$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/lcx5zX9Tjla949Jzv6h76wJZFJo.roa File: lcx5zX9Tjla949Jzv6h76wJZFJo.roa (raw, json) Hash identifier: B4qMnCFXZbYbsFV5jScmYB84r/F2QpA/tbEeRynC/es= Subject key identifier: 95:CC:79:CD:7F:53:8E:56:BD:E3:D2:73:BF:A8:7B:EB:02:59:14:9A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1391 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lcx5zX9Tjla949Jzv6h76wJZFJo.roa Signing time: Fri 22 Aug 2025 08:59:26 +0000 ROA not before: Fri 22 Aug 2025 08:59:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 210.201.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5009 (0x1391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=95CC79CD7F538E56BDE3D273BFA87BEB0259149A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:a4:35:f6:75:0f:92:ad:4d:42:9a:1a:7a: a0:0f:d4:c7:71:a5:77:8b:7c:19:64:0c:cb:f8:11: 65:2d:38:31:f5:2f:dd:51:9d:cf:10:fa:68:41:0a: 57:96:2d:9c:88:f2:d8:e0:3b:8e:c0:89:c0:d1:af: f7:e6:68:e9:2f:c5:51:2d:e3:70:9a:17:b8:ce:29: 24:a6:b0:af:d8:6a:2c:de:ee:74:af:b7:6e:3d:ff: 81:0e:11:6d:be:87:87:8c:0a:ac:a0:05:df:ea:f7: 14:ac:99:25:e7:a8:a1:fd:ce:a9:9a:10:fa:9e:02: 9b:af:50:9a:6f:e0:61:f6:7b:2d:5d:1f:83:2c:c2: bd:31:2e:ea:1d:0e:24:95:20:8a:64:fc:f5:0d:0e: 14:98:63:19:87:83:c3:7a:42:68:24:30:e7:bd:d0: 86:90:f1:cf:48:3d:a3:d9:54:7b:0c:c8:64:57:a6: 65:e9:34:be:de:30:86:84:14:e0:40:c8:d9:18:2c: 40:bc:d7:71:b7:1a:d1:a7:7c:a5:6e:3c:ea:69:01: 5a:c2:79:12:c6:11:74:4e:fd:8b:ae:e1:05:70:60: 4f:b6:c2:4e:87:90:4a:2f:2f:1b:24:5e:36:74:f4: 58:78:e5:70:16:40:0f:db:aa:85:2d:a2:5d:85:58: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CC:79:CD:7F:53:8E:56:BD:E3:D2:73:BF:A8:7B:EB:02:59:14:9A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lcx5zX9Tjla949Jzv6h76wJZFJo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.128.0/18 Signature Algorithm: sha256WithRSAEncryption 21:6e:34:2b:b4:ac:da:da:ad:a4:fc:4e:16:ad:a5:01:fb:74: 79:1f:34:bb:87:2c:81:fd:3d:5d:9c:ca:53:54:32:4b:2f:ce: b3:ed:48:e6:a4:39:e1:97:e9:c4:4d:38:6b:e5:54:1a:75:62: 6f:8c:9d:72:c6:c6:b1:a4:1d:de:2f:d0:1a:d5:7a:1a:df:f5: 67:2d:4e:b4:c0:85:13:c2:5c:d1:e5:cd:b5:22:d4:13:9c:01: 8d:6a:db:52:95:27:4a:9e:47:3c:40:ac:93:35:53:27:8c:d5: 79:26:fa:0e:62:45:dd:00:b0:c6:76:e9:33:3b:37:57:d4:85: 0b:34:63:32:96:ab:8a:54:37:e6:a4:9f:dd:8c:40:77:b5:08: c4:e2:14:56:4d:47:aa:4d:c4:7f:e7:fb:33:e5:5b:ee:65:2e: e3:65:a0:3a:79:b5:d8:b0:fe:cb:5a:a4:4a:9d:ab:77:54:c1: b1:b8:06:4e:88:2e:56:06:9f:4d:58:7a:f5:b5:86:83:89:eb: 18:b4:b7:0e:a3:fd:9e:a1:d0:9f:24:00:fb:ff:d4:46:ae:a3: c5:18:ec:3c:ed:f7:fd:c0:99:b1:fb:70:94:0d:d0:8b:32:7b: 2b:4d:b6:ae:bf:3a:bb:6a:5d:a0:42:93:9b:01:b2:fe:75:20: 72:d6:15:74 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1Q0M3OUNEN0Y1MzhF NTZCREUzRDI3M0JGQTg3QkVCMDI1OTE0OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKAKQ19nUPkq1NQpoaeqAP1MdxpXeLfBlkDMv4EWUtODH1L91R nc8Q+mhBCleWLZyI8tjgO47AicDRr/fmaOkvxVEt43CaF7jOKSSmsK/Yaize7nSv t249/4EOEW2+h4eMCqygBd/q9xSsmSXnqKH9zqmaEPqeApuvUJpv4GH2ey1dH4Ms wr0xLuodDiSVIIpk/PUNDhSYYxmHg8N6QmgkMOe90IaQ8c9IPaPZVHsMyGRXpmXp NL7eMIaEFOBAyNkYLEC813G3GtGnfKVuPOppAVrCeRLGEXRO/Yuu4QVwYE+2wk6H kEovLxskXjZ09Fh45XAWQA/bqoUtol2FWF/PAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUlcx5zX9Tjla949Jzv6h76wJZFJowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2xjeDV6WDlUamxhOTQ5Snp2Nmg3NndK WkZKby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyYAwDQYJ KoZIhvcNAQELBQADggEBACFuNCu0rNraraT8ThatpQH7dHkfNLuHLIH9PV2cylNU MksvzrPtSOakOeGX6cRNOGvlVBp1Ym+MnXLGxrGkHd4v0BrVehrf9WctTrTAhRPC XNHlzbUi1BOcAY1q21KVJ0qeRzxArJM1UyeM1Xkm+g5iRd0AsMZ26TM7N1fUhQs0 YzKWq4pUN+akn92MQHe1CMTiFFZNR6pNxH/n+zPlW+5lLuNloDp5tdiw/stapEqd q3dUwbG4Bk6ILlYGn01YevW1hoOJ6xi0tw6j/Z6h0J8kAPv/1Eauo8UY7Dzt9/3A mbH7cJQN0IsyeytNtq6/OrtqXaBCk5sBsv51IHLWFXQ= -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:05 2025 by rpki-client