$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4gSWxEaEes_CZu9oIvaptfbskxs.roa File: 4gSWxEaEes_CZu9oIvaptfbskxs.roa (raw, json) Hash identifier: TDCx14q7U+WiMDo8buv597gY7Ww9SDeBGkEegSf1xPM= Subject key identifier: E2:04:96:C4:46:84:7A:CF:C2:66:EF:68:22:F6:A9:B5:F6:EC:93:1B Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FFA Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4gSWxEaEes_CZu9oIvaptfbskxs.roa Signing time: Fri 22 Aug 2025 08:55:48 +0000 ROA not before: Fri 22 Aug 2025 08:55:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9264 IP address blocks: 140.109.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4090 (0xffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E20496C446847ACFC266EF6822F6A9B5F6EC931B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:76:be:6f:e1:e7:1d:0c:1b:7c:6f:c3:be: dc:3b:14:9b:88:53:59:c5:7d:bb:74:40:b0:15:9a: 9d:07:46:86:41:43:d4:4f:cc:39:37:c8:72:a1:dd: 69:7e:d8:16:ff:5f:4d:4b:00:1a:c0:60:ba:8d:e4: 49:02:bb:67:0d:55:3a:d5:6a:b6:23:f4:2d:3d:f9: 18:94:2d:ab:13:36:73:f9:68:76:26:d2:e6:15:87: a9:93:9a:22:58:92:3c:ce:e1:83:85:15:d7:6d:7c: fd:61:42:ea:c4:42:9c:a8:ed:48:fb:b6:07:56:00: ce:16:82:de:bf:49:69:93:b9:fd:bf:20:70:bc:71: 9a:e6:6b:6c:4d:cc:d4:d8:29:fd:0d:67:d5:87:c0: f2:09:be:c1:d6:fc:37:05:0b:c4:98:77:41:e3:a7: 07:2a:ad:8f:72:50:79:4f:c4:c6:27:14:5d:60:87: de:9f:99:dd:1d:83:69:f7:de:a3:f7:c9:d3:09:35: 52:53:4d:a9:57:7c:01:42:42:65:77:83:22:bf:8a: 5b:f4:d1:16:83:2c:2f:93:03:cf:df:e1:0d:78:87: 14:cc:c6:62:eb:91:25:fb:bb:d0:76:7c:44:ad:03: e0:a6:6a:19:e9:6e:c2:d9:0e:fc:f2:9d:7e:40:c6: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:04:96:C4:46:84:7A:CF:C2:66:EF:68:22:F6:A9:B5:F6:EC:93:1B X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4gSWxEaEes_CZu9oIvaptfbskxs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.109.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:fa:56:d5:34:ab:67:c2:fc:26:d4:52:0d:01:8a:11:16:16: 61:0c:3b:66:10:72:36:03:c0:01:39:7e:8d:4f:5f:db:06:62: b1:fb:1d:24:0c:7b:f7:99:ca:22:d1:45:e6:d8:f6:55:97:ac: 62:ed:64:e2:7e:45:e4:cd:aa:e3:31:a6:27:9f:1e:ea:34:ab: 29:ef:4b:df:1e:b9:ee:0b:55:10:07:48:91:ed:3e:78:81:34: 53:fe:50:cf:c2:0b:6e:b4:fe:6f:a7:54:fa:ca:af:a2:8c:74: 14:c2:54:87:d2:42:58:11:90:48:12:c8:98:15:91:f8:30:f4: b8:b0:e4:46:0d:b7:28:72:b8:4e:da:78:a8:ec:e4:02:87:9e: 95:51:1e:01:c0:c7:df:9c:44:c1:6a:70:d7:8a:ae:1a:2c:c6: f7:57:8f:dd:72:15:e0:3a:36:89:52:5d:30:aa:10:78:1d:25: 70:1d:95:d6:84:c3:f3:3e:f3:49:ec:f2:de:d1:f7:e3:be:77: 3b:d4:b8:ab:aa:e0:d2:c6:d1:7b:bf:24:26:09:c1:3c:72:97: 41:34:f7:7d:e8:f1:ab:82:46:04:15:01:7e:43:16:6f:fe:d5: 57:4c:95:69:ca:2f:f4:01:f4:98:38:2c:92:fa:e7:71:75:4e: 7b:ff:e7:11 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUyMDQ5NkM0NDY4NDdB Q0ZDMjY2RUY2ODIyRjZBOUI1RjZFQzkzMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNGXa+b+HnHQwbfG/Dvtw7FJuIU1nFfbt0QLAVmp0HRoZBQ9RP zDk3yHKh3Wl+2Bb/X01LABrAYLqN5EkCu2cNVTrVarYj9C09+RiULasTNnP5aHYm 0uYVh6mTmiJYkjzO4YOFFddtfP1hQurEQpyo7Uj7tgdWAM4Wgt6/SWmTuf2/IHC8 cZrma2xNzNTYKf0NZ9WHwPIJvsHW/DcFC8SYd0HjpwcqrY9yUHlPxMYnFF1gh96f md0dg2n33qP3ydMJNVJTTalXfAFCQmV3gyK/ilv00RaDLC+TA8/f4Q14hxTMxmLr kSX7u9B2fEStA+CmahnpbsLZDvzynX5AxnxdAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU4gSWxEaEes/CZu9oIvaptfbskxswHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC80Z1NXeEVhRWVzX0NadTlvSXZh cHRmYnNreHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjG0w DQYJKoZIhvcNAQELBQADggEBAG76VtU0q2fC/CbUUg0BihEWFmEMO2YQcjYDwAE5 fo1PX9sGYrH7HSQMe/eZyiLRRebY9lWXrGLtZOJ+ReTNquMxpiefHuo0qynvS98e ue4LVRAHSJHtPniBNFP+UM/CC260/m+nVPrKr6KMdBTCVIfSQlgRkEgSyJgVkfgw 9Liw5EYNtyhyuE7aeKjs5AKHnpVRHgHAx9+cRMFqcNeKrhosxvdXj91yFeA6NolS XTCqEHgdJXAdldaEw/M+80ns8t7R9+O+dzvUuKuq4NLG0Xu/JCYJwTxyl0E0933o 8auCRgQVAX5DFm/+1VdMlWnKL/QB9Jg4LJL653F1Tnv/5xE= -----END CERTIFICATE-----Generated at Wed Oct 29 22:16:10 2025 by rpki-client