$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/IzzPUsoYsOkoivZRwkTulCFhthE.roa File: IzzPUsoYsOkoivZRwkTulCFhthE.roa (raw, json) Hash identifier: cOkOtwS38PrLNSIgCX/ly27NobZyzgyTFr4caGfbIVY= Subject key identifier: 23:3C:CF:52:CA:18:B0:E9:28:8A:F6:51:C2:44:EE:94:21:61:B6:11 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1400 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/IzzPUsoYsOkoivZRwkTulCFhthE.roa Signing time: Fri 22 Aug 2025 08:59:58 +0000 ROA not before: Fri 22 Aug 2025 08:59:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 2404::/26 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5120 (0x1400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=233CCF52CA18B0E9288AF651C244EE942161B611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:ce:03:09:a5:f0:01:ca:68:2f:71:46:8b: 39:90:87:83:5d:51:f5:de:56:9e:f0:2c:4a:4d:20: 8a:61:11:67:bd:61:3f:e5:91:22:8a:a6:a2:97:9c: 34:08:b7:8c:53:08:d2:03:e9:83:1f:60:21:89:9d: 31:00:67:72:f4:45:06:48:9c:47:7d:b4:1f:66:29: 14:fd:65:5c:31:b4:ef:7f:b9:a5:49:ac:d9:7d:29: bc:47:bb:12:05:ba:83:56:93:20:33:e9:b0:bd:00: 80:2e:01:8a:fe:52:fc:24:14:63:9c:38:6c:7a:d9: b3:8b:fb:45:8e:77:16:5b:68:06:d8:3a:2f:d5:88: d1:99:ea:db:91:b4:9d:83:d7:4d:f3:ce:25:9f:55: 53:8d:6b:b7:fb:22:ac:47:93:14:19:80:56:26:bf: d7:c8:2d:99:ca:5e:1a:f2:47:ee:11:76:8e:04:19: 92:ba:4e:79:79:7a:c0:2a:14:d7:8e:62:a4:53:df: 1e:10:49:90:1b:ac:9e:c4:cb:d0:0c:63:0e:4e:c9: 7d:ea:49:46:41:46:94:91:fd:16:e2:00:29:c5:5c: 05:46:46:86:46:57:bc:0c:79:d0:e8:2a:0b:33:c4: 24:0c:5d:cc:33:4a:4a:6d:1d:82:0f:4b:39:ca:c7: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3C:CF:52:CA:18:B0:E9:28:8A:F6:51:C2:44:EE:94:21:61:B6:11 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/IzzPUsoYsOkoivZRwkTulCFhthE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404::/26 Signature Algorithm: sha256WithRSAEncryption c2:3f:5f:1a:8e:60:e5:e0:0a:95:a6:e8:e4:56:3d:de:9b:9f: a2:df:7a:2d:36:3c:05:2d:60:6b:b4:7f:ab:b0:41:41:95:2b: e5:2b:2a:7c:88:31:f0:21:7d:b6:80:23:c9:1d:e2:2c:18:f0: 92:47:39:cf:bf:5e:ef:59:c3:c3:4d:a6:5a:12:17:b1:ac:0a: 0e:97:71:08:91:9d:a7:c2:28:49:7a:06:ff:6e:96:bb:15:30: e0:a5:06:9b:b9:d3:6e:0a:51:0a:40:08:e3:67:d4:02:d4:8f: 35:bf:03:36:a5:a5:f8:73:be:15:7b:fe:b9:95:be:4c:a7:d9: 31:a4:d0:7e:ee:70:5e:95:d0:28:80:91:5e:fa:c8:42:fd:87: 27:76:01:94:37:5f:08:0f:d5:58:22:2e:48:e3:ce:4d:fd:8e: 21:a3:75:54:f9:e7:22:1b:94:86:3a:cd:2f:f4:d3:00:3d:db: 8f:62:ff:8a:cb:78:a7:3e:f5:5b:01:27:03:4a:a4:0d:2e:7a: c1:ed:f9:fb:a2:ac:87:f6:00:8e:4c:e7:0c:ef:83:96:97:50: 1e:22:e5:96:39:65:ef:a9:c9:bb:83:c5:8a:6c:c1:1d:99:72: 45:4d:7f:6b:b1:82:b5:12:86:97:88:14:73:72:b9:1d:82:5a: 2e:e6:cc:08 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICFAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzM0NDRjUyQ0ExOEIw RTkyODhBRjY1MUMyNDRFRTk0MjE2MUI2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDde84DCaXwAcpoL3FGizmQh4NdUfXeVp7wLEpNIIphEWe9YT/l kSKKpqKXnDQIt4xTCNID6YMfYCGJnTEAZ3L0RQZInEd9tB9mKRT9ZVwxtO9/uaVJ rNl9KbxHuxIFuoNWkyAz6bC9AIAuAYr+UvwkFGOcOGx62bOL+0WOdxZbaAbYOi/V iNGZ6tuRtJ2D103zziWfVVONa7f7IqxHkxQZgFYmv9fILZnKXhryR+4Rdo4EGZK6 Tnl5esAqFNeOYqRT3x4QSZAbrJ7Ey9AMYw5OyX3qSUZBRpSR/RbiACnFXAVGRoZG V7wMedDoKgszxCQMXcwzSkptHYIPSznKx215AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUIzzPUsoYsOkoivZRwkTulCFhthEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0l6elBVc29Zc09rb2l2WlJ3a1R1bENG aHRoRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQYkBAAAMA0G CSqGSIb3DQEBCwUAA4IBAQDCP18ajmDl4AqVpujkVj3em5+i33otNjwFLWBrtH+r sEFBlSvlKyp8iDHwIX22gCPJHeIsGPCSRznPv17vWcPDTaZaEhexrAoOl3EIkZ2n wihJegb/bpa7FTDgpQabudNuClEKQAjjZ9QC1I81vwM2paX4c74Ve/65lb5Mp9kx pNB+7nBeldAogJFe+shC/YcndgGUN18ID9VYIi5I485N/Y4ho3VU+eciG5SGOs0v 9NMAPduPYv+Ky3inPvVbAScDSqQNLnrB7fn7oqyH9gCOTOcM74OWl1AeIuWWOWXv qcm7g8WKbMEdmXJFTX9rsYK1EoaXiBRzcrkdglou5swI -----END CERTIFICATE-----Generated at Sun Aug 24 14:22:49 2025 by rpki-client