$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/W13yj33XT14bnuzp255-80OxR1g.roa File: W13yj33XT14bnuzp255-80OxR1g.roa (raw, json) Hash identifier: 7CBtcypP8vZJChu4K7EoOsz7wW8Dg3wRC85hYkPDnTY= Subject key identifier: 5B:5D:F2:8F:7D:D7:4F:5E:1B:9E:EC:E9:DB:9E:7E:F3:43:B1:47:58 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 145D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/W13yj33XT14bnuzp255-80OxR1g.roa Signing time: Fri 22 Aug 2025 09:00:20 +0000 ROA not before: Fri 22 Aug 2025 09:00:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 211.76.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5213 (0x145d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5B5DF28F7DD74F5E1B9EECE9DB9E7EF343B14758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:e4:73:f9:1b:26:11:9b:79:66:00:f1:df: 3d:e1:b5:90:4c:da:04:b2:7e:0a:b5:e1:a4:fb:fb: 76:ce:0a:61:74:8a:77:b3:07:a5:79:c3:9f:0c:08: 7c:c6:d6:f2:8a:8f:f7:90:f7:fa:ac:55:eb:b9:b6: 22:56:f8:67:af:d5:eb:0f:03:e1:dc:a8:b8:35:dd: b1:3b:21:4b:ee:27:81:4c:91:34:6d:24:52:b2:e8: 1b:6f:b6:86:7e:84:4d:0f:b6:a3:e7:e6:9d:45:7c: 6b:65:fa:dd:f7:5e:bb:04:4d:7d:2b:aa:0e:8a:98: b8:bc:2a:f5:6c:07:f6:cf:79:ab:09:57:b4:41:14: 1d:49:39:7d:f8:fe:60:bc:c2:7a:0d:c3:0f:ab:1e: b3:34:ee:80:7d:a4:64:ea:4c:df:69:99:ff:9a:7b: 84:ec:b4:70:a6:f7:cf:fa:04:da:0b:b7:db:25:43: a3:38:d7:09:01:66:b2:df:e4:53:90:d8:a7:9d:0e: 73:a0:16:e3:0c:fc:94:43:89:7e:62:e6:3e:78:0e: 6f:0c:f5:22:89:bb:41:00:f8:81:2a:67:24:54:9a: 98:1d:e1:f5:73:ec:2e:c4:c9:03:29:9e:62:1d:fb: a0:3f:77:9e:b2:43:e6:05:69:cd:5a:83:8a:a9:c7: 46:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5D:F2:8F:7D:D7:4F:5E:1B:9E:EC:E9:DB:9E:7E:F3:43:B1:47:58 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/W13yj33XT14bnuzp255-80OxR1g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.106.0/24 Signature Algorithm: sha256WithRSAEncryption 80:5e:cd:84:31:dc:e8:93:df:f8:26:7d:ff:a8:53:52:ba:f5: f5:2e:e4:64:f7:3e:02:77:96:71:87:70:41:ea:04:f0:16:64: e2:73:50:71:23:33:40:31:e5:7d:3f:3a:a7:6d:28:0f:f4:0e: 8b:1c:e0:91:0f:c3:34:ca:da:0f:29:a6:36:7c:9f:df:40:9c: 84:5e:98:eb:b6:a9:28:bc:2e:96:55:bd:53:97:b0:80:d5:e3: 16:79:56:08:89:50:a3:7f:9b:82:34:4b:9e:6a:28:a1:fb:1b: a4:5b:a2:8d:06:fa:c5:5a:49:1b:7e:de:06:d7:7f:dd:f8:97: b6:98:07:4b:4d:62:9f:56:8d:a8:e8:ec:ba:d9:63:42:06:a8: ca:e9:37:2a:bf:de:09:3a:52:6c:c8:e1:61:d7:06:01:18:a7: f8:30:1c:f4:aa:fb:85:d9:52:5b:47:6a:e7:e6:be:81:61:b0: 9b:24:7a:25:f6:22:94:1d:9a:43:9b:b0:9c:77:ba:06:50:4d: 15:4c:8f:f9:0e:9c:9e:93:53:73:51:cf:9a:c1:30:e1:9a:b3: e7:85:a2:13:e0:e7:4c:fa:f5:fb:23:8c:cb:5d:0a:84:96:4c: d4:cb:1a:2d:fc:c2:f4:48:2c:d5:39:f4:01:d2:15:56:a5:45: 9f:29:20:c4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVCNURGMjhGN0RENzRG NUUxQjlFRUNFOURCOUU3RUYzNDNCMTQ3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlyuRz+RsmEZt5ZgDx3z3htZBM2gSyfgq14aT7+3bOCmF0inez B6V5w58MCHzG1vKKj/eQ9/qsVeu5tiJW+Gev1esPA+HcqLg13bE7IUvuJ4FMkTRt JFKy6BtvtoZ+hE0PtqPn5p1FfGtl+t33XrsETX0rqg6KmLi8KvVsB/bPeasJV7RB FB1JOX34/mC8wnoNww+rHrM07oB9pGTqTN9pmf+ae4TstHCm98/6BNoLt9slQ6M4 1wkBZrLf5FOQ2KedDnOgFuMM/JRDiX5i5j54Dm8M9SKJu0EA+IEqZyRUmpgd4fVz 7C7EyQMpnmId+6A/d56yQ+YFac1ag4qpx0bhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUW13yj33XT14bnuzp255+80OxR1gwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1cxM3lqMzNYVDE0Ym51enAyNTUtODBP eFIxZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTTGowDQYJ KoZIhvcNAQELBQADggEBAIBezYQx3OiT3/gmff+oU1K69fUu5GT3PgJ3lnGHcEHq BPAWZOJzUHEjM0Ax5X0/OqdtKA/0Dosc4JEPwzTK2g8ppjZ8n99AnIRemOu2qSi8 LpZVvVOXsIDV4xZ5VgiJUKN/m4I0S55qKKH7G6Rboo0G+sVaSRt+3gbXf934l7aY B0tNYp9Wjajo7LrZY0IGqMrpNyq/3gk6UmzI4WHXBgEYp/gwHPSq+4XZUltHaufm voFhsJskeiX2IpQdmkObsJx3ugZQTRVMj/kOnJ6TU3NRz5rBMOGas+eFohPg50z6 9fsjjMtdCoSWTNTLGi38wvRILNU59AHSFValRZ8pIMQ= -----END CERTIFICATE-----Generated at Sun Aug 24 14:22:49 2025 by rpki-client