWm4n0S0Bygrm9OUWrqi64Xcs fNbUtfdOV+ghr8I4dCJdV+PVwM8p0jk2QvCPDgWCa0jb+HGQJbHpfDi3n80GQVxG YDDffEtv6khcM0SDXjOnrhO3Xr27vjOaMoaNhqmHK5OAYq0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:21 2025 by rpki-client