$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/-sURYYFbjDVZsmvO2y_EKT0Bb14.roa File: -sURYYFbjDVZsmvO2y_EKT0Bb14.roa (raw, json) Hash identifier: GuluNvcr/zKIfmQJH5TQ4f3SpdL61a7n9N6+7Xs7l/A= Subject key identifier: FA:C5:11:61:81:5B:8C:35:59:B2:6B:CE:DB:2F:C4:29:3D:01:6F:5E Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1094 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/-sURYYFbjDVZsmvO2y_EKT0Bb14.roa Signing time: Fri 22 Aug 2025 08:55:38 +0000 ROA not before: Fri 22 Aug 2025 08:55:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 210.71.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4244 (0x1094) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FAC51161815B8C3559B26BCEDB2FC4293D016F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:ff:72:dc:ed:aa:8c:be:16:2f:18:00:86: 9b:7e:da:50:e0:80:8c:96:70:ed:c9:d0:66:21:4a: f2:14:5f:1c:8e:9e:19:ed:8e:23:3f:b3:24:61:ba: 9b:f2:4b:7e:c6:96:92:89:b5:b1:e2:e1:46:8e:89: 50:b3:8f:27:d3:18:3b:95:66:0a:f5:e9:bf:89:67: 7b:28:11:ee:6b:5c:67:c3:d0:42:61:36:37:e3:3c: 6f:ba:6f:69:3b:4d:b8:3b:d1:72:4a:4f:bb:6c:a2: cf:9b:9a:b8:d3:33:54:7b:35:71:88:65:2e:fc:55: 17:b6:ac:9b:5a:84:a6:4b:82:65:07:69:29:99:f6: 15:5c:6d:35:ed:fa:3b:7f:83:e5:06:4f:6d:ac:90: 0a:17:fa:3b:5a:1f:48:29:22:c5:3c:f7:5d:61:a6: 14:a2:ef:2c:d7:21:5a:f7:83:d0:14:84:a9:60:97: 9c:e1:3b:09:e6:09:35:ff:56:0e:7a:4c:d7:29:44: 7c:2c:84:27:c0:79:53:ef:32:e0:4d:fa:d6:ad:1c: cc:d3:d0:5b:f4:78:d1:26:a5:19:e7:88:3c:5b:bf: 54:93:e6:4b:21:20:cd:f5:70:12:0c:f8:70:05:44: 13:ec:f5:f3:a0:a8:92:06:9f:54:11:0c:7c:c4:5d: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C5:11:61:81:5B:8C:35:59:B2:6B:CE:DB:2F:C4:29:3D:01:6F:5E X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/-sURYYFbjDVZsmvO2y_EKT0Bb14.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.71.0.0/17 Signature Algorithm: sha256WithRSAEncryption 99:2a:5b:d6:af:ba:70:1f:6c:9d:a6:7e:4c:a3:75:bb:03:15: 2e:06:06:e8:55:52:9c:80:b4:68:40:14:86:40:d4:20:57:2a: b1:1f:24:de:b2:ed:b5:4b:5d:8e:71:f0:98:67:11:e9:24:6d: ce:07:1a:7d:f7:87:1e:84:ab:73:ee:e0:6d:7b:dc:fa:63:41: 6a:e6:50:0d:c5:0d:ab:39:e0:e8:8a:41:86:ea:c4:fe:77:89: 35:a9:a0:35:48:cd:c1:c0:0c:ba:e3:7f:7b:a8:33:ef:50:02: 48:06:55:5a:bf:bb:e2:33:48:42:15:c2:65:1d:93:d2:d5:f3: a0:13:5c:02:0e:70:65:af:ef:ef:b0:4e:58:27:2b:04:51:87: e6:3c:49:34:61:d3:0c:a6:d2:ae:dd:1e:ce:d8:55:11:5d:d6: 3d:19:6d:c2:32:2c:a0:3c:64:7c:73:9e:48:bf:a6:61:58:8a: 2b:6c:8b:6a:44:c6:10:71:72:d9:b9:fc:4c:21:2b:b3:73:94: f8:c1:dd:9a:b2:ec:0d:f2:6a:82:25:fe:79:ac:c3:35:87:a6: df:b2:a5:49:20:ad:15:83:80:a6:b2:2c:a6:9e:8a:e5:8b:0f: 99:35:6f:27:71:e6:12:9e:1a:ac:e3:82:1f:ba:26:14:10:46: 80:b9:2b:5e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZBQzUxMTYxODE1QjhD MzU1OUIyNkJDRURCMkZDNDI5M0QwMTZGNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC4f9y3O2qjL4WLxgAhpt+2lDggIyWcO3J0GYhSvIUXxyOnhnt jiM/syRhupvyS37GlpKJtbHi4UaOiVCzjyfTGDuVZgr16b+JZ3soEe5rXGfD0EJh NjfjPG+6b2k7Tbg70XJKT7tsos+bmrjTM1R7NXGIZS78VRe2rJtahKZLgmUHaSmZ 9hVcbTXt+jt/g+UGT22skAoX+jtaH0gpIsU8911hphSi7yzXIVr3g9AUhKlgl5zh OwnmCTX/Vg56TNcpRHwshCfAeVPvMuBN+tatHMzT0Fv0eNEmpRnniDxbv1ST5ksh IM31cBIM+HAFRBPs9fOgqJIGn1QRDHzEXZVvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU+sURYYFbjDVZsmvO2y/EKT0Bb14wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8tc1VSWVlGYmpEVlpzbXZPMnlf RUtUMEJiMTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0kcA MA0GCSqGSIb3DQEBCwUAA4IBAQCZKlvWr7pwH2ydpn5Mo3W7AxUuBgboVVKcgLRo QBSGQNQgVyqxHyTesu21S12OcfCYZxHpJG3OBxp994cehKtz7uBte9z6Y0Fq5lAN xQ2rOeDoikGG6sT+d4k1qaA1SM3BwAy64397qDPvUAJIBlVav7viM0hCFcJlHZPS 1fOgE1wCDnBlr+/vsE5YJysEUYfmPEk0YdMMptKu3R7O2FURXdY9GW3CMiygPGR8 c55Iv6ZhWIorbItqRMYQcXLZufxMISuzc5T4wd2asuwN8mqCJf55rMM1h6bfsqVJ IK0Vg4Cmsiymnorliw+ZNW8nceYSnhqs44IfuiYUEEaAuSte -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:30 2025 by rpki-client