$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/dhYV4Dq67AmzgTEfsVFvGZh6iY8.roa File: dhYV4Dq67AmzgTEfsVFvGZh6iY8.roa (raw, json) Hash identifier: NALE21HugR2GyqyzbCTTKWgbvN82Fy8LeXax3d6+OrU= Subject key identifier: 76:16:15:E0:3A:BA:EC:09:B3:81:31:1F:B1:51:6F:19:98:7A:89:8F Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FE6 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/dhYV4Dq67AmzgTEfsVFvGZh6iY8.roa Signing time: Fri 22 Aug 2025 08:55:44 +0000 ROA not before: Fri 22 Aug 2025 08:55:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17716 IP address blocks: 140.129.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 16:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4070 (0xfe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=761615E03ABAEC09B381311FB1516F19987A898F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:c2:18:08:e1:5b:db:4e:56:43:de:3b:22: 3a:db:58:da:5b:2a:02:81:ea:fe:64:2c:9b:25:10: 50:71:35:9e:d2:65:59:30:29:70:77:90:62:c1:ab: 7c:18:e9:5b:67:76:11:59:43:f7:5e:17:68:22:ab: 5d:ff:7f:b9:21:b9:f9:4b:e9:53:12:50:ec:e7:0a: 64:24:0b:87:5c:46:8e:65:22:1b:13:4c:06:52:24: ea:18:a9:0d:6d:f9:58:7c:3a:0d:3d:8b:48:a0:0a: 6c:80:f4:4d:dd:7c:16:c5:fd:3b:13:47:ec:4d:4e: f3:cf:00:ca:61:2b:e7:a9:15:c0:eb:5b:20:30:07: eb:9f:61:56:1c:a5:3c:29:40:1e:9e:d0:2b:4f:c5: f8:57:8f:fb:89:83:4b:42:10:4f:c7:96:61:3f:13: f8:02:d9:8a:2a:25:69:b9:aa:3d:53:00:de:bd:2f: ea:b9:30:17:d9:bc:7a:b3:69:b4:5e:47:9a:de:d4: ef:91:47:cc:a6:fa:31:64:3a:86:53:6c:41:7c:c7: 8b:51:c0:0c:2c:24:c4:e7:6a:c3:64:4f:0c:8e:db: 06:c6:8c:df:2a:d3:65:74:39:7b:86:bf:d0:8c:50: 2d:33:d1:66:77:9a:40:c2:ff:f4:a0:6d:8e:ed:3b: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:16:15:E0:3A:BA:EC:09:B3:81:31:1F:B1:51:6F:19:98:7A:89:8F X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/dhYV4Dq67AmzgTEfsVFvGZh6iY8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.129.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4f:53:bc:a8:04:d9:98:9a:6d:4d:cb:5a:6f:61:60:99:0e:8f: 51:9d:51:06:5d:58:04:02:00:da:06:95:bb:60:e7:10:8a:70: 9d:cc:94:7c:06:cb:4e:04:c8:5c:f5:ac:4e:b0:8a:24:2e:56: 8e:f2:95:24:d6:98:a7:ad:42:0f:79:8a:f0:36:e4:77:12:b1: fa:26:9b:bb:57:a8:e6:ad:45:29:61:26:34:54:4f:ff:9f:3b: 98:56:f0:dc:59:ac:04:ae:07:01:13:cd:14:f5:7e:9b:30:25: d2:9f:ea:80:ba:cc:69:b2:b0:b8:42:22:e5:8c:8f:28:30:8d: e3:11:35:44:91:06:a9:6a:d6:df:5d:a5:18:0f:57:1e:2d:3e: 35:d9:3d:e9:d3:63:10:d1:04:32:d4:a7:c2:bb:15:c0:05:89: 80:d8:9b:86:85:b4:44:f3:02:b7:0d:1e:f3:30:dc:73:70:ba: 78:ba:cf:dc:ca:b2:f4:86:2e:ff:9b:92:53:89:50:47:20:1e: 58:5e:e2:16:14:82:6c:c2:d4:5b:ff:f3:23:c1:97:92:33:bd: de:b1:9b:c7:2c:02:cb:eb:02:42:9d:70:a2:c2:80:73:32:df: 8e:a6:8d:c8:47:53:37:c5:f6:5d:6c:30:33:ca:95:db:02:54: 77:ae:25:18 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc2MTYxNUUwM0FCQUVD MDlCMzgxMzExRkIxNTE2RjE5OTg3QTg5OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD/8IYCOFb205WQ947IjrbWNpbKgKB6v5kLJslEFBxNZ7SZVkw KXB3kGLBq3wY6VtndhFZQ/deF2giq13/f7khuflL6VMSUOznCmQkC4dcRo5lIhsT TAZSJOoYqQ1t+Vh8Og09i0igCmyA9E3dfBbF/TsTR+xNTvPPAMphK+epFcDrWyAw B+ufYVYcpTwpQB6e0CtPxfhXj/uJg0tCEE/HlmE/E/gC2YoqJWm5qj1TAN69L+q5 MBfZvHqzabReR5re1O+RR8ym+jFkOoZTbEF8x4tRwAwsJMTnasNkTwyO2wbGjN8q 02V0OXuGv9CMUC0z0WZ3mkDC//SgbY7tO0SzAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUdhYV4Dq67AmzgTEfsVFvGZh6iY8wHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9kaFlWNERxNjdBbXpnVEVmc1ZG dkdaaDZpWTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjIFg MA0GCSqGSIb3DQEBCwUAA4IBAQBPU7yoBNmYmm1Ny1pvYWCZDo9RnVEGXVgEAgDa BpW7YOcQinCdzJR8BstOBMhc9axOsIokLlaO8pUk1pinrUIPeYrwNuR3ErH6Jpu7 V6jmrUUpYSY0VE//nzuYVvDcWawErgcBE80U9X6bMCXSn+qAusxpsrC4QiLljI8o MI3jETVEkQapatbfXaUYD1ceLT412T3p02MQ0QQy1KfCuxXABYmA2JuGhbRE8wK3 DR7zMNxzcLp4us/cyrL0hi7/m5JTiVBHIB5YXuIWFIJswtRb//MjwZeSM73esZvH LALL6wJCnXCiwoBzMt+Opo3IR1M3xfZdbDAzypXbAlR3riUY -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:42 2025 by rpki-client