$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-86_zI4ilC_mywjb9gcmkz2D-R4.roa File: -86_zI4ilC_mywjb9gcmkz2D-R4.roa (raw, json) Hash identifier: 2ytnQns1Iv9z8eUsvbLyxmfDmXsyQvqLq2LP5q8Zu6Y= Subject key identifier: FB:CE:BF:CC:8E:22:94:2F:E6:CB:08:DB:F6:07:26:93:3D:83:F9:1E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1407 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-86_zI4ilC_mywjb9gcmkz2D-R4.roa Signing time: Fri 22 Aug 2025 09:00:00 +0000 ROA not before: Fri 22 Aug 2025 09:00:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9674 IP address blocks: 211.73.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5127 (0x1407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FBCEBFCC8E22942FE6CB08DBF60726933D83F91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:19:50:19:bc:65:7e:2b:79:7f:b4:dd:2d: 90:b0:2f:f7:3d:8a:6d:0a:fe:5a:2a:f0:5b:af:c7: ae:8c:36:7c:69:5c:34:d3:30:ee:f9:87:53:a0:03: 81:bd:0f:33:d7:73:f9:95:d4:de:d3:33:c9:49:20: f3:7b:59:19:ab:d0:9d:11:59:f1:62:51:a1:e1:ad: cf:f2:49:4b:3e:58:d7:6d:22:b2:c5:4a:01:ba:e7: c1:d8:d8:3a:93:13:11:4f:52:4d:bd:50:99:7f:8b: 03:73:24:c6:8d:20:f4:48:e5:90:09:06:b5:5f:58: 4e:f8:6a:32:0a:df:b6:03:2d:f9:ad:46:2e:eb:a5: 30:36:0a:ee:13:47:df:fe:31:5c:4d:4e:36:13:78: f5:be:6a:94:68:c1:1d:78:76:2a:f8:6a:ef:d6:d0: 7a:dd:96:1d:8e:59:2f:e5:6d:7f:f2:32:78:df:12: f6:1e:01:81:cc:10:92:f8:a2:ed:99:3f:de:08:60: 58:47:20:6a:45:4e:1c:23:96:74:5c:ab:b1:1b:fd: 72:62:0a:f1:a8:d5:26:15:9f:5a:3f:b1:ce:f2:e7: b1:03:3e:8e:1d:33:45:98:ab:e2:dd:4f:33:2c:3c: 82:7b:3e:bd:b7:40:2e:3d:b8:e1:f0:b2:ea:65:98: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CE:BF:CC:8E:22:94:2F:E6:CB:08:DB:F6:07:26:93:3D:83:F9:1E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-86_zI4ilC_mywjb9gcmkz2D-R4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.73.128.0/19 Signature Algorithm: sha256WithRSAEncryption c5:97:f8:7b:e5:0e:f5:85:5e:7d:92:06:24:ee:ff:33:c1:82: 43:59:a7:5f:88:c2:cf:40:18:a7:e8:c8:02:f6:ad:91:92:9e: c6:52:fb:b1:90:99:73:75:da:5e:39:2d:4f:4a:e3:bf:5c:5f: f8:01:20:58:e2:0f:35:69:df:73:72:73:fb:34:07:9e:4e:3f: 9e:bf:59:1f:04:60:87:89:f6:7f:9f:3d:87:f4:1c:c4:c1:99: c3:e3:9a:15:3d:a2:99:b2:f9:8c:8d:9b:c6:a0:ac:d6:67:bd: 67:e1:ea:39:b7:d5:cd:39:bc:be:3e:9b:7d:62:03:23:52:54: 9b:c5:22:53:de:64:b4:3a:6f:f8:dc:79:bd:e9:39:17:d3:17: e0:17:df:77:fe:67:b9:61:73:1c:d2:9b:37:0c:5d:30:cf:60: 7d:a9:05:d4:07:32:3e:6e:eb:e0:32:22:f5:be:ae:96:fd:76: d6:95:84:c3:06:1a:84:16:b0:f6:e1:7d:5a:ea:bd:8c:66:2f: 18:fc:1f:30:ab:db:63:d2:2c:42:fd:91:e9:e6:8d:3b:57:4e: c9:50:95:05:34:f1:a3:b4:c8:ce:d3:6c:a4:b3:5a:09:b1:59: e2:23:37:6c:d9:45:9d:fd:07:46:23:ab:f6:28:71:f7:28:6d: 33:e0:59:2c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZCQ0VCRkNDOEUyMjk0 MkZFNkNCMDhEQkY2MDcyNjkzM0Q4M0Y5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfXhlQGbxlfit5f7TdLZCwL/c9im0K/loq8Fuvx66MNnxpXDTT MO75h1OgA4G9DzPXc/mV1N7TM8lJIPN7WRmr0J0RWfFiUaHhrc/ySUs+WNdtIrLF SgG658HY2DqTExFPUk29UJl/iwNzJMaNIPRI5ZAJBrVfWE74ajIK37YDLfmtRi7r pTA2Cu4TR9/+MVxNTjYTePW+apRowR14dir4au/W0Hrdlh2OWS/lbX/yMnjfEvYe AYHMEJL4ou2ZP94IYFhHIGpFThwjlnRcq7Eb/XJiCvGo1SYVn1o/sc7y57EDPo4d M0WYq+LdTzMsPIJ7Pr23QC49uOHwsuplmMDZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU+86/zI4ilC/mywjb9gcmkz2D+R4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy04Nl96STRpbENfbXl3amI5Z2Nta3oy RC1SNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXTSYAwDQYJ KoZIhvcNAQELBQADggEBAMWX+HvlDvWFXn2SBiTu/zPBgkNZp1+Iws9AGKfoyAL2 rZGSnsZS+7GQmXN12l45LU9K479cX/gBIFjiDzVp33Nyc/s0B55OP56/WR8EYIeJ 9n+fPYf0HMTBmcPjmhU9opmy+YyNm8agrNZnvWfh6jm31c05vL4+m31iAyNSVJvF IlPeZLQ6b/jceb3pORfTF+AX33f+Z7lhcxzSmzcMXTDPYH2pBdQHMj5u6+AyIvW+ rpb9dtaVhMMGGoQWsPbhfVrqvYxmLxj8HzCr22PSLEL9kenmjTtXTslQlQU08aO0 yM7TbKSzWgmxWeIjN2zZRZ39B0Yjq/YocfcobTPgWSw= -----END CERTIFICATE-----Generated at Sun Aug 24 14:22:49 2025 by rpki-client