$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/MPmvPo15p5W2gUa5kovThmzf88U.roa File: MPmvPo15p5W2gUa5kovThmzf88U.roa (raw, json) Hash identifier: n2GTgi9+kA+X3S9aHWx5oYvg/ePuRpuIjvWqno4qLCI= Subject key identifier: 30:F9:AF:3E:8D:79:A7:95:B6:81:46:B9:92:8B:D3:86:6C:DF:F3:C5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1451 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/MPmvPo15p5W2gUa5kovThmzf88U.roa Signing time: Fri 22 Aug 2025 09:00:18 +0000 ROA not before: Fri 22 Aug 2025 09:00:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9922 IP address blocks: 124.218.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5201 (0x1451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=30F9AF3E8D79A795B68146B9928BD3866CDFF3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:52:ea:43:45:38:21:16:82:61:a6:f9:50: 78:f3:62:60:f2:89:1a:b0:59:f9:4a:95:8c:ec:70: 54:7a:51:26:f4:68:8e:3d:d8:83:18:92:57:f8:92: f2:8a:91:44:ff:86:61:6a:be:2f:fd:54:88:a7:bd: 3e:99:3f:7d:2e:d5:57:f8:97:42:b5:d7:af:fe:d3: 2a:48:22:1e:a8:ee:a9:21:79:e4:7d:96:02:75:17: d8:19:c8:6c:4c:23:90:70:09:0a:af:dc:4a:5b:99: cc:68:c3:1a:04:00:69:9f:12:8f:70:d2:ad:9f:13: 0f:6f:75:3b:1a:ea:9f:db:1c:ba:ec:25:d2:eb:c7: 4e:13:67:11:dc:83:fd:0d:49:de:67:2a:20:ae:06: a3:38:c8:17:76:50:95:29:2a:56:71:8c:40:6c:95: f3:38:95:f9:af:11:55:98:50:f3:9e:2c:62:cb:c9: 45:e0:81:04:34:fd:b7:ab:61:58:44:0b:c3:f0:53: 40:9e:20:7c:c1:83:c4:6f:0b:30:9b:a5:da:82:34: 20:c4:45:27:c2:1f:c8:df:5e:c6:1a:32:c6:4c:6d: 66:a4:dc:d7:4f:d3:ec:53:bc:95:55:6f:a1:fe:84: b4:2f:e6:c5:ae:cf:e2:b9:8b:e9:24:59:18:de:1b: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F9:AF:3E:8D:79:A7:95:B6:81:46:B9:92:8B:D3:86:6C:DF:F3:C5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/MPmvPo15p5W2gUa5kovThmzf88U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.177.0/24 Signature Algorithm: sha256WithRSAEncryption 37:49:7b:35:7d:56:04:f9:10:05:cb:3b:e8:3b:f6:96:d3:2a: 51:78:b9:73:c6:44:a2:e0:d8:fc:5d:49:58:46:43:34:92:06: dc:3a:cc:43:c1:d1:41:7e:15:b7:50:f9:f3:ce:37:dc:b1:14: bc:32:0f:ad:be:d1:68:3c:4c:7b:c6:11:d1:5c:59:4e:d7:0d: 82:10:f1:cd:da:27:8b:48:1e:5b:7e:49:c9:a4:76:c9:0c:fa: 79:55:ab:2d:17:9b:19:2f:df:4c:da:1c:a9:16:00:0d:1f:96: cf:dc:36:14:90:78:88:95:28:f1:30:03:55:a6:08:e5:78:ef: be:5d:de:ff:41:38:1d:9c:9b:25:e9:f7:2c:49:aa:20:e5:5e: 04:43:ec:e9:f5:bd:48:90:30:13:26:af:92:4d:a0:1c:fc:e7: b1:ef:ea:cf:65:1a:f1:22:d7:9b:05:4b:2e:60:c8:ea:c8:98: 7c:c9:07:10:d7:91:19:e3:42:75:8f:bb:78:a0:35:0b:a9:d4: d6:2b:0b:7b:21:22:37:cf:94:76:90:53:67:ad:27:04:5c:fe: 19:5f:2f:e1:d4:36:3d:8c:12:47:4c:90:5c:09:be:6a:fe:c5: d8:03:f0:94:5a:5c:35:fe:48:ae:3f:fc:01:33:f9:0f:76:d5: 6c:62:d8:73 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMwRjlBRjNFOEQ3OUE3 OTVCNjgxNDZCOTkyOEJEMzg2NkNERkYzQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDarVLqQ0U4IRaCYab5UHjzYmDyiRqwWflKlYzscFR6USb0aI49 2IMYklf4kvKKkUT/hmFqvi/9VIinvT6ZP30u1Vf4l0K116/+0ypIIh6o7qkheeR9 lgJ1F9gZyGxMI5BwCQqv3EpbmcxowxoEAGmfEo9w0q2fEw9vdTsa6p/bHLrsJdLr x04TZxHcg/0NSd5nKiCuBqM4yBd2UJUpKlZxjEBslfM4lfmvEVWYUPOeLGLLyUXg gQQ0/berYVhEC8PwU0CeIHzBg8RvCzCbpdqCNCDERSfCH8jfXsYaMsZMbWak3NdP 0+xTvJVVb6H+hLQv5sWuz+K5i+kkWRjeG29tAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUMPmvPo15p5W2gUa5kovThmzf88UwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL01QbXZQbzE1cDVXMmdVYTVrb3ZUaG16 Zjg4VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82rEwDQYJ KoZIhvcNAQELBQADggEBADdJezV9VgT5EAXLO+g79pbTKlF4uXPGRKLg2PxdSVhG QzSSBtw6zEPB0UF+FbdQ+fPON9yxFLwyD62+0Wg8THvGEdFcWU7XDYIQ8c3aJ4tI Hlt+ScmkdskM+nlVqy0Xmxkv30zaHKkWAA0fls/cNhSQeIiVKPEwA1WmCOV4775d 3v9BOB2cmyXp9yxJqiDlXgRD7On1vUiQMBMmr5JNoBz857Hv6s9lGvEi15sFSy5g yOrImHzJBxDXkRnjQnWPu3igNQup1NYrC3shIjfPlHaQU2etJwRc/hlfL+HUNj2M EkdMkFwJvmr+xdgD8JRaXDX+SK4//AEz+Q921Wxi2HM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:08 2025 by rpki-client