$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ptlz0MXU6fwYOIB2ZYCrO5Mp65g.roa File: Ptlz0MXU6fwYOIB2ZYCrO5Mp65g.roa (raw, json) Hash identifier: Oos/fBeOh07j1neMG2GrV8wrIgFkoKHBCwcOI0ITWZs= Subject key identifier: 3E:D9:73:D0:C5:D4:E9:FC:18:38:80:76:65:80:AB:3B:93:29:EB:98 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1423 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ptlz0MXU6fwYOIB2ZYCrO5Mp65g.roa Signing time: Fri 22 Aug 2025 09:00:06 +0000 ROA not before: Fri 22 Aug 2025 09:00:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 211.76.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5155 (0x1423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3ED973D0C5D4E9FC183880766580AB3B9329EB98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:23:47:ef:5c:13:d7:36:2d:76:e3:9f:20: 25:4d:c6:39:ac:45:54:2d:c7:1d:9d:22:53:a2:c6: fc:03:fd:68:25:45:28:39:4b:e4:cb:c0:a4:05:21: e5:aa:67:8b:e2:80:5b:a0:65:09:58:66:1a:d1:b1: f0:0e:9c:2c:57:a1:fa:14:d4:96:c6:a2:66:80:40: b7:e3:b3:ea:bf:d8:69:e4:e4:3a:b4:ac:a1:9a:f6: fa:1a:af:aa:b2:13:50:c4:e9:fe:d7:53:34:d6:8e: 46:51:e5:f2:4c:48:2e:37:9d:33:5a:32:00:ae:40: 0e:b4:6b:cb:79:34:b4:3c:53:c4:77:38:c4:61:23: 02:05:ae:e8:45:f3:76:53:c5:c7:38:95:7e:94:09: aa:d4:83:2f:b8:72:84:db:0a:28:57:df:71:0e:bd: 72:bc:8a:2d:18:64:19:f3:32:80:06:e7:a1:2c:75: 25:aa:a3:4c:05:39:11:6f:02:c7:9f:d5:de:e8:95: 30:f3:fe:ee:d5:64:18:36:ca:81:01:59:88:d1:98: fe:31:e7:cb:bd:af:d3:d5:af:b0:77:71:3c:de:ba: 48:5d:99:05:ef:c9:3d:88:25:85:c6:ac:3b:42:60: 19:99:24:96:0f:e8:82:61:fd:36:33:25:58:4a:b5: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D9:73:D0:C5:D4:E9:FC:18:38:80:76:65:80:AB:3B:93:29:EB:98 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ptlz0MXU6fwYOIB2ZYCrO5Mp65g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.104.0/23 Signature Algorithm: sha256WithRSAEncryption 89:d3:26:0e:a6:7c:0a:68:6a:f4:52:fb:51:8a:7d:e6:85:df: dd:97:d6:d0:d6:c9:e4:05:08:96:f0:26:6a:27:4a:ba:c7:5d: 66:43:35:6a:99:c0:81:bd:3e:6b:bf:6d:cb:a6:96:15:70:00: b1:57:c4:4b:d8:a1:36:eb:b1:d3:3a:73:02:4c:c0:85:e6:e6: 5a:a4:03:c0:89:30:4a:36:81:50:d6:d4:97:e7:d6:38:21:d1: 28:6d:39:b5:46:5c:4c:4b:72:d2:73:b9:4d:82:f7:bf:07:cf: e5:9a:92:aa:87:be:70:40:e5:fd:ed:f9:2b:8d:5a:67:68:bd: 6c:fc:06:ab:aa:91:0b:9d:04:34:47:12:e4:5f:28:9c:a8:a8: d8:1e:be:ba:e8:22:c8:b8:b7:cb:a7:f9:36:14:84:c6:ce:98: 9a:7f:50:e3:67:d4:4b:0d:ee:a3:16:fc:ca:e3:ff:d3:5e:20: 08:4a:15:13:fa:62:3d:6b:d9:bc:d9:53:ec:65:55:f0:87:9a: 2e:a9:17:48:93:f9:b0:aa:db:c0:0b:29:56:49:cc:00:c1:e4: fe:e2:7f:50:a9:1b:23:7e:95:a5:89:f3:0c:52:da:3b:b5:0e: a4:c1:7c:29:59:48:16:83:08:0f:73:e8:e9:6b:64:24:bb:93: 42:0c:50:f6 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFRDk3M0QwQzVENEU5 RkMxODM4ODA3NjY1ODBBQjNCOTMyOUVCOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgCiNH71wT1zYtduOfICVNxjmsRVQtxx2dIlOixvwD/WglRSg5 S+TLwKQFIeWqZ4vigFugZQlYZhrRsfAOnCxXofoU1JbGomaAQLfjs+q/2Gnk5Dq0 rKGa9voar6qyE1DE6f7XUzTWjkZR5fJMSC43nTNaMgCuQA60a8t5NLQ8U8R3OMRh IwIFruhF83ZTxcc4lX6UCarUgy+4coTbCihX33EOvXK8ii0YZBnzMoAG56EsdSWq o0wFORFvAsef1d7olTDz/u7VZBg2yoEBWYjRmP4x58u9r9PVr7B3cTzeukhdmQXv yT2IJYXGrDtCYBmZJJYP6IJh/TYzJVhKteWpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUPtlz0MXU6fwYOIB2ZYCrO5Mp65gwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1B0bHowTVhVNmZ3WU9JQjJaWUNyTzVN cDY1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTTGgwDQYJ KoZIhvcNAQELBQADggEBAInTJg6mfApoavRS+1GKfeaF392X1tDWyeQFCJbwJmon SrrHXWZDNWqZwIG9Pmu/bcumlhVwALFXxEvYoTbrsdM6cwJMwIXm5lqkA8CJMEo2 gVDW1Jfn1jgh0ShtObVGXExLctJzuU2C978Hz+WakqqHvnBA5f3t+SuNWmdovWz8 BquqkQudBDRHEuRfKJyoqNgevrroIsi4t8un+TYUhMbOmJp/UONn1EsN7qMW/Mrj /9NeIAhKFRP6Yj1r2bzZU+xlVfCHmi6pF0iT+bCq28ALKVZJzADB5P7if1CpGyN+ laWJ8wxS2ju1DqTBfClZSBaDCA9z6OlrZCS7k0IMUPY= -----END CERTIFICATE-----Generated at Sun Aug 24 14:22:50 2025 by rpki-client