$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/QcvWzQsdllG4xcGpi4_SUUfRpHM.roa File: QcvWzQsdllG4xcGpi4_SUUfRpHM.roa (raw, json) Hash identifier: ip9dMJKEyz1SU+OgmQK+VGT/PPnAtgW+N0UixtKeOGk= Subject key identifier: 41:CB:D6:CD:0B:1D:96:51:B8:C5:C1:A9:8B:8F:D2:51:47:D1:A4:73 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1417 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QcvWzQsdllG4xcGpi4_SUUfRpHM.roa Signing time: Fri 22 Aug 2025 09:00:03 +0000 ROA not before: Fri 22 Aug 2025 09:00:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 22787 IP address blocks: 210.58.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5143 (0x1417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=41CBD6CD0B1D9651B8C5C1A98B8FD25147D1A473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4a:3e:60:98:54:a5:e0:5d:e3:2b:30:2e:a5: 2a:19:28:6a:ee:02:37:a5:99:0b:f6:d5:88:a0:34: 3c:a6:5b:6a:77:e2:b6:fc:8d:1b:0e:cf:43:d7:35: 44:fe:96:d2:29:8f:7d:79:f2:12:22:f0:57:7f:ec: 37:cb:90:10:ba:b6:ef:56:d0:44:68:1d:6e:af:47: 2b:37:eb:00:72:f8:7b:dd:4c:e4:27:aa:e1:49:29: 6b:ac:65:54:a1:a9:66:4c:27:46:e3:b4:f4:a2:94: bb:b6:4d:09:ae:de:75:b5:64:90:96:9c:35:ed:5a: 43:43:68:8e:fa:c5:a4:05:db:1b:a4:2e:dd:b0:52: ea:54:9f:cd:b7:49:5c:22:32:58:ae:87:b7:7f:4a: 9f:c5:82:4f:ce:10:9f:eb:e0:9b:c8:e0:a8:a0:40: 6b:c5:6e:53:a0:1e:34:b3:4a:5e:37:e8:24:8f:70: c6:79:6d:53:39:e9:a6:4d:d8:8b:d5:f9:f8:8d:98: 08:bf:d1:c6:95:b5:e4:8a:81:b7:48:3d:d1:f2:68: 6f:b0:3c:b5:d0:94:83:71:2c:de:91:00:40:2a:8e: 21:19:35:9e:79:af:36:27:47:3b:96:19:d8:07:34: 2d:0a:c7:4c:4f:45:4a:cd:5f:f1:8e:48:fa:50:3a: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CB:D6:CD:0B:1D:96:51:B8:C5:C1:A9:8B:8F:D2:51:47:D1:A4:73 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QcvWzQsdllG4xcGpi4_SUUfRpHM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.90.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:0f:1b:3e:97:8e:91:36:26:5b:23:ed:e1:4b:a6:e8:d2:1b: 54:ed:99:4a:6d:15:54:5f:a5:34:3b:a9:8b:99:1a:d8:ad:d5: e5:92:4d:03:68:3d:7a:47:7d:23:e1:1f:11:d0:cf:90:f8:f4: 42:c7:ef:ad:a9:bc:28:24:2c:76:f3:6c:71:5a:9f:91:4f:15: 0a:ec:c6:a0:f0:32:8a:7c:f6:46:75:ea:42:3c:7b:cf:64:83: cc:30:16:1e:f6:a2:fb:06:34:9e:19:11:a8:4f:ea:59:b2:02: cd:fa:1e:06:0b:2b:25:db:63:43:ad:7e:5f:68:27:d2:21:ad: a4:b3:3b:01:a8:01:29:75:39:f0:52:a5:60:b8:82:00:98:09: bb:dd:a2:21:1a:76:2f:3d:9a:d4:08:f1:39:de:87:93:d5:20: d0:0b:76:d4:43:c1:d1:fa:f2:cd:85:46:06:58:71:96:f0:7f: 13:58:41:be:5a:d5:c0:40:08:59:d6:82:81:73:e9:8c:ac:0b: bd:19:df:cc:c4:3f:b0:8d:77:1a:8c:f7:88:5a:53:66:98:86: a3:e2:bb:b4:37:96:df:bb:a8:10:34:c8:e5:3e:ca:98:7f:27: 34:88:59:76:a2:14:73:a3:db:9b:83:49:04:b7:f9:be:ae:31: a0:fc:a2:43 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxQ0JENkNEMEIxRDk2 NTFCOEM1QzFBOThCOEZEMjUxNDdEMUE0NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqSj5gmFSl4F3jKzAupSoZKGruAjelmQv21YigNDymW2p34rb8 jRsOz0PXNUT+ltIpj3158hIi8Fd/7DfLkBC6tu9W0ERoHW6vRys36wBy+HvdTOQn quFJKWusZVShqWZMJ0bjtPSilLu2TQmu3nW1ZJCWnDXtWkNDaI76xaQF2xukLt2w UupUn823SVwiMliuh7d/Sp/Fgk/OEJ/r4JvI4KigQGvFblOgHjSzSl436CSPcMZ5 bVM56aZN2IvV+fiNmAi/0caVteSKgbdIPdHyaG+wPLXQlINxLN6RAEAqjiEZNZ55 rzYnRzuWGdgHNC0Kx0xPRUrNX/GOSPpQOpSnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQcvWzQsdllG4xcGpi4/SUUfRpHMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Fjdld6UXNkbGxHNHhjR3BpNF9TVVVm UnBITS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOlowDQYJ KoZIhvcNAQELBQADggEBADoPGz6XjpE2Jlsj7eFLpujSG1TtmUptFVRfpTQ7qYuZ Gtit1eWSTQNoPXpHfSPhHxHQz5D49ELH762pvCgkLHbzbHFan5FPFQrsxqDwMop8 9kZ16kI8e89kg8wwFh72ovsGNJ4ZEahP6lmyAs36HgYLKyXbY0Otfl9oJ9IhraSz OwGoASl1OfBSpWC4ggCYCbvdoiEadi89mtQI8Tneh5PVINALdtRDwdH68s2FRgZY cZbwfxNYQb5a1cBACFnWgoFz6YysC70Z38zEP7CNdxqM94haU2aYhqPiu7Q3lt+7 qBA0yOU+yph/JzSIWXaiFHOj25uDSQS3+b6uMaD8okM= -----END CERTIFICATE-----Generated at Sun Aug 24 14:17:19 2025 by rpki-client