$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/BYfO51b2GV4h3HP3K-3imAwQBWM.roa File: BYfO51b2GV4h3HP3K-3imAwQBWM.roa (raw, json) Hash identifier: UR/sfLgN4ZmTu2iRP7QRSjy7YL3WR8NoQrjquO9T26c= Subject key identifier: 05:87:CE:E7:56:F6:19:5E:21:DC:73:F7:2B:ED:E2:98:0C:10:05:63 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E15 Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BYfO51b2GV4h3HP3K-3imAwQBWM.roa Signing time: Fri 22 Aug 2025 08:54:24 +0000 ROA not before: Fri 22 Aug 2025 08:54:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 210.241.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3605 (0xe15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 22 08:54:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0587CEE756F6195E21DC73F72BEDE2980C100563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:30:1e:60:8a:e5:73:b0:fc:e2:c7:e1:61: 3f:ce:1a:97:36:c2:c7:a2:9a:70:b4:ca:b2:f0:d3: e9:13:22:91:53:d0:34:68:4a:79:47:54:e2:b1:34: 4f:a6:84:92:ca:7e:8b:c7:b2:3d:d0:2e:ab:cb:53: 03:09:6e:ed:d2:17:77:0c:7f:82:cf:b3:18:f3:8d: bf:63:74:6b:8d:28:ff:a9:e1:72:9f:e4:39:c1:2c: e5:3d:2e:19:1f:23:93:88:91:ac:6c:59:37:a0:9a: 09:a3:d5:7a:09:de:ed:2d:2c:02:40:56:ac:5a:23: fe:c5:11:ff:2c:d9:f6:5a:7b:0b:be:63:4b:34:79: 15:72:9b:5f:e8:2b:90:2c:f0:cf:15:59:32:6b:31: a5:f9:92:a5:a2:fb:c0:8b:37:3e:6a:a5:44:91:e2: 20:6e:bf:0a:21:dd:fa:1b:a9:33:95:68:ae:a2:4f: a7:ce:9d:4e:c0:8f:b8:78:18:74:f7:7d:93:c2:c3: fa:79:40:82:be:30:bf:ae:20:fb:bb:99:95:56:6a: 6d:93:bd:04:f6:c2:df:69:6a:5a:c7:57:95:d3:9e: 8c:44:fe:c1:0c:ec:ad:d1:cb:a0:93:3f:df:08:5a: 87:74:f5:38:e0:d8:3d:d2:6c:0e:95:36:34:a5:0b: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:87:CE:E7:56:F6:19:5E:21:DC:73:F7:2B:ED:E2:98:0C:10:05:63 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/BYfO51b2GV4h3HP3K-3imAwQBWM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.241.0.0/17 Signature Algorithm: sha256WithRSAEncryption 03:80:de:7c:3b:b9:87:21:18:44:40:78:46:9f:3d:11:68:26: 7c:8d:66:35:a2:f5:7c:46:02:8b:f9:bf:71:8e:a0:85:33:1a: 17:5e:01:cf:d8:38:21:1e:06:f9:f4:87:7e:11:e4:93:8f:4c: d4:d9:4f:4b:33:c0:00:8d:e5:c6:35:91:ed:c5:a5:7e:ad:9b: 19:d6:14:80:43:ea:1b:61:62:86:e3:5f:6c:9b:bb:c1:85:c7: c9:ff:f6:36:32:e7:67:79:46:51:18:d8:2a:50:f8:45:06:43: 4f:1f:10:b1:3b:68:52:41:dc:d6:3d:3e:e3:9c:39:95:d6:aa: c2:2f:43:ea:36:d7:11:a3:2c:62:13:b2:9e:d9:4c:41:08:e7: 0c:bf:83:d6:c8:ab:a4:ae:72:75:cb:48:ad:5a:c3:da:d3:fe: 28:01:14:11:5f:30:f3:51:d5:6c:09:c1:16:b5:54:f5:b1:11: 27:3b:d3:4b:87:ef:aa:7e:64:c7:9b:19:69:a8:17:ab:0a:b9: d9:70:1a:7a:2f:58:55:f9:a9:24:d6:43:e3:80:4d:2b:88:ef: 8c:82:6b:9f:02:3b:8d:5d:f2:85:93:2b:bc:2c:14:48:2f:8d: 24:11:5f:43:cd:e7:df:38:1e:e4:7d:69:82:ec:73:4b:e0:29: 06:85:fb:23 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTA4MjIw ODU0MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1ODdDRUU3NTZGNjE5 NUUyMURDNzNGNzJCRURFMjk4MEMxMDA1NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzhzAeYIrlc7D84sfhYT/OGpc2wseimnC0yrLw0+kTIpFT0DRo SnlHVOKxNE+mhJLKfovHsj3QLqvLUwMJbu3SF3cMf4LPsxjzjb9jdGuNKP+p4XKf 5DnBLOU9LhkfI5OIkaxsWTegmgmj1XoJ3u0tLAJAVqxaI/7FEf8s2fZaewu+Y0s0 eRVym1/oK5As8M8VWTJrMaX5kqWi+8CLNz5qpUSR4iBuvwoh3fobqTOVaK6iT6fO nU7Aj7h4GHT3fZPCw/p5QIK+ML+uIPu7mZVWam2TvQT2wt9palrHV5XTnoxE/sEM 7K3Ry6CTP98IWod09Tjg2D3SbA6VNjSlCz8bAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBYfO51b2GV4h3HP3K+3imAwQBWMwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL0JZZk81MWIyR1Y0aDNIUDNLLTNpbUF3 UUJXTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfS8QAwDQYJ KoZIhvcNAQELBQADggEBAAOA3nw7uYchGERAeEafPRFoJnyNZjWi9XxGAov5v3GO oIUzGhdeAc/YOCEeBvn0h34R5JOPTNTZT0szwACN5cY1ke3FpX6tmxnWFIBD6hth YobjX2ybu8GFx8n/9jYy52d5RlEY2CpQ+EUGQ08fELE7aFJB3NY9PuOcOZXWqsIv Q+o21xGjLGITsp7ZTEEI5wy/g9bIq6SucnXLSK1aw9rT/igBFBFfMPNR1WwJwRa1 VPWxESc700uH76p+ZMebGWmoF6sKudlwGnovWFX5qSTWQ+OATSuI74yCa58CO41d 8oWTK7wsFEgvjSQRX0PN5984HuR9aYLsc0vgKQaF+yM= -----END CERTIFICATE-----Generated at Wed Nov 5 22:33:52 2025 by rpki-client