$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZAT/IVDfwZIEkQHBLiA8feY_VXch8Oc.roa File: IVDfwZIEkQHBLiA8feY_VXch8Oc.roa (raw, json) Hash identifier: rpv2VyUG1Pc76gfg+6fXZkRUERhi7OSrpJIquOyY2zA= Subject key identifier: 21:50:DF:C1:92:04:91:01:C1:2E:20:3C:7D:E6:3F:55:77:21:F0:E7 Certificate issuer: /CN=41D608336CCF0EDFEA4A24614F1D7234884E8991 Certificate serial: 0227 Authority key identifier: 41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/IVDfwZIEkQHBLiA8feY_VXch8Oc.roa Signing time: Fri 22 Aug 2025 08:44:06 +0000 ROA not before: Fri 22 Aug 2025 08:44:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 201217 IP address blocks: 210.79.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41D608336CCF0EDFEA4A24614F1D7234884E8991 Validity Not Before: Aug 22 08:44:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2150DFC192049101C12E203C7DE63F557721F0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:9c:6d:de:72:a9:31:fc:8d:d9:0a:56:f8: 35:61:f9:78:16:9c:3b:5e:7b:45:cc:cb:08:d9:0e: df:13:d9:0d:8b:98:f2:a3:11:11:4d:eb:92:bf:b3: e1:93:3c:95:81:b8:d2:d6:08:ad:02:59:77:e0:61: 0b:1b:bd:64:80:c3:16:d6:18:22:d6:5a:41:71:21: 76:e6:f6:f0:d8:96:e5:57:3f:fd:48:d1:ad:eb:14: 0c:ce:53:16:06:be:43:84:ce:60:06:3a:3b:34:00: 9f:7d:9f:02:70:f3:7f:d7:57:f7:99:7c:b1:7e:22: bd:a2:1a:2f:25:40:e6:cc:31:1c:de:be:17:7f:84: 73:ec:23:ec:aa:2a:60:84:6e:6f:6c:b8:c0:1a:0e: 4f:55:7e:e9:1f:dd:4f:c3:b0:fc:d6:dc:5d:80:91: b7:46:2e:90:fb:ff:20:f4:95:51:70:19:07:7c:8e: 8e:f0:a8:38:e9:e9:1c:de:57:fd:68:e4:77:97:49: b7:75:90:b6:cd:5d:45:65:37:c1:e3:3e:5f:a1:0c: 71:d5:e7:fa:8a:3e:fd:61:da:25:da:a1:0d:41:5c: 84:45:7a:c3:c8:4e:d8:dc:5c:9b:09:c8:7b:b3:12: a2:fc:ef:77:3e:59:62:f0:b4:94:3a:17:d5:24:47: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:50:DF:C1:92:04:91:01:C1:2E:20:3C:7D:E6:3F:55:77:21:F0:E7 X509v3 Authority Key Identifier: keyid:41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/IVDfwZIEkQHBLiA8feY_VXch8Oc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.79.151.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:e6:33:ec:3a:70:c1:c9:14:98:54:5d:58:68:8f:f3:5b:1b: 0f:7c:24:41:f1:9b:8c:b2:e1:f8:16:01:d7:14:b4:33:d0:2a: 3c:de:ca:67:d4:df:ae:e1:88:df:ba:12:ce:02:59:d8:e8:d7: e8:74:a2:0c:06:7c:32:03:ef:4d:f7:92:1d:10:97:bc:41:69: b8:81:38:14:8c:cd:60:34:6d:52:49:3c:a8:f6:16:03:5c:76: 9f:54:60:47:c1:92:eb:bb:cd:4c:64:ae:e3:5c:20:d0:bc:0d: 2d:85:1a:06:72:0c:c5:2f:35:86:7d:aa:a4:96:bf:da:44:a9: 64:74:34:4f:b9:56:25:2a:b4:43:86:aa:8b:0d:60:8d:4a:00: 46:72:46:7a:29:42:8b:c5:21:fc:73:7b:c7:10:aa:56:4a:b0: e4:b6:73:df:fc:2c:76:9c:a5:88:3f:d8:26:4a:9b:54:79:75: 12:75:fe:88:1d:90:f7:48:76:e9:3e:2f:0f:dc:cf:f2:57:2c: 25:74:da:39:7d:19:9a:0e:59:1c:91:ad:63:4d:15:2e:1a:0b: 95:4f:d0:53:3d:75:70:1d:11:52:15:fd:06:78:4c:e8:b4:d9: 13:c7:43:8c:5c:00:cc:1c:f2:41:72:16:a7:18:49:b7:44:21: 8f:a7:65:fe -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDFE NjA4MzM2Q0NGMEVERkVBNEEyNDYxNEYxRDcyMzQ4ODRFODk5MTAeFw0yNTA4MjIw ODQ0MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIxNTBERkMxOTIwNDkx MDFDMTJFMjAzQzdERTYzRjU1NzcyMUYwRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC60pxt3nKpMfyN2QpW+DVh+XgWnDtee0XMywjZDt8T2Q2LmPKj ERFN65K/s+GTPJWBuNLWCK0CWXfgYQsbvWSAwxbWGCLWWkFxIXbm9vDYluVXP/1I 0a3rFAzOUxYGvkOEzmAGOjs0AJ99nwJw83/XV/eZfLF+Ir2iGi8lQObMMRzevhd/ hHPsI+yqKmCEbm9suMAaDk9Vfukf3U/DsPzW3F2AkbdGLpD7/yD0lVFwGQd8jo7w qDjp6RzeV/1o5HeXSbd1kLbNXUVlN8HjPl+hDHHV5/qKPv1h2iXaoQ1BXIRFesPI TtjcXJsJyHuzEqL873c+WWLwtJQ6F9UkRz0tAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUIVDfwZIEkQHBLiA8feY/VXch8OcwHwYDVR0jBBgwFoAUQdYIM2zPDt/qSiRh Tx1yNIhOiZEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkFUL1Fk WUlNMnpQRHRfcVNpUmhUeDF5TkloT2laRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UWRZSU0yelBEdF9xU2lSaFR4MXlOSWhPaVpFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvWkFUL0lWRGZ3WklFa1FIQkxpQThmZVlfVlhj aDhPYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADST5cwDQYJ KoZIhvcNAQELBQADggEBAEvmM+w6cMHJFJhUXVhoj/NbGw98JEHxm4yy4fgWAdcU tDPQKjzeymfU367hiN+6Es4CWdjo1+h0ogwGfDID7033kh0Ql7xBabiBOBSMzWA0 bVJJPKj2FgNcdp9UYEfBkuu7zUxkruNcINC8DS2FGgZyDMUvNYZ9qqSWv9pEqWR0 NE+5ViUqtEOGqosNYI1KAEZyRnopQovFIfxze8cQqlZKsOS2c9/8LHacpYg/2CZK m1R5dRJ1/ogdkPdIduk+Lw/cz/JXLCV02jl9GZoOWRyRrWNNFS4aC5VP0FM9dXAd EVIV/QZ4TOi02RPHQ4xcAMwc8kFyFqcYSbdEIY+nZf4= -----END CERTIFICATE-----Generated at Sat Sep 6 07:44:20 2025 by rpki-client