$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/sIaPWQKKu_Fx4sC1tO--8dd3ggg.roa File: sIaPWQKKu_Fx4sC1tO--8dd3ggg.roa (raw, json) Hash identifier: rvnKFOe6nQM6ImbA1K5u52H6cPMhAjHR+mOQWScCsE4= Subject key identifier: B0:86:8F:59:02:8A:BB:F1:71:E2:C0:B5:B4:EF:BE:F1:D7:77:82:08 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1098 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sIaPWQKKu_Fx4sC1tO--8dd3ggg.roa Signing time: Fri 22 Aug 2025 08:55:38 +0000 ROA not before: Fri 22 Aug 2025 08:55:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 203.68.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4248 (0x1098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B0868F59028ABBF171E2C0B5B4EFBEF1D7778208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:ec:90:69:50:21:4f:88:99:1b:ec:39:7a: 1a:d3:15:5c:4e:59:80:9b:2d:2d:b4:d4:cb:86:5a: d6:3d:91:f1:cf:74:cc:7a:68:e3:61:11:fb:06:f1: 4b:fe:83:30:71:9a:88:d9:2f:2d:84:d2:4f:48:48: 8d:1f:14:bb:ac:8a:5c:da:9f:d2:e1:c6:63:6a:e6: ba:8a:7e:11:c1:d6:77:54:44:55:45:0b:59:58:0b: 1c:24:39:06:e9:94:c8:40:57:83:51:8a:44:c4:d5: e1:30:91:15:e8:3a:e6:bf:50:87:12:c0:b3:0b:c2: 77:3b:7e:fb:0c:cd:b5:cf:cc:49:bd:be:0f:83:28: c4:d9:70:e5:86:bd:ad:db:bf:8c:9a:40:b0:2c:81: 86:b3:e9:46:02:d8:8c:5e:0e:98:e1:b8:4e:4b:9a: fd:84:e9:71:58:a3:0c:0b:89:53:ac:15:c8:0a:d1: 97:71:34:db:a0:7f:4e:13:19:17:3c:f1:0a:dc:f1: 3d:63:4c:37:f0:85:92:f0:d4:47:a0:40:02:64:f2: f7:46:36:9e:be:5d:7f:e0:d0:11:74:8a:ad:d6:78: 94:0a:1a:1b:cd:93:df:bd:46:95:a2:cf:e7:11:2c: 44:16:9f:49:cf:80:c3:48:ba:a5:5d:84:f9:7f:27: 0d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:86:8F:59:02:8A:BB:F1:71:E2:C0:B5:B4:EF:BE:F1:D7:77:82:08 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/sIaPWQKKu_Fx4sC1tO--8dd3ggg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.68.203.0/24 Signature Algorithm: sha256WithRSAEncryption 68:e4:d9:22:31:29:1d:c0:49:7c:d7:c9:74:71:69:34:70:b7: ae:a1:89:1d:d1:c6:6e:5a:df:a6:82:b5:22:37:71:2e:fc:84: de:10:c3:36:45:f3:42:8c:24:87:01:f5:74:a8:af:ed:ab:c4: b1:94:a7:3f:d7:66:c1:69:91:ca:5a:3d:f3:54:a9:a3:08:04: 8a:c3:d3:85:12:23:d6:51:fa:8f:4a:29:0e:8a:c2:82:5c:ee: 54:06:ac:cc:7e:2f:60:92:8a:19:1d:3b:d9:aa:c2:93:33:8f: b3:c3:2b:3c:e8:51:21:f6:22:f5:f0:a1:6a:90:07:99:9b:73: 4c:da:02:16:b9:e3:4c:d5:40:c5:8b:2a:21:6c:ea:d3:ab:1b: c2:8f:72:85:ed:ba:97:87:72:8a:03:2f:a0:77:dc:3b:e0:a5: 6e:25:cb:c9:0a:d5:62:55:e3:ca:b0:2e:f4:8e:7a:46:47:1d: 93:42:82:d7:ac:8d:2f:e1:f1:a4:8d:23:88:55:8e:d9:aa:53: c3:c8:dd:e9:0f:ad:96:3b:fa:3f:21:da:e9:af:ea:fa:c6:84: 40:b5:f7:dd:90:5b:9f:b1:aa:c1:c0:9e:98:ad:2a:37:f1:d4: e4:d0:03:89:1e:9a:10:8e:9d:e4:c1:5a:f7:b0:26:6e:f7:b0: f7:8e:2b:dc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwODY4RjU5MDI4QUJC RjE3MUUyQzBCNUI0RUZCRUYxRDc3NzgyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC40+yQaVAhT4iZG+w5ehrTFVxOWYCbLS201MuGWtY9kfHPdMx6 aONhEfsG8Uv+gzBxmojZLy2E0k9ISI0fFLusilzan9LhxmNq5rqKfhHB1ndURFVF C1lYCxwkOQbplMhAV4NRikTE1eEwkRXoOua/UIcSwLMLwnc7fvsMzbXPzEm9vg+D KMTZcOWGva3bv4yaQLAsgYaz6UYC2IxeDpjhuE5Lmv2E6XFYowwLiVOsFcgK0Zdx NNugf04TGRc88Qrc8T1jTDfwhZLw1EegQAJk8vdGNp6+XX/g0BF0iq3WeJQKGhvN k9+9RpWiz+cRLEQWn0nPgMNIuqVdhPl/Jw2lAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUsIaPWQKKu/Fx4sC1tO++8dd3gggwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9zSWFQV1FLS3VfRng0c0MxdE8t LThkZDNnZ2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0TL MA0GCSqGSIb3DQEBCwUAA4IBAQBo5NkiMSkdwEl818l0cWk0cLeuoYkd0cZuWt+m grUiN3Eu/ITeEMM2RfNCjCSHAfV0qK/tq8SxlKc/12bBaZHKWj3zVKmjCASKw9OF EiPWUfqPSikOisKCXO5UBqzMfi9gkooZHTvZqsKTM4+zwys86FEh9iL18KFqkAeZ m3NM2gIWueNM1UDFiyohbOrTqxvCj3KF7bqXh3KKAy+gd9w74KVuJcvJCtViVePK sC70jnpGRx2TQoLXrI0v4fGkjSOIVY7ZqlPDyN3pD62WO/o/Idrpr+r6xoRAtffd kFufsarBwJ6YrSo38dTk0AOJHpoQjp3kwVr3sCZu97D3jivc -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:29 2025 by rpki-client