$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6poRaXqgt55Rl75scc8dt9GYgFU.roa File: 6poRaXqgt55Rl75scc8dt9GYgFU.roa (raw, json) Hash identifier: wrBU4bxFzolj7MZuMN4DA4dWHnxi8bNFU7yy8+z+tLg= Subject key identifier: EA:9A:11:69:7A:A0:B7:9E:51:97:BE:6C:71:CF:1D:B7:D1:98:80:55 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1463 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6poRaXqgt55Rl75scc8dt9GYgFU.roa Signing time: Fri 22 Aug 2025 08:51:28 +0000 ROA not before: Fri 22 Aug 2025 08:51:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131644 IP address blocks: 101.102.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5219 (0x1463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EA9A11697AA0B79E5197BE6C71CF1DB7D1988055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:fb:36:68:b5:c6:ae:18:28:3f:0e:55:e9: 43:7b:71:67:d4:7c:e3:6c:be:4c:db:8e:00:3a:dc: cf:34:dd:da:9f:38:26:4b:01:89:d9:24:cb:fc:9e: a1:a2:e6:37:b1:20:20:23:07:dc:92:86:fb:8b:f7: 3c:ab:fa:fd:40:f7:c5:0b:ed:91:9a:9a:17:fd:16: 5a:9c:2c:65:a5:fa:18:0f:8d:d6:9e:00:19:1b:92: 3d:f0:59:91:13:83:aa:08:c9:89:36:6e:c4:ba:5a: 52:5a:b7:89:78:17:93:9d:1e:a4:7f:c7:eb:03:3f: 73:09:43:e9:90:7f:d2:af:ad:ce:24:a2:c2:e5:ba: 16:f8:66:65:b7:dc:71:cc:10:a3:a0:6e:f9:fb:25: f0:eb:d4:67:b0:c2:dd:f8:d0:e5:1c:74:0c:7d:b8: 42:e0:06:03:d4:d6:de:93:d7:27:f3:f5:4e:cb:2b: d2:2d:68:11:d4:c1:c2:25:40:0b:07:5b:27:5c:96: db:cb:75:25:75:8d:11:a1:a4:86:3b:c2:a8:3a:1f: 6f:20:35:7f:4d:fd:96:6f:32:7b:3b:bb:03:46:be: f3:4e:88:65:9d:d4:e5:03:ac:73:7f:d1:00:14:70: 3c:df:70:31:a9:2c:15:2d:ee:49:9a:1b:d1:bb:a2: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:11:69:7A:A0:B7:9E:51:97:BE:6C:71:CF:1D:B7:D1:98:80:55 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6poRaXqgt55Rl75scc8dt9GYgFU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.102.103.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c3:41:cb:ef:dd:3b:0a:b4:07:6c:09:0b:97:2d:f2:12:cd: 08:63:cd:da:6e:9f:6f:c9:5d:42:61:37:2a:de:58:61:f7:0c: f3:c9:a8:a8:22:d6:2d:b2:73:44:cd:b0:04:16:5d:28:c6:c0: cb:e8:22:6f:b1:66:29:d5:41:29:92:c6:80:a7:53:54:d6:09: e0:a0:34:35:c4:4d:46:a6:c5:53:81:ed:47:6a:76:99:eb:22: 5e:d7:0f:ea:cd:03:e9:f5:e1:47:d8:5e:26:fd:c3:32:0b:b9: cb:16:c2:42:7e:ed:2a:28:72:11:58:3b:95:1a:05:a2:0d:12: 37:05:e5:91:96:7e:a9:d6:dc:dd:d5:70:89:d0:76:5f:c8:ab: 1b:15:20:49:19:c6:c4:43:5b:0f:72:e7:b3:2a:04:02:82:55: af:89:97:a9:5f:2b:cf:15:db:18:ca:0f:a5:20:25:9e:4f:aa: 78:e7:11:57:11:99:ed:54:59:ee:f9:1c:07:53:3b:33:91:f0: 78:52:2a:37:19:8b:cf:d9:80:fa:67:1b:00:36:7c:ba:6a:f2: 78:34:05:93:2f:65:cf:93:98:69:00:dd:27:81:02:17:45:97: 0d:3e:ae:4c:31:80:bc:83:60:45:b0:89:1a:e1:9a:94:1b:6c: 3a:91:78:b0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBOUExMTY5N0FBMEI3 OUU1MTk3QkU2QzcxQ0YxREI3RDE5ODgwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1Vvs2aLXGrhgoPw5V6UN7cWfUfONsvkzbjgA63M803dqfOCZL AYnZJMv8nqGi5jexICAjB9yShvuL9zyr+v1A98UL7ZGamhf9FlqcLGWl+hgPjdae ABkbkj3wWZETg6oIyYk2bsS6WlJat4l4F5OdHqR/x+sDP3MJQ+mQf9Kvrc4kosLl uhb4ZmW33HHMEKOgbvn7JfDr1Gewwt340OUcdAx9uELgBgPU1t6T1yfz9U7LK9It aBHUwcIlQAsHWydcltvLdSV1jRGhpIY7wqg6H28gNX9N/ZZvMns7uwNGvvNOiGWd 1OUDrHN/0QAUcDzfcDGpLBUt7kmaG9G7omgHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU6poRaXqgt55Rl75scc8dt9GYgFUwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy82cG9SYVhxZ3Q1NVJsNzVzY2M4 ZHQ5R1lnRlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWZn MA0GCSqGSIb3DQEBCwUAA4IBAQAkw0HL7907CrQHbAkLly3yEs0IY83abp9vyV1C YTcq3lhh9wzzyaioItYtsnNEzbAEFl0oxsDL6CJvsWYp1UEpksaAp1NU1gngoDQ1 xE1GpsVTge1HanaZ6yJe1w/qzQPp9eFH2F4m/cMyC7nLFsJCfu0qKHIRWDuVGgWi DRI3BeWRln6p1tzd1XCJ0HZfyKsbFSBJGcbEQ1sPcuezKgQCglWviZepXyvPFdsY yg+lICWeT6p45xFXEZntVFnu+RwHUzszkfB4Uio3GYvP2YD6ZxsANny6avJ4NAWT L2XPk5hpAN0ngQIXRZcNPq5MMYC8g2BFsIka4ZqUG2w6kXiw -----END CERTIFICATE-----Generated at Sat Sep 6 07:07:23 2025 by rpki-client