$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZAT/uqD1LTMvxCpUwPe1_ixhPgB8BJM.roa File: uqD1LTMvxCpUwPe1_ixhPgB8BJM.roa (raw, json) Hash identifier: r5jyshVKXUQRSSW7jtobH7flAsJj2CDG316TPGuTXWY= Subject key identifier: BA:A0:F5:2D:33:2F:C4:2A:54:C0:F7:B5:FE:2C:61:3E:00:7C:04:93 Certificate issuer: /CN=41D608336CCF0EDFEA4A24614F1D7234884E8991 Certificate serial: 0226 Authority key identifier: 41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/uqD1LTMvxCpUwPe1_ixhPgB8BJM.roa Signing time: Fri 22 Aug 2025 08:44:06 +0000 ROA not before: Fri 22 Aug 2025 08:44:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 215672 IP address blocks: 210.79.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D608336CCF0EDFEA4A24614F1D7234884E8991 Validity Not Before: Aug 22 08:44:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BAA0F52D332FC42A54C0F7B5FE2C613E007C0493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:44:25:8f:c8:11:23:88:84:67:b5:ab:4c: 5e:4a:72:a5:04:ff:31:26:29:bc:77:6a:12:98:13: 37:6e:ed:67:47:2f:7c:91:89:df:aa:86:f7:2a:67: ce:7f:79:e7:c2:dd:59:c4:9a:42:8f:fb:bc:50:48: 6f:e6:8a:c3:96:e5:05:79:a0:63:b5:2a:2b:c6:df: dc:7a:fc:f9:bd:b1:ba:f1:37:ad:d6:d7:3c:0f:d6: ec:bd:c6:49:0a:8d:d7:3d:47:65:5a:79:79:9f:cc: c1:19:c3:a5:c2:88:a2:16:0f:99:d0:8a:1f:bc:c9: c4:18:e0:08:e9:e3:f8:d5:46:0f:56:76:0f:75:88: da:9b:00:27:8f:14:dc:fb:75:f3:6a:8f:db:4b:76: bb:f3:34:ce:c9:de:61:6c:82:c6:6a:2b:ae:fc:c8: 0f:3e:d8:25:56:a2:a4:8f:ae:59:5c:fc:be:82:4b: 0a:e8:a4:a3:eb:eb:5e:2a:e6:1f:2b:43:72:51:3c: bf:f9:a3:85:a8:e4:92:a8:49:dd:b3:29:c8:fa:d5: 4e:04:3f:55:46:bd:18:95:6c:fd:48:2a:11:1c:63: 9e:74:05:75:d3:c5:58:2d:53:41:c9:e3:d4:88:94: 87:58:30:e7:b7:d4:13:5b:33:d8:63:38:47:05:3c: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:F5:2D:33:2F:C4:2A:54:C0:F7:B5:FE:2C:61:3E:00:7C:04:93 X509v3 Authority Key Identifier: keyid:41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/uqD1LTMvxCpUwPe1_ixhPgB8BJM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.79.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:7f:54:c8:ce:f0:5e:53:13:5c:63:d3:98:0a:92:c0:5b:f9: 99:1b:e5:d1:9b:fe:e9:7a:5b:c2:9c:67:b4:69:3f:98:ec:41: 22:7e:56:35:82:8e:03:57:db:ac:f1:10:2a:4f:3f:dd:7d:83: 00:25:4e:f8:65:0c:b2:ef:11:4a:e9:8d:3f:2a:0e:02:00:42: ba:05:62:a0:3b:cc:70:2f:7f:0a:72:6a:19:3b:e9:d1:0b:2a: d0:65:ac:d7:15:98:97:aa:f8:44:6a:83:71:9e:4b:d5:e6:6a: 7f:dc:56:1c:56:59:93:54:51:f8:43:d4:ed:16:08:c9:6f:df: 7b:da:fd:b7:82:d3:d4:77:3f:f0:90:89:45:35:72:f6:67:ea: 0b:45:48:5e:03:d3:08:9a:2b:c2:6b:02:70:f9:de:19:df:9a: c0:38:d4:f2:36:46:05:c1:c8:0a:ca:4f:b9:4f:2b:00:64:07: dd:a4:4f:ac:77:1b:85:81:7f:68:7d:44:bb:29:ec:03:71:8a: 74:46:f2:38:49:c9:a6:9b:db:87:2e:d0:44:ff:51:1c:d7:e5: 5d:c5:2b:e7:9f:c8:09:4d:47:68:a2:02:8e:54:bb:da:94:dd: 34:00:9d:b6:86:00:46:cb:62:b7:bd:e0:01:c6:64:03:90:9b: a0:a8:02:6c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFE NjA4MzM2Q0NGMEVERkVBNEEyNDYxNEYxRDcyMzQ4ODRFODk5MTAeFw0yNTA4MjIw ODQ0MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJBQTBGNTJEMzMyRkM0 MkE1NEMwRjdCNUZFMkM2MTNFMDA3QzA0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw9kQlj8gRI4iEZ7WrTF5KcqUE/zEmKbx3ahKYEzdu7WdHL3yR id+qhvcqZ85/eefC3VnEmkKP+7xQSG/misOW5QV5oGO1KivG39x6/Pm9sbrxN63W 1zwP1uy9xkkKjdc9R2VaeXmfzMEZw6XCiKIWD5nQih+8ycQY4Ajp4/jVRg9Wdg91 iNqbACePFNz7dfNqj9tLdrvzNM7J3mFsgsZqK678yA8+2CVWoqSPrllc/L6CSwro pKPr614q5h8rQ3JRPL/5o4Wo5JKoSd2zKcj61U4EP1VGvRiVbP1IKhEcY550BXXT xVgtU0HJ49SIlIdYMOe31BNbM9hjOEcFPHcnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUuqD1LTMvxCpUwPe1/ixhPgB8BJMwHwYDVR0jBBgwFoAUQdYIM2zPDt/qSiRh Tx1yNIhOiZEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkFUL1Fk WUlNMnpQRHRfcVNpUmhUeDF5TkloT2laRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UWRZSU0yelBEdF9xU2lSaFR4MXlOSWhPaVpFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvWkFUL3VxRDFMVE12eENwVXdQZTFfaXhoUGdC OEJKTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADST5YwDQYJ KoZIhvcNAQELBQADggEBAIt/VMjO8F5TE1xj05gKksBb+Zkb5dGb/ul6W8KcZ7Rp P5jsQSJ+VjWCjgNX26zxECpPP919gwAlTvhlDLLvEUrpjT8qDgIAQroFYqA7zHAv fwpyahk76dELKtBlrNcVmJeq+ERqg3GeS9Xman/cVhxWWZNUUfhD1O0WCMlv33va /beC09R3P/CQiUU1cvZn6gtFSF4D0wiaK8JrAnD53hnfmsA41PI2RgXByArKT7lP KwBkB92kT6x3G4WBf2h9RLsp7ANxinRG8jhJyaab24cu0ET/URzX5V3FK+efyAlN R2iiAo5Uu9qU3TQAnbaGAEbLYre94AHGZAOQm6CoAmw= -----END CERTIFICATE-----Generated at Sun Aug 24 06:48:43 2025 by rpki-client