$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-7c3wf5Mfq0pDozd_KSvVnmU4tE.roa File: -7c3wf5Mfq0pDozd_KSvVnmU4tE.roa (raw, json) Hash identifier: 3FEpULbemDqOJdgVRDCn1+FgVPNMJxhVRjMVraZz9IY= Subject key identifier: FB:B7:37:C1:FE:4C:7E:AD:29:0E:8C:DD:FC:A4:AF:56:79:94:E2:D1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13DE Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-7c3wf5Mfq0pDozd_KSvVnmU4tE.roa Signing time: Fri 22 Aug 2025 08:59:49 +0000 ROA not before: Fri 22 Aug 2025 08:59:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 124.219.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5086 (0x13de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FBB737C1FE4C7EAD290E8CDDFCA4AF567994E2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:c8:7b:b4:aa:d0:c5:a9:d1:14:3b:a9:f3: cf:26:e3:af:ec:0f:19:9d:f3:a4:90:e6:8b:38:8c: e2:32:e7:d6:9e:3d:17:20:f8:38:8a:1b:2c:9d:f2: 92:18:c1:ed:42:36:13:67:f1:e7:6c:d5:0e:ad:a5: 3d:03:4a:f2:da:29:29:00:9d:83:35:d4:30:62:e5: 1f:28:cb:f0:c3:37:de:20:7f:53:77:7b:20:84:71: 53:c1:de:3c:f1:db:6e:6a:ca:b4:df:94:46:09:9a: bb:1e:89:a9:46:18:25:d7:95:af:23:12:68:87:a3: 1c:25:c8:6b:25:94:da:1f:3e:8a:7d:20:0a:e0:81: 46:14:09:2a:63:ca:27:a7:39:a7:08:12:27:ee:90: 3b:66:0b:20:2a:ab:e5:59:f6:89:e2:75:63:37:d7: 1d:25:36:d5:ca:b7:5a:64:1c:b9:09:20:b7:9a:11: 95:14:fb:81:0e:e2:c6:96:da:02:2d:b4:63:8f:71: d4:85:15:15:bb:61:de:ed:dc:7a:2a:c1:22:fe:46: 3b:56:e2:d5:b0:f9:20:e0:6b:f9:32:5e:51:2d:85: bd:f5:13:a5:80:60:5b:8a:a1:a8:f7:57:23:eb:c5: 28:64:83:76:04:0d:1e:b3:70:f0:d8:8c:f5:60:85: 97:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B7:37:C1:FE:4C:7E:AD:29:0E:8C:DD:FC:A4:AF:56:79:94:E2:D1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-7c3wf5Mfq0pDozd_KSvVnmU4tE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption aa:95:bb:a3:81:a4:1d:55:8b:60:04:b7:a4:9a:9a:14:59:82: 1e:97:ea:47:16:c2:41:6f:7c:be:76:df:20:45:a9:c9:5f:be: ad:a5:79:55:8b:fb:cb:31:22:d5:de:eb:aa:44:f5:47:71:5e: 37:c3:41:be:8e:ea:af:66:ff:11:b7:1c:ad:4b:27:bc:b9:fd: 75:02:06:f1:0a:a9:cd:9e:dc:8c:6d:0f:b3:12:32:c0:c1:21: ce:54:b3:d6:c6:30:02:91:6f:ae:bb:da:db:b7:ec:f2:6b:62: 14:b1:84:16:ab:bb:47:c9:43:36:74:eb:0a:1d:ce:e9:b5:4f: 48:d2:53:59:41:39:f9:47:f3:45:e3:5e:2d:74:d9:ad:ce:6c: cd:25:72:5d:17:c1:3c:6e:85:1b:d1:f0:af:e2:ea:b6:b9:99: 0a:32:0f:e6:07:66:c7:d4:73:46:2e:4b:66:98:8d:99:f0:e7: 50:4a:8a:8c:cc:1b:c5:a8:1e:39:e7:c4:6a:07:b3:fb:3c:13: 80:ba:05:69:8a:24:1e:c7:84:7c:9a:ad:ec:75:9c:f7:42:c5: 91:5a:7a:cb:d5:f3:ef:dc:17:15:e2:48:97:5d:81:6c:56:09: 6e:06:b7:54:b8:5b:d2:82:2c:cf:00:3d:68:6c:37:b1:2a:a7: 98:05:24:30 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZCQjczN0MxRkU0QzdF QUQyOTBFOENEREZDQTRBRjU2Nzk5NEUyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyG8h7tKrQxanRFDup888m46/sDxmd86SQ5os4jOIy59aePRcg +DiKGyyd8pIYwe1CNhNn8eds1Q6tpT0DSvLaKSkAnYM11DBi5R8oy/DDN94gf1N3 eyCEcVPB3jzx225qyrTflEYJmrseialGGCXXla8jEmiHoxwlyGsllNofPop9IArg gUYUCSpjyienOacIEifukDtmCyAqq+VZ9onidWM31x0lNtXKt1pkHLkJILeaEZUU +4EO4saW2gIttGOPcdSFFRW7Yd7t3HoqwSL+RjtW4tWw+SDga/kyXlEthb31E6WA YFuKoaj3VyPrxShkg3YEDR6zcPDYjPVghZf/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU+7c3wf5Mfq0pDozd/KSvVnmU4tEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy03YzN3ZjVNZnEwcERvemRfS1N2Vm5t VTR0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd82wAwDQYJ KoZIhvcNAQELBQADggEBAKqVu6OBpB1Vi2AEt6SamhRZgh6X6kcWwkFvfL523yBF qclfvq2leVWL+8sxItXe66pE9UdxXjfDQb6O6q9m/xG3HK1LJ7y5/XUCBvEKqc2e 3IxtD7MSMsDBIc5Us9bGMAKRb6672tu37PJrYhSxhBaru0fJQzZ06wodzum1T0jS U1lBOflH80XjXi102a3ObM0lcl0XwTxuhRvR8K/i6ra5mQoyD+YHZsfUc0YuS2aY jZnw51BKiozMG8WoHjnnxGoHs/s8E4C6BWmKJB7HhHyarex1nPdCxZFaesvV8+/c FxXiSJddgWxWCW4Gt1S4W9KCLM8APWhsN7Eqp5gFJDA= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client