$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/T2aa-ZhSodsfymNe6Ep08QDU4ZA.roa File: T2aa-ZhSodsfymNe6Ep08QDU4ZA.roa (raw, json) Hash identifier: xSxBmgYVz3m4iRD8yDdtQ2RhpDzKSdmPeMaubYhK3nQ= Subject key identifier: 4F:66:9A:F9:98:52:A1:DB:1F:CA:63:5E:E8:4A:74:F1:00:D4:E1:90 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 107E Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/T2aa-ZhSodsfymNe6Ep08QDU4ZA.roa Signing time: Fri 22 Aug 2025 08:55:32 +0000 ROA not before: Fri 22 Aug 2025 08:55:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9916 IP address blocks: 120.105.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4222 (0x107e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4F669AF99852A1DB1FCA635EE84A74F100D4E190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:4a:b5:84:1e:a5:04:51:d7:aa:6a:32:56: 03:a4:bf:8e:0e:a6:07:07:25:6e:0f:21:f2:9a:a9: d0:e8:78:a9:7b:14:8b:1a:d7:d3:d8:57:78:c4:76: cc:30:e7:1e:2e:6a:d9:bf:21:33:83:b7:2e:f9:b3: dd:08:fe:1e:42:ca:8e:87:65:5a:0c:d9:89:2c:fa: b2:bd:58:6f:d2:f0:bb:7b:f0:c1:fc:80:fd:2e:59: 75:39:c9:ad:34:5a:2d:2e:b0:9a:bc:4c:24:28:91: 8e:ea:cc:94:5b:0e:8e:63:6c:53:a1:81:56:8c:a4: fb:b0:41:e9:cc:27:2e:a6:8a:db:d7:dd:e4:6f:de: 09:73:bf:70:9b:c8:c2:9a:58:2e:64:f4:e3:b1:1a: a4:1a:40:28:73:4e:9e:ed:aa:c1:d3:e2:1b:60:c6: 6d:04:af:f5:3e:c7:3f:f6:14:eb:1d:a8:09:95:e3: 2b:42:05:85:48:dc:b7:4b:08:3b:00:8d:17:1e:cc: 0a:cc:c6:79:5a:ac:37:d7:4f:03:c2:d9:18:ee:02: 1f:ba:7e:91:1a:69:fc:ea:93:29:ed:f5:4a:c5:2b: b0:77:42:13:c5:74:4d:bc:5c:13:d0:69:10:12:97: 64:85:20:f4:77:22:1e:02:ae:06:03:ce:fc:bd:17: 29:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:66:9A:F9:98:52:A1:DB:1F:CA:63:5E:E8:4A:74:F1:00:D4:E1:90 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/T2aa-ZhSodsfymNe6Ep08QDU4ZA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.105.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:ff:6f:c0:2c:f9:7f:d5:f6:18:21:6b:86:b8:61:a6:b5:3d: 49:d3:d4:42:31:e5:66:f7:e8:58:30:72:94:8b:d7:6d:8c:7a: 08:23:bd:a1:3d:de:a4:79:22:e5:c7:a6:05:a1:ce:99:9b:ab: bb:5c:1a:57:fc:ba:19:75:38:83:29:e4:20:96:77:c4:1a:e2: 1c:72:b4:da:34:ad:7a:5c:4e:f8:48:0c:a0:87:72:12:c5:ba: bc:96:97:85:52:46:e7:c1:1e:9c:53:e6:63:d2:63:a7:82:81: 5c:4e:0b:18:bf:d2:f3:60:7a:0d:1d:c5:77:ad:56:5b:a1:9d: c0:a9:d0:69:eb:32:23:a5:67:65:bf:36:27:6b:66:e4:46:64: 6c:c5:19:9d:5c:ef:0b:30:56:13:9c:33:79:4e:a0:ce:a6:3d: 5c:f1:f9:7d:7a:76:45:ee:65:e0:17:a3:1a:51:04:5d:3c:cd: 10:db:b0:5c:43:bc:d1:39:7e:76:ec:19:d3:13:12:47:fb:08: d5:2e:04:9d:9f:89:62:d4:4a:50:56:71:38:0f:3f:0e:5b:85: a1:62:65:a6:b0:31:75:0f:54:2d:de:cd:f8:19:c7:3c:d7:81: b5:d2:a6:70:fb:64:70:90:0b:2f:6f:56:ce:17:16:7e:5e:1a: 5a:37:c5:96 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRGNjY5QUY5OTg1MkEx REIxRkNBNjM1RUU4NEE3NEYxMDBENEUxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnOEq1hB6lBFHXqmoyVgOkv44OpgcHJW4PIfKaqdDoeKl7FIsa 19PYV3jEdsww5x4uatm/ITODty75s90I/h5Cyo6HZVoM2Yks+rK9WG/S8Lt78MH8 gP0uWXU5ya00Wi0usJq8TCQokY7qzJRbDo5jbFOhgVaMpPuwQenMJy6mitvX3eRv 3glzv3CbyMKaWC5k9OOxGqQaQChzTp7tqsHT4htgxm0Er/U+xz/2FOsdqAmV4ytC BYVI3LdLCDsAjRcezArMxnlarDfXTwPC2RjuAh+6fpEaafzqkynt9UrFK7B3QhPF dE28XBPQaRASl2SFIPR3Ih4CrgYDzvy9FyllAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUT2aa+ZhSodsfymNe6Ep08QDU4ZAwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9UMmFhLVpoU29kc2Z5bU5lNkVw MDhRRFU0WkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeGkw DQYJKoZIhvcNAQELBQADggEBAAT/b8As+X/V9hgha4a4Yaa1PUnT1EIx5Wb36Fgw cpSL122MeggjvaE93qR5IuXHpgWhzpmbq7tcGlf8uhl1OIMp5CCWd8Qa4hxytNo0 rXpcTvhIDKCHchLFuryWl4VSRufBHpxT5mPSY6eCgVxOCxi/0vNgeg0dxXetVluh ncCp0GnrMiOlZ2W/NidrZuRGZGzFGZ1c7wswVhOcM3lOoM6mPVzx+X16dkXuZeAX oxpRBF08zRDbsFxDvNE5fnbsGdMTEkf7CNUuBJ2fiWLUSlBWcTgPPw5bhaFiZaaw MXUPVC3ezfgZxzzXgbXSpnD7ZHCQCy9vVs4XFn5eGlo3xZY= -----END CERTIFICATE-----Generated at Sun Oct 26 03:14:28 2025 by rpki-client