$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/4vM82iMaoruG-n-Rd86BuKLk45g.roa File: 4vM82iMaoruG-n-Rd86BuKLk45g.roa (raw, json) Hash identifier: uky2bxfDWRLwswR+/UTjlnQVBnCngUIs10GcAOuHAnU= Subject key identifier: E2:F3:3C:DA:23:1A:A2:BB:86:FA:7F:91:77:CE:81:B8:A2:E4:E3:98 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0E26 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/4vM82iMaoruG-n-Rd86BuKLk45g.roa Signing time: Fri 22 Aug 2025 09:03:30 +0000 ROA not before: Fri 22 Aug 2025 09:03:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 61.63.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3622 (0xe26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 22 09:03:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E2F33CDA231AA2BB86FA7F9177CE81B8A2E4E398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:7c:3f:f6:03:b3:61:df:46:da:bb:43:d6: 33:c7:20:77:0d:b3:5f:d4:42:82:0f:45:f8:b5:18: 7b:ad:c3:29:69:dd:1a:3f:73:fa:0f:21:95:f7:0e: 37:c9:80:f2:db:17:46:5d:ef:3e:9c:b3:20:32:61: e3:3c:55:0c:07:57:28:b4:13:c8:c9:4d:27:ee:7a: 7e:55:c2:fe:16:4d:96:d3:83:7b:4b:41:25:4e:af: d6:b2:40:39:78:06:82:f6:7a:9f:7a:f0:61:ab:d6: 20:e0:0c:90:de:82:cd:ab:1a:65:8b:5c:64:91:d5: f0:b5:32:ad:4d:e8:4d:71:41:4f:98:a2:21:6a:eb: aa:d4:c9:4a:4b:c7:67:bc:7f:d7:a2:ed:07:8f:e1: bf:c5:9d:58:d6:be:ba:8d:b4:95:d3:ed:0f:74:b9: 86:a6:44:13:6a:66:f7:ae:ec:4a:44:4b:32:a8:2b: 62:67:28:18:54:21:ef:3e:86:53:b2:98:98:dc:f8: d8:16:18:c8:ff:fb:5d:04:00:c9:2e:ff:27:1b:cd: 86:b8:64:3a:78:2d:56:13:10:27:2b:c4:75:01:74: d4:8b:23:4d:5e:1f:ea:ec:54:6e:ed:ad:f7:97:47: 12:45:6b:e3:6b:62:a2:a8:e9:9e:ce:4b:f7:b3:28: 04:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F3:3C:DA:23:1A:A2:BB:86:FA:7F:91:77:CE:81:B8:A2:E4:E3:98 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/4vM82iMaoruG-n-Rd86BuKLk45g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.32.0/19 Signature Algorithm: sha256WithRSAEncryption b9:9a:ba:db:b5:57:b6:9f:cd:38:29:a3:15:6b:f2:27:ce:af: 43:a7:76:fc:72:4c:f8:48:19:95:40:68:aa:b8:46:1a:f0:ed: 09:c7:84:20:d3:09:fe:45:6c:ee:5d:49:f3:4f:4e:86:11:e3: a8:1e:e4:b2:4e:a2:35:a3:4c:95:95:43:70:15:b6:32:9c:9a: 4b:cb:26:2d:55:d3:b0:e6:8b:e1:a3:b2:3b:a0:3f:b6:f4:3a: e3:33:de:c7:8a:e1:2d:87:19:f0:8f:45:22:fb:14:b2:df:95: 2a:1e:37:75:0d:a0:87:76:a6:6f:47:55:8e:bf:3a:ac:70:20: f2:fa:64:2d:ec:a9:df:c6:d9:d5:c7:81:10:19:de:a3:94:da: 90:20:87:c5:e2:7d:4c:f8:f0:03:02:da:2a:9a:74:ae:ab:a3: bc:5a:85:e7:dc:c1:0b:6d:b8:cf:e1:3e:0b:a9:8b:8e:52:f0: f2:58:7c:54:a3:4e:fb:82:f3:42:1c:0d:20:29:e9:f7:3c:cb: 45:ed:dc:64:a7:a1:56:33:4a:6a:51:bd:bb:15:76:77:b1:a5: f1:9b:50:ee:00:83:d1:e6:3e:ea:0a:69:f4:0d:50:12:fb:5e: 5c:35:ea:0b:e7:44:e6:25:59:4c:43:bd:57:f1:e0:30:9b:e8: 86:9e:e5:0e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTA4MjIw OTAzMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUyRjMzQ0RBMjMxQUEy QkI4NkZBN0Y5MTc3Q0U4MUI4QTJFNEUzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2LHw/9gOzYd9G2rtD1jPHIHcNs1/UQoIPRfi1GHutwylp3Ro/ c/oPIZX3DjfJgPLbF0Zd7z6csyAyYeM8VQwHVyi0E8jJTSfuen5Vwv4WTZbTg3tL QSVOr9ayQDl4BoL2ep968GGr1iDgDJDegs2rGmWLXGSR1fC1Mq1N6E1xQU+YoiFq 66rUyUpLx2e8f9ei7QeP4b/FnVjWvrqNtJXT7Q90uYamRBNqZveu7EpESzKoK2Jn KBhUIe8+hlOymJjc+NgWGMj/+10EAMku/ycbzYa4ZDp4LVYTECcrxHUBdNSLI01e H+rsVG7trfeXRxJFa+NrYqKo6Z7OS/ezKARjAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU4vM82iMaoruG+n+Rd86BuKLk45gwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JULzR2TTgyaU1hb3J1Ry1uLVJkODZCdUtM azQ1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9PyAwDQYJ KoZIhvcNAQELBQADggEBALmautu1V7afzTgpoxVr8ifOr0OndvxyTPhIGZVAaKq4 Rhrw7QnHhCDTCf5FbO5dSfNPToYR46ge5LJOojWjTJWVQ3AVtjKcmkvLJi1V07Dm i+GjsjugP7b0OuMz3seK4S2HGfCPRSL7FLLflSoeN3UNoId2pm9HVY6/OqxwIPL6 ZC3sqd/G2dXHgRAZ3qOU2pAgh8XifUz48AMC2iqadK6ro7xahefcwQttuM/hPgup i45S8PJYfFSjTvuC80IcDSAp6fc8y0Xt3GSnoVYzSmpRvbsVdnexpfGbUO4Ag9Hm PuoKafQNUBL7Xlw16gvnROYlWUxDvVfx4DCb6Iae5Q4= -----END CERTIFICATE-----Generated at Wed Oct 29 08:14:11 2025 by rpki-client