$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pfK6CB8m4ok0by4KrkSAFqTGHj0.roa File: pfK6CB8m4ok0by4KrkSAFqTGHj0.roa (raw, json) Hash identifier: t4WzBv0l3KkAmyz1An7KPq3ytrH4gjmnD4BhobQPkhM= Subject key identifier: A5:F2:BA:08:1F:26:E2:89:34:6F:2E:0A:AE:44:80:16:A4:C6:1E:3D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1403 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pfK6CB8m4ok0by4KrkSAFqTGHj0.roa Signing time: Fri 22 Aug 2025 08:59:59 +0000 ROA not before: Fri 22 Aug 2025 08:59:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 222.250.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5123 (0x1403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A5F2BA081F26E289346F2E0AAE448016A4C61E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:05:c4:3b:07:ae:26:18:f1:bc:80:f0:84:2f: aa:4a:e0:d3:d8:b8:93:59:89:17:53:b3:0d:d2:b1: 4c:93:13:2e:15:10:8f:db:a4:cb:ed:c0:cb:7f:ea: e4:6f:e1:70:9c:4f:dc:ee:b8:29:e1:ae:0f:8b:ca: 88:66:14:fb:48:26:d4:42:1f:5a:77:79:15:bd:06: e0:24:42:9d:6d:57:53:50:15:ab:a8:df:32:4d:0b: f1:1c:f6:99:b7:d3:b5:83:6c:26:0d:3b:53:80:d5: fd:a0:65:fb:61:35:33:51:23:a8:bf:51:20:03:c9: 27:f0:86:c9:a5:97:85:5c:17:a3:10:66:91:6f:85: 39:78:d7:00:87:a7:ef:0f:a6:ab:a0:81:39:01:d9: 37:52:8e:e2:81:80:e1:65:2d:18:67:9c:bd:c1:8e: f0:58:01:25:70:92:e0:a1:76:00:6b:15:1d:86:24: 72:6f:1a:69:c0:02:90:a0:bf:33:fe:bb:70:75:df: 21:7e:5d:7d:78:6d:de:75:00:90:78:53:c7:69:f6: 8c:ff:0a:37:11:af:09:9f:13:8e:82:d6:26:40:25: e6:3e:6e:ae:9f:b9:b8:9f:05:9b:76:03:42:06:f9: 08:fa:1f:90:b5:5f:4f:7c:18:03:16:77:b6:6d:63: e5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F2:BA:08:1F:26:E2:89:34:6F:2E:0A:AE:44:80:16:A4:C6:1E:3D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pfK6CB8m4ok0by4KrkSAFqTGHj0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.250.192.0/18 Signature Algorithm: sha256WithRSAEncryption 76:0e:5d:3f:48:88:51:f3:7b:21:0e:3e:14:7e:94:41:b7:de: d6:3d:97:03:fc:e2:82:08:c2:e8:d1:21:82:5a:84:e6:d1:2f: 08:f2:1b:ff:78:66:25:e7:6e:fd:7e:65:77:03:d8:2e:7c:0d: 80:7f:6d:59:24:b6:af:5b:1e:29:14:eb:2c:fa:d8:09:5b:4e: b9:d7:46:0a:75:c2:24:72:31:72:80:63:e8:30:98:a8:43:fc: 85:dc:6c:58:81:10:82:73:50:36:fc:d6:7b:bc:91:f5:18:d7: 85:dc:cd:cc:ca:51:d4:7e:9d:12:76:2b:c9:57:ab:d3:a1:d0: ff:de:82:cf:53:c5:cf:7c:b1:2a:dc:d5:d5:5f:e0:1c:ff:0e: 19:ec:c0:67:58:05:cc:db:9a:e6:55:eb:e9:ec:be:c5:31:3b: 5c:27:9b:c5:53:f0:5a:24:fd:a5:5f:da:ff:c7:eb:70:04:9a: 0d:4d:b4:99:88:e4:ca:d4:4d:8c:74:c0:54:da:a8:80:bd:5a: d9:34:0b:fa:78:de:b6:13:61:01:b8:6a:b4:be:e0:26:f2:c4: 91:e1:a4:a2:f9:c3:91:31:c7:f8:13:09:22:ec:b2:48:33:bf: d3:91:57:a8:bf:ae:ff:03:43:db:ba:08:5c:13:11:00:f4:e6: a3:39:13:e5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1RjJCQTA4MUYyNkUy ODkzNDZGMkUwQUFFNDQ4MDE2QTRDNjFFM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdBcQ7B64mGPG8gPCEL6pK4NPYuJNZiRdTsw3SsUyTEy4VEI/b pMvtwMt/6uRv4XCcT9zuuCnhrg+LyohmFPtIJtRCH1p3eRW9BuAkQp1tV1NQFauo 3zJNC/Ec9pm307WDbCYNO1OA1f2gZfthNTNRI6i/USADySfwhsmll4VcF6MQZpFv hTl41wCHp+8PpquggTkB2TdSjuKBgOFlLRhnnL3BjvBYASVwkuChdgBrFR2GJHJv GmnAApCgvzP+u3B13yF+XX14bd51AJB4U8dp9oz/CjcRrwmfE46C1iZAJeY+bq6f ubifBZt2A0IG+Qj6H5C1X098GAMWd7ZtY+VXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUpfK6CB8m4ok0by4KrkSAFqTGHj0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3BmSzZDQjhtNG9rMGJ5NEtya1NBRnFU R0hqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbe+sAwDQYJ KoZIhvcNAQELBQADggEBAHYOXT9IiFHzeyEOPhR+lEG33tY9lwP84oIIwujRIYJa hObRLwjyG/94ZiXnbv1+ZXcD2C58DYB/bVkktq9bHikU6yz62AlbTrnXRgp1wiRy MXKAY+gwmKhD/IXcbFiBEIJzUDb81nu8kfUY14XczczKUdR+nRJ2K8lXq9Oh0P/e gs9Txc98sSrc1dVf4Bz/DhnswGdYBczbmuZV6+nsvsUxO1wnm8VT8Fok/aVf2v/H 63AEmg1NtJmI5MrUTYx0wFTaqIC9Wtk0C/p43rYTYQG4arS+4CbyxJHhpKL5w5Ex x/gTCSLsskgzv9ORV6i/rv8DQ9u6CFwTEQD05qM5E+U= -----END CERTIFICATE-----Generated at Sun Aug 24 14:16:33 2025 by rpki-client