$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Lv7lLGi1jI165LqffE4orSXCf2A.roa File: Lv7lLGi1jI165LqffE4orSXCf2A.roa (raw, json) Hash identifier: 1UWSx0jHtvSemBYqDeMGcLB4CIUQ2mImOU1Nzow1rGI= Subject key identifier: 2E:FE:E5:2C:68:B5:8C:8D:7A:E4:BA:9F:7C:4E:28:AD:25:C2:7F:60 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1435 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Lv7lLGi1jI165LqffE4orSXCf2A.roa Signing time: Fri 22 Aug 2025 09:00:10 +0000 ROA not before: Fri 22 Aug 2025 09:00:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 124.218.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5173 (0x1435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2EFEE52C68B58C8D7AE4BA9F7C4E28AD25C27F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:07:a3:85:77:8a:11:18:b0:8c:ef:ef:94: 52:b2:a4:1e:78:a5:2a:1a:06:61:3f:63:ed:14:db: ed:3e:ca:9b:bc:c5:3d:85:c9:82:09:89:82:5a:8b: 06:d8:d3:12:72:d1:ba:68:5c:71:9c:5e:20:ae:8a: 30:a4:46:4b:c5:06:d3:a3:ca:83:fe:89:48:9d:4d: 4f:db:e8:af:74:b1:35:eb:a4:c5:5e:4d:8b:9d:d8: 1c:16:84:f6:fe:5b:6e:b0:69:0b:35:bc:2d:1f:22: bb:b0:c6:b4:07:14:f1:2b:79:e9:e1:e7:a3:74:c5: f3:89:7d:7f:5b:46:24:48:34:bd:86:8c:ce:db:fa: 97:5c:04:5f:c4:be:33:71:c1:6b:6d:29:08:df:45: 7f:58:7b:e2:d6:cb:40:c7:6e:9f:1c:5c:75:12:1b: 35:46:81:4d:21:85:77:3a:fc:7a:1a:d4:f9:4d:e5: e4:d3:f3:95:1e:2b:58:4d:58:85:b4:f6:ce:ee:88: af:35:4b:71:97:9b:65:2b:05:9d:04:a0:24:6c:8a: 33:62:af:aa:f9:63:87:67:ba:10:a3:93:2f:f2:da: 20:c6:d1:b9:ea:df:95:60:e9:51:86:73:2f:45:da: 07:ed:b1:4b:01:fb:a6:20:93:bb:2d:23:55:15:c4: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:E5:2C:68:B5:8C:8D:7A:E4:BA:9F:7C:4E:28:AD:25:C2:7F:60 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Lv7lLGi1jI165LqffE4orSXCf2A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:b2:4f:3c:1a:dd:4d:bd:ea:4c:93:ec:85:a9:8d:6f:8e:af: 52:4d:60:06:15:b8:64:41:b0:f6:97:3d:50:df:7a:b8:7f:57: 2d:a4:2f:19:03:3d:5b:70:8d:90:14:74:67:0c:95:55:ca:62: 75:1c:2b:fd:d1:52:4b:bc:a5:15:5f:7d:34:9b:5f:fd:94:dd: ac:4e:1f:1a:76:73:d4:bd:29:47:4d:20:3c:36:58:45:b0:e9: 5d:e8:c9:8f:fd:7e:71:94:62:b7:16:b5:7a:29:6e:c3:24:bd: a6:46:e8:ed:6d:6c:c4:cb:a0:fb:f6:09:84:4b:a8:c2:a4:64: 7f:2d:32:0a:20:5a:5a:6e:bb:a6:1f:bc:eb:84:0b:b2:18:d9: 6d:6f:d3:7f:20:ed:4c:a3:a7:49:49:b2:b5:8d:14:b0:f1:17: 47:b4:fd:f5:cc:d6:aa:0a:5c:51:92:e9:4b:80:32:61:0c:1c: c6:d2:80:ea:28:7a:74:fe:7a:38:33:21:d3:62:69:5a:0b:55: 46:89:7e:2c:4f:4f:41:d2:87:64:1e:b1:8c:07:f1:4f:46:f4: 48:fd:be:bb:e2:7c:c4:ae:89:8d:bf:88:4f:fb:40:ff:0b:56: 8f:82:67:8b:99:47:db:4e:22:00:1d:e4:8d:3d:15:4c:2c:b9: 29:b3:a2:be -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICFDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJFRkVFNTJDNjhCNThD OEQ3QUU0QkE5RjdDNEUyOEFEMjVDMjdGNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNZAejhXeKERiwjO/vlFKypB54pSoaBmE/Y+0U2+0+ypu8xT2F yYIJiYJaiwbY0xJy0bpoXHGcXiCuijCkRkvFBtOjyoP+iUidTU/b6K90sTXrpMVe TYud2BwWhPb+W26waQs1vC0fIruwxrQHFPEreenh56N0xfOJfX9bRiRINL2GjM7b +pdcBF/EvjNxwWttKQjfRX9Ye+LWy0DHbp8cXHUSGzVGgU0hhXc6/Hoa1PlN5eTT 85UeK1hNWIW09s7uiK81S3GXm2UrBZ0EoCRsijNir6r5Y4dnuhCjky/y2iDG0bnq 35Vg6VGGcy9F2gftsUsB+6Ygk7stI1UVxFShAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQULv7lLGi1jI165LqffE4orSXCf2AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0x2N2xMR2kxakkxNjVMcWZmRTRvclNY Q2YyQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB82jANBgkq hkiG9w0BAQsFAAOCAQEAVrJPPBrdTb3qTJPshamNb46vUk1gBhW4ZEGw9pc9UN96 uH9XLaQvGQM9W3CNkBR0ZwyVVcpidRwr/dFSS7ylFV99NJtf/ZTdrE4fGnZz1L0p R00gPDZYRbDpXejJj/1+cZRitxa1eiluwyS9pkbo7W1sxMug+/YJhEuowqRkfy0y CiBaWm67ph+864QLshjZbW/TfyDtTKOnSUmytY0UsPEXR7T99czWqgpcUZLpS4Ay YQwcxtKA6ih6dP56ODMh02JpWgtVRol+LE9PQdKHZB6xjAfxT0b0SP2+u+J8xK6J jb+IT/tA/wtWj4Jni5lH204iAB3kjT0VTCy5KbOivg== -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:05 2025 by rpki-client