$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/nPdchamjVjZ4FFLxN1yraqlavCk.roa File: nPdchamjVjZ4FFLxN1yraqlavCk.roa (raw, json) Hash identifier: /MKPuTDYmsX6qyByg6Q2kFq4W3MTqC3B3plCm2ZFjCY= Subject key identifier: 9C:F7:5C:85:A9:A3:56:36:78:14:52:F1:37:5C:AB:6A:A9:5A:BC:29 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13CE Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nPdchamjVjZ4FFLxN1yraqlavCk.roa Signing time: Fri 22 Aug 2025 08:59:45 +0000 ROA not before: Fri 22 Aug 2025 08:59:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.202.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5070 (0x13ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9CF75C85A9A35636781452F1375CAB6AA95ABC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:ca:b8:1f:b3:36:11:d3:0f:90:0d:bf:6e: c4:62:c0:ed:c0:9b:eb:b3:b9:d0:23:1b:52:25:a4: 3f:7c:23:56:0f:42:2f:23:c2:5f:af:0b:ec:f9:45: ee:9b:6b:9a:25:c5:de:d4:eb:70:80:a2:b9:94:ec: 6e:18:af:da:3d:54:77:bd:9a:0b:05:99:e7:b2:50: 87:7c:54:17:fc:46:e2:bc:6f:a1:c0:4f:38:08:c7: a0:ff:26:4c:25:62:58:12:b2:7d:34:ba:79:e2:6d: d2:25:80:08:84:be:66:ed:08:fc:ab:0c:72:a4:5e: 5a:55:75:98:1d:d9:33:b0:78:d8:f5:d3:8c:cb:fd: db:e7:ba:5c:36:2a:1c:2e:35:93:64:b7:fb:9a:36: 27:25:63:2e:3e:ec:c0:95:27:05:aa:57:79:a8:ec: 5b:5a:26:4c:f4:90:5b:34:85:93:11:fb:07:ec:2c: 9b:de:a2:37:1c:22:80:a0:13:99:cb:32:52:03:d4: 40:27:4f:a2:dd:7c:bc:bb:53:79:dc:67:6f:03:14: 80:a7:59:6e:54:dc:0c:74:d3:5f:6e:bf:74:8d:6a: 31:46:ea:75:e7:93:ea:65:f8:63:64:ee:82:24:78: c6:02:4a:5b:83:b2:18:e8:97:b5:c8:3d:1b:33:93: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F7:5C:85:A9:A3:56:36:78:14:52:F1:37:5C:AB:6A:A9:5A:BC:29 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nPdchamjVjZ4FFLxN1yraqlavCk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1c:e9:fd:7b:8f:86:04:f6:6b:06:3e:8e:61:00:07:e3:04:ad: 04:c0:0f:32:7e:e0:0e:c5:08:a5:e7:3d:1d:3f:1f:11:4f:69: 88:44:42:9e:0f:32:c2:60:cc:c2:8e:e3:ae:76:23:ff:5c:2a: 96:34:10:57:72:d9:8d:12:41:1e:b6:53:87:ee:76:15:1d:53: 27:8e:f2:7e:47:6e:b5:1b:1c:64:62:f1:a2:d8:57:91:4d:52: 70:0b:47:8a:a6:2a:7c:7b:30:f7:6d:ff:86:21:9b:ac:f8:fd: 21:48:57:98:0d:3d:21:0d:9f:f1:df:bf:fc:75:22:dd:67:5c: a7:30:a4:4d:b4:30:2e:dd:43:c3:e8:a9:80:47:91:23:fc:a8: 35:2b:ce:e1:68:b1:64:f0:ab:b3:78:69:44:c8:cc:7c:99:ac: 7c:3d:dc:51:f3:1a:7c:8f:70:12:4b:6f:80:46:4e:b6:c4:0c: 9a:bd:f8:3b:86:9c:7e:32:82:ad:2c:11:e3:2d:75:37:5f:dc: 73:4c:f4:f7:93:bb:2f:09:9e:ac:eb:1a:a1:e2:1b:1b:48:95: 53:1f:72:18:a5:05:0c:0c:29:90:0c:e7:2b:cf:9c:15:67:b5: fa:97:f2:0f:22:8a:d9:fc:6c:58:00:32:d3:55:2d:15:cd:93: c7:7a:2c:8d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlDRjc1Qzg1QTlBMzU2 MzY3ODE0NTJGMTM3NUNBQjZBQTk1QUJDMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeccq4H7M2EdMPkA2/bsRiwO3Am+uzudAjG1IlpD98I1YPQi8j wl+vC+z5Re6ba5olxd7U63CAormU7G4Yr9o9VHe9mgsFmeeyUId8VBf8RuK8b6HA TzgIx6D/JkwlYlgSsn00unnibdIlgAiEvmbtCPyrDHKkXlpVdZgd2TOweNj104zL /dvnulw2KhwuNZNkt/uaNiclYy4+7MCVJwWqV3mo7FtaJkz0kFs0hZMR+wfsLJve ojccIoCgE5nLMlID1EAnT6LdfLy7U3ncZ28DFICnWW5U3Ax0019uv3SNajFG6nXn k+pl+GNk7oIkeMYCSluDshjol7XIPRszkwvzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUnPdchamjVjZ4FFLxN1yraqlavCkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL25QZGNoYW1qVmpaNEZGTHhOMXlyYXFs YXZDay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfSyoAwDQYJ KoZIhvcNAQELBQADggEBABzp/XuPhgT2awY+jmEAB+MErQTADzJ+4A7FCKXnPR0/ HxFPaYhEQp4PMsJgzMKO4652I/9cKpY0EFdy2Y0SQR62U4fudhUdUyeO8n5HbrUb HGRi8aLYV5FNUnALR4qmKnx7MPdt/4Yhm6z4/SFIV5gNPSENn/Hfv/x1It1nXKcw pE20MC7dQ8PoqYBHkSP8qDUrzuFosWTwq7N4aUTIzHyZrHw93FHzGnyPcBJLb4BG TrbEDJq9+DuGnH4ygq0sEeMtdTdf3HNM9PeTuy8JnqzrGqHiGxtIlVMfchilBQwM KZAM5yvPnBVntfqX8g8iitn8bFgAMtNVLRXNk8d6LI0= -----END CERTIFICATE-----Generated at Sun Aug 24 14:19:27 2025 by rpki-client