$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/aHKUiQ4RVdkWvgP87InWmB1GBRg.roa File: aHKUiQ4RVdkWvgP87InWmB1GBRg.roa (raw, json) Hash identifier: fuc07lVWFGq5iypPy1JbqD/fqkpu8kvwdWkhVqEqWFw= Subject key identifier: 68:72:94:89:0E:11:55:D9:16:BE:03:FC:EC:89:D6:98:1D:46:05:18 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1419 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aHKUiQ4RVdkWvgP87InWmB1GBRg.roa Signing time: Fri 22 Aug 2025 09:00:04 +0000 ROA not before: Fri 22 Aug 2025 09:00:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24155 IP address blocks: 203.207.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5145 (0x1419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=687294890E1155D916BE03FCEC89D6981D460518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:2e:d5:84:67:24:17:72:b4:2a:c1:b0:b4: d4:ca:73:72:6c:0d:01:b4:78:ab:93:0d:59:de:73: a3:6d:f2:02:a9:6c:36:42:cb:ea:0f:6a:81:50:56: 84:61:38:b5:f0:38:17:49:7e:3d:ec:4d:d6:ae:c8: 69:bc:d0:a1:04:e9:82:fa:22:ba:ce:0a:6b:99:16: 00:c0:67:51:b1:d4:9f:30:ee:4a:a9:12:45:8c:4a: 35:b0:65:1d:ba:6b:e9:52:36:4c:7f:f1:c8:e8:50: bd:72:b1:41:85:5b:dd:82:f9:3d:4f:19:46:a6:53: 65:e4:75:a1:0c:b3:4d:97:2a:4c:6e:79:26:b1:0a: a2:1f:32:05:aa:7a:f6:a7:0b:34:df:81:63:92:3e: 6b:8a:15:98:39:ad:61:b2:20:c4:7e:f6:3a:99:d0: 10:be:36:a7:6c:7a:bf:4e:43:b1:62:9b:3d:5d:1e: 88:05:99:87:62:eb:9f:e0:e4:00:c4:0b:f8:ad:5d: 8f:32:ac:66:b1:1f:09:69:43:d7:33:b2:b4:9b:4a: b8:24:1f:79:ce:2d:af:57:90:1f:07:ac:ce:cc:aa: f7:41:06:fa:1f:8e:3b:86:53:f2:48:60:43:b1:be: 24:c3:bd:02:dc:24:15:ec:f6:02:42:d1:80:c9:7b: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:72:94:89:0E:11:55:D9:16:BE:03:FC:EC:89:D6:98:1D:46:05:18 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aHKUiQ4RVdkWvgP87InWmB1GBRg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.207.32.0/20 Signature Algorithm: sha256WithRSAEncryption 98:67:28:84:aa:a1:ad:87:3a:5b:8d:29:a4:1d:e1:e5:cc:e1: 59:be:33:0d:dd:d0:86:98:a0:b6:c0:25:71:3e:64:11:25:b0: b5:22:6f:c0:b7:29:8c:af:a9:d0:63:8b:ea:b8:48:4e:e3:43: 26:1d:22:2f:dc:13:95:0b:c0:57:d4:67:b0:ad:8e:e7:90:19: c5:c9:47:b6:c0:97:1c:29:4f:83:f3:ac:0a:0a:99:f0:5e:00: 34:3c:88:60:cd:34:3a:f1:71:8e:dd:79:e6:63:78:14:e6:0d: 02:35:bb:48:07:71:fc:e3:b2:e2:68:c8:9f:45:9e:62:23:39: 48:b1:36:14:a2:62:85:88:98:d1:3a:21:5d:65:f8:2a:b9:fa: 26:42:a7:e3:93:00:43:40:09:73:2a:7f:bc:71:62:f7:6a:91: 9a:2d:60:4a:2d:f1:c7:7a:91:0c:0f:2b:84:4f:b5:67:ae:a9: ba:b0:50:52:11:ea:a1:9f:7f:1b:20:68:fb:25:3d:ea:0f:06: 83:ab:c8:c9:ff:71:ac:a7:fb:e6:89:60:55:f7:b6:1a:17:90: 48:27:f6:2f:b8:dc:87:46:b5:15:98:d1:b3:da:ea:ec:39:7e: 67:65:25:34:0d:eb:0e:b2:e8:dd:f1:e6:c6:b5:0d:c2:4e:28: 35:4d:6b:d8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4NzI5NDg5MEUxMTU1 RDkxNkJFMDNGQ0VDODlENjk4MUQ0NjA1MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFdS7VhGckF3K0KsGwtNTKc3JsDQG0eKuTDVnec6Nt8gKpbDZC y+oPaoFQVoRhOLXwOBdJfj3sTdauyGm80KEE6YL6IrrOCmuZFgDAZ1Gx1J8w7kqp EkWMSjWwZR26a+lSNkx/8cjoUL1ysUGFW92C+T1PGUamU2XkdaEMs02XKkxueSax CqIfMgWqevanCzTfgWOSPmuKFZg5rWGyIMR+9jqZ0BC+Nqdser9OQ7Fimz1dHogF mYdi65/g5ADEC/itXY8yrGaxHwlpQ9czsrSbSrgkH3nOLa9XkB8HrM7MqvdBBvof jjuGU/JIYEOxviTDvQLcJBXs9gJC0YDJe+cbAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUaHKUiQ4RVdkWvgP87InWmB1GBRgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2FIS1VpUTRSVmRrV3ZnUDg3SW5XbUIx R0JSZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLzyAwDQYJ KoZIhvcNAQELBQADggEBAJhnKISqoa2HOluNKaQd4eXM4Vm+Mw3d0IaYoLbAJXE+ ZBElsLUib8C3KYyvqdBji+q4SE7jQyYdIi/cE5ULwFfUZ7CtjueQGcXJR7bAlxwp T4PzrAoKmfBeADQ8iGDNNDrxcY7deeZjeBTmDQI1u0gHcfzjsuJoyJ9FnmIjOUix NhSiYoWImNE6IV1l+Cq5+iZCp+OTAENACXMqf7xxYvdqkZotYEot8cd6kQwPK4RP tWeuqbqwUFIR6qGffxsgaPslPeoPBoOryMn/cayn++aJYFX3thoXkEgn9i+43IdG tRWY0bPa6uw5fmdlJTQN6w6y6N3x5sa1DcJOKDVNa9g= -----END CERTIFICATE-----Generated at Sun Aug 24 14:20:12 2025 by rpki-client