$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/U8PSOlHnj11iCtdWThsHPXy3NKQ.roa File: U8PSOlHnj11iCtdWThsHPXy3NKQ.roa (raw, json) Hash identifier: D1fOwuW6ap84NF8yh8KX+AqzrWrx7VnhS2TJzePzJzQ= Subject key identifier: 53:C3:D2:3A:51:E7:8F:5D:62:0A:D7:56:4E:1B:07:3D:7C:B7:34:A4 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FE8 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/U8PSOlHnj11iCtdWThsHPXy3NKQ.roa Signing time: Fri 22 Aug 2025 08:55:44 +0000 ROA not before: Fri 22 Aug 2025 08:55:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17712 IP address blocks: 140.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 05:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4072 (0xfe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=53C3D23A51E78F5D620AD7564E1B073D7CB734A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:53:96:b9:a9:3a:85:fc:33:79:f2:6d:40: 40:ad:aa:68:cd:c8:7c:c4:1f:9a:13:77:f5:bf:b8: e3:4b:eb:8c:1b:9f:91:56:78:1b:67:90:18:ee:9a: a0:68:20:a1:7a:8b:2a:be:63:e8:32:41:0b:a2:2b: af:3b:1d:08:c9:55:dd:33:28:c3:a3:6a:31:e6:4d: 60:4d:34:11:f9:ba:73:39:18:80:d5:4b:bd:73:f2: d0:f4:c6:df:a8:ca:6e:54:7c:e9:d7:ed:cc:4f:be: 30:69:cc:3f:bc:46:33:4d:23:89:18:dc:d4:0e:d9: 48:31:52:d1:8f:ca:df:1c:95:5b:b9:f1:47:4e:61: 57:29:ee:13:5a:82:42:db:c9:f1:5b:af:31:c5:38: 5d:bd:4f:ba:95:c2:66:16:c8:92:ca:64:bb:72:86: 04:44:36:a7:67:6e:d4:a0:29:85:d1:55:79:9a:4b: 9c:1b:ce:24:03:5c:97:87:38:fc:33:78:ba:7d:26: 22:e4:20:f0:5f:d7:bc:10:30:0d:c0:49:d0:46:3c: b1:eb:a0:0e:a0:c2:b4:07:b7:62:01:84:5c:33:50: ff:4f:f1:03:a9:62:af:0c:51:ed:45:a3:56:60:50: 1e:48:3f:b4:53:95:29:8c:bc:ee:81:18:80:a4:6a: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:D2:3A:51:E7:8F:5D:62:0A:D7:56:4E:1B:07:3D:7C:B7:34:A4 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/U8PSOlHnj11iCtdWThsHPXy3NKQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:6e:76:3c:3a:08:fa:49:7d:79:de:96:bf:6d:8e:cf:29:78: 01:cc:75:e4:cf:c4:56:89:1d:90:ae:9b:b2:68:45:92:e4:7e: 29:55:c1:41:75:8f:6d:47:c6:e0:8d:5b:22:cf:79:2c:74:f3: 00:bc:9b:f2:d9:03:c7:39:94:0d:d6:90:37:1c:7a:c6:5d:59: de:46:6e:69:c9:af:d8:88:6e:04:a0:56:8c:53:4e:38:2d:8a: 41:33:43:a6:fb:e5:70:d6:72:66:84:03:07:fa:1a:78:26:09: c7:c4:bd:49:42:44:3e:af:64:ad:2e:a5:d0:ce:44:5f:32:ea: e3:a2:bc:02:26:b8:24:ed:5a:07:47:a0:7d:97:39:1d:87:9a: 98:5d:88:23:ec:11:52:c4:23:83:21:6a:34:14:b3:e4:5a:92: cc:c7:cf:2b:c1:df:f9:e3:e0:d5:ea:b0:c5:2b:97:56:cb:f2: e9:24:14:f4:b8:f1:96:a2:54:3d:c1:21:92:b0:8d:13:d4:df: 3e:c2:72:ab:12:0c:6e:48:99:f9:14:a8:fc:83:38:29:c6:c7: 8d:70:94:2c:ef:f4:dc:87:fd:d3:94:40:63:31:e6:7c:3a:d4: da:55:74:5a:b0:fd:e2:0e:94:fe:71:52:63:fd:59:93:0a:a2: 56:35:df:20 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUzQzNEMjNBNTFFNzhG NUQ2MjBBRDc1NjRFMUIwNzNEN0NCNzM0QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPH1OWuak6hfwzefJtQECtqmjNyHzEH5oTd/W/uONL64wbn5FW eBtnkBjumqBoIKF6iyq+Y+gyQQuiK687HQjJVd0zKMOjajHmTWBNNBH5unM5GIDV S71z8tD0xt+oym5UfOnX7cxPvjBpzD+8RjNNI4kY3NQO2UgxUtGPyt8clVu58UdO YVcp7hNagkLbyfFbrzHFOF29T7qVwmYWyJLKZLtyhgRENqdnbtSgKYXRVXmaS5wb ziQDXJeHOPwzeLp9JiLkIPBf17wQMA3ASdBGPLHroA6gwrQHt2IBhFwzUP9P8QOp Yq8MUe1Fo1ZgUB5IP7RTlSmMvO6BGICkat3VAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUU8PSOlHnj11iCtdWThsHPXy3NKQwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9VOFBTT2xIbmoxMWlDdGRXVGhz SFBYeTNOS1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjH0w DQYJKoZIhvcNAQELBQADggEBAAZudjw6CPpJfXnelr9tjs8peAHMdeTPxFaJHZCu m7JoRZLkfilVwUF1j21HxuCNWyLPeSx08wC8m/LZA8c5lA3WkDccesZdWd5GbmnJ r9iIbgSgVoxTTjgtikEzQ6b75XDWcmaEAwf6GngmCcfEvUlCRD6vZK0updDORF8y 6uOivAImuCTtWgdHoH2XOR2HmphdiCPsEVLEI4MhajQUs+RakszHzyvB3/nj4NXq sMUrl1bL8ukkFPS48ZaiVD3BIZKwjRPU3z7CcqsSDG5ImfkUqPyDOCnGx41wlCzv 9NyH/dOUQGMx5nw61NpVdFqw/eIOlP5xUmP9WZMKolY13yA= -----END CERTIFICATE-----Generated at Wed Oct 29 05:31:36 2025 by rpki-client