$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-Iq4op420BhGnq_OIz01LCaCgvA.roa File: -Iq4op420BhGnq_OIz01LCaCgvA.roa (raw, json) Hash identifier: I8AP1rvlD1q9vJkJdAsHzB2lQkkqm8Dfw56I1UIkXWk= Subject key identifier: F8:8A:B8:A2:9E:36:D0:18:46:9E:AF:CE:23:3D:35:2C:26:82:82:F0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 140B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-Iq4op420BhGnq_OIz01LCaCgvA.roa Signing time: Fri 22 Aug 2025 09:00:01 +0000 ROA not before: Fri 22 Aug 2025 09:00:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 124.219.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5131 (0x140b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F88AB8A29E36D018469EAFCE233D352C268282F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:2f:20:b3:22:b3:e0:00:4e:9e:b2:76:ca: f7:1d:28:9c:56:f3:81:bb:80:46:b9:ae:c9:dc:01: bc:63:2c:e2:36:7d:89:13:0a:9e:01:3a:2d:da:de: 21:4c:d1:fd:d0:d2:34:cf:40:73:02:cf:4b:7f:63: 75:13:bb:0d:3f:30:eb:83:76:8e:19:28:99:6d:85: 23:ab:e4:ef:1a:9c:c9:b9:39:7c:86:37:13:fb:25: 5a:a1:6c:d6:65:14:60:5d:9c:40:00:69:f5:68:82: c3:a7:8d:66:e3:c0:ad:ee:85:a2:e7:d0:d0:79:69: e9:dd:cf:de:33:3e:2c:0c:46:fa:12:a0:8f:a7:58: a6:14:0a:4f:33:f2:9c:77:85:55:2c:86:59:7f:ca: 03:7a:08:3c:6c:ca:e4:f1:c9:0c:d8:97:e3:bd:3e: ee:d7:af:46:03:52:06:cb:f5:c3:67:42:1f:24:10: c6:95:11:f6:cf:bf:1a:72:7d:cf:36:7e:02:dd:72: b5:1e:0a:32:6c:40:23:a5:60:7e:e6:cf:b6:39:8e: 4a:4f:43:5c:a4:7c:b0:29:ea:c6:62:60:6e:b4:f0: 68:6a:72:25:34:68:a9:72:b9:dd:ce:e6:b5:c5:2b: c7:bd:4b:1a:62:63:7c:30:c1:31:30:d1:b9:c7:a8: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8A:B8:A2:9E:36:D0:18:46:9E:AF:CE:23:3D:35:2C:26:82:82:F0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-Iq4op420BhGnq_OIz01LCaCgvA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2f:c9:b7:a1:42:fe:01:29:50:1c:76:5e:e0:70:31:b2:7a:ab: 6d:09:15:90:e4:ed:99:2b:a8:80:1d:96:e2:c9:90:ad:e1:cd: 7e:8d:d3:2b:a0:e1:0d:df:70:f1:95:9b:36:8d:66:4f:da:db: c9:73:ee:f7:45:64:d9:13:e1:64:ba:77:b2:3d:4d:c4:b8:ec: 09:1e:19:c2:3c:51:a6:d1:ea:92:48:df:4a:8c:b6:5a:d1:a5: 81:3f:6a:c2:88:92:b1:9e:c3:bd:70:2b:79:f3:da:29:57:d5: 57:94:2e:92:90:a5:b4:8d:9d:fd:f6:14:fc:bc:f1:e9:8f:e4: 1e:5d:75:e7:e4:ec:df:b6:fb:52:1c:b0:c6:a3:50:1c:ce:a9: c5:50:bc:99:f6:e9:42:5e:78:33:ea:02:83:73:89:6a:97:aa: 67:b0:f6:bc:c7:e0:b0:c2:16:78:11:ea:50:65:79:db:fc:1c: 07:64:a0:21:17:8e:8f:19:e0:46:6b:38:5b:ad:16:c9:5b:81: 82:5e:3b:1b:23:bb:50:ed:1b:e0:f2:b4:e7:57:fa:c3:40:5e: 88:f8:f8:24:99:87:0f:05:83:c9:c5:3f:a8:b9:f2:4c:1e:de: be:17:69:81:46:2c:dd:d4:b5:ef:42:0d:b4:6b:73:cc:79:33: 01:2f:64:a0 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY4OEFCOEEyOUUzNkQw MTg0NjlFQUZDRTIzM0QzNTJDMjY4MjgyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkAi8gsyKz4ABOnrJ2yvcdKJxW84G7gEa5rsncAbxjLOI2fYkT Cp4BOi3a3iFM0f3Q0jTPQHMCz0t/Y3UTuw0/MOuDdo4ZKJlthSOr5O8anMm5OXyG NxP7JVqhbNZlFGBdnEAAafVogsOnjWbjwK3uhaLn0NB5aendz94zPiwMRvoSoI+n WKYUCk8z8px3hVUshll/ygN6CDxsyuTxyQzYl+O9Pu7Xr0YDUgbL9cNnQh8kEMaV EfbPvxpyfc82fgLdcrUeCjJsQCOlYH7mz7Y5jkpPQ1ykfLAp6sZiYG608GhqciU0 aKlyud3O5rXFK8e9SxpiY3wwwTEw0bnHqPe5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU+Iq4op420BhGnq/OIz01LCaCgvAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy1JcTRvcDQyMEJoR25xX09JejAxTENh Q2d2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd82wAwDQYJ KoZIhvcNAQELBQADggEBAC/Jt6FC/gEpUBx2XuBwMbJ6q20JFZDk7ZkrqIAdluLJ kK3hzX6N0yug4Q3fcPGVmzaNZk/a28lz7vdFZNkT4WS6d7I9TcS47AkeGcI8UabR 6pJI30qMtlrRpYE/asKIkrGew71wK3nz2ilX1VeULpKQpbSNnf32FPy88emP5B5d defk7N+2+1IcsMajUBzOqcVQvJn26UJeeDPqAoNziWqXqmew9rzH4LDCFngR6lBl edv8HAdkoCEXjo8Z4EZrOFutFslbgYJeOxsju1DtG+DytOdX+sNAXoj4+CSZhw8F g8nFP6i58kwe3r4XaYFGLN3Ute9CDbRrc8x5MwEvZKA= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:14 2025 by rpki-client