$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/i3sqQPMLPXwMXiYiexg6awg8cQQ.roa File: i3sqQPMLPXwMXiYiexg6awg8cQQ.roa (raw, json) Hash identifier: BqZIrfo7IHps0NnuIytI3jd+kxNHcNbJsFGuazoK0Tg= Subject key identifier: 8B:7B:2A:40:F3:0B:3D:7C:0C:5E:26:22:7B:18:3A:6B:08:3C:71:04 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 1008 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/i3sqQPMLPXwMXiYiexg6awg8cQQ.roa Signing time: Fri 22 Aug 2025 08:55:51 +0000 ROA not before: Fri 22 Aug 2025 08:55:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 140.128.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 08:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4104 (0x1008) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8B7B2A40F30B3D7C0C5E26227B183A6B083C7104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:9d:6a:84:00:88:d0:ce:0c:a5:a3:eb:0f: f2:1d:00:8c:e7:4d:9d:0e:16:f8:1e:e7:7e:f9:9d: ae:3e:e3:92:6e:c6:b0:4b:13:b8:bf:3d:d4:ea:24: 12:c8:8f:bc:a4:6e:e6:92:59:1f:9a:77:72:e7:01: b0:24:ca:ff:6e:12:23:84:00:5c:77:52:a6:88:9c: e5:c4:de:e8:11:36:05:dd:e6:a1:7b:39:96:b2:5c: 65:11:76:dd:03:18:15:d2:e9:65:fc:a4:28:2f:5b: 4f:05:6a:0b:86:fb:ec:e5:b2:ea:43:55:73:a0:15: 93:9a:27:7a:bd:80:bd:98:ca:45:6b:16:77:a8:4e: 00:57:5f:c4:a9:e1:e5:00:da:0b:9a:22:07:d1:5b: c6:eb:ff:22:5a:ea:97:f9:3d:95:79:1c:e3:50:0e: 69:74:d0:27:d0:00:2c:b1:eb:77:a0:24:5f:fd:32: 71:f4:55:75:5f:0e:f3:33:32:d2:7e:71:99:76:54: e8:a8:e3:60:54:25:1f:25:42:35:e2:bc:dc:ec:9f: 20:d7:b4:bc:34:f9:8b:40:61:fe:41:46:5e:88:95: fb:f7:49:23:89:f5:12:f5:eb:e0:56:1e:35:28:70: 25:1a:ac:e0:be:7c:c8:3a:2f:cb:85:06:92:ae:32: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7B:2A:40:F3:0B:3D:7C:0C:5E:26:22:7B:18:3A:6B:08:3C:71:04 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/i3sqQPMLPXwMXiYiexg6awg8cQQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.128.0.0/13 Signature Algorithm: sha256WithRSAEncryption 8d:97:6e:1c:32:1e:4b:cb:c4:f8:6c:ed:81:a3:25:04:74:af: f3:a4:af:49:09:a4:71:47:4c:d6:6b:ad:17:d6:13:f0:0f:87: fe:d1:01:dc:a0:86:de:c7:79:ac:3e:21:d1:77:27:ac:67:85: e8:2b:70:d8:56:75:50:aa:9e:df:f1:73:f5:7e:b0:fc:99:7f: 47:7b:6d:6c:1a:c9:ed:d2:5a:7f:7f:23:30:7c:ac:0b:bd:50: 43:fb:09:cf:a8:8a:4d:2f:c7:49:15:23:1f:16:49:e4:12:c6: 19:c7:0f:fa:02:af:2b:32:10:5f:93:20:10:6d:01:d1:de:6f: f5:a9:c4:65:68:24:1b:94:18:3e:73:e7:8d:90:68:b8:8c:13: 63:29:6d:3b:0a:4d:55:2c:ac:69:81:a8:6b:49:37:01:19:45: 98:fc:4d:2c:6c:43:0a:d4:ff:3e:b6:c2:8a:64:83:f3:57:92: 9f:cb:66:23:5d:aa:2c:2d:39:34:f4:aa:89:48:e0:5e:1d:a6: cb:74:06:a7:91:2e:0c:53:64:8c:c4:32:04:7e:30:98:4b:a5: b2:c9:d1:22:b8:e4:13:af:a1:b7:1d:13:bd:52:e3:8e:24:cb: 3d:1e:66:ec:4b:f7:4d:ce:43:c3:fb:f7:90:23:47:60:2e:3e: 6f:6f:eb:b3 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhCN0IyQTQwRjMwQjNE N0MwQzVFMjYyMjdCMTgzQTZCMDgzQzcxMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUvp1qhACI0M4MpaPrD/IdAIznTZ0OFvge5375na4+45JuxrBL E7i/PdTqJBLIj7ykbuaSWR+ad3LnAbAkyv9uEiOEAFx3UqaInOXE3ugRNgXd5qF7 OZayXGURdt0DGBXS6WX8pCgvW08FaguG++zlsupDVXOgFZOaJ3q9gL2YykVrFneo TgBXX8Sp4eUA2guaIgfRW8br/yJa6pf5PZV5HONQDml00CfQACyx63egJF/9MnH0 VXVfDvMzMtJ+cZl2VOio42BUJR8lQjXivNzsnyDXtLw0+YtAYf5BRl6Ilfv3SSOJ 9RL16+BWHjUocCUarOC+fMg6L8uFBpKuMmwHAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUi3sqQPMLPXwMXiYiexg6awg8cQQwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9pM3NxUVBNTFBYd01YaVlpZXhn NmF3ZzhjUVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDjIAw DQYJKoZIhvcNAQELBQADggEBAI2XbhwyHkvLxPhs7YGjJQR0r/Okr0kJpHFHTNZr rRfWE/APh/7RAdyght7Heaw+IdF3J6xnhegrcNhWdVCqnt/xc/V+sPyZf0d7bWwa ye3SWn9/IzB8rAu9UEP7Cc+oik0vx0kVIx8WSeQSxhnHD/oCrysyEF+TIBBtAdHe b/WpxGVoJBuUGD5z542QaLiME2MpbTsKTVUsrGmBqGtJNwEZRZj8TSxsQwrU/z62 wopkg/NXkp/LZiNdqiwtOTT0qolI4F4dpst0BqeRLgxTZIzEMgR+MJhLpbLJ0SK4 5BOvobcdE71S444kyz0eZuxL903OQ8P795AjR2AuPm9v67M= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:29 2025 by rpki-client