$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AgWZnmRHC-K8XHyOS1AzfXarwHo.roa File: AgWZnmRHC-K8XHyOS1AzfXarwHo.roa (raw, json) Hash identifier: xQxxCi8AV78gIZDDRphweqHAY0grYjvVxIp9JschM9o= Subject key identifier: 02:05:99:9E:64:47:0B:E2:BC:5C:7C:8E:4B:50:33:7D:76:AB:C0:7A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1362 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AgWZnmRHC-K8XHyOS1AzfXarwHo.roa Signing time: Fri 18 Jul 2025 08:51:31 +0000 ROA not before: Fri 18 Jul 2025 08:51:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 218.35.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 20:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4962 (0x1362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jul 18 08:51:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0205999E64470BE2BC5C7C8E4B50337D76ABC07A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:51:69:63:41:63:d8:68:6e:e3:30:0b:43:07: ee:c7:24:53:51:2a:7f:eb:84:f8:8b:e1:76:cb:f1: 5c:ab:8f:8a:1d:cb:08:d5:fe:21:26:bb:72:df:af: 45:0e:03:80:65:b9:f2:a7:ca:46:d9:2e:b6:69:bf: 30:43:54:1b:79:a2:ce:94:8d:b8:85:2a:0d:3a:3b: 6e:fd:e7:95:ed:07:23:3e:04:4f:74:4c:65:e4:0c: e1:d0:05:be:db:08:5c:7d:8a:67:15:df:72:0e:d6: bd:ad:b4:85:ca:23:16:46:c7:37:4c:8c:64:35:6c: 57:d8:6f:8f:0a:4a:79:5f:cf:11:ac:00:8b:70:30: e3:7f:3d:c0:e6:9a:8f:bd:ea:bc:21:c0:92:5a:d8: de:1f:fd:81:b8:ff:6c:39:cd:3f:7e:66:99:11:76: 0e:45:68:c8:7c:37:5b:8e:a0:58:68:4f:4f:0a:87: 49:b6:54:e4:9f:25:9e:54:7f:4c:d6:ef:f8:e7:ba: 95:f2:4d:3c:a7:e2:5a:22:bc:3f:0c:59:06:b8:1b: 4a:5d:fb:8e:0a:51:5a:86:ec:d2:1f:ad:29:c7:72: cf:4a:aa:9f:95:6c:52:eb:ae:b4:fd:f5:33:66:5b: f4:8f:48:2c:d7:d2:aa:4a:d4:13:ff:2a:d8:b8:69: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:05:99:9E:64:47:0B:E2:BC:5C:7C:8E:4B:50:33:7D:76:AB:C0:7A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AgWZnmRHC-K8XHyOS1AzfXarwHo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.192.0/18 Signature Algorithm: sha256WithRSAEncryption 86:7e:96:87:8f:1d:6b:3d:47:90:0d:8d:c6:09:62:c0:56:7d: a3:ba:a4:6f:89:82:4a:1f:65:63:e5:8c:f3:8c:bd:1b:0f:24: 5d:64:7d:cb:68:72:6c:24:6e:cd:40:fd:dc:c6:b8:34:d3:49: f5:00:6f:56:96:d2:f7:6f:e8:ef:8b:c8:9a:c0:23:dd:b7:8f: fc:f8:0b:5a:31:3d:da:dd:c0:b2:ed:15:00:ce:7c:d2:79:da: 3b:db:df:c9:6d:2b:60:77:b3:26:09:5b:cc:52:ef:4d:95:9e: 57:c2:78:14:d1:05:98:e4:16:87:30:56:68:c9:27:c4:8b:93: f3:eb:b2:18:a4:b7:b4:29:6c:8b:b9:80:79:0d:aa:9e:01:a7: dd:dc:e7:97:70:5a:99:b6:ef:98:a8:57:2d:e3:44:24:1f:8a: f7:58:a8:f4:b2:5a:26:e4:6e:5c:bd:d1:14:fb:9a:6e:24:e6: 05:4b:78:8c:49:6f:35:7a:6b:31:ff:44:ac:9e:cf:fc:6a:1f: f0:d8:c6:f1:e5:66:9d:9b:cf:b6:f5:f5:92:2b:97:3c:88:15: 24:4a:bf:31:83:13:cd:ea:fe:9f:37:21:26:71:b9:86:21:ba: 9c:a3:61:86:ab:7d:97:84:c5:10:54:5b:77:e0:10:36:c3:1c: 99:89:59:76 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA3MTgw ODUxMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyMDU5OTlFNjQ0NzBC RTJCQzVDN0M4RTRCNTAzMzdENzZBQkMwN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwUWljQWPYaG7jMAtDB+7HJFNRKn/rhPiL4XbL8Vyrj4odywjV /iEmu3Lfr0UOA4BlufKnykbZLrZpvzBDVBt5os6UjbiFKg06O27955XtByM+BE90 TGXkDOHQBb7bCFx9imcV33IO1r2ttIXKIxZGxzdMjGQ1bFfYb48KSnlfzxGsAItw MON/PcDmmo+96rwhwJJa2N4f/YG4/2w5zT9+ZpkRdg5FaMh8N1uOoFhoT08Kh0m2 VOSfJZ5Uf0zW7/jnupXyTTyn4loivD8MWQa4G0pd+44KUVqG7NIfrSnHcs9Kqp+V bFLrrrT99TNmW/SPSCzX0qpK1BP/Kti4adpFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUAgWZnmRHC+K8XHyOS1AzfXarwHowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0FnV1pubVJIQy1LOFhIeU9TMUF6Zlhh cndIby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbaI8AwDQYJ KoZIhvcNAQELBQADggEBAIZ+loePHWs9R5ANjcYJYsBWfaO6pG+JgkofZWPljPOM vRsPJF1kfctocmwkbs1A/dzGuDTTSfUAb1aW0vdv6O+LyJrAI923j/z4C1oxPdrd wLLtFQDOfNJ52jvb38ltK2B3syYJW8xS702VnlfCeBTRBZjkFocwVmjJJ8SLk/Pr shikt7QpbIu5gHkNqp4Bp93c55dwWpm275ioVy3jRCQfivdYqPSyWibkbly90RT7 mm4k5gVLeIxJbzV6azH/RKyez/xqH/DYxvHlZp2bz7b19ZIrlzyIFSRKvzGDE83q /p83ISZxuYYhupyjYYarfZeExRBUW3fgEDbDHJmJWXY= -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:11 2025 by rpki-client