$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCT/sL4Se46-fzXzr4RGZQCkQBrpwX0.roa File: sL4Se46-fzXzr4RGZQCkQBrpwX0.roa (raw, json) Hash identifier: HJc5yL5CnqLh33JpHKzM/p+UNvs7LQ8ga7H1Tz7AlA0= Subject key identifier: B0:BE:12:7B:8E:BE:7F:35:F3:AF:84:46:65:00:A4:40:1A:E9:C1:7D Certificate issuer: /CN=9B062D74C7F512F04AE60955C5456FC19755337F Certificate serial: 0D83 Authority key identifier: 9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/sL4Se46-fzXzr4RGZQCkQBrpwX0.roa Signing time: Fri 22 Aug 2025 08:56:01 +0000 ROA not before: Fri 22 Aug 2025 08:56:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131601 IP address blocks: 114.29.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3459 (0xd83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B062D74C7F512F04AE60955C5456FC19755337F Validity Not Before: Aug 22 08:56:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B0BE127B8EBE7F35F3AF84466500A4401AE9C17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:5d:f3:a5:e7:d0:c7:8e:07:5c:8d:a6:39: 9d:c9:41:40:2f:49:45:e9:e7:71:25:a0:c8:88:61: 34:4f:e8:b8:ad:e2:57:8c:9c:16:aa:97:d6:de:b5: 0a:cb:44:2c:e6:8d:cd:6a:6d:5e:e0:5b:03:fa:5a: ac:7e:d3:c3:09:d4:ab:81:a6:36:d3:3a:8e:6b:cf: 1a:e8:ba:1e:d1:fe:67:8d:d4:f3:7e:24:40:53:96: b6:3b:69:79:5c:29:9d:c7:bf:cc:78:67:8d:bd:1f: d1:60:6b:4b:eb:fa:1b:ac:51:ac:7a:f8:16:13:05: db:4a:e5:19:42:12:c2:69:6a:e6:7f:e1:43:f0:ad: 28:2c:e0:ba:b4:63:4d:da:55:93:2f:1d:72:d0:48: e4:0b:83:70:55:19:55:1b:86:4f:2e:20:c6:f0:0f: 40:e1:55:8a:f3:a9:44:c6:0e:42:8f:96:cb:88:04: eb:76:ed:88:d6:5e:48:08:62:13:2c:d5:17:0c:ae: 4c:b1:b8:ff:3a:30:bd:b1:2a:87:26:e5:ba:c3:c4: d8:66:60:25:dc:59:3d:cd:f0:16:ca:e9:c8:bc:fd: 73:09:2f:3f:6b:dc:d9:6a:e3:d6:bf:d8:bd:ae:20: df:dc:86:d0:b7:24:8d:b9:42:f6:34:92:32:74:ea: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:12:7B:8E:BE:7F:35:F3:AF:84:46:65:00:A4:40:1A:E9:C1:7D X509v3 Authority Key Identifier: keyid:9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/sL4Se46-fzXzr4RGZQCkQBrpwX0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.29.244.0/22 Signature Algorithm: sha256WithRSAEncryption 21:33:a3:db:69:b1:58:47:5d:cc:43:a7:51:53:fc:46:4a:56: 37:8d:ad:c2:94:0b:af:f2:01:c0:93:65:8d:c7:6a:53:ab:bd: 61:df:1c:f0:81:65:4d:1a:c3:b7:6c:2c:03:2e:9a:32:eb:02: af:63:df:17:1d:16:76:3b:ef:32:f1:33:51:af:93:ba:ec:a7: 3e:15:2c:d5:e2:f3:18:2f:89:37:37:9c:ff:72:c1:4d:f2:03: d4:ad:17:69:10:ec:74:3e:e4:29:17:cf:21:3e:9f:06:35:dc: 7b:6e:cb:68:6c:6c:ea:1f:68:9a:11:d1:f3:ac:40:eb:b8:0e: 36:7d:ea:7e:05:49:88:42:75:95:cd:98:4e:ed:a1:d4:97:19: 29:12:98:3b:89:4c:71:2d:5c:0c:f4:69:ff:53:41:aa:89:4e: 7b:f3:d8:76:ec:fc:c4:4c:67:65:eb:8c:2d:1b:59:73:11:b1: c2:37:4d:ff:c1:36:ea:1a:e7:e2:49:20:17:58:a6:d6:77:07: fd:5e:65:4e:c5:c0:f9:82:42:ff:e7:fb:f3:76:d1:ed:c3:35: 9a:27:dd:33:e7:65:c5:8c:65:c4:ca:4d:fd:8b:8e:20:d8:20: e0:45:44:45:50:b8:6a:e4:d0:63:24:50:5d:37:2f:22:d0:94: 21:b5:67:d7 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUIw NjJENzRDN0Y1MTJGMDRBRTYwOTU1QzU0NTZGQzE5NzU1MzM3RjAeFw0yNTA4MjIw ODU2MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwQkUxMjdCOEVCRTdG MzVGM0FGODQ0NjY1MDBBNDQwMUFFOUMxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Vl3zpefQx44HXI2mOZ3JQUAvSUXp53EloMiIYTRP6Lit4leM nBaql9betQrLRCzmjc1qbV7gWwP6Wqx+08MJ1KuBpjbTOo5rzxrouh7R/meN1PN+ JEBTlrY7aXlcKZ3Hv8x4Z429H9Fga0vr+husUax6+BYTBdtK5RlCEsJpauZ/4UPw rSgs4Lq0Y03aVZMvHXLQSOQLg3BVGVUbhk8uIMbwD0DhVYrzqUTGDkKPlsuIBOt2 7YjWXkgIYhMs1RcMrkyxuP86ML2xKocm5brDxNhmYCXcWT3N8BbK6ci8/XMJLz9r 3Nlq49a/2L2uIN/chtC3JI25QvY0kjJ06qP5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUsL4Se46+fzXzr4RGZQCkQBrpwX0wHwYDVR0jBBgwFoAUmwYtdMf1EvBK5glV xUVvwZdVM38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL213 WXRkTWYxRXZCSzVnbFZ4VVZ2d1pkVk0zOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bXdZdGRNZjFFdkJLNWdsVnhVVnZ3WmRWTTM4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL3NMNFNlNDYtZnpYenI0UkdaUUNrUUJy cHdYMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJyHfQwDQYJ KoZIhvcNAQELBQADggEBACEzo9tpsVhHXcxDp1FT/EZKVjeNrcKUC6/yAcCTZY3H alOrvWHfHPCBZU0aw7dsLAMumjLrAq9j3xcdFnY77zLxM1Gvk7rspz4VLNXi8xgv iTc3nP9ywU3yA9StF2kQ7HQ+5CkXzyE+nwY13Htuy2hsbOofaJoR0fOsQOu4DjZ9 6n4FSYhCdZXNmE7todSXGSkSmDuJTHEtXAz0af9TQaqJTnvz2Hbs/MRMZ2XrjC0b WXMRscI3Tf/BNuoa5+JJIBdYptZ3B/1eZU7FwPmCQv/n+/N20e3DNZon3TPnZcWM ZcTKTf2LjiDYIOBFREVQuGrk0GMkUF03LyLQlCG1Z9c= -----END CERTIFICATE-----Generated at Thu Nov 6 01:48:59 2025 by rpki-client