$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HST/L52ykHxNItL-pfQ60Bd5O4tXjDw.roa File: L52ykHxNItL-pfQ60Bd5O4tXjDw.roa (raw, json) Hash identifier: y/YjKnY+RVdI1mS130avoQ9deUcKw+vHeUpHeE0NkvU= Subject key identifier: 2F:9D:B2:90:7C:4D:22:D2:FE:A5:F4:3A:D0:17:79:3B:8B:57:8C:3C Certificate issuer: /CN=833D5BF79B45C730ED141CB539A508D01AA30908 Certificate serial: 0AD6 Authority key identifier: 83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/L52ykHxNItL-pfQ60Bd5O4tXjDw.roa Signing time: Mon 14 Jul 2025 08:50:12 +0000 ROA not before: Mon 14 Jul 2025 08:50:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131666 IP address blocks: 211.76.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 20:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2774 (0xad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833D5BF79B45C730ED141CB539A508D01AA30908 Validity Not Before: Jul 14 08:50:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2F9DB2907C4D22D2FEA5F43AD017793B8B578C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fa:98:95:ba:98:90:dc:99:a5:a8:27:a4:b4: 01:8e:b4:54:b0:06:c4:98:d0:54:ff:41:0c:23:87: c6:26:20:5f:b8:b3:91:15:30:ea:b3:59:8f:d7:84: 32:7d:9e:8a:02:3b:32:09:50:23:8b:43:81:1c:c7: 98:3b:53:67:b7:a6:42:c9:42:53:d1:9f:57:e5:fa: 4a:78:c7:82:5d:a1:23:eb:8c:ea:7b:32:14:15:9d: 8a:60:0c:89:05:61:b7:b2:50:52:37:40:9c:44:7c: 15:99:dc:47:79:00:d8:aa:ce:2c:ff:59:25:bb:54: da:22:9a:14:84:33:94:41:5f:94:45:53:38:78:09: 22:d2:83:64:9c:31:2d:57:f6:0e:7b:2d:d5:dd:17: a4:2f:9c:58:90:ee:23:1e:01:c7:3c:c4:20:a6:04: 1a:49:fa:b9:fd:be:78:d8:00:4f:20:06:6f:10:21: eb:87:68:ce:07:75:bd:f2:7c:d5:41:2d:dc:87:64: 2b:a4:de:b5:02:b3:77:e0:33:36:ef:bd:4a:00:37: 7d:7b:2b:52:be:12:1c:9d:c6:54:5a:11:53:74:b2: d9:99:21:f4:69:cf:5b:64:38:71:8b:89:9d:fb:52: 73:fa:51:4e:81:28:6e:91:b6:fb:2b:11:e3:2a:44: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9D:B2:90:7C:4D:22:D2:FE:A5:F4:3A:D0:17:79:3B:8B:57:8C:3C X509v3 Authority Key Identifier: keyid:83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/L52ykHxNItL-pfQ60Bd5O4tXjDw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.190.0/23 Signature Algorithm: sha256WithRSAEncryption a1:d6:05:1a:ca:f4:b4:ad:61:ac:34:10:7d:1d:85:4a:d8:7c: 8d:ba:8e:3a:d2:34:71:e6:3d:7e:92:85:a5:9d:eb:c6:91:49: 39:ab:d9:bf:f6:32:1c:34:5f:47:a2:aa:25:d9:dd:83:d3:35: 7a:59:af:ce:46:f9:fa:20:2e:f1:d7:6d:fb:d5:04:b1:8b:3e: cf:01:77:64:e0:aa:64:a2:85:4d:2d:37:64:9f:96:69:ba:ff: 6e:5c:74:c6:e9:73:5c:fc:47:0b:b9:fd:5f:bc:d4:1d:28:0c: 97:d7:3f:a7:83:73:85:b7:d5:76:f3:3d:3a:b3:51:b8:c7:76: 0e:f3:39:5a:76:e1:2a:f5:d9:11:7f:f8:32:8c:1b:f2:d1:78: c2:44:d9:20:af:09:34:79:6b:c5:7d:73:bd:73:2c:02:c7:35: ba:50:01:e6:d3:17:13:b9:7f:64:1b:5e:a3:6c:5b:e8:85:81: 6f:17:45:6a:1f:4c:19:9c:91:52:92:d6:58:21:fd:90:76:73: dc:a8:22:64:8c:64:7f:51:79:ac:41:31:d7:0b:fc:16:cb:58: 95:3f:e4:64:70:a9:49:f5:5d:a1:a6:8c:ff:5d:48:9c:e0:05: 0d:10:25:4f:33:e9:04:b9:0b:8b:c0:ed:58:de:33:09:98:f0: c8:87:49:6f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMz RDVCRjc5QjQ1QzczMEVEMTQxQ0I1MzlBNTA4RDAxQUEzMDkwODAeFw0yNTA3MTQw ODUwMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGOURCMjkwN0M0RDIy RDJGRUE1RjQzQUQwMTc3OTNCOEI1NzhDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDz+piVupiQ3JmlqCektAGOtFSwBsSY0FT/QQwjh8YmIF+4s5EV MOqzWY/XhDJ9nooCOzIJUCOLQ4Ecx5g7U2e3pkLJQlPRn1fl+kp4x4JdoSPrjOp7 MhQVnYpgDIkFYbeyUFI3QJxEfBWZ3Ed5ANiqziz/WSW7VNoimhSEM5RBX5RFUzh4 CSLSg2ScMS1X9g57LdXdF6QvnFiQ7iMeAcc8xCCmBBpJ+rn9vnjYAE8gBm8QIeuH aM4Hdb3yfNVBLdyHZCuk3rUCs3fgMzbvvUoAN317K1K+EhydxlRaEVN0stmZIfRp z1tkOHGLiZ37UnP6UU6BKG6RtvsrEeMqRPr9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUL52ykHxNItL+pfQ60Bd5O4tXjDwwHwYDVR0jBBgwFoAUgz1b95tFxzDtFBy1 OaUI0BqjCQgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL2d6 MWI5NXRGeHpEdEZCeTFPYVVJMEJxakNRZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Z3oxYjk1dEZ4ekR0RkJ5MU9hVUkwQnFqQ1FnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL0w1MnlrSHhOSXRMLXBmUTYwQmQ1TzR0 WGpEdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTTL4wDQYJ KoZIhvcNAQELBQADggEBAKHWBRrK9LStYaw0EH0dhUrYfI26jjrSNHHmPX6ShaWd 68aRSTmr2b/2Mhw0X0eiqiXZ3YPTNXpZr85G+fogLvHXbfvVBLGLPs8Bd2TgqmSi hU0tN2Sflmm6/25cdMbpc1z8Rwu5/V+81B0oDJfXP6eDc4W31XbzPTqzUbjHdg7z OVp24Sr12RF/+DKMG/LReMJE2SCvCTR5a8V9c71zLALHNbpQAebTFxO5f2QbXqNs W+iFgW8XRWofTBmckVKS1lgh/ZB2c9yoImSMZH9ReaxBMdcL/BbLWJU/5GRwqUn1 XaGmjP9dSJzgBQ0QJU8z6QS5C4vA7VjeMwmY8MiHSW8= -----END CERTIFICATE-----Generated at Fri Aug 1 18:22:37 2025 by rpki-client