$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ccLPWBtIOtZ4xgGmCGU-_WVMJm0.roa File: ccLPWBtIOtZ4xgGmCGU-_WVMJm0.roa (raw, json) Hash identifier: yqbdbsWsqqq9JLFAdzLwnDQgmQLFhgRuK2t/zTM/L0E= Subject key identifier: 71:C2:CF:58:1B:48:3A:D6:78:C6:01:A6:08:65:3E:FD:65:4C:26:6D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1459 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ccLPWBtIOtZ4xgGmCGU-_WVMJm0.roa Signing time: Fri 22 Aug 2025 09:00:19 +0000 ROA not before: Fri 22 Aug 2025 09:00:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18412 IP address blocks: 39.12.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5209 (0x1459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=71C2CF581B483AD678C601A608653EFD654C266D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:81:b2:0e:c3:60:76:89:e4:75:a2:c6:a7: 3b:08:0a:f6:fb:8a:6e:a8:b0:c2:5d:df:6d:e2:79: e0:a7:13:c3:32:95:6f:0f:74:a1:48:9f:03:bb:ba: 02:81:76:db:0d:8e:43:f4:63:f2:81:ba:b1:2b:10: 13:46:03:0b:57:8d:ab:d0:99:5f:2b:13:7a:2d:2a: 78:20:cd:9f:57:55:c5:93:c3:aa:b3:a9:30:c5:01: a8:02:0d:9b:ce:95:f4:4d:da:d5:b0:62:fb:82:bb: 32:a3:f4:12:93:24:eb:dd:0f:96:9e:44:4c:fe:e5: 53:db:27:53:c0:ef:db:44:1f:96:15:72:6a:c6:14: 02:4e:1e:70:1a:0c:b8:e7:09:36:61:ab:a9:e3:3b: 23:0c:6c:7d:8b:b0:36:ca:d1:99:9b:1a:33:a6:5f: e3:9e:4d:75:ef:86:91:0d:3e:42:b4:b2:81:ef:d9: 57:a2:d4:c9:cb:aa:52:15:db:bd:72:b0:d1:02:9b: 52:4f:8d:9f:92:31:00:9a:69:81:7a:07:17:31:38: b3:9d:0c:04:67:72:bb:9b:ea:9b:57:ba:e8:52:e0: e2:a7:9f:75:da:4a:cc:26:74:99:e1:0c:b7:95:02: 56:4e:95:a4:46:ee:e6:7f:c0:fc:29:15:db:35:f0: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:CF:58:1B:48:3A:D6:78:C6:01:A6:08:65:3E:FD:65:4C:26:6D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ccLPWBtIOtZ4xgGmCGU-_WVMJm0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.12.0.0/18 Signature Algorithm: sha256WithRSAEncryption 86:42:f7:d0:01:80:00:66:fe:91:51:4f:8b:49:e3:4e:4c:f6: ba:8d:7c:de:14:cc:dc:44:97:d7:b9:46:90:0d:2e:ac:03:43: a3:1c:68:f5:11:d1:40:83:67:b4:55:a3:86:85:e0:1b:97:87: df:d9:6b:08:0e:e0:62:d9:8c:c5:68:22:ba:c8:5e:68:7f:dc: bf:5e:c7:43:68:1c:25:d2:e0:7d:0a:eb:a1:a9:78:dd:db:b6: 5c:e1:27:1d:56:52:d5:a1:7b:a1:35:74:9e:7a:a7:53:60:bf: 64:35:ce:a1:a8:17:7f:1d:a7:33:f1:7f:9e:2a:4f:3e:f6:93: b6:ce:e3:b7:50:30:e4:3f:78:f1:cc:7f:71:c2:be:d9:33:0b: fe:16:4f:3f:a1:5f:c0:c0:2b:9e:01:86:d9:1b:e5:fb:24:5a: 5d:e7:58:8c:0b:fd:0a:01:9d:3f:ec:28:16:88:75:2f:71:de: ab:c2:2e:d9:53:cd:23:fc:6a:51:61:c2:8f:a4:25:19:5d:4e: bb:e9:88:bf:bf:76:f0:96:cf:9d:26:8e:bf:ff:fe:81:89:e3: 1c:52:60:35:bd:bb:f4:2f:72:df:41:68:2f:ac:f9:68:52:8d: aa:17:85:50:bb:0e:05:fe:b1:52:98:1a:c1:af:ca:fe:84:b2: 77:c9:4d:7f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcxQzJDRjU4MUI0ODNB RDY3OEM2MDFBNjA4NjUzRUZENjU0QzI2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmmYGyDsNgdonkdaLGpzsICvb7im6osMJd323ieeCnE8MylW8P dKFInwO7ugKBdtsNjkP0Y/KBurErEBNGAwtXjavQmV8rE3otKnggzZ9XVcWTw6qz qTDFAagCDZvOlfRN2tWwYvuCuzKj9BKTJOvdD5aeREz+5VPbJ1PA79tEH5YVcmrG FAJOHnAaDLjnCTZhq6njOyMMbH2LsDbK0ZmbGjOmX+OeTXXvhpENPkK0soHv2Vei 1MnLqlIV271ysNECm1JPjZ+SMQCaaYF6BxcxOLOdDARncrub6ptXuuhS4OKnn3Xa SswmdJnhDLeVAlZOlaRG7uZ/wPwpFds18HzhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUccLPWBtIOtZ4xgGmCGU+/WVMJm0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2NjTFBXQnRJT3RaNHhnR21DR1UtX1dW TUptMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYnDAAwDQYJ KoZIhvcNAQELBQADggEBAIZC99ABgABm/pFRT4tJ405M9rqNfN4UzNxEl9e5RpAN LqwDQ6McaPUR0UCDZ7RVo4aF4BuXh9/ZawgO4GLZjMVoIrrIXmh/3L9ex0NoHCXS 4H0K66GpeN3btlzhJx1WUtWhe6E1dJ56p1Ngv2Q1zqGoF38dpzPxf54qTz72k7bO 47dQMOQ/ePHMf3HCvtkzC/4WTz+hX8DAK54Bhtkb5fskWl3nWIwL/QoBnT/sKBaI dS9x3qvCLtlTzSP8alFhwo+kJRldTrvpiL+/dvCWz50mjr///oGJ4xxSYDW9u/Qv ct9BaC+s+WhSjaoXhVC7DgX+sVKYGsGvyv6EsnfJTX8= -----END CERTIFICATE-----Generated at Sun Aug 24 14:14:37 2025 by rpki-client