$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/104IT/GbLTHBaybfpD3ODKTQ5qlZQA1Ro.roa File: GbLTHBaybfpD3ODKTQ5qlZQA1Ro.roa (raw, json) Hash identifier: SZnLrcCfh3hYrrAPDRbOpsjjZkKFzFDy7dwRH1IRUwg= Subject key identifier: 19:B2:D3:1C:16:B2:6D:FA:43:DC:E0:CA:4D:0E:6A:95:94:00:D5:1A Certificate issuer: /CN=D797D20CC7952CD68B3955AA36C401B1B34E2733 Certificate serial: 0D1A Authority key identifier: D7:97:D2:0C:C7:95:2C:D6:8B:39:55:AA:36:C4:01:B1:B3:4E:27:33 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/15fSDMeVLNaLOVWqNsQBsbNOJzM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/GbLTHBaybfpD3ODKTQ5qlZQA1Ro.roa Signing time: Fri 22 Aug 2025 08:56:49 +0000 ROA not before: Fri 22 Aug 2025 08:56:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18410 IP address blocks: 202.8.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/15fSDMeVLNaLOVWqNsQBsbNOJzM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/15fSDMeVLNaLOVWqNsQBsbNOJzM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/15fSDMeVLNaLOVWqNsQBsbNOJzM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D797D20CC7952CD68B3955AA36C401B1B34E2733 Validity Not Before: Aug 22 08:56:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=19B2D31C16B26DFA43DCE0CA4D0E6A959400D51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:bc:2d:a4:68:f9:e6:08:71:c9:c4:01:a5: 4d:12:3f:6c:41:84:94:44:26:f6:5a:5c:43:8b:db: 90:83:74:39:a5:61:f0:3a:d8:87:d5:16:43:a2:8e: 0b:0e:65:ea:e9:c6:14:1a:71:5a:04:e5:03:1c:f6: 07:5e:b1:7f:ef:25:35:76:0c:04:01:b9:78:e3:66: ab:d4:66:4e:dc:ff:a3:51:49:ff:28:eb:de:fc:dd: 82:6d:c2:79:4a:92:8d:db:50:e1:b1:54:7e:9c:12: 16:86:ac:f6:b6:16:f7:c5:4f:b5:11:96:9b:d7:d2: 18:77:8c:74:69:8d:1d:23:38:6c:7b:e6:e6:ed:58: e9:fc:79:57:51:5c:13:00:f6:43:2a:22:2c:2e:21: e5:ca:48:f2:fe:ab:a0:cf:05:8f:ad:45:0e:44:d7: 50:cc:f6:5e:3d:fa:12:84:76:a7:4b:be:2e:2f:0b: 61:7e:f7:89:44:31:76:ac:89:26:5e:de:e7:bf:d4: a7:96:44:c0:b9:a1:d0:7b:03:cc:24:ad:49:69:43: b5:f3:28:10:f6:8b:3e:e5:e1:e6:b8:d5:04:f0:7c: 1e:e9:bc:9a:a4:f9:c0:24:64:e6:06:40:28:c8:fc: 36:91:c5:cb:de:46:e8:3a:8c:fe:25:e4:1d:3a:7e: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B2:D3:1C:16:B2:6D:FA:43:DC:E0:CA:4D:0E:6A:95:94:00:D5:1A X509v3 Authority Key Identifier: keyid:D7:97:D2:0C:C7:95:2C:D6:8B:39:55:AA:36:C4:01:B1:B3:4E:27:33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/15fSDMeVLNaLOVWqNsQBsbNOJzM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/15fSDMeVLNaLOVWqNsQBsbNOJzM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/104IT/GbLTHBaybfpD3ODKTQ5qlZQA1Ro.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.8.14.0/23 Signature Algorithm: sha256WithRSAEncryption 81:51:95:f3:c2:dc:6c:8a:d8:c8:d8:36:82:67:cd:b7:a2:96: ea:0d:60:38:b5:74:7f:14:1f:31:4b:95:2f:e9:60:8c:a7:42: 2b:88:25:96:08:91:07:de:4e:e1:2a:58:61:a0:88:1a:e0:1d: dd:6b:bf:9b:f7:63:ce:f9:88:7f:ad:8e:93:2b:43:fc:a4:04: 17:34:bc:f6:dc:3b:b9:7f:69:b1:dc:6d:9a:59:46:7d:23:1b: 5b:87:77:21:cc:9a:b9:7c:6b:a3:8e:17:87:70:c3:85:98:7b: a9:72:84:55:d3:82:73:23:d4:07:b3:8d:2c:c0:9c:bb:ee:ad: 4e:9c:d2:11:e4:ad:53:0e:27:43:94:38:18:28:3c:1d:ab:65: c4:4b:2f:98:2b:ca:8f:b8:c8:33:30:6d:1f:47:c0:9c:16:93: ed:61:63:5d:d1:af:26:8c:4a:43:81:ac:12:ff:dd:49:64:ce: 15:ad:71:1e:63:b1:4d:4d:b0:d8:db:53:96:14:ba:e6:19:af: f0:6a:66:71:61:24:28:92:f7:19:64:dc:2f:7d:6f:50:19:b5: 7f:1c:b6:d3:61:45:55:5f:1b:82:0d:ae:21:8d:46:a7:95:30: 4c:8d:c9:a2:49:54:b9:4b:a3:f8:d8:a3:98:17:8a:a4:2e:5c: 9e:c6:86:ae -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDRowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDc5 N0QyMENDNzk1MkNENjhCMzk1NUFBMzZDNDAxQjFCMzRFMjczMzAeFw0yNTA4MjIw ODU2NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE5QjJEMzFDMTZCMjZE RkE0M0RDRTBDQTREMEU2QTk1OTQwMEQ1MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRlbwtpGj55ghxycQBpU0SP2xBhJREJvZaXEOL25CDdDmlYfA6 2IfVFkOijgsOZerpxhQacVoE5QMc9gdesX/vJTV2DAQBuXjjZqvUZk7c/6NRSf8o 69783YJtwnlKko3bUOGxVH6cEhaGrPa2FvfFT7URlpvX0hh3jHRpjR0jOGx75ubt WOn8eVdRXBMA9kMqIiwuIeXKSPL+q6DPBY+tRQ5E11DM9l49+hKEdqdLvi4vC2F+ 94lEMXasiSZe3ue/1KeWRMC5odB7A8wkrUlpQ7XzKBD2iz7l4ea41QTwfB7pvJqk +cAkZOYGQCjI/DaRxcveRug6jP4l5B06fj1BAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUGbLTHBaybfpD3ODKTQ5qlZQA1RowHwYDVR0jBBgwFoAU15fSDMeVLNaLOVWq NsQBsbNOJzMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvMTA0SVQv MTVmU0RNZVZMTmFMT1ZXcU5zUUJzYk5PSnpNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8xNWZTRE1lVkxOYUxPVldxTnNRQnNiTk9Kek0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8xMDRJVC9HYkxUSEJheWJmcEQzT0RLVFE1 cWxaUUExUm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByggO MA0GCSqGSIb3DQEBCwUAA4IBAQCBUZXzwtxsitjI2DaCZ823opbqDWA4tXR/FB8x S5Uv6WCMp0IriCWWCJEH3k7hKlhhoIga4B3da7+b92PO+Yh/rY6TK0P8pAQXNLz2 3Du5f2mx3G2aWUZ9Ixtbh3chzJq5fGujjheHcMOFmHupcoRV04JzI9QHs40swJy7 7q1OnNIR5K1TDidDlDgYKDwdq2XESy+YK8qPuMgzMG0fR8CcFpPtYWNd0a8mjEpD gawS/91JZM4VrXEeY7FNTbDY21OWFLrmGa/wamZxYSQokvcZZNwvfW9QGbV/HLbT YUVVXxuCDa4hjUanlTBMjcmiSVS5S6P42KOYF4qkLlyexoau -----END CERTIFICATE-----Generated at Wed Nov 5 23:31:22 2025 by rpki-client