$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/hY0bvx93fzhEa1ecp1azovMLPCo.roa File: hY0bvx93fzhEa1ecp1azovMLPCo.roa (raw, json) Hash identifier: J+xSY0BHfiAI1wJ0JA7XsNQcizNkx40Jct3+YKNRA38= Subject key identifier: 85:8D:1B:BF:1F:77:7F:38:44:6B:57:9C:A7:56:B3:A2:F3:0B:3C:2A Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 106C Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hY0bvx93fzhEa1ecp1azovMLPCo.roa Signing time: Fri 22 Aug 2025 08:55:28 +0000 ROA not before: Fri 22 Aug 2025 08:55:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18177 IP address blocks: 163.26.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=858D1BBF1F777F38446B579CA756B3A2F30B3C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:1a:9e:08:5a:ea:aa:59:dd:4d:67:a9:dd: 86:d3:9e:ff:1f:32:2f:d2:53:0e:6d:70:fe:8a:82: 16:69:a1:e8:d1:ee:41:d5:ec:02:08:2d:bb:cf:69: c7:7a:cd:9c:e7:49:39:01:15:df:a4:52:63:18:c3: 22:32:36:83:f9:86:9a:06:61:9a:f5:e0:17:b1:bc: c7:92:dc:01:5c:15:bb:12:66:77:9e:02:07:83:ea: 89:62:8f:84:de:2b:ac:6b:46:3e:ca:05:7a:62:21: c6:6c:5f:b1:7f:9a:4b:f3:61:78:a3:20:4e:14:fe: be:44:0c:51:0a:03:49:3e:06:76:82:e4:64:c4:92: b9:50:1b:93:76:86:ec:76:ca:f1:d7:97:1f:1b:2c: 11:82:af:cb:17:39:7b:b6:90:55:21:a7:80:30:fa: 48:81:8a:0f:37:0f:7e:72:ac:fd:e7:cf:d0:2d:85: 42:43:9b:b5:c7:92:13:52:69:c7:da:c2:66:de:a8: 1a:6c:b1:49:f5:7a:eb:9a:ed:8c:11:4f:21:60:2b: 16:ff:56:c0:2f:ed:46:da:d1:cc:1f:9d:f2:91:8a: be:e5:fa:07:11:f8:d5:2c:38:b9:f9:3f:8c:e1:97: d3:b5:2f:27:ea:33:3f:a6:be:13:44:a6:58:36:04: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:1B:BF:1F:77:7F:38:44:6B:57:9C:A7:56:B3:A2:F3:0B:3C:2A X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hY0bvx93fzhEa1ecp1azovMLPCo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.26.0.0/16 Signature Algorithm: sha256WithRSAEncryption 37:7d:e5:83:b6:27:a1:36:23:23:34:33:ea:9b:8d:bd:a5:de: 7d:1f:96:39:f0:5f:be:10:3e:f1:2f:53:db:4d:83:ac:3e:15: 72:c6:6d:ad:70:31:da:af:da:80:22:a5:4d:51:11:e9:a8:86: 3e:ab:ae:d6:da:dc:4f:1d:cc:cb:21:85:14:fe:b6:15:8e:7b: ed:d2:d1:d5:9f:0d:3a:05:52:58:20:ba:e0:a5:27:5d:f1:f9: ac:dc:7d:2a:09:2e:5b:1e:d6:13:ab:34:69:fd:55:65:2c:77: de:ac:c7:ac:1a:91:3d:35:d9:13:10:22:88:5d:89:8d:6e:b2: 72:15:86:5b:19:83:48:59:40:72:38:a1:d5:d6:31:10:56:e8: 6b:54:f3:62:33:83:8a:de:a0:e6:a7:4c:1d:67:b7:8b:10:0b: ba:15:8a:8c:eb:ad:02:b8:67:a3:5b:ef:9d:d0:08:8a:cb:9d: 55:63:36:b3:4d:9f:50:a6:4f:e6:c6:2f:fa:a6:54:68:91:2a: fa:d3:90:15:c9:21:f3:fc:5d:ba:04:fb:d5:5c:dd:73:43:c6: 8d:a3:0b:0d:5e:6d:2c:b6:2b:f2:f4:00:63:b8:4b:00:e1:92: 02:68:d8:aa:ff:0d:05:6d:f8:76:d0:42:aa:2b:dc:a1:f6:50: d9:c0:02:f2 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg1OEQxQkJGMUY3NzdG Mzg0NDZCNTc5Q0E3NTZCM0EyRjMwQjNDMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCidhqeCFrqqlndTWep3YbTnv8fMi/SUw5tcP6KghZpoejR7kHV 7AIILbvPacd6zZznSTkBFd+kUmMYwyIyNoP5hpoGYZr14BexvMeS3AFcFbsSZnee AgeD6olij4TeK6xrRj7KBXpiIcZsX7F/mkvzYXijIE4U/r5EDFEKA0k+BnaC5GTE krlQG5N2hux2yvHXlx8bLBGCr8sXOXu2kFUhp4Aw+kiBig83D35yrP3nz9AthUJD m7XHkhNSacfawmbeqBpssUn1euua7YwRTyFgKxb/VsAv7Uba0cwfnfKRir7l+gcR +NUsOLn5P4zhl9O1LyfqMz+mvhNEplg2BJQpAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUhY0bvx93fzhEa1ecp1azovMLPCowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9oWTBidng5M2Z6aEVhMWVjcDFh em92TUxQQ28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxow DQYJKoZIhvcNAQELBQADggEBADd95YO2J6E2IyM0M+qbjb2l3n0fljnwX74QPvEv U9tNg6w+FXLGba1wMdqv2oAipU1REemohj6rrtba3E8dzMshhRT+thWOe+3S0dWf DToFUlgguuClJ13x+azcfSoJLlse1hOrNGn9VWUsd96sx6wakT012RMQIohdiY1u snIVhlsZg0hZQHI4odXWMRBW6GtU82Izg4reoOanTB1nt4sQC7oViozrrQK4Z6Nb 753QCIrLnVVjNrNNn1CmT+bGL/qmVGiRKvrTkBXJIfP8XboE+9Vc3XNDxo2jCw1e bSy2K/L0AGO4SwDhkgJo2Kr/DQVt+HbQQqor3KH2UNnAAvI= -----END CERTIFICATE-----Generated at Sun Oct 26 03:14:29 2025 by rpki-client