$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/E89BSfnucAbE_IB-UqWDl2zp5dQ.roa File: E89BSfnucAbE_IB-UqWDl2zp5dQ.roa (raw, json) Hash identifier: sIS5IxA14tLYMefw0PnmT6t0kGgSu+wbEJFe3dvrj0A= Subject key identifier: 13:CF:41:49:F9:EE:70:06:C4:FC:80:7E:52:A5:83:97:6C:E9:E5:D4 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E09 Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/E89BSfnucAbE_IB-UqWDl2zp5dQ.roa Signing time: Fri 22 Aug 2025 08:54:21 +0000 ROA not before: Fri 22 Aug 2025 08:54:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 61.57.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3593 (0xe09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 22 08:54:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=13CF4149F9EE7006C4FC807E52A583976CE9E5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:c5:d9:c7:7f:03:d0:d0:a2:e0:f9:e9:43: b2:5e:f9:1a:91:2d:51:fc:a8:ea:a0:6f:e3:d7:67: 01:0b:18:20:33:e7:34:1a:7b:c8:8e:7d:ff:2e:db: 33:8e:93:bb:e3:4c:f7:e2:f4:49:9c:dd:1c:0b:8d: f0:06:d9:69:a9:00:99:3a:a0:43:c1:54:4d:d1:6d: 2b:96:42:8a:34:4c:8f:30:5e:a1:98:82:9d:3f:a1: ca:34:ff:5a:b8:fd:b1:b5:ce:11:6c:aa:6b:fd:70: 51:1a:b9:ce:5d:f1:78:e7:8f:3a:3f:f9:ce:d5:9e: 47:30:12:49:8d:ab:80:e5:1a:7c:43:a9:d6:e7:bd: e6:23:c7:d3:ab:74:c6:64:9b:3f:2b:cf:f3:6e:ad: ef:02:18:ee:54:b2:8b:39:e5:13:4c:4c:81:66:b3: d7:be:f1:94:2a:62:44:f4:18:7c:4a:72:39:76:03: 31:38:50:ba:a2:f7:09:03:8f:56:0a:9c:1b:8e:05: 63:0c:b0:d5:4a:0a:a0:51:2e:15:51:bd:2a:1d:7d: ab:19:de:00:e5:bc:2c:b5:f5:54:55:3e:07:5f:d2: 04:13:72:01:82:fa:d5:cb:12:b1:ca:69:26:6e:00: 7f:42:c0:56:af:45:9b:70:a2:f2:85:af:20:46:15: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CF:41:49:F9:EE:70:06:C4:FC:80:7E:52:A5:83:97:6C:E9:E5:D4 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/E89BSfnucAbE_IB-UqWDl2zp5dQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.32.0/19 Signature Algorithm: sha256WithRSAEncryption 73:72:60:04:e5:88:9b:97:35:87:0f:a2:f9:9d:eb:0e:41:ae: 0b:cb:71:f0:5d:a8:c4:25:ba:66:26:15:5c:27:cf:8a:86:e0: 9b:5d:e8:6e:82:4a:69:39:84:9b:18:8d:4b:7f:8e:49:34:e2: 8e:39:56:0c:30:e7:88:f1:a1:7f:7e:d5:94:32:08:69:95:ae: 37:27:c5:18:58:37:0b:32:5b:46:f3:84:33:b6:b7:6e:be:13: 58:6b:c1:90:f3:3f:a9:85:1d:1c:54:82:71:e2:22:0e:e6:37: 47:77:b5:8a:4f:80:bf:97:51:ae:d5:a9:81:32:13:c8:9d:fe: 29:c9:a4:1f:4d:bf:f4:66:5d:37:56:44:f6:f1:55:c1:fd:fa: f9:f0:91:e4:8f:55:f9:c2:61:05:fc:af:61:56:50:3f:34:cf: a6:ec:de:81:ea:67:56:4f:1d:85:82:76:b4:ed:03:6b:04:ca: 63:c7:df:34:7c:f0:76:28:a1:f1:49:f4:f4:0d:78:d1:f7:83: 64:04:11:af:b5:90:f4:ed:be:12:f9:6f:17:81:2f:ec:9a:cf: 25:2a:45:04:42:2f:ee:b6:c9:a3:ad:d1:49:88:3a:e5:b9:3b: 59:26:f7:88:9b:9c:be:1e:ef:42:ee:14:48:60:e5:72:42:d3: 70:4c:0d:d4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTA4MjIw ODU0MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEzQ0Y0MTQ5RjlFRTcw MDZDNEZDODA3RTUyQTU4Mzk3NkNFOUU1RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsLMXZx38D0NCi4PnpQ7Je+RqRLVH8qOqgb+PXZwELGCAz5zQa e8iOff8u2zOOk7vjTPfi9Emc3RwLjfAG2WmpAJk6oEPBVE3RbSuWQoo0TI8wXqGY gp0/oco0/1q4/bG1zhFsqmv9cFEauc5d8Xjnjzo/+c7VnkcwEkmNq4DlGnxDqdbn veYjx9OrdMZkmz8rz/Nure8CGO5Usos55RNMTIFms9e+8ZQqYkT0GHxKcjl2AzE4 ULqi9wkDj1YKnBuOBWMMsNVKCqBRLhVRvSodfasZ3gDlvCy19VRVPgdf0gQTcgGC +tXLErHKaSZuAH9CwFavRZtwovKFryBGFYmXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUE89BSfnucAbE/IB+UqWDl2zp5dQwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL0U4OUJTZm51Y0FiRV9JQi1VcVdEbDJ6 cDVkUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9OSAwDQYJ KoZIhvcNAQELBQADggEBAHNyYATliJuXNYcPovmd6w5BrgvLcfBdqMQlumYmFVwn z4qG4Jtd6G6CSmk5hJsYjUt/jkk04o45Vgww54jxoX9+1ZQyCGmVrjcnxRhYNwsy W0bzhDO2t26+E1hrwZDzP6mFHRxUgnHiIg7mN0d3tYpPgL+XUa7VqYEyE8id/inJ pB9Nv/RmXTdWRPbxVcH9+vnwkeSPVfnCYQX8r2FWUD80z6bs3oHqZ1ZPHYWCdrTt A2sEymPH3zR88HYoofFJ9PQNeNH3g2QEEa+1kPTtvhL5bxeBL+yazyUqRQRCL+62 yaOt0UmIOuW5O1km94ibnL4e70LuFEhg5XJC03BMDdQ= -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:34 2025 by rpki-client