$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/QCmxeAJCKTiFzc3weoMdm0IfGic.roa File: QCmxeAJCKTiFzc3weoMdm0IfGic.roa (raw, json) Hash identifier: t3VVlLHgSzTPsb51/njCxvZ2MEWRoTJQCTttwIBBx/k= Subject key identifier: 40:29:B1:78:02:42:29:38:85:CD:CD:F0:7A:83:1D:9B:42:1F:1A:27 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E0F Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/QCmxeAJCKTiFzc3weoMdm0IfGic.roa Signing time: Fri 22 Aug 2025 08:54:22 +0000 ROA not before: Fri 22 Aug 2025 08:54:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 117.56.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3599 (0xe0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 22 08:54:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4029B1780242293885CDCDF07A831D9B421F1A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:bd:bb:6d:64:3b:f7:35:e4:de:14:d8:d1: bc:4e:42:58:8b:2b:81:70:cd:f0:42:b5:6f:9f:dc: ee:da:65:91:53:bf:28:30:06:9a:78:18:a1:a5:d4: d5:2d:11:ed:6e:19:da:1e:24:99:67:d4:c3:b5:26: a2:33:ee:c3:60:ff:55:65:0d:f1:9b:9c:b4:6b:7a: 65:ec:66:da:f5:eb:9a:e3:09:be:97:21:97:76:bd: 47:4c:6f:36:19:34:99:1b:37:3d:45:5a:71:5b:07: 1c:e3:13:4c:83:97:5b:11:92:f2:1b:17:a9:6e:10: 3f:5d:35:aa:d3:84:96:ea:ee:61:5e:a6:70:c7:64: d4:55:d3:c3:48:4a:e8:90:b1:d6:54:d7:72:03:f0: 6d:51:98:bd:9e:97:e9:2b:78:c0:33:54:6a:82:36: 7f:ba:3e:4b:b7:bf:36:c0:e6:3f:ec:db:ac:a3:e3: 95:3c:cf:8f:7c:b2:fe:94:6c:5c:19:6d:37:58:80: bf:0d:eb:3d:0c:42:2e:fe:1a:03:09:cf:58:9c:c2: 32:cb:e8:db:bb:af:85:31:ce:25:8b:16:8e:85:c3: 26:79:11:61:49:0a:a4:37:cf:16:28:06:c3:d6:e1: 04:68:35:26:76:cc:83:c0:eb:7c:37:08:bf:ce:05: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:B1:78:02:42:29:38:85:CD:CD:F0:7A:83:1D:9B:42:1F:1A:27 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/QCmxeAJCKTiFzc3weoMdm0IfGic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:ea:68:35:94:10:ea:11:de:97:61:27:ee:72:a5:c8:c1:c7: f8:0c:93:b2:4d:04:5a:79:31:0e:b9:ee:b3:1c:ec:6f:77:94: f9:c0:38:09:54:29:91:85:34:0d:4f:86:a4:c4:87:ec:a1:44: 7c:b7:cd:9d:3f:99:ee:22:dc:e9:ec:3e:2f:ac:ba:3a:4a:15: b6:04:a5:43:2b:89:5e:07:78:b4:d4:04:74:08:f2:29:16:26: 4a:32:f7:76:a7:5e:92:0f:27:68:e2:4e:a6:4e:70:15:1a:14: 6f:23:19:9c:d9:7e:9b:7f:10:8b:41:41:38:15:5f:52:ff:83: 56:62:3f:5d:9a:9e:50:65:10:b9:22:57:bf:a9:81:f1:36:0c: 0c:52:a5:70:bb:60:3f:f6:05:69:4f:c0:5c:1b:9e:e8:40:9b: 26:b5:70:1f:32:ab:66:7e:a8:14:95:33:a6:9e:74:e5:20:cd: 23:67:e7:13:c7:32:b3:83:94:d4:08:2c:23:8e:3e:95:1f:43: 90:12:02:98:06:10:e3:3d:27:e0:58:b7:d1:be:2a:a5:54:dd: a4:74:4c:b9:20:8e:64:d7:39:74:9e:1b:39:92:62:da:b6:57: 15:6f:d5:53:84:3c:eb:07:32:f4:e8:a0:72:84:f1:b9:86:d7: 2e:4e:2e:1f -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTA4MjIw ODU0MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwMjlCMTc4MDI0MjI5 Mzg4NUNEQ0RGMDdBODMxRDlCNDIxRjFBMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8kL27bWQ79zXk3hTY0bxOQliLK4FwzfBCtW+f3O7aZZFTvygw Bpp4GKGl1NUtEe1uGdoeJJln1MO1JqIz7sNg/1VlDfGbnLRremXsZtr165rjCb6X IZd2vUdMbzYZNJkbNz1FWnFbBxzjE0yDl1sRkvIbF6luED9dNarThJbq7mFepnDH ZNRV08NISuiQsdZU13ID8G1RmL2el+kreMAzVGqCNn+6Pku3vzbA5j/s26yj45U8 z498sv6UbFwZbTdYgL8N6z0MQi7+GgMJz1icwjLL6Nu7r4UxziWLFo6FwyZ5EWFJ CqQ3zxYoBsPW4QRoNSZ2zIPA63w3CL/OBShtAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUQCmxeAJCKTiFzc3weoMdm0IfGicwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL1FDbXhlQUpDS1RpRnpjM3dlb01kbTBJ ZkdpYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB1ODANBgkq hkiG9w0BAQsFAAOCAQEAeepoNZQQ6hHel2En7nKlyMHH+AyTsk0EWnkxDrnusxzs b3eU+cA4CVQpkYU0DU+GpMSH7KFEfLfNnT+Z7iLc6ew+L6y6OkoVtgSlQyuJXgd4 tNQEdAjyKRYmSjL3dqdekg8naOJOpk5wFRoUbyMZnNl+m38Qi0FBOBVfUv+DVmI/ XZqeUGUQuSJXv6mB8TYMDFKlcLtgP/YFaU/AXBue6ECbJrVwHzKrZn6oFJUzpp50 5SDNI2fnE8cys4OU1AgsI44+lR9DkBICmAYQ4z0n4Fi30b4qpVTdpHRMuSCOZNc5 dJ4bOZJi2rZXFW/VU4Q86wcy9OigcoTxuYbXLk4uHw== -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:37 2025 by rpki-client