$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/tX1F8WlhGo12Jg9SbdEainUVwTM.roa File: tX1F8WlhGo12Jg9SbdEainUVwTM.roa (raw, json) Hash identifier: AjNSQIsB9NprSX45gxw0mdVddWmvwE86vivt2edZdhM= Subject key identifier: B5:7D:45:F1:69:61:1A:8D:76:26:0F:52:6D:D1:1A:8A:75:15:C1:33 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1480 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tX1F8WlhGo12Jg9SbdEainUVwTM.roa Signing time: Fri 22 Aug 2025 09:00:29 +0000 ROA not before: Fri 22 Aug 2025 09:00:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 218.34.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5248 (0x1480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B57D45F169611A8D76260F526DD11A8A7515C133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:fe:dd:f0:17:c5:23:31:2f:99:c9:42:a1: 64:6b:10:08:8d:6b:12:4e:fa:1e:7f:a5:9a:ab:72: 42:68:d7:f4:74:48:43:b2:ab:e7:76:a3:69:ac:8f: c1:f5:e4:23:9d:da:73:92:a1:37:14:9c:d0:10:89: b4:72:a9:5f:f0:e0:c2:19:02:d5:74:2e:09:66:c7: 01:e8:77:01:0b:5d:4e:a1:be:cf:95:4c:22:50:09: cd:1e:40:92:c9:5d:57:a2:e6:54:e1:50:a2:cb:29: 9a:92:9e:84:ad:2f:b0:55:da:83:bf:e1:11:3b:ba: 9f:36:32:98:d5:e0:b1:ad:ca:a2:81:8f:de:8b:17: ac:2c:62:f5:b2:9e:47:ab:9b:e6:ed:a4:b4:53:1c: f4:58:44:18:2e:0a:ac:70:ca:64:d5:27:e0:e8:c0: 4c:a8:c6:eb:f1:47:53:44:f9:95:fc:0e:78:a6:f9: 17:6d:10:d9:5c:e5:47:5c:dd:92:01:d1:90:e6:2b: 05:5b:58:a4:15:79:6d:74:9a:9b:35:4e:3d:0a:07: 80:e7:1d:ca:a9:8f:f2:82:fa:cd:f9:ea:b8:17:2a: 0c:09:c2:46:8a:94:47:19:1a:fa:a5:2f:8a:3c:9a: f1:3d:12:4e:d6:dc:a2:f8:e5:6f:b2:93:50:57:99: 72:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7D:45:F1:69:61:1A:8D:76:26:0F:52:6D:D1:1A:8A:75:15:C1:33 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tX1F8WlhGo12Jg9SbdEainUVwTM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.96.0/21 Signature Algorithm: sha256WithRSAEncryption a3:e4:79:a8:98:1d:66:6f:b2:f9:ee:12:44:f5:f8:bb:a9:b3: b0:ec:44:6b:77:8c:07:a0:b2:21:f1:47:25:32:d5:f9:17:af: e3:b2:61:d1:a4:03:d5:e2:dd:13:77:02:b4:a1:a5:20:e3:08: 24:5e:60:ae:84:6b:fe:36:4d:a2:e0:5c:1e:b4:3c:41:60:67: db:14:c9:8d:3e:11:7b:93:98:c0:0b:69:c1:4c:ff:02:33:73: 81:32:5c:1a:62:1c:0e:22:e3:73:f5:da:35:b9:a0:c9:42:e6: 43:e3:f6:0a:55:ae:4d:19:f1:89:00:03:7c:7e:94:68:05:b0: 64:75:7a:27:bf:50:18:58:54:ec:3e:41:8b:e1:a5:94:39:c5: 52:ed:60:6e:5b:07:d4:ac:aa:61:80:68:24:24:60:86:35:e4: c2:45:67:28:c1:9e:2b:82:3c:2c:62:e0:13:44:d3:ec:b6:63: 16:4e:a3:e5:64:6b:f6:0a:23:ab:86:b3:d0:c3:b9:86:19:22: 14:36:87:5a:36:f0:af:30:e5:60:89:cc:bd:13:24:b3:df:7e: a8:3b:43:b7:e8:73:9d:95:13:81:cf:ab:03:27:29:05:95:48: 89:5b:c0:24:d9:eb:62:81:ec:db:ca:3b:d0:fb:21:6b:d5:5c: 95:42:e3:3e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI1N0Q0NUYxNjk2MTFB OEQ3NjI2MEY1MjZERDExQThBNzUxNUMxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBL/7d8BfFIzEvmclCoWRrEAiNaxJO+h5/pZqrckJo1/R0SEOy q+d2o2msj8H15COd2nOSoTcUnNAQibRyqV/w4MIZAtV0LglmxwHodwELXU6hvs+V TCJQCc0eQJLJXVei5lThUKLLKZqSnoStL7BV2oO/4RE7up82MpjV4LGtyqKBj96L F6wsYvWynkerm+btpLRTHPRYRBguCqxwymTVJ+DowEyoxuvxR1NE+ZX8Dnim+Rdt ENlc5Udc3ZIB0ZDmKwVbWKQVeW10mps1Tj0KB4DnHcqpj/KC+s356rgXKgwJwkaK lEcZGvqlL4o8mvE9Ek7W3KL45W+yk1BXmXKTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUtX1F8WlhGo12Jg9SbdEainUVwTMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3RYMUY4V2xoR28xMkpnOVNiZEVhaW5V VndUTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaImAwDQYJ KoZIhvcNAQELBQADggEBAKPkeaiYHWZvsvnuEkT1+Lups7DsRGt3jAegsiHxRyUy 1fkXr+OyYdGkA9Xi3RN3ArShpSDjCCReYK6Ea/42TaLgXB60PEFgZ9sUyY0+EXuT mMALacFM/wIzc4EyXBpiHA4i43P12jW5oMlC5kPj9gpVrk0Z8YkAA3x+lGgFsGR1 eie/UBhYVOw+QYvhpZQ5xVLtYG5bB9SsqmGAaCQkYIY15MJFZyjBniuCPCxi4BNE 0+y2YxZOo+Vka/YKI6uGs9DDuYYZIhQ2h1o28K8w5WCJzL0TJLPffqg7Q7foc52V E4HPqwMnKQWVSIlbwCTZ62KB7NvKO9D7IWvVXJVC4z4= -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:55 2025 by rpki-client