$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/sMRKKQCmJERLSruPZsTmynjZqSo.roa File: sMRKKQCmJERLSruPZsTmynjZqSo.roa (raw, json) Hash identifier: VEtzSnk7JF+pIEz2NSKwX7nCO7NjHzqjfzH/1Ugnx7w= Subject key identifier: B0:C4:4A:29:00:A6:24:44:4B:4A:BB:8F:66:C4:E6:CA:78:D9:A9:2A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13A3 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/sMRKKQCmJERLSruPZsTmynjZqSo.roa Signing time: Fri 22 Aug 2025 08:59:31 +0000 ROA not before: Fri 22 Aug 2025 08:59:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9415 IP address blocks: 2404:0:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5027 (0x13a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B0C44A2900A624444B4ABB8F66C4E6CA78D9A92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dd:18:d4:7b:d9:1b:e6:8a:f0:f1:71:ac:9f: 39:7d:2c:25:d2:ae:0e:87:fa:94:2e:1b:a4:51:0f: f7:55:65:ec:e5:8c:d1:be:69:f3:f6:98:af:eb:6e: e2:2a:88:52:20:51:5b:24:28:50:f7:16:d9:af:e6: cd:d5:4d:0f:fa:0e:7a:06:e2:33:c6:1e:5c:45:4d: 5c:37:79:af:12:3f:57:95:c3:fb:f2:6e:e3:59:70: 97:9e:2f:bf:6f:93:55:08:65:1b:20:ca:32:78:6f: 58:53:0a:3f:a8:1c:20:92:08:be:4b:e2:cc:31:23: 44:09:68:ff:e1:97:16:45:e1:a2:f2:fa:ec:41:fa: c0:ab:00:07:08:6b:d0:e0:95:1c:ea:c6:00:88:c7: 92:06:02:c2:20:54:22:af:f5:32:51:1c:cb:28:51: 88:9b:fe:a2:08:4a:cb:a1:58:25:33:cf:9c:80:24: 53:06:b6:30:13:a9:85:59:2e:ca:ec:f8:03:c3:4e: c1:37:72:12:54:0e:2c:61:f1:ae:54:b5:c6:85:a0: 4d:dd:a2:76:71:34:ac:44:71:dd:7d:bb:c6:6f:ad: 86:39:4f:12:07:84:d0:32:38:69:96:5f:56:a8:9b: 80:b6:9d:a4:d6:f1:6c:ad:64:c8:50:e6:57:51:78: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:4A:29:00:A6:24:44:4B:4A:BB:8F:66:C4:E6:CA:78:D9:A9:2A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/sMRKKQCmJERLSruPZsTmynjZqSo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:3000::/36 Signature Algorithm: sha256WithRSAEncryption c3:00:6c:51:18:88:01:25:76:fa:e8:fc:ed:62:20:54:cb:29: c4:1d:f6:54:e5:b4:96:65:7a:15:89:f0:cd:cf:d7:89:cd:0d: 3d:c7:6e:59:36:92:f7:41:c0:75:60:2a:c9:9e:9e:b3:7c:2f: 1a:2f:ee:9b:cd:60:bd:6c:a0:07:fc:88:aa:70:99:58:a0:e7: 8d:95:9d:64:1d:f9:91:df:4a:a0:9d:59:6f:88:7d:dd:de:91: 03:6d:8a:08:3b:e3:fe:cd:78:53:d8:55:69:c4:a2:74:82:d4: 93:33:23:cb:08:c4:b6:db:3c:70:7b:19:dc:f3:35:a0:8a:82: b3:e9:83:14:84:4f:b6:17:e0:bf:a8:87:ee:2d:ff:86:e1:67: a9:5b:c6:11:86:f5:d0:8b:f2:a4:12:ff:17:74:76:c6:d0:16: 0e:1e:f8:4f:e4:d5:d6:dd:bc:28:01:a7:07:19:55:ef:db:63: 40:4d:9c:c7:53:72:7d:71:f4:af:c3:ab:f4:1c:5a:2a:a9:52: e1:1b:9d:b3:6a:62:87:0a:04:37:a2:d2:a4:a3:40:89:cd:5c: a6:7a:b4:b9:0e:d4:c6:dd:b4:37:68:e9:72:7a:be:3d:57:16: c1:db:9a:67:00:41:cc:45:09:ea:68:5a:54:e0:19:98:bf:13: f3:c3:ec:f5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwQzQ0QTI5MDBBNjI0 NDQ0QjRBQkI4RjY2QzRFNkNBNzhEOUE5MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH3RjUe9kb5orw8XGsnzl9LCXSrg6H+pQuG6RRD/dVZezljNG+ afP2mK/rbuIqiFIgUVskKFD3Ftmv5s3VTQ/6DnoG4jPGHlxFTVw3ea8SP1eVw/vy buNZcJeeL79vk1UIZRsgyjJ4b1hTCj+oHCCSCL5L4swxI0QJaP/hlxZF4aLy+uxB +sCrAAcIa9DglRzqxgCIx5IGAsIgVCKv9TJRHMsoUYib/qIISsuhWCUzz5yAJFMG tjATqYVZLsrs+APDTsE3chJUDixh8a5UtcaFoE3donZxNKxEcd19u8ZvrYY5TxIH hNAyOGmWX1aom4C2naTW8WytZMhQ5ldReCY9AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUsMRKKQCmJERLSruPZsTmynjZqSowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3NNUktLUUNtSkVSTFNydVBac1RteW5q WnFTby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAMDAN BgkqhkiG9w0BAQsFAAOCAQEAwwBsURiIASV2+uj87WIgVMspxB32VOW0lmV6FYnw zc/Xic0NPcduWTaS90HAdWAqyZ6es3wvGi/um81gvWygB/yIqnCZWKDnjZWdZB35 kd9KoJ1Zb4h93d6RA22KCDvj/s14U9hVacSidILUkzMjywjEtts8cHsZ3PM1oIqC s+mDFIRPthfgv6iH7i3/huFnqVvGEYb10IvypBL/F3R2xtAWDh74T+TV1t28KAGn BxlV79tjQE2cx1NyfXH0r8Or9BxaKqlS4Ruds2pihwoEN6LSpKNAic1cpnq0uQ7U xt20N2jpcnq+PVcWwduaZwBBzEUJ6mhaVOAZmL8T88Ps9Q== -----END CERTIFICATE-----Generated at Sun Aug 24 14:20:12 2025 by rpki-client