$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/0OPgjIQxyYaAlziY8aBRSapHceA.roa File: 0OPgjIQxyYaAlziY8aBRSapHceA.roa (raw, json) Hash identifier: m1++edt1JXnMWpOMnABjJ0QBv2fTrt4qLr2hnc9qIIM= Subject key identifier: D0:E3:E0:8C:84:31:C9:86:80:97:38:98:F1:A0:51:49:AA:47:71:E0 Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0DB1 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/0OPgjIQxyYaAlziY8aBRSapHceA.roa Signing time: Fri 22 Aug 2025 09:00:57 +0000 ROA not before: Fri 22 Aug 2025 09:00:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18217 IP address blocks: 2001:c08:ffff:ffff:ffff:ffff:fffa:800/119 maxlen: 119 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3505 (0xdb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: Aug 22 09:00:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D0E3E08C8431C98680973898F1A05149AA4771E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:6e:be:b8:53:97:d5:9e:45:5a:c4:c7:7b: 6f:33:b0:82:33:ee:85:eb:81:fc:d5:a6:21:57:d6: 46:1c:63:da:1d:f2:cc:24:52:70:52:6d:30:88:2b: cf:3d:b8:e3:99:09:f2:af:c2:96:eb:3c:f4:0b:da: 7a:db:7a:f5:72:8e:b5:56:f2:94:89:43:97:43:bb: ca:16:da:4f:17:d8:f5:a4:6b:48:c7:81:5d:14:20: 21:d8:d8:85:76:f7:d8:b2:a3:5d:40:4b:82:a9:ce: b4:02:f0:46:93:25:3a:cf:8c:9d:2a:23:44:cd:43: 82:81:d7:26:94:4e:2c:ef:c4:cb:ab:8f:94:cb:66: 11:e9:f8:82:37:ab:17:47:74:50:a1:c7:51:58:a1: c4:31:1d:f6:6f:1e:f4:12:99:b4:bc:cd:0e:67:11: b0:f0:48:e8:46:a2:59:14:0b:fc:89:b7:3d:37:d8: 3f:79:c5:fd:08:7d:9c:de:2e:f0:6d:6f:d0:b7:ad: de:78:4a:85:01:29:3a:03:25:f4:a9:3c:cb:65:f4: b4:73:ff:77:03:f8:8c:44:13:ad:ea:f7:f4:8e:55: ce:33:6f:73:f4:66:15:ca:3a:aa:54:cf:a1:49:06: 08:fb:da:22:4b:39:6d:f5:41:15:9e:39:28:c5:65: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E3:E0:8C:84:31:C9:86:80:97:38:98:F1:A0:51:49:AA:47:71:E0 X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/0OPgjIQxyYaAlziY8aBRSapHceA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:c08:ffff:ffff:ffff:ffff:fffa:800/119 Signature Algorithm: sha256WithRSAEncryption 93:60:70:3d:9f:27:96:c6:36:07:6a:f8:be:40:a1:4f:19:2a: bf:95:cc:38:95:68:19:b5:e1:2e:4f:86:83:33:32:9e:e1:b8: 48:e4:f6:ce:16:5e:39:a8:f7:d3:3d:2c:6d:52:79:c1:b2:d7: 09:af:af:c3:9b:8a:3f:74:b8:48:ba:56:b6:3d:07:a9:94:6f: 92:16:5c:93:07:f2:ae:75:f4:43:b4:c5:ce:4f:97:c2:f5:d3: da:2b:56:37:3a:3b:13:53:1f:00:82:25:03:2a:0b:71:57:24: 94:83:e6:a5:01:fa:6c:7e:52:af:fc:a2:35:0f:a3:c5:c5:b0: 51:a1:f7:38:4d:9f:70:0b:64:6a:d9:7e:4a:1a:7b:d9:06:c0: 6b:76:69:1e:df:9a:3e:98:98:b7:ab:c3:57:dd:2e:08:d6:67: c7:b0:e1:7e:7d:d2:ac:12:06:9a:09:b0:2a:91:7e:3e:29:9c: f0:07:5b:44:98:ed:61:41:93:ce:12:23:d7:1c:fd:23:33:43: 5e:e6:b8:31:87:52:f7:ed:f4:89:18:41:d0:d7:fb:68:e4:8b: 12:b1:9c:2a:84:a0:9d:98:58:38:da:98:9e:cc:e7:13:fc:9e: 91:6e:fd:e8:0e:4f:18:3c:e7:bd:57:51:7e:1a:41:0e:32:23: 3d:8c:16:f1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgICDbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNTA4MjIw OTAwNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwRTNFMDhDODQzMUM5 ODY4MDk3Mzg5OEYxQTA1MTQ5QUE0NzcxRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGXW6+uFOX1Z5FWsTHe28zsIIz7oXrgfzVpiFX1kYcY9od8swk UnBSbTCIK889uOOZCfKvwpbrPPQL2nrbevVyjrVW8pSJQ5dDu8oW2k8X2PWka0jH gV0UICHY2IV299iyo11AS4KpzrQC8EaTJTrPjJ0qI0TNQ4KB1yaUTizvxMurj5TL ZhHp+II3qxdHdFChx1FYocQxHfZvHvQSmbS8zQ5nEbDwSOhGolkUC/yJtz032D95 xf0IfZzeLvBtb9C3rd54SoUBKToDJfSpPMtl9LRz/3cD+IxEE63q9/SOVc4zb3P0 ZhXKOqpUz6FJBgj72iJLOW31QRWeOSjFZcI9AgMBAAGjggH4MIIB9DAdBgNVHQ4E FgQU0OPgjIQxyYaAlziY8aBRSapHceAwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC8wT1BnaklReHlZYUFsemlZOGFC UlNhcEhjZUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAxABIAEM CP////////////oIMA0GCSqGSIb3DQEBCwUAA4IBAQCTYHA9nyeWxjYHavi+QKFP GSq/lcw4lWgZteEuT4aDMzKe4bhI5PbOFl45qPfTPSxtUnnBstcJr6/Dm4o/dLhI ula2PQeplG+SFlyTB/KudfRDtMXOT5fC9dPaK1Y3OjsTUx8AgiUDKgtxVySUg+al AfpsflKv/KI1D6PFxbBRofc4TZ9wC2Rq2X5KGnvZBsBrdmke35o+mJi3q8NX3S4I 1mfHsOF+fdKsEgaaCbAqkX4+KZzwB1tEmO1hQZPOEiPXHP0jM0Ne5rgxh1L37fSJ GEHQ1/to5IsSsZwqhKCdmFg42piezOcT/J6Rbv3oDk8YPOe9V1F+GkEOMiM9jBbx -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:25 2025 by rpki-client