$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/rOGZLjbjSlreeIZF5L7GWnOuk8o.roa File: rOGZLjbjSlreeIZF5L7GWnOuk8o.roa (raw, json) Hash identifier: nDORMAu2z2xfsf6fMSR4gnyT7IrBcWhYPPY52y1jo/0= Subject key identifier: AC:E1:99:2E:36:E3:4A:5A:DE:78:86:45:E4:BE:C6:5A:73:AE:93:CA Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1479 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/rOGZLjbjSlreeIZF5L7GWnOuk8o.roa Signing time: Fri 22 Aug 2025 08:51:33 +0000 ROA not before: Fri 22 Aug 2025 08:51:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131644 IP address blocks: 182.173.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5241 (0x1479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ACE1992E36E34A5ADE788645E4BEC65A73AE93CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:2a:77:ba:a1:ab:b4:13:1d:06:17:cf:31: 42:8c:6d:81:00:1a:2c:cf:3d:94:6a:aa:8e:79:be: 2f:7e:4d:20:31:47:36:f8:64:e2:0f:1e:13:46:3b: 31:22:d9:d7:a9:af:27:48:3d:ae:76:fc:c3:a9:f6: f1:4f:f3:6d:66:77:45:50:7d:80:6a:52:fe:5d:6f: 98:5b:95:29:32:b5:59:47:f3:3f:4d:0c:b7:85:b7: d3:c7:d4:b8:ba:17:dc:23:b0:28:7a:06:22:1a:7e: b8:df:40:56:0c:73:da:0b:a2:c5:4f:e3:64:1a:07: 67:5d:71:6c:a1:6f:c9:3b:0f:7c:bc:f1:85:a8:f6: 26:1c:85:7f:c6:e6:d9:80:4b:80:b3:ce:79:2b:c0: f2:3c:44:b6:71:17:ef:50:27:77:5b:12:af:3c:5a: d3:8f:74:6f:d8:98:ac:fe:f0:58:0d:75:24:37:bc: 3b:d0:88:53:da:c3:48:94:99:bb:b3:91:2c:dd:0f: ef:e0:66:0b:a0:99:5a:e2:e3:51:77:aa:70:2f:06: 5e:56:99:89:f3:0b:db:45:f9:fc:b5:1f:22:73:38: 14:00:02:d5:39:c6:07:b2:cc:cc:c8:c0:14:5b:c8: 6a:f8:92:e4:e3:8b:21:d7:64:5c:80:fd:dc:da:eb: 7f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E1:99:2E:36:E3:4A:5A:DE:78:86:45:E4:BE:C6:5A:73:AE:93:CA X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/rOGZLjbjSlreeIZF5L7GWnOuk8o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.173.0.0/24 Signature Algorithm: sha256WithRSAEncryption a8:03:d1:1f:3a:95:47:d9:00:5d:75:95:43:d6:c4:a1:e5:f6: 70:76:66:d8:6b:71:7e:c4:a8:9e:76:8b:40:16:8d:e4:52:ff: a8:3d:1f:e7:e9:91:36:17:1c:a3:20:9e:3f:3b:ba:18:7a:d8: 3a:8a:a0:dc:9d:fe:06:e2:05:9f:43:f1:6e:5b:b8:8f:eb:f7: e5:d4:f2:3c:91:ea:06:e8:5e:3d:ec:b5:ea:65:23:2d:15:12: ba:59:60:a8:f1:a1:54:81:01:1a:04:34:e9:20:ba:77:29:d0: f9:e3:20:4a:dc:18:67:0d:78:d4:27:f2:0d:20:18:d1:4b:de: 11:b7:08:56:41:3f:9f:cd:cf:cc:56:39:64:14:a1:7b:f1:d9: 6d:80:ea:25:05:4c:3e:d3:5c:6f:a7:4e:fe:e5:3d:50:b2:1b: eb:0e:15:53:4a:fe:9b:89:67:a8:80:40:c3:d5:ce:a7:58:20: a5:c8:98:1f:2b:fd:f6:9e:1c:ce:62:50:cf:71:a4:9d:6f:97: 0b:9c:08:5d:dd:14:44:8b:5e:21:e0:fb:e3:e2:8c:7a:9f:1d: 18:e8:05:e5:b4:e5:07:08:da:1f:62:40:ef:22:98:41:fe:b8: 93:a4:f9:6a:19:87:09:ed:43:80:67:b1:3a:a2:a8:58:40:71: 78:ce:26:4f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFDRTE5OTJFMzZFMzRB NUFERTc4ODY0NUU0QkVDNjVBNzNBRTkzQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH1ip3uqGrtBMdBhfPMUKMbYEAGizPPZRqqo55vi9+TSAxRzb4 ZOIPHhNGOzEi2deprydIPa52/MOp9vFP821md0VQfYBqUv5db5hblSkytVlH8z9N DLeFt9PH1Li6F9wjsCh6BiIafrjfQFYMc9oLosVP42QaB2ddcWyhb8k7D3y88YWo 9iYchX/G5tmAS4CzznkrwPI8RLZxF+9QJ3dbEq88WtOPdG/YmKz+8FgNdSQ3vDvQ iFPaw0iUmbuzkSzdD+/gZgugmVri41F3qnAvBl5WmYnzC9tF+fy1HyJzOBQAAtU5 xgeyzMzIwBRbyGr4kuTjiyHXZFyA/dza63/fAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUrOGZLjbjSlreeIZF5L7GWnOuk8owHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9yT0daTGpialNscmVlSVpGNUw3 R1duT3VrOG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtq0A MA0GCSqGSIb3DQEBCwUAA4IBAQCoA9EfOpVH2QBddZVD1sSh5fZwdmbYa3F+xKie dotAFo3kUv+oPR/n6ZE2FxyjIJ4/O7oYetg6iqDcnf4G4gWfQ/FuW7iP6/fl1PI8 keoG6F497LXqZSMtFRK6WWCo8aFUgQEaBDTpILp3KdD54yBK3BhnDXjUJ/INIBjR S94RtwhWQT+fzc/MVjlkFKF78dltgOolBUw+01xvp07+5T1QshvrDhVTSv6biWeo gEDD1c6nWCClyJgfK/32nhzOYlDPcaSdb5cLnAhd3RREi14h4Pvj4ox6nx0Y6AXl tOUHCNofYkDvIphB/riTpPlqGYcJ7UOAZ7E6oqhYQHF4ziZP -----END CERTIFICATE-----Generated at Sat Sep 6 07:07:23 2025 by rpki-client