$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/NDWiMnLOPX096mpM8Ij1q52i-pU.roa File: NDWiMnLOPX096mpM8Ij1q52i-pU.roa (raw, json) Hash identifier: SXrVsXXrUOaehprJc57y+KaUK/rYRZJh5dOefpqKC/0= Subject key identifier: 34:35:A2:32:72:CE:3D:7D:3D:EA:6A:4C:F0:88:F5:AB:9D:A2:FA:95 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1433 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NDWiMnLOPX096mpM8Ij1q52i-pU.roa Signing time: Fri 22 Aug 2025 09:00:10 +0000 ROA not before: Fri 22 Aug 2025 09:00:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.203.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5171 (0x1433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3435A23272CE3D7D3DEA6A4CF088F5AB9DA2FA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:b7:96:57:92:34:18:79:89:dc:49:cc:4b: d5:52:c0:c7:54:c9:53:92:ba:79:9a:15:b3:93:9e: 8b:a0:a4:0c:95:8a:66:9b:96:95:30:96:22:28:27: 88:6d:bd:47:b1:32:f1:ff:29:70:7b:8f:7a:4b:10: 0b:bb:e9:c0:a1:00:4c:cc:65:0b:48:2c:6e:5e:fd: 55:e6:94:4b:73:0e:6a:6d:f7:55:c8:3c:8f:42:30: ab:d2:2c:59:9e:93:89:65:b3:ab:03:e1:34:f0:7c: 6b:7c:6f:6f:48:1e:50:1a:c3:f5:4a:1c:e9:fa:89: 2d:d1:27:b1:79:39:72:11:7b:04:4e:a5:d1:fb:57: 34:ac:1c:c1:de:8d:fb:cd:99:53:29:30:62:85:82: 5b:c5:24:53:70:f4:f2:1c:72:c5:95:f4:87:b9:af: d2:7c:69:d7:2a:4a:cb:51:ba:e0:44:f4:96:9e:07: 89:9f:79:b6:6d:ed:60:7e:a2:f3:2a:0f:a9:3a:5b: 5b:80:d6:83:79:48:77:54:46:f4:2d:e1:bf:df:01: a8:f6:e6:13:9d:b1:20:e5:7d:e1:e5:69:42:37:c3: 3a:b8:6a:da:02:05:05:99:63:45:fe:7c:67:de:a3: ab:c6:8c:0d:16:19:18:4e:57:b7:3d:7b:2e:2f:5d: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:A2:32:72:CE:3D:7D:3D:EA:6A:4C:F0:88:F5:AB:9D:A2:FA:95 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NDWiMnLOPX096mpM8Ij1q52i-pU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:82:b3:a2:4a:34:b1:64:9a:b2:5d:5a:09:16:13:da:01:ae: 94:a6:c6:e7:4c:41:df:44:ca:47:c3:20:9c:f7:15:8f:85:07: 6b:86:7b:ec:be:04:a7:e7:71:e1:8f:ba:1e:6a:e0:0e:c3:67: 32:03:c4:5a:a8:4a:db:9f:cc:33:e6:80:01:1e:a7:12:f8:dd: 88:81:b7:e2:45:0d:5d:15:ee:b4:de:a0:60:1e:52:00:35:9b: 3e:50:69:55:8b:7f:61:10:91:5c:79:ca:36:77:76:71:b3:44: 00:a3:40:29:c1:58:42:e4:42:92:0d:0d:74:33:14:64:77:79: 0d:43:1b:64:17:e0:4e:e3:87:e9:cc:a0:10:b4:c5:80:ca:a2: 36:1b:f6:8f:00:80:74:08:9f:e9:f6:7a:1c:6e:37:74:3d:ce: 5b:c3:3f:d8:90:9a:c1:4d:3a:3b:2c:2f:15:fc:9a:a8:15:a0: 82:bd:6c:9b:cd:a7:12:1d:e7:3f:66:0f:68:0b:86:63:4e:89: b5:62:74:d5:13:14:58:b7:24:b1:bb:79:8b:68:4e:b1:e7:79: dd:1d:43:49:de:bf:63:f1:6e:f7:b5:b6:80:b2:68:36:12:58: 76:6e:b1:19:36:e7:0e:12:7a:e8:e3:62:05:38:e9:a0:33:60: d5:8f:13:35 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM0MzVBMjMyNzJDRTNE N0QzREVBNkE0Q0YwODhGNUFCOURBMkZBOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8XLeWV5I0GHmJ3EnMS9VSwMdUyVOSunmaFbOTnougpAyVimab lpUwliIoJ4htvUexMvH/KXB7j3pLEAu76cChAEzMZQtILG5e/VXmlEtzDmpt91XI PI9CMKvSLFmek4lls6sD4TTwfGt8b29IHlAaw/VKHOn6iS3RJ7F5OXIRewROpdH7 VzSsHMHejfvNmVMpMGKFglvFJFNw9PIccsWV9Ie5r9J8adcqSstRuuBE9JaeB4mf ebZt7WB+ovMqD6k6W1uA1oN5SHdURvQt4b/fAaj25hOdsSDlfeHlaUI3wzq4atoC BQWZY0X+fGfeo6vGjA0WGRhOV7c9ey4vXbiFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUNDWiMnLOPX096mpM8Ij1q52i+pUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL05EV2lNbkxPUFgwOTZtcE04SWoxcTUy aS1wVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSyzAwDQYJ KoZIhvcNAQELBQADggEBACqCs6JKNLFkmrJdWgkWE9oBrpSmxudMQd9EykfDIJz3 FY+FB2uGe+y+BKfnceGPuh5q4A7DZzIDxFqoStufzDPmgAEepxL43YiBt+JFDV0V 7rTeoGAeUgA1mz5QaVWLf2EQkVx5yjZ3dnGzRACjQCnBWELkQpINDXQzFGR3eQ1D G2QX4E7jh+nMoBC0xYDKojYb9o8AgHQIn+n2ehxuN3Q9zlvDP9iQmsFNOjssLxX8 mqgVoIK9bJvNpxId5z9mD2gLhmNOibVidNUTFFi3JLG7eYtoTrHned0dQ0nev2Px bve1toCyaDYSWHZusRk25w4SeujjYgU46aAzYNWPEzU= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client