$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XxumDUIQXoEoYSIHLc2E0kaY1ZA.roa File: XxumDUIQXoEoYSIHLc2E0kaY1ZA.roa (raw, json) Hash identifier: PqQipaYOu+6rMnsnkD45SwsH4pA7vSQvjUwWGzatb2U= Subject key identifier: 5F:1B:A6:0D:42:10:5E:81:28:61:22:07:2D:CD:84:D2:46:98:D5:90 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13EC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XxumDUIQXoEoYSIHLc2E0kaY1ZA.roa Signing time: Fri 22 Aug 2025 08:59:52 +0000 ROA not before: Fri 22 Aug 2025 08:59:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 60.244.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5100 (0x13ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F1BA60D42105E81286122072DCD84D24698D590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:ac:5d:2c:b2:f7:bc:57:18:86:64:2d:1c: 5d:97:f2:5e:c8:f3:16:37:06:91:12:99:2c:8f:09: df:45:9d:de:b7:2e:86:96:85:06:c8:90:dc:b8:36: 50:4b:51:83:48:7a:18:98:e5:cc:0b:81:c4:86:de: 51:9f:b1:bc:aa:4a:30:a4:6b:1a:d3:e6:55:98:fc: ce:24:c2:f2:f8:d3:02:97:55:b8:12:75:bb:7a:3c: 4c:da:13:b3:18:2a:ca:19:5a:fe:47:dc:90:fa:4a: 10:01:20:75:87:4f:7e:49:b2:80:e7:31:f2:a2:35: 26:76:1f:3c:18:f9:62:48:1a:c4:c9:c8:a6:ee:26: 04:61:63:d4:cf:65:cd:49:60:63:96:ca:2f:7e:91: 0b:2e:6a:1b:a4:78:a6:99:3d:a3:3a:38:f2:8b:d3: 16:10:a5:1d:07:2f:ed:53:62:c6:63:da:66:81:1c: 97:a8:cb:09:62:16:a6:af:98:61:44:f1:6c:e2:84: e4:e6:0f:87:ae:3a:8b:b4:b9:24:70:ec:dc:23:b1: ce:5e:e5:42:03:f6:b0:0f:eb:68:e1:fc:62:c6:6e: 94:3a:e9:dc:e8:c8:91:64:60:16:be:45:8a:b5:b9: d3:f7:e1:2f:d1:25:18:c6:36:61:2a:69:8d:62:46: 93:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:A6:0D:42:10:5E:81:28:61:22:07:2D:CD:84:D2:46:98:D5:90 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XxumDUIQXoEoYSIHLc2E0kaY1ZA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4d:10:9c:38:b3:94:02:c9:3b:1d:40:2f:c1:9b:87:b4:92:b3: 73:ac:58:a9:0d:65:65:ad:55:fd:82:8b:18:f7:60:f9:d9:c9: 0d:8f:af:54:5f:64:72:86:ae:9f:5d:ad:5f:5d:87:a6:46:af: 48:d9:f6:41:e5:f2:96:6e:92:00:37:89:20:68:a0:57:06:2a: cd:be:5c:d0:70:8f:cf:1d:b9:ee:c9:de:4e:9d:56:59:a2:92: d6:f5:33:79:e6:44:12:98:d4:6b:99:db:59:ea:56:c7:9d:0f: 71:4d:c9:ad:87:ad:58:c3:db:85:8f:49:fd:77:5a:06:97:c2: c0:48:51:65:2d:1d:04:1b:82:f3:5d:09:e1:28:64:a1:c8:8d: 5a:a9:57:96:f7:5e:67:fa:f8:cd:9d:14:08:41:f1:36:1a:49: 9d:61:6a:a1:52:fc:af:39:1f:32:40:a4:2a:29:99:16:43:50: 83:d2:0f:d3:f3:76:52:1a:5f:99:09:35:cd:1a:e2:a3:99:f8: 18:c9:8c:7b:44:ee:4e:a4:75:40:33:9e:3e:31:da:c1:48:63: e8:97:02:74:3f:b5:67:43:84:1e:e8:60:87:2b:a8:c4:73:2b: d5:ed:93:80:a7:63:fa:f7:ac:c4:24:ec:08:39:1e:16:16:19: e1:cc:dc:85 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGMUJBNjBENDIxMDVF ODEyODYxMjIwNzJEQ0Q4NEQyNDY5OEQ1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfWaxdLLL3vFcYhmQtHF2X8l7I8xY3BpESmSyPCd9Fnd63LoaW hQbIkNy4NlBLUYNIehiY5cwLgcSG3lGfsbyqSjCkaxrT5lWY/M4kwvL40wKXVbgS dbt6PEzaE7MYKsoZWv5H3JD6ShABIHWHT35JsoDnMfKiNSZ2HzwY+WJIGsTJyKbu JgRhY9TPZc1JYGOWyi9+kQsuahukeKaZPaM6OPKL0xYQpR0HL+1TYsZj2maBHJeo ywliFqavmGFE8WzihOTmD4euOou0uSRw7Nwjsc5e5UID9rAP62jh/GLGbpQ66dzo yJFkYBa+RYq1udP34S/RJRjGNmEqaY1iRpNlAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXxumDUIQXoEoYSIHLc2E0kaY1ZAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1h4dW1EVUlRWG9Fb1lTSUhMYzJFMGth WTFaQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc89AAwDQYJ KoZIhvcNAQELBQADggEBAE0QnDizlALJOx1AL8Gbh7SSs3OsWKkNZWWtVf2Cixj3 YPnZyQ2Pr1RfZHKGrp9drV9dh6ZGr0jZ9kHl8pZukgA3iSBooFcGKs2+XNBwj88d ue7J3k6dVlmiktb1M3nmRBKY1GuZ21nqVsedD3FNya2HrVjD24WPSf13WgaXwsBI UWUtHQQbgvNdCeEoZKHIjVqpV5b3Xmf6+M2dFAhB8TYaSZ1haqFS/K85HzJApCop mRZDUIPSD9PzdlIaX5kJNc0a4qOZ+BjJjHtE7k6kdUAznj4x2sFIY+iXAnQ/tWdD hB7oYIcrqMRzK9Xtk4CnY/r3rMQk7Ag5HhYWGeHM3IU= -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:04 2025 by rpki-client