$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mohGMuExwlSBqTGcQ-cQRmEqs68.roa File: mohGMuExwlSBqTGcQ-cQRmEqs68.roa (raw, json) Hash identifier: pL8KDbJhkMr6Kfmhohl37c761U2O4cWp63myI8+tZLc= Subject key identifier: 9A:88:46:32:E1:31:C2:54:81:A9:31:9C:43:E7:10:46:61:2A:B3:AF Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 108A Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mohGMuExwlSBqTGcQ-cQRmEqs68.roa Signing time: Fri 22 Aug 2025 08:55:35 +0000 ROA not before: Fri 22 Aug 2025 08:55:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 210.62.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4234 (0x108a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9A884632E131C25481A9319C43E71046612AB3AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:d4:6a:71:1d:c6:f8:fa:67:a8:3c:89:a5: e3:88:5e:47:c6:66:67:c3:e9:ed:e5:17:b7:da:b6: cf:88:c4:fd:3f:2f:83:22:a0:0f:1e:ee:3f:77:f8: 3a:58:9d:d1:70:60:11:0f:bf:48:1a:6c:d8:8d:97: 5e:4a:d8:e6:9e:b3:6e:47:97:bf:b1:f0:2c:db:9a: ff:c4:83:3c:f1:66:f5:1f:9f:55:73:1b:33:be:74: 39:c9:05:af:62:99:03:2c:c0:7c:db:77:55:12:13: 5f:88:7f:4d:fa:0f:91:3f:fe:c8:97:05:38:ea:6a: 79:e9:a6:fd:ad:e7:7f:bd:c0:42:3d:9d:23:d7:9c: 16:74:3e:da:b7:75:b7:7d:15:75:41:ab:73:a8:8e: 94:ad:99:d0:32:25:94:b5:20:2a:9a:bb:fc:cd:8f: 3a:0a:1b:87:b5:35:61:75:d0:bb:ff:f7:9b:61:e2: c6:2a:c5:3f:71:9e:51:38:8b:44:5e:26:2e:6a:56: 47:8f:0a:96:1e:cf:4e:99:bb:52:e6:f5:20:e9:89: 52:e6:4d:23:cb:89:d6:ef:47:27:b3:aa:3b:d2:6b: 3b:e5:63:68:7b:8d:ff:c9:96:85:40:80:11:b5:9a: 19:c0:b6:37:66:9b:20:1b:ec:4a:ba:0b:9a:cb:1f: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:46:32:E1:31:C2:54:81:A9:31:9C:43:E7:10:46:61:2A:B3:AF X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mohGMuExwlSBqTGcQ-cQRmEqs68.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.64.0/19 Signature Algorithm: sha256WithRSAEncryption 01:49:7e:90:0e:43:f6:30:be:71:e2:b0:de:02:b1:df:55:d7: 13:2d:82:6c:d6:07:cb:29:bf:99:74:d7:93:ec:95:d4:b5:9c: 70:c7:cd:58:f4:b9:19:e8:5d:66:09:ab:32:43:fe:d9:3d:45: f8:b3:4b:19:49:ce:bb:52:19:54:24:d7:c5:d5:aa:17:b8:a0: c2:3d:54:68:86:3c:d4:30:fd:9b:c9:57:05:02:dc:27:19:2d: ee:df:5d:33:c6:78:b9:16:5b:9b:ba:db:ac:85:ed:e3:57:d6: 9b:2e:5a:bf:07:26:d1:66:4c:99:ac:36:6e:d5:08:59:a8:36: e7:c2:fb:d5:6f:ae:ac:fc:60:79:cb:39:f8:d6:85:f7:0a:44: 27:96:cf:33:a5:cf:f8:89:c4:f0:1b:5a:ef:04:c2:85:a6:75: 7d:ec:49:9e:ff:bc:1d:fe:65:20:4a:18:1e:67:e2:79:c8:9d: 75:55:d1:a7:ae:ee:9a:3e:17:10:c1:f3:d9:7d:c0:46:50:85: e0:3d:40:97:a6:af:e7:80:aa:fc:b2:61:81:32:85:f0:bc:17: f0:af:b5:83:0c:b7:87:99:80:96:c9:fe:1b:da:d4:e9:07:52: d6:ea:cc:8b:5d:76:ed:72:7c:1d:7c:2c:cf:30:d4:6a:7f:93: 9b:ca:f4:07 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBODg0NjMyRTEzMUMy NTQ4MUE5MzE5QzQzRTcxMDQ2NjEyQUIzQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEu9RqcR3G+PpnqDyJpeOIXkfGZmfD6e3lF7fats+IxP0/L4Mi oA8e7j93+DpYndFwYBEPv0gabNiNl15K2Oaes25Hl7+x8Czbmv/EgzzxZvUfn1Vz GzO+dDnJBa9imQMswHzbd1USE1+If036D5E//siXBTjqannppv2t53+9wEI9nSPX nBZ0Ptq3dbd9FXVBq3OojpStmdAyJZS1ICqau/zNjzoKG4e1NWF10Lv/95th4sYq xT9xnlE4i0ReJi5qVkePCpYez06Zu1Lm9SDpiVLmTSPLidbvRyezqjvSazvlY2h7 jf/JloVAgBG1mhnAtjdmmyAb7Eq6C5rLH567AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUmohGMuExwlSBqTGcQ+cQRmEqs68wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9tb2hHTXVFeHdsU0JxVEdjUS1j UVJtRXFzNjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0j5A MA0GCSqGSIb3DQEBCwUAA4IBAQABSX6QDkP2ML5x4rDeArHfVdcTLYJs1gfLKb+Z dNeT7JXUtZxwx81Y9LkZ6F1mCasyQ/7ZPUX4s0sZSc67UhlUJNfF1aoXuKDCPVRo hjzUMP2byVcFAtwnGS3u310zxni5Flubutushe3jV9abLlq/BybRZkyZrDZu1QhZ qDbnwvvVb66s/GB5yzn41oX3CkQnls8zpc/4icTwG1rvBMKFpnV97Eme/7wd/mUg ShgeZ+J5yJ11VdGnru6aPhcQwfPZfcBGUIXgPUCXpq/ngKr8smGBMoXwvBfwr7WD DLeHmYCWyf4b2tTpB1LW6syLXXbtcnwdfCzPMNRqf5ObyvQH -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:37 2025 by rpki-client