$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/4JeLCEL33VtaMKZRTdHIxY0D0so.roa File: 4JeLCEL33VtaMKZRTdHIxY0D0so.roa (raw, json) Hash identifier: w9KqGxEZYWD6Lu/uwQfGnWMP/66folzZv0mTCCIo1vw= Subject key identifier: E0:97:8B:08:42:F7:DD:5B:5A:30:A6:51:4D:D1:C8:C5:8D:03:D2:CA Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E5F Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/4JeLCEL33VtaMKZRTdHIxY0D0so.roa Signing time: Fri 22 Aug 2025 08:58:12 +0000 ROA not before: Fri 22 Aug 2025 08:58:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 59.102.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3679 (0xe5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E0978B0842F7DD5B5A30A6514DD1C8C58D03D2CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:46:2d:83:df:83:bc:4a:32:2a:27:19:ce: 61:b2:13:a7:78:6f:ce:c4:0b:56:35:39:39:e5:07: e7:8d:48:cc:32:ff:38:25:11:7c:d6:1e:59:e8:93: f9:83:4d:50:80:e8:12:de:47:c2:46:ae:04:ae:56: 1e:4a:1a:9f:19:af:49:25:05:49:25:97:38:a2:cd: 27:41:b4:67:83:b4:3d:b4:6b:7e:80:e8:08:59:e9: a4:e5:69:d1:fc:73:4f:77:cd:74:dc:a2:12:f5:17: 9d:ff:ed:2a:45:29:75:5f:e1:37:2b:6c:df:bd:fb: c7:98:77:f2:f8:f0:af:7e:e2:59:f4:2c:fc:d4:a5: b7:ff:e8:68:95:b6:5f:f5:7c:4c:46:a2:76:5a:43: 1d:6e:a3:d9:88:96:cc:6f:7c:77:93:e9:61:7c:94: 68:13:de:5d:ac:2c:26:d6:25:8c:c0:6d:cd:a4:66: 25:ae:9c:35:28:78:e9:ce:74:7e:ef:9f:6a:dd:a2: b8:7b:42:ef:9c:96:d9:2a:0e:0f:aa:c1:90:66:28: fb:65:ee:c3:01:d4:56:4a:45:66:6e:e5:8e:ad:d0: ec:d2:60:ab:bd:4b:17:11:1f:2e:95:0c:b9:0f:10: 8c:48:b5:21:5a:82:dc:07:3c:c1:ba:6f:0e:2b:4a: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:8B:08:42:F7:DD:5B:5A:30:A6:51:4D:D1:C8:C5:8D:03:D2:CA X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/4JeLCEL33VtaMKZRTdHIxY0D0so.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.102.128.0/21 Signature Algorithm: sha256WithRSAEncryption 86:6a:b7:37:76:18:aa:ea:4c:6f:0f:65:cf:5f:6a:67:7a:6f: 12:31:65:6a:c0:e4:de:6d:94:7a:86:54:85:1c:69:b7:5c:aa: 3f:22:eb:1b:85:54:7b:39:2f:13:45:e1:e0:b1:59:3b:67:76: f1:0d:7f:e4:92:36:13:65:c1:c6:93:56:54:11:ed:a0:4f:76: 7b:40:25:71:40:e3:df:be:e3:27:57:a2:12:75:d8:b8:c5:91: 2b:42:f9:ba:24:be:c7:c6:c7:e5:fa:8f:be:0f:6f:ba:57:62: 97:58:82:08:ed:e2:4d:14:99:9c:96:3d:ae:ca:96:57:a5:34: 1e:d7:fd:47:31:5c:92:88:61:ab:55:7e:68:2a:38:5e:c5:51: 95:14:ca:d6:1d:24:30:e1:06:fe:5d:d8:72:bc:f9:72:51:45: 88:af:bd:76:ed:45:e9:85:eb:a5:b5:4e:b8:0c:d7:be:7e:a9: d3:19:26:3b:75:c2:92:59:45:8d:39:35:1e:bb:19:71:de:b2: d1:d1:69:30:e3:c9:52:a5:bf:e0:f2:d7:88:1c:d7:bc:51:03: c3:a1:fa:67:cc:6c:6c:85:65:33:5d:e0:a6:c5:db:29:a4:3b: 56:7d:bd:01:4d:df:0c:2f:72:ac:d7:38:bf:52:a6:0f:13:10: 97:93:ce:0a -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUwOTc4QjA4NDJGN0RE NUI1QTMwQTY1MTRERDFDOEM1OEQwM0QyQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfWEYtg9+DvEoyKicZzmGyE6d4b87EC1Y1OTnlB+eNSMwy/zgl EXzWHlnok/mDTVCA6BLeR8JGrgSuVh5KGp8Zr0klBUkllziizSdBtGeDtD20a36A 6AhZ6aTladH8c093zXTcohL1F53/7SpFKXVf4TcrbN+9+8eYd/L48K9+4ln0LPzU pbf/6GiVtl/1fExGonZaQx1uo9mIlsxvfHeT6WF8lGgT3l2sLCbWJYzAbc2kZiWu nDUoeOnOdH7vn2rdorh7Qu+cltkqDg+qwZBmKPtl7sMB1FZKRWZu5Y6t0OzSYKu9 SxcRHy6VDLkPEIxItSFagtwHPMG6bw4rStQNAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU4JeLCEL33VtaMKZRTdHIxY0D0sowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS80SmVMQ0VMMzNWdGFNS1pSVGRI SXhZMEQwc28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDO2aA MA0GCSqGSIb3DQEBCwUAA4IBAQCGarc3dhiq6kxvD2XPX2pnem8SMWVqwOTebZR6 hlSFHGm3XKo/IusbhVR7OS8TReHgsVk7Z3bxDX/kkjYTZcHGk1ZUEe2gT3Z7QCVx QOPfvuMnV6ISddi4xZErQvm6JL7Hxsfl+o++D2+6V2KXWIII7eJNFJmclj2uypZX pTQe1/1HMVySiGGrVX5oKjhexVGVFMrWHSQw4Qb+XdhyvPlyUUWIr7127UXpheul tU64DNe+fqnTGSY7dcKSWUWNOTUeuxlx3rLR0Wkw48lSpb/g8teIHNe8UQPDofpn zGxshWUzXeCmxdsppDtWfb0BTd8ML3Ks1zi/UqYPExCXk84K -----END CERTIFICATE-----Generated at Sun Aug 24 09:19:49 2025 by rpki-client