$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/cBoiAa435PnUD66__7BI_QUBlF0.roa File: cBoiAa435PnUD66__7BI_QUBlF0.roa (raw, json) Hash identifier: jO4vl1fKi4vx0pb5IQl+NBNoQ34bosXHcvQGn1IEzu4= Subject key identifier: 70:1A:22:01:AE:37:E4:F9:D4:0F:AE:BF:FF:B0:48:FD:05:01:94:5D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13DF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/cBoiAa435PnUD66__7BI_QUBlF0.roa Signing time: Fri 22 Aug 2025 08:59:50 +0000 ROA not before: Fri 22 Aug 2025 08:59:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.202.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5087 (0x13df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=701A2201AE37E4F9D40FAEBFFFB048FD0501945D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:27:a4:e6:9d:0f:21:5f:f7:23:4e:fc:2a: cd:0e:7c:5c:0f:09:c1:bc:22:37:9e:7f:cb:ba:5b: e1:c7:f1:09:1c:ba:18:b7:ee:96:9c:56:55:08:24: 02:01:0c:50:0c:14:32:29:d9:a8:7f:f4:b0:55:37: 71:22:0c:d5:cc:b1:ce:53:d2:01:0a:6f:a2:cd:43: 04:2b:b8:60:b1:62:00:bb:3d:3d:de:9a:25:fc:4c: 7e:a2:f2:72:9d:00:ee:d2:d9:ca:12:91:20:10:8f: 03:2a:b2:70:91:64:71:fb:07:d8:52:2f:af:06:de: 5c:de:78:3b:5f:be:cd:6b:2a:ce:1f:40:f6:e2:35: 96:89:f5:2d:eb:98:f7:0b:77:9c:cb:ae:be:39:8b: 79:0e:69:8a:e3:51:f7:6c:2f:ef:be:41:51:fc:42: 56:e6:b2:73:6a:6f:0a:92:65:43:8b:0e:b3:51:c3: dd:a5:db:1d:4b:f9:64:db:db:71:c0:f5:1e:8c:c1: d1:21:4f:11:af:02:ec:f1:24:92:55:1f:8a:e1:89: 14:40:cf:13:fa:22:96:82:a9:a2:d9:67:c1:4c:2d: 4f:96:4b:d4:d0:00:f5:51:8b:95:8e:9c:92:27:30: 6f:1c:f9:b6:d6:51:3a:1a:2c:58:52:6d:86:9a:60: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:22:01:AE:37:E4:F9:D4:0F:AE:BF:FF:B0:48:FD:05:01:94:5D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/cBoiAa435PnUD66__7BI_QUBlF0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.64.0/18 Signature Algorithm: sha256WithRSAEncryption 6b:60:94:3f:09:d7:c6:a4:bf:0b:2d:a8:86:af:f9:c0:cb:60: a2:16:54:0c:c0:1a:d8:a7:8b:5a:8a:d2:f2:6c:b1:cd:a6:2a: 99:c3:41:36:09:2a:26:66:56:e7:4b:3d:a6:bf:56:91:13:03: d1:58:bb:df:4b:8d:7c:89:17:a5:39:a0:d4:e2:22:44:34:af: c6:05:24:7e:14:c9:40:28:6b:cf:91:9c:b2:f2:59:e4:a4:f8: e3:02:04:3b:d5:e2:ce:25:ec:60:68:3c:fc:7d:28:cc:cd:fa: 35:96:1c:37:c0:a9:9d:14:62:41:6d:c2:08:1a:46:b1:6f:e3: 70:0b:35:14:a1:2a:d1:71:9e:b5:c3:31:50:1c:1a:3a:02:9f: 0d:70:07:24:0d:c8:c3:80:5a:49:9d:24:3d:4f:04:a3:36:c6: 37:af:b9:ad:ca:1d:94:ec:63:0b:e3:14:9b:62:da:41:e1:c3: 20:e1:ce:17:98:4f:4a:55:1d:a8:8f:ef:c8:9c:73:c0:d0:4e: 19:63:66:81:89:4a:94:aa:b1:cf:55:df:b1:13:23:d1:36:3b: 8b:19:e9:db:d3:79:11:14:bb:32:ba:1b:82:d1:2f:54:ba:27: 1c:c8:35:b9:5b:43:da:86:1b:5e:2d:95:46:48:36:1a:4e:ba: 54:50:4e:dc -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwMUEyMjAxQUUzN0U0 RjlENDBGQUVCRkZGQjA0OEZEMDUwMTk0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp2yek5p0PIV/3I078Ks0OfFwPCcG8Ijeef8u6W+HH8Qkcuhi3 7pacVlUIJAIBDFAMFDIp2ah/9LBVN3EiDNXMsc5T0gEKb6LNQwQruGCxYgC7PT3e miX8TH6i8nKdAO7S2coSkSAQjwMqsnCRZHH7B9hSL68G3lzeeDtfvs1rKs4fQPbi NZaJ9S3rmPcLd5zLrr45i3kOaYrjUfdsL+++QVH8QlbmsnNqbwqSZUOLDrNRw92l 2x1L+WTb23HA9R6MwdEhTxGvAuzxJJJVH4rhiRRAzxP6IpaCqaLZZ8FMLU+WS9TQ APVRi5WOnJInMG8c+bbWUToaLFhSbYaaYPLLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUcBoiAa435PnUD66//7BI/QUBlF0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2NCb2lBYTQzNVBuVUQ2Nl9fN0JJX1FV QmxGMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSykAwDQYJ KoZIhvcNAQELBQADggEBAGtglD8J18akvwstqIav+cDLYKIWVAzAGtini1qK0vJs sc2mKpnDQTYJKiZmVudLPaa/VpETA9FYu99LjXyJF6U5oNTiIkQ0r8YFJH4UyUAo a8+RnLLyWeSk+OMCBDvV4s4l7GBoPPx9KMzN+jWWHDfAqZ0UYkFtwggaRrFv43AL NRShKtFxnrXDMVAcGjoCnw1wByQNyMOAWkmdJD1PBKM2xjevua3KHZTsYwvjFJti 2kHhwyDhzheYT0pVHaiP78icc8DQThljZoGJSpSqsc9V37ETI9E2O4sZ6dvTeREU uzK6G4LRL1S6JxzINblbQ9qGG14tlUZINhpOulRQTtw= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:20 2025 by rpki-client