$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XIvkTJJ28b3Gu4qO3Odd3D4ILqs.roa File: XIvkTJJ28b3Gu4qO3Odd3D4ILqs.roa (raw, json) Hash identifier: aAOO7rQML/zKtNBwrOjEi2jDkzWkGiD7+ZsJTxpWUVk= Subject key identifier: 5C:8B:E4:4C:92:76:F1:BD:C6:BB:8A:8E:DC:E7:5D:DC:3E:08:2E:AB Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13D5 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XIvkTJJ28b3Gu4qO3Odd3D4ILqs.roa Signing time: Fri 22 Aug 2025 08:59:47 +0000 ROA not before: Fri 22 Aug 2025 08:59:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131597 IP address blocks: 218.35.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5077 (0x13d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C8BE44C9276F1BDC6BB8A8EDCE75DDC3E082EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:14:d7:06:27:05:be:66:ab:3c:30:19:17:68: cb:c0:ce:87:7f:e9:59:d9:cf:40:c1:58:0c:fd:c9: cd:87:b8:cf:02:c8:8b:6a:6b:1d:a8:4a:d8:bc:81: ec:4d:31:c9:83:39:f2:6d:3e:c0:5e:a8:c1:43:97: 1a:c2:4a:e8:c8:0a:50:bb:af:a2:14:c3:9d:7f:15: be:03:bf:e7:07:b6:91:80:f5:7c:bb:98:76:25:86: bd:6c:74:bd:69:ae:a7:e2:45:09:de:2d:24:70:d6: a9:78:30:b9:61:8f:2b:d2:8f:19:d0:92:9f:d6:3f: cc:ca:a5:8d:53:80:4c:eb:b2:8d:a0:ff:d5:b3:52: 55:18:ab:e6:d9:0a:ce:f5:e3:cd:b6:c3:95:10:61: bf:57:15:1d:c9:d5:b5:a2:5d:93:fe:e5:46:ca:5f: be:6c:19:0d:f8:35:fd:c9:34:c2:79:6f:71:a6:77: 7a:e3:35:f9:9b:d5:d1:6c:46:54:29:7b:2b:34:16: 28:c0:fc:c6:09:e2:a7:d1:0a:6a:12:e4:1e:e0:2d: 5d:ac:1e:26:ac:e6:1b:16:0e:40:67:8e:cd:ab:33: f2:42:59:de:67:90:a1:6c:c2:fd:b5:13:c5:7b:dd: 6d:94:2c:46:92:50:26:5f:0c:1c:fa:c6:1a:5b:66: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8B:E4:4C:92:76:F1:BD:C6:BB:8A:8E:DC:E7:5D:DC:3E:08:2E:AB X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XIvkTJJ28b3Gu4qO3Odd3D4ILqs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.32.0/19 Signature Algorithm: sha256WithRSAEncryption 54:9e:c6:6b:20:48:2e:63:83:ea:e7:2a:c8:c4:97:78:fa:f1: 63:29:33:16:b0:7a:66:ae:02:1a:8e:fa:30:0e:19:56:fa:61: 77:2e:0a:0e:e5:e5:0b:a3:70:ff:bf:46:cd:70:ed:02:81:10: 85:f9:b7:f7:3a:03:a4:e1:77:8d:a1:0c:8c:4b:d6:9b:de:47: 11:ff:6d:de:e3:3e:6e:4c:72:5f:b5:bf:21:d5:fa:69:84:49: 43:b6:91:74:65:03:1b:b4:b2:ac:3d:40:98:fe:23:95:fa:eb: 0a:24:bb:44:80:80:b9:1c:41:bf:b5:73:eb:eb:dc:9f:c7:37: e7:96:f9:44:1c:65:1e:c6:bd:c7:db:07:73:68:9c:de:56:53: 34:4e:e2:8e:3f:4b:2d:c9:ae:a7:26:50:93:1e:82:45:17:f8: f2:58:08:70:4f:5e:80:aa:00:96:7c:b6:7c:a0:8f:cc:66:46: 09:ce:48:e0:94:3e:8f:0b:b2:75:f7:24:65:a8:88:85:ed:78: 56:f0:fa:be:65:c0:45:a9:bc:4f:ea:58:6f:4a:cf:1e:ee:6e: a5:99:6f:64:73:a0:b0:31:21:28:b5:3c:0d:73:f6:ba:ee:b1: 5f:0c:a4:15:9d:b4:51:5f:99:54:a8:90:4d:a1:2d:74:8e:3e: 22:2b:c5:ae -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDOEJFNDRDOTI3NkYx QkRDNkJCOEE4RURDRTc1RERDM0UwODJFQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9FNcGJwW+Zqs8MBkXaMvAzod/6VnZz0DBWAz9yc2HuM8CyItq ax2oSti8gexNMcmDOfJtPsBeqMFDlxrCSujIClC7r6IUw51/Fb4Dv+cHtpGA9Xy7 mHYlhr1sdL1prqfiRQneLSRw1ql4MLlhjyvSjxnQkp/WP8zKpY1TgEzrso2g/9Wz UlUYq+bZCs714822w5UQYb9XFR3J1bWiXZP+5UbKX75sGQ34Nf3JNMJ5b3Gmd3rj Nfmb1dFsRlQpeys0FijA/MYJ4qfRCmoS5B7gLV2sHias5hsWDkBnjs2rM/JCWd5n kKFswv21E8V73W2ULEaSUCZfDBz6xhpbZuOhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXIvkTJJ28b3Gu4qO3Odd3D4ILqswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1hJdmtUSkoyOGIzR3U0cU8zT2RkM0Q0 SUxxcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaIyAwDQYJ KoZIhvcNAQELBQADggEBAFSexmsgSC5jg+rnKsjEl3j68WMpMxawemauAhqO+jAO GVb6YXcuCg7l5QujcP+/Rs1w7QKBEIX5t/c6A6Thd42hDIxL1pveRxH/bd7jPm5M cl+1vyHV+mmESUO2kXRlAxu0sqw9QJj+I5X66woku0SAgLkcQb+1c+vr3J/HN+eW +UQcZR7GvcfbB3NonN5WUzRO4o4/Sy3JrqcmUJMegkUX+PJYCHBPXoCqAJZ8tnyg j8xmRgnOSOCUPo8LsnX3JGWoiIXteFbw+r5lwEWpvE/qWG9Kzx7ubqWZb2RzoLAx ISi1PA1z9rrusV8MpBWdtFFfmVSokE2hLXSOPiIrxa4= -----END CERTIFICATE-----Generated at Sun Aug 24 11:53:16 2025 by rpki-client