$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/nskqFs83135iXwXZMed9aQsI9lQ.roa File: nskqFs83135iXwXZMed9aQsI9lQ.roa (raw, json) Hash identifier: kCOTa3Pevx/B2QGWBYCDjWNFnoyoWCDg6PGc3skh0uc= Subject key identifier: 9E:C9:2A:16:CF:37:D7:7E:62:5F:05:D9:31:E7:7D:69:0B:08:F6:54 Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0DB4 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/nskqFs83135iXwXZMed9aQsI9lQ.roa Signing time: Fri 22 Aug 2025 08:56:04 +0000 ROA not before: Fri 22 Aug 2025 08:56:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18411 IP address blocks: 61.56.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 22 08:56:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9EC92A16CF37D77E625F05D931E77D690B08F654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:e1:00:66:3f:c0:be:f0:8f:0c:a8:f8:bc: fc:d6:13:72:3c:55:36:fe:58:3d:3a:78:f8:c2:83: d7:ff:bb:f7:3e:72:08:64:e7:e7:60:72:34:3a:37: e8:d1:90:2c:ef:41:de:ab:51:b6:f7:e7:81:fa:ba: fe:8a:aa:81:c3:86:65:0d:b0:5b:d8:24:54:d0:54: 47:1a:70:15:88:d6:e9:51:27:ef:77:c2:3b:e8:d3: 18:fd:7b:c3:52:00:3e:38:ee:be:7b:4d:fc:f5:6d: 97:ac:41:a0:e9:c0:bf:85:47:4e:69:a8:a2:15:57: 98:ba:18:2b:37:71:ff:a9:93:e9:13:ab:59:0f:60: 8b:58:a1:53:05:1c:27:95:49:53:c4:6c:14:f1:36: 35:01:6b:48:99:14:95:98:bd:ed:55:ac:1e:37:39: 51:91:f0:8e:44:b6:5c:34:47:29:7c:71:74:b4:86: 73:80:89:c9:3f:13:0b:11:ca:4b:d5:32:6b:ab:08: 10:d6:da:de:ee:d3:a4:80:f9:ee:30:46:47:7e:a4: 03:b0:50:d7:ba:cf:d4:54:66:c7:a3:7b:94:ba:03: 7e:c8:d7:1b:01:e1:b7:35:d8:c5:37:09:70:64:f5: cb:cd:a7:71:03:6a:f4:eb:3a:fb:c5:dd:13:83:1a: b0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:2A:16:CF:37:D7:7E:62:5F:05:D9:31:E7:7D:69:0B:08:F6:54 X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/nskqFs83135iXwXZMed9aQsI9lQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.16.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:a3:ac:fe:96:7a:73:f9:77:9b:eb:06:b2:8b:e8:ef:d0:39: 79:3d:95:ae:d7:c4:0b:3c:56:1d:4f:da:5d:11:16:76:09:ca: 0b:32:a5:9d:fe:e6:fa:8e:e7:fa:6e:3f:48:5e:a8:27:a3:99: a3:e4:cc:52:4f:0d:b5:5b:dc:b2:ac:a5:6f:e9:d9:30:88:f3: 01:f5:22:fa:73:11:2b:57:6d:12:b7:06:2b:b3:c6:f3:04:40: 65:3d:dc:a2:68:91:88:55:31:5f:70:a2:5d:c4:44:0c:aa:ae: 8c:c1:ec:ad:19:e5:dd:fb:43:33:08:54:90:17:23:9a:91:90: cf:2a:b8:5a:60:d2:75:8e:09:ac:48:97:4a:77:12:7f:bb:84: f4:9f:ae:65:fa:61:99:2f:e8:a4:a8:b0:f5:46:97:87:3b:db: 7e:21:ec:ae:52:2c:e0:20:82:80:15:3d:f8:9c:7a:60:7d:1b: f2:aa:26:bd:85:89:ca:fa:6f:a5:7d:d9:b8:30:25:ea:f1:a0: 7f:5c:3c:04:0c:2c:91:1c:04:9c:13:7a:d9:15:0d:5b:f5:eb: a1:b1:55:01:5a:1e:4d:d0:b4:9f:55:82:d4:00:5b:3c:33:85: 45:d6:ea:a8:f1:be:e2:c2:d9:67:08:b7:0a:b1:b2:fe:04:2f: 1d:8a:44:71 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNTA4MjIw ODU2MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlFQzkyQTE2Q0YzN0Q3 N0U2MjVGMDVEOTMxRTc3RDY5MEIwOEY2NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/2+EAZj/AvvCPDKj4vPzWE3I8VTb+WD06ePjCg9f/u/c+cghk 5+dgcjQ6N+jRkCzvQd6rUbb354H6uv6KqoHDhmUNsFvYJFTQVEcacBWI1ulRJ+93 wjvo0xj9e8NSAD447r57Tfz1bZesQaDpwL+FR05pqKIVV5i6GCs3cf+pk+kTq1kP YItYoVMFHCeVSVPEbBTxNjUBa0iZFJWYve1VrB43OVGR8I5Etlw0Ryl8cXS0hnOA ick/EwsRykvVMmurCBDW2t7u06SA+e4wRkd+pAOwUNe6z9RUZseje5S6A37I1xsB 4bc12MU3CXBk9cvNp3EDavTrOvvF3RODGrARAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUnskqFs83135iXwXZMed9aQsI9lQwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9uc2txRnM4MzEzNWlYd1haTWVk OWFRc0k5bFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTgQ MA0GCSqGSIb3DQEBCwUAA4IBAQB+o6z+lnpz+Xeb6wayi+jv0Dl5PZWu18QLPFYd T9pdERZ2CcoLMqWd/ub6juf6bj9IXqgno5mj5MxSTw21W9yyrKVv6dkwiPMB9SL6 cxErV20StwYrs8bzBEBlPdyiaJGIVTFfcKJdxEQMqq6MweytGeXd+0MzCFSQFyOa kZDPKrhaYNJ1jgmsSJdKdxJ/u4T0n65l+mGZL+ikqLD1RpeHO9t+IeyuUizgIIKA FT34nHpgfRvyqia9hYnK+m+lfdm4MCXq8aB/XDwEDCyRHAScE3rZFQ1b9euhsVUB Wh5N0LSfVYLUAFs8M4VF1uqo8b7iwtlnCLcKsbL+BC8dikRx -----END CERTIFICATE-----Generated at Sun Aug 24 09:19:49 2025 by rpki-client