$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/RBbwFQBTBMhr8Kq0YpLTeURTg9Q.roa File: RBbwFQBTBMhr8Kq0YpLTeURTg9Q.roa (raw, json) Hash identifier: HtGXDywWKNPiQAnUV0eO6ZTOoyV+DSqxKViEwuAYbD8= Subject key identifier: 44:16:F0:15:00:53:04:C8:6B:F0:AA:B4:62:92:D3:79:44:53:83:D4 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0DEA Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/RBbwFQBTBMhr8Kq0YpLTeURTg9Q.roa Signing time: Fri 22 Aug 2025 08:52:10 +0000 ROA not before: Fri 22 Aug 2025 08:52:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3949 IP address blocks: 122.255.94.16/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3562 (0xdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 22 08:52:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4416F015005304C86BF0AAB46292D379445383D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:d4:06:b4:e2:25:bc:20:1a:a1:cd:d2:d1: 96:3a:d6:2c:af:17:24:28:f3:a5:1b:b8:e6:3b:2b: 3b:c8:4f:62:49:7d:90:d2:1b:fc:3a:80:75:59:49: d7:30:1c:a3:a4:9c:ff:7b:84:6a:dc:ce:b7:f1:c6: 9d:f4:27:c2:3a:f6:0f:1b:da:c8:ad:c4:9e:4a:19: a2:0b:94:15:9b:b9:70:d9:c6:31:35:6c:d4:af:70: 9e:48:47:db:59:0c:16:2a:e7:75:45:ce:c2:22:34: b1:7b:9a:d3:8d:2c:51:cc:77:ee:20:68:47:09:38: ea:cb:34:d7:98:c3:2e:0b:dd:96:8c:ca:01:f4:3e: 4e:9d:18:d0:74:c8:e8:83:51:94:f3:46:84:f2:8d: 15:58:f7:08:af:13:eb:89:e4:49:b9:ff:b7:7b:ca: 5a:0c:6f:dc:65:63:ea:fa:63:22:2c:38:58:14:77: db:81:2d:fb:4b:cb:5d:d6:78:2f:63:46:6e:66:e6: 7e:86:a9:83:65:40:63:34:b0:20:57:27:d5:b8:73: 60:87:20:b3:b0:fc:ad:a5:46:dc:b5:24:53:3f:62: 56:f9:dd:c1:ad:f7:fa:a8:32:44:fa:a7:46:db:00: 20:3b:bb:1f:74:d1:97:9d:68:ac:5e:11:1c:6a:5f: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:16:F0:15:00:53:04:C8:6B:F0:AA:B4:62:92:D3:79:44:53:83:D4 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/RBbwFQBTBMhr8Kq0YpLTeURTg9Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.94.16/28 Signature Algorithm: sha256WithRSAEncryption ae:c7:6e:c6:e1:8b:35:f2:ac:ae:aa:94:55:a2:89:c9:a2:34: 3d:e4:54:f5:b9:a6:fa:70:c3:be:ef:43:d3:d4:9a:67:4d:d3: db:26:e7:aa:45:63:72:93:48:62:98:03:11:5d:30:b8:b0:11: 5c:71:28:2a:5f:65:0d:59:df:ab:ec:f0:fb:96:10:4c:bb:e3: bc:be:8e:3c:b1:fd:8e:a4:d7:a1:ac:66:b6:07:e1:3b:d5:77: fd:ff:10:4d:f4:8f:e4:0b:51:87:8a:c0:9e:7d:ab:be:37:0f: 17:74:64:94:e4:48:74:82:3d:87:1d:f1:c1:6b:ed:ed:8f:e1: 59:73:3a:24:4b:b1:83:bb:51:b0:a3:d4:25:92:34:cc:11:c6: 23:36:e4:bf:55:00:8d:34:e0:87:23:cb:44:9d:a0:40:12:ae: a4:ea:0e:5b:81:c5:33:36:95:27:49:47:26:27:45:f4:0a:8f: 4e:8c:84:8a:b3:22:df:ee:14:8f:36:6c:c9:bb:1f:6f:26:be: 79:85:41:21:dd:c5:97:20:c1:de:b4:21:8f:6f:cb:4d:0a:ac: e5:6d:3c:ed:52:37:26:82:be:a1:e3:ff:95:58:84:4f:21:6c: bf:85:7a:72:94:95:8a:d4:46:90:01:dc:6c:ba:40:e2:a3:15: 3a:bb:d7:17 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw ODUyMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ0MTZGMDE1MDA1MzA0 Qzg2QkYwQUFCNDYyOTJEMzc5NDQ1MzgzRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx49QGtOIlvCAaoc3S0ZY61iyvFyQo86UbuOY7KzvIT2JJfZDS G/w6gHVZSdcwHKOknP97hGrczrfxxp30J8I69g8b2sitxJ5KGaILlBWbuXDZxjE1 bNSvcJ5IR9tZDBYq53VFzsIiNLF7mtONLFHMd+4gaEcJOOrLNNeYwy4L3ZaMygH0 Pk6dGNB0yOiDUZTzRoTyjRVY9wivE+uJ5Em5/7d7yloMb9xlY+r6YyIsOFgUd9uB LftLy13WeC9jRm5m5n6GqYNlQGM0sCBXJ9W4c2CHILOw/K2lRty1JFM/Ylb53cGt 9/qoMkT6p0bbACA7ux900ZedaKxeERxqX4rVAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQURBbwFQBTBMhr8Kq0YpLTeURTg9QwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9SQmJ3RlFCVEJNaHI4S3EwWXBM VGVVUlRnOVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEev9e EDANBgkqhkiG9w0BAQsFAAOCAQEArsduxuGLNfKsrqqUVaKJyaI0PeRU9bmm+nDD vu9D09SaZ03T2ybnqkVjcpNIYpgDEV0wuLARXHEoKl9lDVnfq+zw+5YQTLvjvL6O PLH9jqTXoaxmtgfhO9V3/f8QTfSP5AtRh4rAnn2rvjcPF3RklORIdII9hx3xwWvt 7Y/hWXM6JEuxg7tRsKPUJZI0zBHGIzbkv1UAjTTghyPLRJ2gQBKupOoOW4HFMzaV J0lHJidF9AqPToyEirMi3+4UjzZsybsfbya+eYVBId3FlyDB3rQhj2/LTQqs5W08 7VI3JoK+oeP/lViETyFsv4V6cpSVitRGkAHcbLpA4qMVOrvXFw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:44:42 2025 by rpki-client