$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GEX2gogq8zkEfDEqK_8En1tWjhU.roa File: GEX2gogq8zkEfDEqK_8En1tWjhU.roa (raw, json) Hash identifier: /rNWa7iYti8mq2h4rg42F/R+yElZYvTMdIvAcC9xg3Q= Subject key identifier: 18:45:F6:82:88:2A:F3:39:04:7C:31:2A:2B:FF:04:9F:5B:56:8E:15 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1415 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GEX2gogq8zkEfDEqK_8En1tWjhU.roa Signing time: Fri 22 Aug 2025 09:00:03 +0000 ROA not before: Fri 22 Aug 2025 09:00:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9674 IP address blocks: 2401:e180::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5141 (0x1415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1845F682882AF339047C312A2BFF049F5B568E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b4:85:d8:0c:46:56:7b:d1:2e:54:6d:62:73: d3:de:78:71:b3:2d:b8:a6:0e:fe:d9:3a:bb:66:79: e6:52:99:af:d4:c9:ba:f2:fe:00:fc:e4:bd:98:33: 24:99:a6:82:35:ba:81:61:80:83:23:63:39:d7:26: 19:95:48:8c:6a:78:c7:0e:e7:03:3d:3f:ba:59:1d: f0:34:0c:0d:13:93:e0:bc:cb:ec:f9:6e:61:f6:9f: 12:47:da:05:90:ff:08:14:86:15:65:e1:27:1f:b0: ee:26:17:e9:58:a8:be:15:19:b2:9c:4a:2d:e3:1d: fc:43:ac:53:ac:e6:d7:e7:37:68:97:b7:cf:98:cb: df:95:70:18:d7:1a:b7:a9:08:6d:53:b6:cb:69:cb: 3f:56:f7:27:c4:ba:70:60:3c:2f:7b:c7:c0:c0:50: a7:2f:f2:bd:ca:81:10:2d:65:ce:0b:35:61:93:48: 82:45:9a:60:84:da:37:bf:83:b8:c2:c6:a2:77:f4: 30:3c:87:e5:3a:98:97:d3:9f:bb:d2:6e:dd:ad:54: aa:fa:c3:fb:a9:98:7a:f1:29:4f:bb:98:c5:59:0d: 03:8c:a3:a5:06:36:f0:91:b9:29:47:31:3a:8e:71: 14:5f:80:11:aa:51:df:78:39:28:f7:ff:01:74:21: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:45:F6:82:88:2A:F3:39:04:7C:31:2A:2B:FF:04:9F:5B:56:8E:15 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GEX2gogq8zkEfDEqK_8En1tWjhU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:e180::/32 Signature Algorithm: sha256WithRSAEncryption b9:f1:8f:dd:18:c2:c1:97:ad:a1:9b:e8:fc:f4:fb:47:62:a4: 5d:0e:47:e0:af:88:82:fe:0e:90:42:8b:17:86:0b:31:bf:28: 88:44:68:e6:fd:62:9e:1b:a1:4f:d5:c6:00:2e:f9:e1:0b:74: 07:8e:1a:49:ef:6b:7c:b1:04:ff:22:b9:b8:9c:65:e5:18:26: 47:f0:db:fd:e8:a6:f7:4a:cd:4a:fd:1e:48:c9:8f:a5:51:49: 41:e9:b2:0d:b8:2e:53:97:8b:d3:28:2f:a3:0c:0b:0b:56:ce: ee:04:dc:34:f0:3e:6c:ca:09:c7:00:91:b7:41:10:64:94:3e: 42:c7:88:ab:72:2d:48:92:ef:bb:01:74:c6:52:32:66:87:6f: 4f:1f:08:5a:85:90:81:91:eb:b1:67:32:b7:43:54:3c:98:3c: 2b:0b:4a:08:72:3f:51:6b:49:a9:d7:89:66:b2:9f:78:c8:09: ac:05:db:ca:6b:f7:40:ef:78:0b:61:a0:29:9c:85:48:f0:af: 55:ff:b1:65:22:b1:f7:f3:a8:9c:35:e0:99:85:3f:a8:da:f7: 71:54:b0:b7:b0:55:fb:12:05:d4:99:c2:bb:c9:3f:f3:6d:f8: bd:15:67:33:b4:59:56:99:68:58:8a:1a:02:2a:e9:66:b6:96: 4b:02:77:8a -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4NDVGNjgyODgyQUYz MzkwNDdDMzEyQTJCRkYwNDlGNUI1NjhFMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgtIXYDEZWe9EuVG1ic9PeeHGzLbimDv7ZOrtmeeZSma/Uybry /gD85L2YMySZpoI1uoFhgIMjYznXJhmVSIxqeMcO5wM9P7pZHfA0DA0Tk+C8y+z5 bmH2nxJH2gWQ/wgUhhVl4ScfsO4mF+lYqL4VGbKcSi3jHfxDrFOs5tfnN2iXt8+Y y9+VcBjXGrepCG1Ttstpyz9W9yfEunBgPC97x8DAUKcv8r3KgRAtZc4LNWGTSIJF mmCE2je/g7jCxqJ39DA8h+U6mJfTn7vSbt2tVKr6w/upmHrxKU+7mMVZDQOMo6UG NvCRuSlHMTqOcRRfgBGqUd94OSj3/wF0IdsnAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUGEX2gogq8zkEfDEqK/8En1tWjhUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0dFWDJnb2dxOHprRWZERXFLXzhFbjF0 V2poVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAeGAMA0G CSqGSIb3DQEBCwUAA4IBAQC58Y/dGMLBl62hm+j89PtHYqRdDkfgr4iC/g6QQosX hgsxvyiIRGjm/WKeG6FP1cYALvnhC3QHjhpJ72t8sQT/Irm4nGXlGCZH8Nv96Kb3 Ss1K/R5IyY+lUUlB6bINuC5Tl4vTKC+jDAsLVs7uBNw08D5sygnHAJG3QRBklD5C x4irci1Iku+7AXTGUjJmh29PHwhahZCBkeuxZzK3Q1Q8mDwrC0oIcj9Ra0mp14lm sp94yAmsBdvKa/dA73gLYaApnIVI8K9V/7FlIrH386icNeCZhT+o2vdxVLC3sFX7 EgXUmcK7yT/zbfi9FWcztFlWmWhYihoCKulmtpZLAneK -----END CERTIFICATE-----Generated at Sun Aug 24 14:22:49 2025 by rpki-client