$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/qCoNRlqZ-Sgqd6wfUW1RfQtElzo.roa File: qCoNRlqZ-Sgqd6wfUW1RfQtElzo.roa (raw, json) Hash identifier: 7q5MdwNy4rtb9cFJNOeI5kq9izIjuSJOiMWmW92Ru3U= Subject key identifier: A8:2A:0D:46:5A:99:F9:28:2A:77:AC:1F:51:6D:51:7D:0B:44:97:3A Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 108E Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qCoNRlqZ-Sgqd6wfUW1RfQtElzo.roa Signing time: Fri 22 Aug 2025 08:55:36 +0000 ROA not before: Fri 22 Aug 2025 08:55:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 163.24.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4238 (0x108e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A82A0D465A99F9282A77AC1F516D517D0B44973A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:16:4b:74:42:c9:aa:e8:fe:e1:2e:37:46: 11:84:65:56:3c:d3:04:55:b2:a5:0d:91:db:0f:f9: 3e:b4:43:03:c1:98:eb:a2:b3:6b:5c:a9:40:99:81: c5:12:6f:15:ac:52:ad:42:e6:de:09:1b:fd:cf:32: 77:fa:9e:f5:04:0f:9c:0a:be:95:0f:3c:b9:2f:b8: df:5f:6b:bc:dd:6f:15:11:a0:f7:36:0f:39:e6:00: c0:51:69:0c:c0:35:4f:53:0b:cd:77:44:cb:68:df: d7:3b:95:5e:0a:ef:02:d5:b6:d9:9a:ba:71:83:ed: e8:36:db:0c:85:c3:c4:1e:cd:5e:f6:3a:77:bf:0f: 88:45:c0:02:b5:66:6b:ab:d4:c0:44:a9:13:91:2f: e3:e3:f4:00:49:a2:0c:9e:10:a9:9a:31:0d:88:d1: 02:2f:fd:8f:66:b2:7a:9c:c7:49:6d:92:2d:0f:ca: cf:84:8f:b6:0d:d6:84:f4:4b:16:be:82:db:a0:ef: c0:27:1c:54:34:76:8c:95:2d:72:d8:64:76:9f:d7: 6c:44:62:5d:c0:ce:d2:72:6b:3e:af:8e:7a:2a:d1: 47:22:71:3b:58:19:f5:fe:e7:2e:0d:b0:e6:c7:a2: b8:1a:f6:ff:aa:79:89:b1:af:65:c4:82:18:25:0d: 37:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2A:0D:46:5A:99:F9:28:2A:77:AC:1F:51:6D:51:7D:0B:44:97:3A X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qCoNRlqZ-Sgqd6wfUW1RfQtElzo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.24.0.0/14 Signature Algorithm: sha256WithRSAEncryption b1:f4:3f:c2:68:5e:40:35:97:6a:14:9c:ff:c7:48:0f:23:d5: 0a:0c:d7:62:17:19:32:55:fe:f3:b3:25:6e:57:c6:33:58:08: 96:2d:70:d1:3d:1f:5d:c1:09:58:05:c8:bb:70:9d:85:41:ec: 21:92:8f:87:1a:60:8f:2f:a6:2a:ed:7e:c8:0a:35:82:ee:dc: 7d:db:00:28:09:24:47:9e:5d:a4:08:cc:d8:5f:67:25:a3:31: cb:b7:7f:37:70:54:3a:95:28:b0:c4:35:e4:bd:19:f3:ef:5a: 45:e4:dd:32:fe:19:b0:f7:61:00:3d:99:95:7d:0a:80:9e:06: 3a:5f:0c:67:d6:7d:16:1c:3b:72:6c:73:af:b7:ff:0c:31:da: 60:fb:ba:79:95:f2:9e:55:f3:de:a3:e3:94:0c:42:9a:22:e2: 4b:4b:49:71:28:0e:77:f4:96:af:7a:f5:24:25:a2:74:e5:3e: ca:2b:42:6b:b2:ca:20:7e:37:7e:61:a3:ac:e6:24:45:47:c2: dc:40:c1:ad:9f:d6:27:58:1f:b0:5b:f2:11:42:d8:29:84:5e: 4d:86:fe:f1:ab:83:34:b8:d8:55:54:05:69:fc:87:41:29:55: 88:f1:1d:a5:3c:a3:8a:31:d8:bf:63:1a:86:17:bf:81:dc:77: 70:be:37:b1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4MkEwRDQ2NUE5OUY5 MjgyQTc3QUMxRjUxNkQ1MTdEMEI0NDk3M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgRhZLdELJquj+4S43RhGEZVY80wRVsqUNkdsP+T60QwPBmOui s2tcqUCZgcUSbxWsUq1C5t4JG/3PMnf6nvUED5wKvpUPPLkvuN9fa7zdbxURoPc2 DznmAMBRaQzANU9TC813RMto39c7lV4K7wLVttmaunGD7eg22wyFw8QezV72One/ D4hFwAK1Zmur1MBEqRORL+Pj9ABJogyeEKmaMQ2I0QIv/Y9msnqcx0ltki0Pys+E j7YN1oT0Sxa+gtug78AnHFQ0doyVLXLYZHaf12xEYl3AztJyaz6vjnoq0UcicTtY GfX+5y4NsObHorga9v+qeYmxr2XEghglDTfjAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUqCoNRlqZ+Sgqd6wfUW1RfQtElzowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9xQ29OUmxxWi1TZ3FkNndmVVcx UmZRdEVsem8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCoxgw DQYJKoZIhvcNAQELBQADggEBALH0P8JoXkA1l2oUnP/HSA8j1QoM12IXGTJV/vOz JW5XxjNYCJYtcNE9H13BCVgFyLtwnYVB7CGSj4caYI8vpirtfsgKNYLu3H3bACgJ JEeeXaQIzNhfZyWjMcu3fzdwVDqVKLDENeS9GfPvWkXk3TL+GbD3YQA9mZV9CoCe BjpfDGfWfRYcO3Jsc6+3/wwx2mD7unmV8p5V896j45QMQpoi4ktLSXEoDnf0lq96 9SQlonTlPsorQmuyyiB+N35ho6zmJEVHwtxAwa2f1idYH7Bb8hFC2CmEXk2G/vGr gzS42FVUBWn8h0EpVYjxHaU8o4ox2L9jGoYXv4Hcd3C+N7E= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:29 2025 by rpki-client