$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/oWaJrzrJG7L3me6jyfR-brmAEJI.roa File: oWaJrzrJG7L3me6jyfR-brmAEJI.roa (raw, json) Hash identifier: ae3bTFB7UbCeXZAwvQYtp7NhbgA/Do9S/zNHaxwWnuE= Subject key identifier: A1:66:89:AF:3A:C9:1B:B2:F7:99:EE:A3:C9:F4:7E:6E:B9:80:10:92 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0E14 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/oWaJrzrJG7L3me6jyfR-brmAEJI.roa Signing time: Fri 22 Aug 2025 08:51:01 +0000 ROA not before: Fri 22 Aug 2025 08:51:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18182 IP address blocks: 39.1.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 16:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3604 (0xe14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 22 08:51:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A16689AF3AC91BB2F799EEA3C9F47E6EB9801092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:35:97:30:59:3a:c6:f0:1c:b5:09:b6:6d: 82:ae:a8:2c:5f:a4:78:58:3e:f9:df:1b:ce:f3:25: 2b:9a:6c:7e:ce:52:b4:f6:e9:77:a9:f5:96:14:50: 4c:e8:f1:5b:c6:ae:0d:1d:5e:55:a4:c3:ee:0f:f2: c5:6a:64:2a:55:9a:46:41:5e:e0:7d:0d:63:6d:55: be:0c:63:2b:87:5a:88:55:5b:14:97:78:f6:30:d7: a4:e5:4c:4c:a2:e2:1d:75:62:87:c9:7c:ac:97:8f: 4d:48:05:61:12:9e:63:4a:d0:41:ee:0b:4c:5f:a8: be:7d:e0:8a:41:3d:91:0b:b5:0f:5f:7e:a3:9e:7b: 88:ec:8b:a6:27:3e:07:69:c9:2f:cd:10:55:60:b5: 4e:72:80:ac:c3:b8:4b:e2:69:d4:da:e8:36:e3:25: ab:20:ca:16:1e:56:e6:66:d0:5f:d7:2b:9e:68:17: 35:40:58:32:06:ef:6b:33:63:70:f5:d3:b6:48:08: c5:a9:a5:77:f2:c7:c4:50:ce:b1:22:80:99:40:e4: f4:01:c8:6b:e4:9a:38:f9:79:04:ae:99:f0:53:f8: cc:64:1e:59:b3:53:4d:ae:40:7f:59:2b:3c:9c:a3: cc:d3:17:d9:d1:61:0c:e3:3a:df:75:1e:93:09:8b: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:66:89:AF:3A:C9:1B:B2:F7:99:EE:A3:C9:F4:7E:6E:B9:80:10:92 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/oWaJrzrJG7L3me6jyfR-brmAEJI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:e3:53:37:9f:3c:79:8e:99:4c:71:b0:cf:56:01:4b:0b:45: ad:95:15:92:ee:07:d5:65:33:5c:77:d2:1e:f9:53:65:9b:75: a0:fc:58:22:31:f4:58:0e:25:63:8f:a2:2f:d8:5d:7a:8b:02: 04:93:df:c9:b0:d6:9f:8b:d1:5c:8a:e6:55:51:82:e7:e1:38: 98:e3:c8:cb:c2:ec:f9:f1:46:9f:32:05:58:59:8d:7c:15:a0: ce:84:2c:47:a7:90:aa:2b:ae:fd:f6:49:fd:34:7c:a4:16:04: b8:fc:46:a0:44:8d:bd:98:6d:7d:11:dc:59:da:bb:55:18:1c: a1:75:a1:97:59:e2:e1:24:89:ef:b8:e5:f4:5a:49:e3:07:ab: 0f:a8:f3:58:ff:d5:80:9e:da:ca:88:d2:6a:07:e7:c4:45:b4: 8b:5c:85:0d:2c:c0:b7:7b:bb:4a:1a:d4:b4:29:94:85:ef:f0: 7f:0f:ea:0f:f2:b1:25:88:cc:c5:3a:88:48:80:de:04:57:ee: 65:00:f1:24:4b:0e:b1:8f:86:b2:98:71:41:b8:af:8b:a3:ef: e2:7e:d5:6c:3a:ed:7b:3f:cf:65:26:cf:55:95:91:18:02:a3: 03:bc:e4:c5:bc:46:20:24:5c:dc:66:00:32:5e:76:cd:36:a4: 62:fa:cf:01 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTA4MjIw ODUxMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEExNjY4OUFGM0FDOTFC QjJGNzk5RUVBM0M5RjQ3RTZFQjk4MDEwOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYHjWXMFk6xvActQm2bYKuqCxfpHhYPvnfG87zJSuabH7OUrT2 6Xep9ZYUUEzo8VvGrg0dXlWkw+4P8sVqZCpVmkZBXuB9DWNtVb4MYyuHWohVWxSX ePYw16TlTEyi4h11YofJfKyXj01IBWESnmNK0EHuC0xfqL594IpBPZELtQ9ffqOe e4jsi6YnPgdpyS/NEFVgtU5ygKzDuEviadTa6DbjJasgyhYeVuZm0F/XK55oFzVA WDIG72szY3D107ZICMWppXfyx8RQzrEigJlA5PQByGvkmjj5eQSumfBT+MxkHlmz U02uQH9ZKzyco8zTF9nRYQzjOt91HpMJiyG9AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUoWaJrzrJG7L3me6jyfR+brmAEJIwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9vV2FKcnpySkc3TDNtZTZqeWZS LWJybUFFSkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAJwEw DQYJKoZIhvcNAQELBQADggEBAAzjUzefPHmOmUxxsM9WAUsLRa2VFZLuB9VlM1x3 0h75U2WbdaD8WCIx9FgOJWOPoi/YXXqLAgST38mw1p+L0VyK5lVRgufhOJjjyMvC 7PnxRp8yBVhZjXwVoM6ELEenkKorrv32Sf00fKQWBLj8RqBEjb2YbX0R3Fnau1UY HKF1oZdZ4uEkie+45fRaSeMHqw+o81j/1YCe2sqI0moH58RFtItchQ0swLd7u0oa 1LQplIXv8H8P6g/ysSWIzMU6iEiA3gRX7mUA8SRLDrGPhrKYcUG4r4uj7+J+1Ww6 7Xs/z2Umz1WVkRgCowO85MW8RiAkXNxmADJeds02pGL6zwE= -----END CERTIFICATE-----Generated at Fri Oct 24 13:05:55 2025 by rpki-client