$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9OynPyTTvtMXj4byC-X3UHyGxig.roa File: 9OynPyTTvtMXj4byC-X3UHyGxig.roa (raw, json) Hash identifier: 35GsrAhTkn22p8MIQnQW11OIyzsVUCuZ1kYWUKKI8Jk= Subject key identifier: F4:EC:A7:3F:24:D3:BE:D3:17:8F:86:F2:0B:E5:F7:50:7C:86:C6:28 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1455 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9OynPyTTvtMXj4byC-X3UHyGxig.roa Signing time: Fri 22 Aug 2025 09:00:18 +0000 ROA not before: Fri 22 Aug 2025 09:00:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9311 IP address blocks: 210.201.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5205 (0x1455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F4ECA73F24D3BED3178F86F20BE5F7507C86C628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:a2:3e:89:49:fd:41:02:86:97:7a:ba:ad: a5:1e:ad:8c:93:58:5f:71:6f:e7:6c:a2:ae:08:39: 95:35:c4:b3:b5:2b:70:65:c2:d7:46:35:ca:a5:88: 5d:93:c5:e9:93:4b:f8:c8:ad:e1:e1:fd:05:b5:a9: 50:6a:31:44:f0:e4:19:5a:da:f7:4c:bd:ff:8e:38: 69:68:88:2f:29:f8:b5:62:01:73:b4:95:5c:f8:ff: 9a:ec:75:32:62:6e:d5:f9:98:b7:4b:df:f6:a8:65: 89:2c:1c:ab:d6:83:fb:79:46:a6:9e:95:85:bd:c4: 60:78:59:b2:12:d9:9a:fd:45:a5:76:6a:73:c6:46: de:97:d0:75:df:83:a3:83:a8:b3:5b:81:9b:53:a8: 18:c6:e6:06:2e:e0:5e:98:ed:f9:e0:e1:c3:cf:9d: 11:2c:8c:dc:bc:99:64:1a:50:55:5e:1c:a3:ce:13: e4:8d:bc:7f:4d:e4:d8:90:7e:f2:f0:93:12:a0:e0: df:21:b1:3c:bb:a3:53:11:11:13:8d:2f:83:3e:61: bc:b6:4f:9d:10:9b:db:25:7d:55:5e:83:7a:9b:58: 65:ec:a0:70:58:87:6d:72:68:6c:09:b2:df:2a:10: ba:76:06:39:16:e2:05:72:5c:5c:9b:ef:14:1e:f7: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EC:A7:3F:24:D3:BE:D3:17:8F:86:F2:0B:E5:F7:50:7C:86:C6:28 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9OynPyTTvtMXj4byC-X3UHyGxig.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.60.0/23 Signature Algorithm: sha256WithRSAEncryption 88:34:38:67:41:b2:d4:da:a2:33:1d:69:bf:36:eb:aa:3e:f2: 1d:01:6f:3d:ba:d8:3f:80:a5:6d:4d:80:8e:4c:38:60:78:df: 06:cb:e3:ce:29:20:fb:56:85:cf:c3:bb:60:1b:57:e1:21:e3: 82:e5:f5:5e:45:81:63:03:e8:e7:99:e3:f6:d3:47:2f:a9:1c: 9b:26:b8:4e:3d:b1:42:a3:32:fd:98:f3:d7:cc:d8:7b:24:e3: 03:f7:fd:93:55:b8:55:da:6c:b7:d4:66:03:1a:8b:d7:92:b6: c9:5b:67:7c:f5:9c:a2:c2:a1:20:9a:6a:b4:75:30:be:f5:0e: 37:15:19:9a:c1:3c:3f:c3:04:d7:23:86:64:8d:8a:be:b3:19: a9:7f:24:05:94:80:d3:a1:c0:cb:d0:dc:0e:2f:3d:b7:2d:6f: 18:37:67:31:4b:fd:d4:2e:c1:10:b0:8f:5d:34:9b:23:18:ea: f6:2b:90:a2:09:4b:f1:02:16:c3:3c:0f:3f:8f:9d:40:1a:a7: 62:67:8b:9d:18:82:57:8f:1a:f8:38:63:53:50:43:42:c0:7c: fa:56:86:0c:c4:7f:8c:cf:a4:56:81:77:9f:ed:b5:11:74:33: 61:7f:c7:90:0a:83:47:ef:e9:a5:79:d3:be:13:e9:49:25:aa: de:af:d2:6f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY0RUNBNzNGMjREM0JF RDMxNzhGODZGMjBCRTVGNzUwN0M4NkM2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2sKI+iUn9QQKGl3q6raUerYyTWF9xb+dsoq4IOZU1xLO1K3Bl wtdGNcqliF2TxemTS/jIreHh/QW1qVBqMUTw5Bla2vdMvf+OOGloiC8p+LViAXO0 lVz4/5rsdTJibtX5mLdL3/aoZYksHKvWg/t5RqaelYW9xGB4WbIS2Zr9RaV2anPG Rt6X0HXfg6ODqLNbgZtTqBjG5gYu4F6Y7fng4cPPnREsjNy8mWQaUFVeHKPOE+SN vH9N5NiQfvLwkxKg4N8hsTy7o1MRERONL4M+Yby2T50Qm9slfVVeg3qbWGXsoHBY h21yaGwJst8qELp2BjkW4gVyXFyb7xQe9y/VAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU9OynPyTTvtMXj4byC+X3UHyGxigwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzlPeW5QeVRUdnRNWGo0YnlDLVgzVUh5 R3hpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSyTwwDQYJ KoZIhvcNAQELBQADggEBAIg0OGdBstTaojMdab8266o+8h0Bbz262D+ApW1NgI5M OGB43wbL484pIPtWhc/Du2AbV+Eh44Ll9V5FgWMD6OeZ4/bTRy+pHJsmuE49sUKj Mv2Y89fM2Hsk4wP3/ZNVuFXabLfUZgMai9eStslbZ3z1nKLCoSCaarR1ML71DjcV GZrBPD/DBNcjhmSNir6zGal/JAWUgNOhwMvQ3A4vPbctbxg3ZzFL/dQuwRCwj100 myMY6vYrkKIJS/ECFsM8Dz+PnUAap2Jni50YglePGvg4Y1NQQ0LAfPpWhgzEf4zP pFaBd5/ttRF0M2F/x5AKg0fv6aV5074T6Uklqt6v0m8= -----END CERTIFICATE-----Generated at Sat Sep 6 13:37:30 2025 by rpki-client