$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/gVdLOEBuoLnw92Aqs66CC57k78s.roa File: gVdLOEBuoLnw92Aqs66CC57k78s.roa (raw, json) Hash identifier: k23VLt2Lp6SE3AK26oy20inFLEdwnmLWCQL/gJGeYYk= Subject key identifier: 81:57:4B:38:40:6E:A0:B9:F0:F7:60:2A:B3:AE:82:0B:9E:E4:EF:CB Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13E7 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gVdLOEBuoLnw92Aqs66CC57k78s.roa Signing time: Fri 22 Aug 2025 08:59:51 +0000 ROA not before: Fri 22 Aug 2025 08:59:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 222.251.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5095 (0x13e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=81574B38406EA0B9F0F7602AB3AE820B9EE4EFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:60:51:67:a1:ee:32:88:a8:f8:a8:37:26: f2:0e:e9:54:ec:3f:4f:dc:6e:ed:a2:7a:e8:90:af: 51:5e:a5:c2:13:8a:62:30:87:67:0f:07:70:2d:fd: 33:c0:20:b3:bb:52:f2:6d:f6:29:03:31:82:81:65: e5:08:04:f0:cf:6a:cd:aa:f5:66:30:71:4f:c9:72: f1:c2:5b:67:25:ae:1f:c7:8d:3c:e0:f4:bc:9e:fe: f8:b5:b5:68:65:4d:26:e3:5b:79:b0:e3:5c:31:eb: 7c:b8:bc:b6:1b:79:72:0b:ac:13:bd:4e:56:4d:29: 17:df:57:7e:2b:c3:04:bf:36:00:22:ee:d0:58:cc: 87:4a:fa:93:eb:2f:b9:73:57:e0:ae:92:64:4f:c3: 54:ef:55:8b:7a:6e:51:bc:76:74:30:4a:f2:38:a3: 17:b4:35:d7:64:dd:ab:07:dc:2b:a4:60:97:98:36: 67:90:0b:9b:0f:69:86:a9:4f:55:76:c8:2f:03:41: 2b:fd:1f:c2:e9:52:1d:e2:7d:56:fb:59:01:0f:86: ce:d1:df:13:77:2b:0c:4c:06:fb:72:b3:0c:57:4b: b9:aa:3f:be:0d:53:6c:2d:8b:32:b8:eb:06:71:4f: 26:79:24:2b:9a:86:40:b4:32:09:b6:dd:40:58:15: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:4B:38:40:6E:A0:B9:F0:F7:60:2A:B3:AE:82:0B:9E:E4:EF:CB X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gVdLOEBuoLnw92Aqs66CC57k78s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.251.0.0/17 Signature Algorithm: sha256WithRSAEncryption 22:8d:db:cb:a0:06:fe:ec:b6:da:a9:39:1e:0b:ee:b9:a4:09: da:89:49:5f:4c:41:d2:57:e0:ef:be:e8:15:90:64:ea:41:10: 7a:08:8f:06:89:a4:5b:d3:1a:23:0b:6b:65:5b:77:10:4e:94: 0e:1c:67:96:73:29:52:86:66:f7:c5:de:3f:de:c0:c9:75:7a: 64:7f:9d:9c:21:e5:71:ad:90:82:8f:04:b4:c9:c3:14:d4:31: 68:36:61:a5:fe:2d:78:78:1e:cc:4a:3a:aa:9d:fd:e0:29:86: 66:34:1c:3c:13:52:4e:a1:d1:82:5f:bb:28:05:d7:fc:06:f8: a5:7e:77:fa:1d:2e:1c:c4:73:5b:27:c3:e0:2f:66:5c:e8:3f: 3e:24:8d:50:4f:7d:a8:bf:e3:b8:4f:2c:40:05:a9:01:ce:05: 8a:e5:61:ca:a0:2f:97:22:2c:48:d7:87:c6:eb:0e:e1:37:14: 4e:d7:11:af:94:40:7d:05:1b:4b:65:61:7b:32:83:8f:31:92: eb:41:c2:6c:90:e9:a7:a0:da:c4:50:76:c9:73:19:ad:d2:76: dd:90:a2:c8:65:e6:8e:84:64:38:f8:cc:fa:2d:6b:e9:70:c7: a3:49:0d:62:60:1b:49:25:f3:56:a6:c4:6d:83:44:6b:ad:97: 35:c2:8b:d2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgxNTc0QjM4NDA2RUEw QjlGMEY3NjAyQUIzQUU4MjBCOUVFNEVGQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdqmBRZ6HuMoio+Kg3JvIO6VTsP0/cbu2ieuiQr1FepcITimIw h2cPB3At/TPAILO7UvJt9ikDMYKBZeUIBPDPas2q9WYwcU/JcvHCW2clrh/HjTzg 9Lye/vi1tWhlTSbjW3mw41wx63y4vLYbeXILrBO9TlZNKRffV34rwwS/NgAi7tBY zIdK+pPrL7lzV+CukmRPw1TvVYt6blG8dnQwSvI4oxe0Nddk3asH3CukYJeYNmeQ C5sPaYapT1V2yC8DQSv9H8LpUh3ifVb7WQEPhs7R3xN3KwxMBvtyswxXS7mqP74N U2wtizK46wZxTyZ5JCuahkC0Mgm23UBYFc4XAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUgVdLOEBuoLnw92Aqs66CC57k78swHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2dWZExPRUJ1b0xudzkyQXFzNjZDQzU3 azc4cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfe+wAwDQYJ KoZIhvcNAQELBQADggEBACKN28ugBv7sttqpOR4L7rmkCdqJSV9MQdJX4O++6BWQ ZOpBEHoIjwaJpFvTGiMLa2VbdxBOlA4cZ5ZzKVKGZvfF3j/ewMl1emR/nZwh5XGt kIKPBLTJwxTUMWg2YaX+LXh4HsxKOqqd/eAphmY0HDwTUk6h0YJfuygF1/wG+KV+ d/odLhzEc1snw+AvZlzoPz4kjVBPfai/47hPLEAFqQHOBYrlYcqgL5ciLEjXh8br DuE3FE7XEa+UQH0FG0tlYXsyg48xkutBwmyQ6aeg2sRQdslzGa3Sdt2Qoshl5o6E ZDj4zPota+lwx6NJDWJgG0kl81amxG2DRGutlzXCi9I= -----END CERTIFICATE-----Generated at Sun Aug 24 14:19:28 2025 by rpki-client