$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/gKSkXaLBQAgApeQp7JE_s554TfQ.roa File: gKSkXaLBQAgApeQp7JE_s554TfQ.roa (raw, json) Hash identifier: lr7Ji9lcN4KIGLGi/T5wOdF8bpNGfTvWCgbrjVps9Ds= Subject key identifier: 80:A4:A4:5D:A2:C1:40:08:00:A5:E4:29:EC:91:3F:B3:9E:78:4D:F4 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0DE8 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/gKSkXaLBQAgApeQp7JE_s554TfQ.roa Signing time: Fri 22 Aug 2025 08:52:09 +0000 ROA not before: Fri 22 Aug 2025 08:52:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 2914 IP address blocks: 61.58.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3560 (0xde8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 22 08:52:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=80A4A45DA2C1400800A5E429EC913FB39E784DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:98:a4:5e:d3:a1:a9:05:cf:a5:b1:cb:ff: dc:a9:1f:01:c4:24:c3:09:30:30:37:80:2c:1e:6c: 9c:e4:2f:e8:67:96:7c:fa:b4:25:92:56:b1:67:28: a1:0c:ff:bd:0a:73:c7:f1:17:6d:f5:3f:9f:c8:b5: fa:c0:90:ab:31:e0:9a:ee:c4:90:cd:1f:ff:90:53: 52:59:aa:9e:52:07:2a:f7:ce:fd:94:19:5a:62:8a: 28:f9:92:2c:f9:7b:90:96:1a:db:85:2f:22:09:61: 9c:71:c8:9d:14:0f:9f:7b:31:da:2d:4c:9d:05:d5: 03:e8:d6:68:1a:db:3c:a9:98:47:de:19:75:3c:20: c5:9f:cf:cd:0e:cb:5c:24:39:e4:eb:02:02:ce:d9: 7c:27:1b:58:7e:d0:f3:98:09:6d:53:e0:2c:c4:6f: 9a:bd:93:30:37:b6:86:6a:d0:f5:e5:05:ad:6c:ab: b1:c1:39:0f:45:c6:14:60:9f:bf:69:6f:89:7c:ec: a3:d6:8b:40:82:38:a1:8e:23:43:9f:a6:1f:ff:37: ff:27:36:53:18:04:4b:12:e4:bd:10:35:2b:52:37: f9:4c:d0:54:85:32:a5:84:9e:37:5c:d3:54:3d:08: 70:33:34:07:98:53:6c:d3:87:5c:88:44:71:4b:10: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A4:A4:5D:A2:C1:40:08:00:A5:E4:29:EC:91:3F:B3:9E:78:4D:F4 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/gKSkXaLBQAgApeQp7JE_s554TfQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.32.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:9c:ec:13:02:f9:4d:54:0f:76:0d:c2:70:df:d9:a5:91:e0: fe:8a:60:c9:94:87:65:69:2f:e1:27:c9:7b:31:7b:2d:1b:42: af:22:ba:6a:75:59:a8:ac:4d:9f:84:c2:c8:f6:a2:67:9a:cb: 64:9a:7a:61:88:a8:0f:9d:0f:1f:d4:99:0e:42:65:42:f4:72: cd:b3:18:a8:d2:82:85:b8:22:1f:75:8b:11:fa:55:ef:45:48: fd:35:d7:5c:49:6d:17:b5:58:f6:76:c9:0a:5a:0e:e6:8b:c6: 96:c6:a0:b7:63:7c:4c:5d:f9:d2:d6:be:e7:6c:08:11:ef:b4: 3e:f4:cf:1a:2d:d0:4c:5d:0a:19:4c:14:b3:72:21:e1:d2:ad: a7:cf:37:d4:7f:86:28:f1:43:ed:62:9a:05:51:e8:33:44:2e: 7e:7a:00:8b:6e:76:1d:83:cf:3c:3c:6c:2a:35:6e:ce:dd:fe: ed:49:3d:f2:92:9c:22:25:9e:87:1e:34:b3:b5:c9:4c:3c:27: 39:f8:19:f5:bb:ec:85:83:74:9b:be:a4:8b:3d:4c:ea:53:70: 9f:3e:08:d5:7b:cf:36:e6:aa:8f:c3:63:06:57:40:56:72:73: 48:6a:0d:7b:3b:24:d9:d2:84:05:5a:b3:f4:f5:99:9c:2b:63: 62:ac:d9:c5 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw ODUyMDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwQTRBNDVEQTJDMTQw MDgwMEE1RTQyOUVDOTEzRkIzOUU3ODRERjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp3JikXtOhqQXPpbHL/9ypHwHEJMMJMDA3gCwebJzkL+hnlnz6 tCWSVrFnKKEM/70Kc8fxF231P5/ItfrAkKsx4JruxJDNH/+QU1JZqp5SByr3zv2U GVpiiij5kiz5e5CWGtuFLyIJYZxxyJ0UD597MdotTJ0F1QPo1mga2zypmEfeGXU8 IMWfz80Oy1wkOeTrAgLO2XwnG1h+0POYCW1T4CzEb5q9kzA3toZq0PXlBa1sq7HB OQ9FxhRgn79pb4l87KPWi0CCOKGOI0Ofph//N/8nNlMYBEsS5L0QNStSN/lM0FSF MqWEnjdc01Q9CHAzNAeYU2zTh1yIRHFLEGQfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUgKSkXaLBQAgApeQp7JE/s554TfQwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9nS1NrWGFMQlFBZ0FwZVFwN0pF X3M1NTRUZlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTog MA0GCSqGSIb3DQEBCwUAA4IBAQAcnOwTAvlNVA92DcJw39mlkeD+imDJlIdlaS/h J8l7MXstG0KvIrpqdVmorE2fhMLI9qJnmstkmnphiKgPnQ8f1JkOQmVC9HLNsxio 0oKFuCIfdYsR+lXvRUj9NddcSW0XtVj2dskKWg7mi8aWxqC3Y3xMXfnS1r7nbAgR 77Q+9M8aLdBMXQoZTBSzciHh0q2nzzfUf4Yo8UPtYpoFUegzRC5+egCLbnYdg888 PGwqNW7O3f7tST3ykpwiJZ6HHjSztclMPCc5+Bn1u+yFg3SbvqSLPUzqU3CfPgjV e8825qqPw2MGV0BWcnNIag17OyTZ0oQFWrP09ZmcK2NirNnF -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:20 2025 by rpki-client