$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KIRhpMHZ9DqLvUpAhKpNYbwZh_M.roa File: KIRhpMHZ9DqLvUpAhKpNYbwZh_M.roa (raw, json) Hash identifier: TNRAicL/BYDT12v5vUcIvuUj+xIkiWl6resY9TwZOWM= Subject key identifier: 28:84:61:A4:C1:D9:F4:3A:8B:BD:4A:40:84:AA:4D:61:BC:19:87:F3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13ED Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KIRhpMHZ9DqLvUpAhKpNYbwZh_M.roa Signing time: Fri 22 Aug 2025 08:59:53 +0000 ROA not before: Fri 22 Aug 2025 08:59:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9922 IP address blocks: 124.218.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5101 (0x13ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=288461A4C1D9F43A8BBD4A4084AA4D61BC1987F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:04:75:9b:09:9f:88:28:d6:65:e5:39:00:9f: 42:45:e7:c9:c4:cc:e4:35:91:74:73:d6:60:03:04: b3:4d:89:80:3a:da:7d:02:4f:fb:fd:be:ad:10:88: a2:75:cc:cf:e0:7c:25:a5:a6:09:44:92:62:4d:af: 5b:b7:2b:a5:21:b3:c3:89:79:2e:de:be:e4:76:68: d1:fc:4d:8d:f2:9c:48:6f:ca:d3:13:ae:4c:2b:d1: 51:48:cb:17:54:fd:3d:d4:71:ef:25:24:24:bf:48: 56:ec:cb:66:55:c1:ce:bc:af:25:af:11:9e:ed:76: 65:8a:36:2f:cc:ba:40:a1:6e:73:ad:5d:c1:42:be: b5:e7:59:23:53:b8:4c:65:1e:ef:6b:2e:d3:9d:f8: 54:5d:a5:8e:b0:a0:21:23:bd:09:bb:f6:7f:87:0b: 1c:4d:6b:b8:08:b2:51:6a:00:d8:61:cc:f9:42:0a: 2e:5a:79:ef:17:f9:5c:70:40:86:40:36:95:77:f5: 07:ee:37:5c:5e:77:37:88:e5:7d:ab:e0:27:eb:41: f9:17:16:0c:82:5a:97:a4:92:99:33:9c:28:87:d9: 83:f3:1b:3a:69:1f:82:d0:45:36:d5:71:b1:f7:fe: 52:12:f2:61:c3:c4:ba:3d:d3:44:1e:86:f0:d9:90: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:61:A4:C1:D9:F4:3A:8B:BD:4A:40:84:AA:4D:61:BC:19:87:F3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KIRhpMHZ9DqLvUpAhKpNYbwZh_M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.178.0/24 Signature Algorithm: sha256WithRSAEncryption 95:fc:c6:3b:25:ed:0c:4e:51:40:0d:ac:54:06:e1:78:93:e8: 5b:63:56:24:e2:4a:a8:14:b2:48:eb:7a:37:cb:40:40:03:a8: 01:3b:73:e1:5a:b6:bb:65:61:71:06:0e:83:4e:e1:09:9c:12: aa:39:f8:6e:18:5b:37:f7:79:c7:73:77:0a:f7:2e:1e:33:1b: 6f:f4:db:ce:27:e1:46:2d:fa:dd:78:2f:86:20:d4:16:1d:bc: 31:0d:4f:87:f4:d5:b6:43:cc:54:22:c4:62:0a:ef:26:8e:4d: ad:5b:57:25:94:1d:cd:0e:3f:da:6a:fd:f4:dc:9c:2a:7a:f3: 3e:4c:16:c7:7b:7e:fa:d7:1a:4e:b0:8f:e2:28:e9:cc:f5:42: dc:81:e6:4b:7c:b0:8a:ad:bb:c8:b9:0a:92:56:70:5f:c8:16: fb:4b:84:1e:64:6f:54:59:fb:a8:77:cf:b1:36:85:b4:18:3f: 9f:aa:41:34:1c:8b:5b:31:bc:d0:0d:46:15:a2:eb:3d:52:1d: 55:b3:39:4f:a7:b2:5d:48:a4:26:1d:a4:12:f7:6b:3a:73:89: e8:b2:40:a3:15:69:0e:3c:68:87:bf:21:92:0b:3e:b4:f3:57: e9:55:e8:cb:34:6d:b6:1b:20:99:aa:cd:69:44:9d:34:19:7c: 5d:37:c6:0a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4ODQ2MUE0QzFEOUY0 M0E4QkJENEE0MDg0QUE0RDYxQkMxOTg3RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlBHWbCZ+IKNZl5TkAn0JF58nEzOQ1kXRz1mADBLNNiYA62n0C T/v9vq0QiKJ1zM/gfCWlpglEkmJNr1u3K6Uhs8OJeS7evuR2aNH8TY3ynEhvytMT rkwr0VFIyxdU/T3Uce8lJCS/SFbsy2ZVwc68ryWvEZ7tdmWKNi/MukChbnOtXcFC vrXnWSNTuExlHu9rLtOd+FRdpY6woCEjvQm79n+HCxxNa7gIslFqANhhzPlCCi5a ee8X+VxwQIZANpV39QfuN1xedzeI5X2r4CfrQfkXFgyCWpekkpkznCiH2YPzGzpp H4LQRTbVcbH3/lIS8mHDxLo900QehvDZkMDbAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKIRhpMHZ9DqLvUpAhKpNYbwZh/MwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0tJUmhwTUhaOURxTHZVcEFoS3BOWWJ3 WmhfTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82rIwDQYJ KoZIhvcNAQELBQADggEBAJX8xjsl7QxOUUANrFQG4XiT6FtjViTiSqgUskjrejfL QEADqAE7c+FatrtlYXEGDoNO4QmcEqo5+G4YWzf3ecdzdwr3Lh4zG2/0284n4UYt +t14L4Yg1BYdvDENT4f01bZDzFQixGIK7yaOTa1bVyWUHc0OP9pq/fTcnCp68z5M Fsd7fvrXGk6wj+Io6cz1QtyB5kt8sIqtu8i5CpJWcF/IFvtLhB5kb1RZ+6h3z7E2 hbQYP5+qQTQci1sxvNANRhWi6z1SHVWzOU+nsl1IpCYdpBL3azpzieiyQKMVaQ48 aIe/IZILPrTzV+lV6Ms0bbYbIJmqzWlEnTQZfF03xgo= -----END CERTIFICATE-----Generated at Sun Aug 24 13:52:45 2025 by rpki-client