$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/r4-sHg4rk6Z3mqA9Xo78wKcNWmU.roa File: r4-sHg4rk6Z3mqA9Xo78wKcNWmU.roa (raw, json) Hash identifier: OQWiS1Ft8XEJn+Qw3J/7FSzU4WKX+JHtvv5BUpi/prE= Subject key identifier: AF:8F:AC:1E:0E:2B:93:A6:77:9A:A0:3D:5E:8E:FC:C0:A7:0D:5A:65 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13C2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/r4-sHg4rk6Z3mqA9Xo78wKcNWmU.roa Signing time: Fri 22 Aug 2025 08:59:41 +0000 ROA not before: Fri 22 Aug 2025 08:59:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 210.58.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5058 (0x13c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AF8FAC1E0E2B93A6779AA03D5E8EFCC0A70D5A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:69:d7:01:17:0b:04:f6:99:71:bd:0e:99: e6:c6:b2:fe:28:49:ad:b1:93:46:04:fb:3c:6b:d4: 9c:a8:96:60:72:ea:fd:5b:9a:35:72:65:4c:65:a4: e9:06:00:7f:5a:74:a8:44:be:70:e6:da:fe:65:cc: 99:cc:93:91:d4:b3:1a:d3:c5:d7:0c:4c:a4:6d:bf: 47:e8:02:c6:9b:c1:aa:b4:70:2c:39:6e:27:f7:8e: 8a:49:97:68:a1:03:38:57:16:30:48:76:4f:02:4c: 98:1f:04:4c:c2:fc:8d:a4:71:55:62:aa:6a:87:89: 95:a6:6e:d8:93:3c:e4:7d:28:88:4a:e3:b2:43:2d: ac:ca:f5:72:9a:5e:52:f6:2c:7e:c9:0f:00:d9:e4: a9:77:3b:dd:22:53:f5:66:24:5a:79:a4:a1:ec:8b: e3:73:d3:6d:48:85:da:06:57:58:33:c0:e6:35:31: ec:06:f3:b9:01:14:83:5c:d8:34:42:90:4b:8b:0b: 74:e1:16:55:ca:69:d7:75:55:c8:5e:a0:a0:a5:41: c7:54:39:60:de:0c:bd:10:34:37:6a:9a:3f:f6:f9: df:39:a5:6e:02:ba:67:3e:df:fe:9f:fb:96:82:7b: b0:b4:62:44:8a:6e:4f:f6:1c:2f:d9:2b:26:f3:e9: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8F:AC:1E:0E:2B:93:A6:77:9A:A0:3D:5E:8E:FC:C0:A7:0D:5A:65 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/r4-sHg4rk6Z3mqA9Xo78wKcNWmU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.128.0/19 Signature Algorithm: sha256WithRSAEncryption 0a:0e:27:8b:23:6c:8c:da:c3:41:50:d5:af:21:fc:79:3e:ee: e4:c3:a0:67:c9:7e:b9:a0:7e:e2:73:cc:12:ed:d8:16:6e:c1: 60:a2:2c:2b:84:49:04:4f:5f:ec:6c:3f:e1:a4:5a:e2:ad:e1: f7:82:d8:ac:eb:96:41:17:da:5e:dc:7e:a5:ed:f0:c5:83:1e: 19:2f:1f:35:f6:fa:c5:54:ee:dd:96:db:2c:f2:8b:06:dd:16: 81:0f:53:e7:d0:d5:e0:2c:3c:94:be:4c:bc:68:87:08:ec:b6: 2f:00:d4:d4:dd:ed:57:6c:e9:9c:c8:e1:ea:b0:10:94:4c:94: b8:bb:47:3f:0b:1a:74:c5:d3:c7:ce:e8:7b:4a:82:bf:ed:8b: 80:90:97:9f:ee:f9:f0:c2:53:5b:79:9e:5f:c7:33:6b:fd:61: 9a:ab:dd:80:98:ea:36:5b:ab:26:b7:03:9d:47:4a:a7:37:29: e3:7e:29:f5:31:fe:0f:51:8b:2d:1f:0f:26:20:ba:89:97:26: b7:1b:63:03:9f:04:5f:06:14:27:92:49:52:76:da:07:88:22: fe:fe:69:44:47:85:c7:63:87:6e:56:89:cd:f2:81:9a:2e:cd: 39:cc:e0:9e:e6:eb:b5:27:fb:80:38:2d:0f:29:b8:40:de:91: b7:60:1d:eb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGOEZBQzFFMEUyQjkz QTY3NzlBQTAzRDVFOEVGQ0MwQTcwRDVBNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBt2nXARcLBPaZcb0OmebGsv4oSa2xk0YE+zxr1JyolmBy6v1b mjVyZUxlpOkGAH9adKhEvnDm2v5lzJnMk5HUsxrTxdcMTKRtv0foAsabwaq0cCw5 bif3jopJl2ihAzhXFjBIdk8CTJgfBEzC/I2kcVViqmqHiZWmbtiTPOR9KIhK47JD LazK9XKaXlL2LH7JDwDZ5Kl3O90iU/VmJFp5pKHsi+Nz021IhdoGV1gzwOY1MewG 87kBFINc2DRCkEuLC3ThFlXKadd1VcheoKClQcdUOWDeDL0QNDdqmj/2+d85pW4C umc+3/6f+5aCe7C0YkSKbk/2HC/ZKybz6YCNAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUr4+sHg4rk6Z3mqA9Xo78wKcNWmUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3I0LXNIZzRyazZaM21xQTlYbzc4d0tj TldtVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSOoAwDQYJ KoZIhvcNAQELBQADggEBAAoOJ4sjbIzaw0FQ1a8h/Hk+7uTDoGfJfrmgfuJzzBLt 2BZuwWCiLCuESQRPX+xsP+GkWuKt4feC2KzrlkEX2l7cfqXt8MWDHhkvHzX2+sVU 7t2W2yzyiwbdFoEPU+fQ1eAsPJS+TLxohwjsti8A1NTd7Vds6ZzI4eqwEJRMlLi7 Rz8LGnTF08fO6HtKgr/ti4CQl5/u+fDCU1t5nl/HM2v9YZqr3YCY6jZbqya3A51H Sqc3KeN+KfUx/g9Riy0fDyYguomXJrcbYwOfBF8GFCeSSVJ22geIIv7+aURHhcdj h25Wic3ygZouzTnM4J7m67Un+4A4LQ8puEDekbdgHes= -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:40 2025 by rpki-client