$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/6TA4FvrJBM_c7ymc-y0LwFb3OeU.roa File: 6TA4FvrJBM_c7ymc-y0LwFb3OeU.roa (raw, json) Hash identifier: Vtpqm4GH3fn0d+w/H5Se95gROwBG3DPy+boDkYCD4Xc= Subject key identifier: E9:30:38:16:FA:C9:04:CF:DC:EF:29:9C:FB:2D:0B:C0:56:F7:39:E5 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 1004 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6TA4FvrJBM_c7ymc-y0LwFb3OeU.roa Signing time: Fri 22 Aug 2025 08:55:50 +0000 ROA not before: Fri 22 Aug 2025 08:55:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38845 IP address blocks: 140.136.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4100 (0x1004) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E9303816FAC904CFDCEF299CFB2D0BC056F739E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:52:4e:ed:82:cc:ca:a9:ef:c6:54:9b:bf: 62:a3:7e:50:c4:bd:6c:5a:05:ab:15:b9:bf:53:20: 88:e9:0a:62:26:e3:3e:cc:94:4c:28:48:88:c8:cc: ae:c6:3a:f1:cc:3c:60:49:46:63:51:e7:37:a3:60: e4:03:ec:0f:cb:58:cc:64:1d:0a:14:25:4d:0e:91: 70:b5:cf:05:45:26:48:94:79:4a:74:44:6e:30:dd: 84:8b:2a:ae:2c:7e:1d:08:ce:85:fe:cc:32:55:6c: e1:16:37:ff:cc:cd:c7:43:df:d6:de:67:9b:f9:b4: f6:24:41:57:55:67:82:60:7a:ae:12:f8:7c:96:a7: ba:32:6d:ac:a2:e3:47:bc:b9:4e:92:9e:76:1d:41: 19:cc:e6:a5:3e:5a:d8:9c:c8:3c:de:e1:2f:7c:ad: 33:0b:be:ea:b0:f6:88:b9:56:b0:6f:91:7c:26:e8: 74:c1:1f:4b:49:f5:ff:33:0b:ad:c4:76:5a:f3:25: ae:35:8c:b3:69:ae:9f:77:9b:9d:6e:e2:7c:d3:21: a5:9c:81:e8:7d:af:58:4a:a0:bf:8a:e5:05:a4:d3: 63:2a:d8:0a:b2:1f:a7:4f:c5:6e:bc:2f:cc:bf:53: 4c:37:24:f4:b6:67:c4:d1:12:fa:19:bd:f2:31:e8: 54:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:38:16:FA:C9:04:CF:DC:EF:29:9C:FB:2D:0B:C0:56:F7:39:E5 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6TA4FvrJBM_c7ymc-y0LwFb3OeU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.136.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:c7:b9:74:a3:1e:fc:ac:04:a3:23:1a:c2:f9:88:9e:55:91: d9:e6:0e:88:16:ab:45:21:0f:1c:4e:ad:51:c2:71:ac:13:4c: 9a:c1:12:1d:cc:38:bb:d9:f0:0a:6e:04:5e:28:d0:12:ba:a3: 36:ab:bd:18:cc:e1:4a:2f:87:70:4a:17:85:4e:56:e5:98:cf: b9:1d:97:8e:55:e6:8b:b7:6a:0f:19:c7:2a:b2:b1:5f:4a:9f: 89:83:18:7c:58:fd:bc:47:89:fb:dd:64:8a:65:db:8a:4d:0d: 43:a4:fe:c3:d4:5b:06:dd:5c:6a:0c:9f:a2:3d:a6:77:65:3b: 4b:bd:91:a3:ec:01:88:e0:14:a3:88:54:7c:a1:ea:5f:51:1e: a9:81:4a:50:49:60:09:88:6b:5b:a2:03:8a:6a:49:a8:86:d2: c5:7e:d9:ae:1a:01:4d:e1:ff:08:9c:76:4c:35:8b:86:19:cf: 0f:57:18:74:dc:8a:2d:23:1d:73:99:10:fa:88:79:a7:46:32: f4:79:5e:2d:1d:ea:f9:7b:b3:f9:29:cd:73:0c:20:e8:bf:3b: 7c:cb:b2:f1:71:92:2a:de:00:83:f3:a9:00:fc:23:b5:32:85: 40:f2:ff:e0:8f:1d:a8:2a:91:56:f2:2a:f1:73:8b:22:53:c7: f2:5d:64:1d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU5MzAzODE2RkFDOTA0 Q0ZEQ0VGMjk5Q0ZCMkQwQkMwNTZGNzM5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3K1JO7YLMyqnvxlSbv2KjflDEvWxaBasVub9TIIjpCmIm4z7M lEwoSIjIzK7GOvHMPGBJRmNR5zejYOQD7A/LWMxkHQoUJU0OkXC1zwVFJkiUeUp0 RG4w3YSLKq4sfh0IzoX+zDJVbOEWN//MzcdD39beZ5v5tPYkQVdVZ4Jgeq4S+HyW p7oybayi40e8uU6SnnYdQRnM5qU+WticyDze4S98rTMLvuqw9oi5VrBvkXwm6HTB H0tJ9f8zC63EdlrzJa41jLNprp93m51u4nzTIaWcgeh9r1hKoL+K5QWk02Mq2Aqy H6dPxW68L8y/U0w3JPS2Z8TREvoZvfIx6FSpAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU6TA4FvrJBM/c7ymc+y0LwFb3OeUwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC82VEE0RnZySkJNX2M3eW1jLXkw THdGYjNPZVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjIgw DQYJKoZIhvcNAQELBQADggEBAH/HuXSjHvysBKMjGsL5iJ5VkdnmDogWq0UhDxxO rVHCcawTTJrBEh3MOLvZ8ApuBF4o0BK6ozarvRjM4Uovh3BKF4VOVuWYz7kdl45V 5ou3ag8ZxyqysV9Kn4mDGHxY/bxHifvdZIpl24pNDUOk/sPUWwbdXGoMn6I9pndl O0u9kaPsAYjgFKOIVHyh6l9RHqmBSlBJYAmIa1uiA4pqSaiG0sV+2a4aAU3h/wic dkw1i4YZzw9XGHTcii0jHXOZEPqIeadGMvR5Xi0d6vl7s/kpzXMMIOi/O3zLsvFx kireAIPzqQD8I7UyhUDy/+CPHagqkVbyKvFziyJTx/JdZB0= -----END CERTIFICATE-----Generated at Thu Nov 6 00:02:54 2025 by rpki-client