$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Pyf4gnPuujKt1MQmgX_9Ds6cXpY.roa File: Pyf4gnPuujKt1MQmgX_9Ds6cXpY.roa (raw, json) Hash identifier: Uk5TNE1VyaqWZPH0KTvomguUtXKELtfls8jQd5Uyuw0= Subject key identifier: 3F:27:F8:82:73:EE:BA:32:AD:D4:C4:26:81:7F:FD:0E:CE:9C:5E:96 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 144A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Pyf4gnPuujKt1MQmgX_9Ds6cXpY.roa Signing time: Fri 22 Aug 2025 09:00:16 +0000 ROA not before: Fri 22 Aug 2025 09:00:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 203.79.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5194 (0x144a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3F27F88273EEBA32ADD4C426817FFD0ECE9C5E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:55:d3:2c:a8:bb:2a:d9:28:0d:a3:d9:d4: ad:f4:d7:1e:f4:60:52:aa:52:43:87:a7:6f:30:7e: c0:52:91:48:80:06:d3:e6:88:0a:8d:2b:43:cd:7a: 40:81:64:f4:92:e0:2b:55:da:df:32:f5:95:2f:ee: 4b:a7:d9:84:ac:13:1f:42:83:57:42:ab:0a:3c:cf: 80:8c:7d:84:a6:d1:85:31:9b:6a:a4:19:e8:b8:b5: 32:97:9c:c2:4f:a9:75:2d:66:95:31:08:dc:f4:ba: f1:74:a8:0f:5a:87:c7:a5:26:ae:94:2c:3f:26:62: a6:45:00:40:90:75:b3:e0:8e:bf:03:50:8f:6d:e6: a5:24:67:aa:e4:1b:6e:df:99:fb:c3:ce:57:3b:4a: 99:d2:13:e6:11:a9:03:b0:96:f5:d5:0a:65:7c:19: 42:38:36:ce:df:3d:0c:8e:8d:a8:92:ab:66:d3:0f: 42:b9:f5:93:0c:d5:c1:33:50:e7:9d:f1:c1:63:ca: 16:1d:e2:85:4b:14:90:da:c6:4e:0b:be:e7:48:05: 82:d7:7b:d1:5d:37:71:35:6c:23:d8:48:a9:86:68: cd:fb:fc:1f:f8:1e:d0:f1:6c:04:59:34:9f:62:b8: 8d:eb:dd:4b:fa:e8:f6:f3:d1:ad:5c:50:52:98:4f: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:27:F8:82:73:EE:BA:32:AD:D4:C4:26:81:7F:FD:0E:CE:9C:5E:96 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Pyf4gnPuujKt1MQmgX_9Ds6cXpY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption 30:45:06:0d:c6:32:f3:7b:3d:dd:1e:b7:95:d7:4e:7a:e5:2e: bd:60:80:df:33:17:dd:53:15:58:16:23:7c:77:e9:81:2b:41: da:b4:35:bf:75:7d:79:cc:2c:da:45:c3:d2:bc:ca:87:26:6b: ff:9f:a5:6c:b1:65:59:d4:33:46:cb:7a:c4:f5:7d:10:9f:42: f0:e3:d0:8f:60:d2:d7:21:d9:7b:ec:01:b2:46:19:85:e4:ec: 6b:d0:f2:c8:2f:b0:21:9e:f7:38:80:0d:6c:d6:71:87:4b:ae: b0:d5:a6:8b:1a:34:fa:4e:f2:52:a6:fa:db:c9:fc:ae:d1:2b: a8:df:1f:51:c2:f8:78:9e:39:b3:82:bf:d3:d4:a1:f0:51:d5: 59:35:99:6a:c1:00:0c:88:0b:46:41:92:60:9c:ab:cc:1a:6e: fe:38:87:f3:77:94:b0:21:bf:5e:b5:6f:9f:7c:fb:a0:a7:33: 26:a9:0d:97:6b:d6:74:16:76:ac:39:fd:24:ca:6c:bd:8e:a6: cb:dd:fd:86:e4:bc:ca:9f:63:66:94:41:eb:4c:03:1b:76:9a: 1d:81:32:45:80:bb:8f:4b:fd:e1:d9:53:ba:53:24:0f:e7:86: 45:58:d4:d1:52:23:ff:0f:04:58:73:2b:6e:b2:c7:69:a3:00: fc:cd:24:23 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNGMjdGODgyNzNFRUJB MzJBREQ0QzQyNjgxN0ZGRDBFQ0U5QzVFOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgAFXTLKi7KtkoDaPZ1K301x70YFKqUkOHp28wfsBSkUiABtPm iAqNK0PNekCBZPSS4CtV2t8y9ZUv7kun2YSsEx9Cg1dCqwo8z4CMfYSm0YUxm2qk Gei4tTKXnMJPqXUtZpUxCNz0uvF0qA9ah8elJq6ULD8mYqZFAECQdbPgjr8DUI9t 5qUkZ6rkG27fmfvDzlc7SpnSE+YRqQOwlvXVCmV8GUI4Ns7fPQyOjaiSq2bTD0K5 9ZMM1cEzUOed8cFjyhYd4oVLFJDaxk4LvudIBYLXe9FdN3E1bCPYSKmGaM37/B/4 HtDxbARZNJ9iuI3r3Uv66Pbz0a1cUFKYT3AzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUPyf4gnPuujKt1MQmgX/9Ds6cXpYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1B5ZjRnblB1dWpLdDFNUW1nWF85RHM2 Y1hwWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfLT4AwDQYJ KoZIhvcNAQELBQADggEBADBFBg3GMvN7Pd0et5XXTnrlLr1ggN8zF91TFVgWI3x3 6YErQdq0Nb91fXnMLNpFw9K8yocma/+fpWyxZVnUM0bLesT1fRCfQvDj0I9g0tch 2XvsAbJGGYXk7GvQ8sgvsCGe9ziADWzWcYdLrrDVposaNPpO8lKm+tvJ/K7RK6jf H1HC+HieObOCv9PUofBR1Vk1mWrBAAyIC0ZBkmCcq8wabv44h/N3lLAhv161b598 +6CnMyapDZdr1nQWdqw5/STKbL2Opsvd/YbkvMqfY2aUQetMAxt2mh2BMkWAu49L /eHZU7pTJA/nhkVY1NFSI/8PBFhzK26yx2mjAPzNJCM= -----END CERTIFICATE-----Generated at Sun Aug 24 14:17:19 2025 by rpki-client