$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/4A3kqPTdERcjJv1z0l4N8RKHhDc.roa File: 4A3kqPTdERcjJv1z0l4N8RKHhDc.roa (raw, json) Hash identifier: HquvdWoOseLZiR/45Xv+50n7LkImWGAph9SiVSjxTvk= Subject key identifier: E0:0D:E4:A8:F4:DD:11:17:23:26:FD:73:D2:5E:0D:F1:12:87:84:37 Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0E3D Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4A3kqPTdERcjJv1z0l4N8RKHhDc.roa Signing time: Fri 22 Aug 2025 08:52:36 +0000 ROA not before: Fri 22 Aug 2025 08:52:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 49.213.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3645 (0xe3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Aug 22 08:52:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E00DE4A8F4DD11172326FD73D25E0DF112878437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:3c:fe:8e:99:fe:5a:1e:4c:fe:80:20:c0: 55:93:c8:51:16:53:6f:56:59:be:ee:e4:33:4c:b9: 1f:49:1c:fe:2b:87:64:c7:8f:f7:8c:b3:6f:a6:2a: 76:c9:d5:56:d8:42:11:2a:4e:79:0f:47:c9:22:58: 5f:6b:43:b9:ac:fb:6c:41:4f:71:0c:6c:2d:36:8c: 89:0a:c4:0f:11:4b:d7:7c:b3:f4:2e:ae:ae:ca:e9: fb:17:36:87:ed:2d:c9:25:fb:22:2b:62:96:86:c0: fe:d9:25:e6:d0:82:3f:aa:a8:f6:a6:ac:4a:7d:2c: a9:5f:bf:7d:2e:48:93:2f:3a:d9:a7:2f:83:e6:bb: 9b:8d:3e:df:f5:b4:d2:d4:4c:33:3b:42:e5:e2:11: 90:75:1b:36:2f:5e:2c:49:21:e8:44:2f:53:36:0b: 36:a1:1b:9d:47:c0:35:85:61:43:98:a4:6e:f0:d5: 2e:bd:37:46:f4:9d:0f:f2:54:28:f7:24:dc:6d:aa: ad:a3:9d:df:0f:41:ca:28:d5:a0:2e:67:31:40:5b: 3a:32:35:8a:d2:2b:96:5f:b4:df:fc:53:4c:6e:c1: 36:43:b7:6b:18:11:80:21:cb:b4:d6:dc:f1:5c:10: 42:de:fb:c5:27:22:27:49:3e:69:34:b2:ac:ca:93: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0D:E4:A8:F4:DD:11:17:23:26:FD:73:D2:5E:0D:F1:12:87:84:37 X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4A3kqPTdERcjJv1z0l4N8RKHhDc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.213.175.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:14:1a:73:d1:2a:33:dd:df:29:4b:41:9f:9e:56:36:4b:54: 71:b6:7e:8b:ea:c5:45:37:eb:49:2d:42:68:f1:7c:af:61:17: 2d:cc:35:ca:83:a6:6b:8d:c9:5b:dd:a8:09:0d:2a:e5:7c:4b: 10:b7:48:55:52:60:13:79:52:b4:54:e3:c3:ff:83:4e:2c:c4: d4:45:28:c0:ad:58:41:39:19:86:5f:0e:0a:0b:11:69:c4:4d: e6:fc:c2:c7:30:86:49:53:1a:49:54:75:29:60:80:14:da:a5: c5:0b:79:33:9d:ab:9c:19:93:6f:9d:d6:99:95:a0:42:70:18: f4:f9:18:2f:df:83:8d:59:54:54:60:7e:03:cd:93:90:aa:85: 1c:66:de:8a:d2:3c:40:b1:fe:00:f5:d6:6f:4a:3a:14:f0:f2: 24:f1:94:8c:5c:f9:7b:8b:a0:82:ce:02:6b:e2:90:9a:3a:7c: 09:c4:83:ec:7a:cd:f7:c2:41:ba:ac:b3:5a:39:5d:dd:94:f4: d0:98:a3:6f:56:13:16:b0:e9:b8:8c:38:3d:ce:39:70:c7:b1: a9:5e:5b:f9:39:2e:ca:fd:2c:a6:27:3c:03:a6:28:45:4e:b6: d1:83:5f:1a:50:d5:ad:54:15:31:d4:40:a2:14:f3:f3:d0:9d: 4c:9b:9b:3d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTA4MjIw ODUyMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUwMERFNEE4RjRERDEx MTcyMzI2RkQ3M0QyNUUwREYxMTI4Nzg0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCj0jz+jpn+Wh5M/oAgwFWTyFEWU29WWb7u5DNMuR9JHP4rh2TH j/eMs2+mKnbJ1VbYQhEqTnkPR8kiWF9rQ7ms+2xBT3EMbC02jIkKxA8RS9d8s/Qu rq7K6fsXNoftLckl+yIrYpaGwP7ZJebQgj+qqPamrEp9LKlfv30uSJMvOtmnL4Pm u5uNPt/1tNLUTDM7QuXiEZB1GzYvXixJIehEL1M2CzahG51HwDWFYUOYpG7w1S69 N0b0nQ/yVCj3JNxtqq2jnd8PQcoo1aAuZzFAWzoyNYrSK5ZftN/8U0xuwTZDt2sY EYAhy7TW3PFcEELe+8UnIidJPmk0sqzKkzKdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU4A3kqPTdERcjJv1z0l4N8RKHhDcwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvNEEza3FQVGRFUmNqSnYxejBsNE44 UktIaERjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADHVrzAN BgkqhkiG9w0BAQsFAAOCAQEAXxQac9EqM93fKUtBn55WNktUcbZ+i+rFRTfrSS1C aPF8r2EXLcw1yoOma43JW92oCQ0q5XxLELdIVVJgE3lStFTjw/+DTizE1EUowK1Y QTkZhl8OCgsRacRN5vzCxzCGSVMaSVR1KWCAFNqlxQt5M52rnBmTb53WmZWgQnAY 9PkYL9+DjVlUVGB+A82TkKqFHGbeitI8QLH+APXWb0o6FPDyJPGUjFz5e4uggs4C a+KQmjp8CcSD7HrN98JBuqyzWjld3ZT00Jijb1YTFrDpuIw4Pc45cMexqV5b+Tku yv0spic8A6YoRU620YNfGlDVrVQVMdRAohTz89CdTJubPQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:22:14 2025 by rpki-client