$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/sulBOqAwtzMbvVyAlFJtICeNmn4.roa File: sulBOqAwtzMbvVyAlFJtICeNmn4.roa (raw, json) Hash identifier: giCyjq9qJjRKrR8yB4xpc2x0nii72rsZ3cbAn0Quzfc= Subject key identifier: B2:E9:41:3A:A0:30:B7:33:1B:BD:5C:80:94:52:6D:20:27:8D:9A:7E Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0DEB Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/sulBOqAwtzMbvVyAlFJtICeNmn4.roa Signing time: Fri 22 Aug 2025 08:52:10 +0000 ROA not before: Fri 22 Aug 2025 08:52:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 132819 IP address blocks: 61.58.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 22 08:52:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B2E9413AA030B7331BBD5C8094526D20278D9A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:5a:42:1c:45:e7:f6:be:8c:d7:07:1f:3f: 7c:ff:17:85:61:11:08:fc:9b:0f:c0:dd:8e:85:59: 48:7d:27:9d:32:66:e7:d0:5f:1a:de:e9:8e:82:e9: 0e:0f:af:85:b2:b8:7b:0a:b1:6e:42:a1:af:81:ad: 87:00:04:22:f8:80:5e:92:b3:c2:d2:71:ae:13:7b: 9e:23:f6:56:58:d5:16:36:78:8e:b8:e0:e7:ad:56: 13:18:e8:35:ce:75:de:47:ff:86:e8:0c:b6:cb:e4: ee:d6:a5:aa:49:e6:e5:2e:81:e4:a8:aa:56:0d:5b: 33:e7:45:06:5f:4e:a4:73:77:36:8d:19:53:a9:16: db:5f:b5:83:f2:e1:4a:d3:22:ee:b5:ac:ea:76:06: 87:f3:52:2b:6e:37:1b:4c:b7:c7:f7:78:92:38:44: 7d:2a:e2:b5:23:4e:86:d8:cb:97:23:5e:bd:33:ad: ef:26:58:03:3a:3c:d9:a2:17:6d:3a:4b:ee:db:66: 02:df:82:fd:9c:78:20:81:33:d9:78:49:f9:a7:43: 46:d4:5a:e4:1f:e7:cb:cc:80:fc:f9:5f:bd:be:37: 25:86:e0:21:d6:f2:3c:33:e0:31:9a:7f:c3:e5:a2: 6d:64:08:b5:45:75:10:4b:84:c5:7c:6d:c9:98:6d: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E9:41:3A:A0:30:B7:33:1B:BD:5C:80:94:52:6D:20:27:8D:9A:7E X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/sulBOqAwtzMbvVyAlFJtICeNmn4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.38.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:08:d1:66:28:a7:c6:e4:2a:7c:e3:b0:ae:cb:1e:87:99:08: f1:42:08:ec:03:13:60:8f:a0:1f:a6:4d:44:e5:00:31:ba:7a: 81:7e:86:36:04:b3:44:39:a2:7a:e7:77:d2:18:39:aa:cd:cb: 68:d7:d9:7e:6a:0e:a9:30:fe:3f:a2:20:1b:fb:57:cb:b9:e0: d2:8f:41:3c:12:48:3b:82:6f:fd:f9:81:33:98:86:bc:35:22: e7:bc:2c:a2:fa:84:96:73:67:6a:eb:fe:56:60:02:9d:1e:c9: 5a:58:1a:1e:9f:02:7d:34:83:d3:73:37:4b:b4:3c:3b:2e:6c: cb:64:7a:c7:0c:8c:6a:a1:a9:25:23:3b:00:85:46:7f:24:8c: eb:3b:82:1e:59:59:0c:58:88:1b:33:40:79:a5:b6:fa:81:a7: 6a:24:3e:f1:36:f5:86:53:ed:8e:a2:c5:7c:23:09:8e:35:33: 22:14:07:ca:95:36:31:d2:b4:43:26:e5:49:fb:2e:9e:2b:3f: 44:0f:d9:ce:8b:b2:cd:1a:75:00:2a:fc:c3:c6:71:69:de:51: 50:80:11:46:b6:9a:31:ec:16:3d:4e:f1:ed:22:d1:ca:e0:05: 0c:89:33:82:e0:63:fe:57:26:3d:9d:b9:4e:cf:f6:36:f1:01: 5d:53:99:a6 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw ODUyMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIyRTk0MTNBQTAzMEI3 MzMxQkJENUM4MDk0NTI2RDIwMjc4RDlBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2CVpCHEXn9r6M1wcfP3z/F4VhEQj8mw/A3Y6FWUh9J50yZufQ Xxre6Y6C6Q4Pr4WyuHsKsW5Coa+BrYcABCL4gF6Ss8LSca4Te54j9lZY1RY2eI64 4OetVhMY6DXOdd5H/4boDLbL5O7WpapJ5uUugeSoqlYNWzPnRQZfTqRzdzaNGVOp FttftYPy4UrTIu61rOp2BofzUituNxtMt8f3eJI4RH0q4rUjTobYy5cjXr0zre8m WAM6PNmiF206S+7bZgLfgv2ceCCBM9l4SfmnQ0bUWuQf58vMgPz5X72+NyWG4CHW 8jwz4DGaf8Plom1kCLVFdRBLhMV8bcmYbcifAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUsulBOqAwtzMbvVyAlFJtICeNmn4wHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9zdWxCT3FBd3R6TWJ2VnlBbEZK dElDZU5tbjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTom MA0GCSqGSIb3DQEBCwUAA4IBAQAfCNFmKKfG5Cp847Cuyx6HmQjxQgjsAxNgj6Af pk1E5QAxunqBfoY2BLNEOaJ653fSGDmqzcto19l+ag6pMP4/oiAb+1fLueDSj0E8 Ekg7gm/9+YEzmIa8NSLnvCyi+oSWc2dq6/5WYAKdHslaWBoenwJ9NIPTczdLtDw7 LmzLZHrHDIxqoaklIzsAhUZ/JIzrO4IeWVkMWIgbM0B5pbb6gadqJD7xNvWGU+2O osV8IwmONTMiFAfKlTYx0rRDJuVJ+y6eKz9ED9nOi7LNGnUAKvzDxnFp3lFQgBFG tpox7BY9TvHtItHK4AUMiTOC4GP+VyY9nblOz/Y28QFdU5mm -----END CERTIFICATE-----Generated at Sun Aug 24 07:42:29 2025 by rpki-client