$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/n1wU49JlmCtERJNjFTWrwI3SnX4.roa File: n1wU49JlmCtERJNjFTWrwI3SnX4.roa (raw, json) Hash identifier: Tn5EYtlR1jRydHa0x9uEoUzDLPD1I1B2JQAQa/PRxLQ= Subject key identifier: 9F:5C:14:E3:D2:65:98:2B:44:44:93:63:15:35:AB:C0:8D:D2:9D:7E Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 1089 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/n1wU49JlmCtERJNjFTWrwI3SnX4.roa Signing time: Fri 22 Aug 2025 08:57:52 +0000 ROA not before: Fri 22 Aug 2025 08:57:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18424 IP address blocks: 103.136.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4233 (0x1089) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Aug 22 08:57:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9F5C14E3D265982B444493631535ABC08DD29D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:bb:68:a9:af:2d:2f:6c:02:ae:a5:97:1a: 83:34:b6:e4:f1:a6:e6:b2:ea:b2:68:d1:31:c2:b8: 60:32:30:eb:29:88:3f:53:e0:b7:48:d5:74:6b:f1: cd:e3:1c:89:45:f5:3b:52:3d:29:34:ab:be:58:01: df:e2:25:d7:4e:3b:ca:d4:e9:55:a5:f6:9d:dd:6f: 4d:99:1f:76:1b:63:56:ff:7b:dd:fa:4a:1e:d3:f8: 52:82:47:26:81:ad:55:cd:1c:c1:f2:18:89:0a:8e: fc:9b:67:1b:8b:3f:73:6f:27:8b:7f:ea:85:1a:f9: 4d:ab:d7:d5:55:47:29:a3:bc:35:eb:0f:2e:75:16: 20:65:d2:ae:80:2a:53:1f:b1:13:7c:42:50:07:7e: 70:1f:97:23:e1:f5:d5:8f:33:cf:fa:08:b1:e0:a5: 14:53:9c:db:d2:ee:33:85:c4:06:f2:51:e6:a4:9d: 98:4d:01:2c:9a:92:85:64:fb:99:1c:dc:ec:98:cf: 7f:3c:bd:35:45:c4:ec:78:3e:e0:15:48:06:ac:37: 69:2b:d8:ca:a9:4a:48:50:66:bd:9c:41:26:c4:26: 50:08:a7:57:d2:5f:7b:a4:81:63:ff:17:1a:bd:a4: ff:fe:c8:1a:33:36:8d:84:d2:b9:8d:ce:5e:f6:78: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5C:14:E3:D2:65:98:2B:44:44:93:63:15:35:AB:C0:8D:D2:9D:7E X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/n1wU49JlmCtERJNjFTWrwI3SnX4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.60.0/23 Signature Algorithm: sha256WithRSAEncryption 84:28:23:9f:e9:f4:b3:40:b6:95:a3:12:ac:1b:31:b9:aa:72: 4f:8d:89:b8:a0:ff:73:43:2c:4f:cd:f7:41:88:b9:2f:84:36: c1:30:90:82:55:7c:74:9e:e5:c0:15:fc:21:2b:44:8b:6c:f2: 5a:47:70:be:60:c7:57:5c:b8:9e:4b:8d:96:21:8e:80:60:30: 6b:f3:ec:dd:75:bc:51:e4:b5:0a:79:ad:bb:8c:0b:e3:f1:81: df:38:6e:02:5c:4d:3a:57:87:50:cb:34:43:f7:3f:fb:2e:55: 60:f3:2f:e3:ae:a7:36:11:31:e6:b6:b9:ea:d5:66:e3:87:58: 70:a2:89:de:2a:d7:56:9d:06:6e:e9:f0:fe:55:bc:12:1d:ef: dc:04:cc:72:2d:d4:19:67:8f:af:41:65:5d:21:80:56:ac:ea: 9a:8f:d6:15:4e:ec:81:df:68:5b:c7:3d:00:84:27:33:af:71: ec:25:a0:a9:e6:13:a4:86:24:f9:1e:d4:0d:4a:15:91:1b:5c: cd:76:32:6c:4f:8a:9e:59:92:cf:ed:78:e1:0b:d1:50:35:10: f3:58:20:53:3f:63:dc:8b:c0:fb:3d:22:11:a5:3a:6b:35:3c: dd:24:c4:70:de:6a:d6:19:92:d4:a3:b6:ab:03:e0:6c:85:39: e3:5d:bb:dc -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTA4MjIw ODU3NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlGNUMxNEUzRDI2NTk4 MkI0NDQ0OTM2MzE1MzVBQkMwOEREMjlEN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMGrtoqa8tL2wCrqWXGoM0tuTxpuay6rJo0THCuGAyMOspiD9T 4LdI1XRr8c3jHIlF9TtSPSk0q75YAd/iJddOO8rU6VWl9p3db02ZH3YbY1b/e936 Sh7T+FKCRyaBrVXNHMHyGIkKjvybZxuLP3NvJ4t/6oUa+U2r19VVRymjvDXrDy51 FiBl0q6AKlMfsRN8QlAHfnAflyPh9dWPM8/6CLHgpRRTnNvS7jOFxAbyUeaknZhN ASyakoVk+5kc3OyYz388vTVFxOx4PuAVSAasN2kr2MqpSkhQZr2cQSbEJlAIp1fS X3ukgWP/Fxq9pP/+yBozNo2E0rmNzl72eEj/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUn1wU49JlmCtERJNjFTWrwI3SnX4wHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL24xd1U0OUpsbUN0RVJKTmpGVFdyd0kz U25YNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ KoZIhvcNAQELBQADggEBAIQoI5/p9LNAtpWjEqwbMbmqck+Nibig/3NDLE/N90GI uS+ENsEwkIJVfHSe5cAV/CErRIts8lpHcL5gx1dcuJ5LjZYhjoBgMGvz7N11vFHk tQp5rbuMC+Pxgd84bgJcTTpXh1DLNEP3P/suVWDzL+OupzYRMea2uerVZuOHWHCi id4q11adBm7p8P5VvBId79wEzHIt1Blnj69BZV0hgFas6pqP1hVO7IHfaFvHPQCE JzOvcewloKnmE6SGJPke1A1KFZEbXM12MmxPip5Zks/teOEL0VA1EPNYIFM/Y9yL wPs9IhGlOms1PN0kxHDeatYZktSjtqsD4GyFOeNdu9w= -----END CERTIFICATE-----Generated at Sun Aug 24 09:43:34 2025 by rpki-client