$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/WHxySZek_LBFH3dR3MArY0YUzQA.roa File: WHxySZek_LBFH3dR3MArY0YUzQA.roa (raw, json) Hash identifier: mrnbeYT7+strNLibENSkxOypHIrflnt6uj8MjrjnFSY= Subject key identifier: 58:7C:72:49:97:A4:FC:B0:45:1F:77:51:DC:C0:2B:63:46:14:CD:00 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1488 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/WHxySZek_LBFH3dR3MArY0YUzQA.roa Signing time: Fri 22 Aug 2025 09:00:31 +0000 ROA not before: Fri 22 Aug 2025 09:00:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131597 IP address blocks: 218.35.64.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5256 (0x1488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=587C724997A4FCB0451F7751DCC02B634614CD00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:8e:25:c6:1a:6c:93:d1:a0:b4:12:10:93: e3:e3:a4:11:aa:9f:49:3b:5e:ce:90:c7:76:e6:7c: 33:ef:a1:be:cd:d4:64:de:fa:a9:87:ee:4a:5e:b7: 4a:84:da:ba:67:c1:90:04:4c:4b:2a:e6:ff:39:0f: fb:bb:47:73:7c:d1:68:fd:a9:f8:79:55:50:1f:0e: 6f:27:3f:05:38:f1:4b:1d:ad:cd:f9:fc:9e:fc:2c: 77:8f:eb:b6:20:ce:d1:ea:7b:76:dd:f5:5d:a2:56: 3a:bb:29:76:92:6d:20:58:40:87:69:df:ca:35:d6: 68:a9:ff:73:93:f1:cd:2b:2c:b9:52:bf:01:c8:ba: 16:f5:36:6c:a4:32:d9:a6:26:ef:95:48:29:40:37: 73:06:f5:77:54:62:de:59:05:58:1c:e0:a2:99:8c: 1b:6a:ce:26:ea:cf:85:f5:a6:7d:9b:aa:01:26:30: 48:7a:b1:81:4a:fb:60:c6:a4:85:53:f5:10:97:e7: 6d:30:60:4f:94:0c:fb:dc:80:42:3b:30:bf:b0:b1: 98:90:a8:48:3c:6f:ed:94:de:3f:da:7d:6c:18:11: e7:bb:d0:62:e3:52:d9:07:cc:5f:67:70:4c:e8:c0: 53:b9:11:3b:e3:00:89:7b:eb:17:af:3a:e2:b3:43: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:72:49:97:A4:FC:B0:45:1F:77:51:DC:C0:2B:63:46:14:CD:00 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/WHxySZek_LBFH3dR3MArY0YUzQA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.64.0/19 Signature Algorithm: sha256WithRSAEncryption 0a:6f:b8:1d:b9:92:90:e8:34:c7:a1:57:12:0e:e7:45:2d:4f: b6:b7:cf:2c:e6:7b:78:1a:e7:0b:c7:4e:2e:92:5e:86:1c:0d: 6e:d4:e5:83:06:7f:33:39:8b:0c:07:d3:77:13:0a:20:48:21: b3:82:6f:55:2a:ec:ea:d4:c8:03:22:77:cf:7c:5f:46:ce:b1: 54:db:92:68:3b:a9:8d:7a:a3:b8:ec:8e:b7:91:e6:99:80:fa: 17:ca:c2:0e:db:3f:dd:db:c0:51:01:73:2b:9d:db:5d:3a:23: 5b:78:45:3a:e4:46:ed:9c:ea:e4:37:22:94:e4:80:5c:c2:cb: 96:74:02:da:54:9b:c7:d1:70:a5:af:20:2b:13:26:b1:71:76: c4:06:54:9e:7b:f9:a6:ac:2b:22:59:c5:e9:6d:9b:3f:67:ec: 77:4b:6a:58:9e:4d:09:95:65:f2:88:51:ca:51:a9:55:31:ee: 7c:6c:bc:f7:5c:9c:7f:b0:85:19:d4:9e:7c:37:7d:27:be:aa: 2b:15:69:5d:52:72:00:77:36:a6:1c:4f:19:24:53:c5:ff:4e: 60:ab:cb:a4:9f:4b:17:f5:79:c8:58:3c:bf:b5:ae:4f:84:8b: 3b:92:e5:58:c8:c4:66:30:67:cc:c6:6d:b8:4c:de:6d:19:b2: f5:ca:53:f5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4N0M3MjQ5OTdBNEZD QjA0NTFGNzc1MURDQzAyQjYzNDYxNENEMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZ1o4lxhpsk9GgtBIQk+PjpBGqn0k7Xs6Qx3bmfDPvob7N1GTe +qmH7kpet0qE2rpnwZAETEsq5v85D/u7R3N80Wj9qfh5VVAfDm8nPwU48Usdrc35 /J78LHeP67YgztHqe3bd9V2iVjq7KXaSbSBYQIdp38o11mip/3OT8c0rLLlSvwHI uhb1NmykMtmmJu+VSClAN3MG9XdUYt5ZBVgc4KKZjBtqzibqz4X1pn2bqgEmMEh6 sYFK+2DGpIVT9RCX520wYE+UDPvcgEI7ML+wsZiQqEg8b+2U3j/afWwYEee70GLj UtkHzF9ncEzowFO5ETvjAIl76xevOuKzQ0GPAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUWHxySZek/LBFH3dR3MArY0YUzQAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1dIeHlTWmVrX0xCRkgzZFIzTUFyWTBZ VXpRQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaI0AwDQYJ KoZIhvcNAQELBQADggEBAApvuB25kpDoNMehVxIO50UtT7a3zyzme3ga5wvHTi6S XoYcDW7U5YMGfzM5iwwH03cTCiBIIbOCb1Uq7OrUyAMid898X0bOsVTbkmg7qY16 o7jsjreR5pmA+hfKwg7bP93bwFEBcyud2106I1t4RTrkRu2c6uQ3IpTkgFzCy5Z0 AtpUm8fRcKWvICsTJrFxdsQGVJ57+aasKyJZxeltmz9n7HdLalieTQmVZfKIUcpR qVUx7nxsvPdcnH+whRnUnnw3fSe+qisVaV1ScgB3NqYcTxkkU8X/TmCry6SfSxf1 echYPL+1rk+EizuS5VjIxGYwZ8zGbbhM3m0ZsvXKU/U= -----END CERTIFICATE-----Generated at Sun Aug 24 11:53:15 2025 by rpki-client