$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/L0HGavk6Yrn_Rkg-suyO44oSjpE.roa File: L0HGavk6Yrn_Rkg-suyO44oSjpE.roa (raw, json) Hash identifier: On1bawEBBXKBTDsA9zjrjck/IwOWRXlou3gh3zVugRI= Subject key identifier: 2F:41:C6:6A:F9:3A:62:B9:FF:46:48:3E:B2:EC:8E:E3:8A:12:8E:91 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1075 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/L0HGavk6Yrn_Rkg-suyO44oSjpE.roa Signing time: Fri 22 Aug 2025 08:55:30 +0000 ROA not before: Fri 22 Aug 2025 08:55:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18177 IP address blocks: 120.117.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4213 (0x1075) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2F41C66AF93A62B9FF46483EB2EC8EE38A128E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:5d:95:17:54:c7:2e:03:4c:33:65:77:20: 87:c1:24:f7:bc:85:4e:c8:e6:b5:64:8d:37:31:36: 0f:d6:ee:3f:55:9d:56:d9:ed:ff:9d:6f:4c:61:fd: 1b:4a:e7:68:2f:96:e4:d7:d3:a9:98:0e:ce:e2:32: be:78:f0:f7:9c:6f:3e:0e:2b:9e:1c:87:55:ac:eb: 26:41:93:1d:36:f9:07:6b:b1:4d:d1:e6:14:83:a1: d5:3f:37:72:31:c5:c8:c3:d8:33:4c:f3:22:6e:e4: 3c:8d:16:e3:1c:f7:a1:0a:d5:a6:89:cb:b8:7a:0f: b4:54:28:b0:71:cf:1c:b8:42:e4:5e:c8:6d:85:41: bf:21:4e:f9:8f:12:93:80:54:ee:10:9f:01:96:f0: f8:7e:91:06:f5:b5:f2:18:28:41:6d:28:53:ad:8f: 9a:f9:6b:12:a8:cb:56:cc:2f:63:d1:f1:d4:b7:56: be:4c:57:13:cb:ab:a2:1a:15:6a:d5:ec:9a:3c:cc: 03:28:e7:ba:91:28:9b:7a:59:e3:7b:7b:20:b3:da: cd:50:c1:25:ad:c4:a0:e8:e9:c5:62:a4:97:7b:80: 23:8b:02:5a:72:0c:8c:9e:73:f7:ed:9d:61:1e:03: f4:1e:35:f9:66:2a:a5:dc:62:10:a5:84:c9:09:b3: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:41:C6:6A:F9:3A:62:B9:FF:46:48:3E:B2:EC:8E:E3:8A:12:8E:91 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/L0HGavk6Yrn_Rkg-suyO44oSjpE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.117.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:8b:83:a2:42:b8:ee:0d:8f:b0:db:56:64:5a:bd:ff:7f:da: 5b:b9:61:3d:86:85:88:21:04:75:ed:04:68:a7:b7:b6:77:55: 3f:ee:2c:e8:d6:98:0d:f2:43:81:c0:dc:50:54:c6:79:00:7a: 30:6b:50:46:9a:99:dd:06:6e:70:9a:b7:5a:f9:df:a2:ec:b9: 14:7c:6b:42:95:38:80:21:5d:9c:ed:fc:eb:7c:4f:ce:3b:d2: bf:7c:ee:49:99:fb:4d:c4:1a:a4:c4:22:a8:7e:d3:f7:e1:86: 52:af:75:c0:f5:bf:3d:b5:32:33:be:49:b7:d0:09:62:83:e1: c3:98:42:ae:7f:7a:5d:13:08:a3:6b:92:7f:d3:e7:bd:fd:90: 58:cb:69:24:d8:00:96:45:84:2e:dc:00:fe:70:36:3b:01:27: 4b:6d:ac:11:52:fc:ac:7c:c6:0e:a5:8b:b9:36:28:95:6e:64: 0e:61:47:9a:dc:30:54:b9:e0:4d:6e:42:6c:64:1d:ab:b2:18: 30:f2:44:9f:63:6b:ab:6a:93:dd:ef:09:7a:f8:88:f5:e8:c4: fc:a8:21:b9:b3:9b:df:21:0c:3e:59:4b:70:1d:2d:24:35:e8: f1:26:1d:f2:be:f4:30:74:ee:be:f3:93:62:46:15:e7:7d:85: 67:98:75:d4 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJGNDFDNjZBRjkzQTYy QjlGRjQ2NDgzRUIyRUM4RUUzOEExMjhFOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+GF2VF1THLgNMM2V3IIfBJPe8hU7I5rVkjTcxNg/W7j9VnVbZ 7f+db0xh/RtK52gvluTX06mYDs7iMr548Pecbz4OK54ch1Ws6yZBkx02+QdrsU3R 5hSDodU/N3IxxcjD2DNM8yJu5DyNFuMc96EK1aaJy7h6D7RUKLBxzxy4QuReyG2F Qb8hTvmPEpOAVO4QnwGW8Ph+kQb1tfIYKEFtKFOtj5r5axKoy1bML2PR8dS3Vr5M VxPLq6IaFWrV7Jo8zAMo57qRKJt6WeN7eyCz2s1QwSWtxKDo6cVipJd7gCOLAlpy DIyec/ftnWEeA/QeNflmKqXcYhClhMkJswX7AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUL0HGavk6Yrn/Rkg+suyO44oSjpEwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9MMEhHYXZrNllybl9Sa2ctc3V5 TzQ0b1NqcEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeHUw DQYJKoZIhvcNAQELBQADggEBAFSLg6JCuO4Nj7DbVmRavf9/2lu5YT2GhYghBHXt BGint7Z3VT/uLOjWmA3yQ4HA3FBUxnkAejBrUEaamd0GbnCat1r536LsuRR8a0KV OIAhXZzt/Ot8T8470r987kmZ+03EGqTEIqh+0/fhhlKvdcD1vz21MjO+SbfQCWKD 4cOYQq5/el0TCKNrkn/T5739kFjLaSTYAJZFhC7cAP5wNjsBJ0ttrBFS/Kx8xg6l i7k2KJVuZA5hR5rcMFS54E1uQmxkHauyGDDyRJ9ja6tqk93vCXr4iPXoxPyoIbmz m98hDD5ZS3AdLSQ16PEmHfK+9DB07r7zk2JGFed9hWeYddQ= -----END CERTIFICATE-----Generated at Sun Oct 26 03:14:27 2025 by rpki-client