$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/mdFInqF9q1EeMaI5JGucF2yrbWY.roa File: mdFInqF9q1EeMaI5JGucF2yrbWY.roa (raw, json) Hash identifier: Lut4+jMJKjHyM9jDi6V+HZ20CTcOTH9rcH72Oso2R1g= Subject key identifier: 99:D1:48:9E:A1:7D:AB:51:1E:31:A2:39:24:6B:9C:17:6C:AB:6D:66 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E0B Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/mdFInqF9q1EeMaI5JGucF2yrbWY.roa Signing time: Fri 22 Aug 2025 08:54:22 +0000 ROA not before: Fri 22 Aug 2025 08:54:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 210.69.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3595 (0xe0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 22 08:54:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=99D1489EA17DAB511E31A239246B9C176CAB6D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:70:81:a8:50:1e:39:66:62:cf:fa:7c:23: 1d:b3:c0:86:b0:74:20:c2:10:a8:9d:9b:23:b6:09: b3:03:d2:b4:72:b0:81:d0:a9:19:a0:e2:d7:29:50: 3e:07:6d:25:ac:d4:82:b0:0f:98:a1:0a:d5:07:a6: 7a:6c:5e:f8:f6:b0:e3:08:97:c0:b6:f4:95:90:c8: 62:ae:c8:4b:ba:2a:f2:fd:d8:e6:2c:3d:7e:1b:dd: d9:50:2d:ea:c5:99:2d:fc:df:8a:fa:c9:88:2d:9b: e0:af:76:ab:61:dc:01:9b:a5:95:fe:24:4d:e8:c3: 64:a7:cd:62:c9:9d:1b:07:f6:22:ce:a7:99:43:dd: 85:a3:4e:af:59:43:48:41:72:17:e4:9c:4a:15:d5: cd:12:8a:9c:45:e1:13:85:d0:0d:1b:c0:16:b5:8b: 75:ee:41:e1:bf:8d:57:aa:9b:15:29:59:9c:da:a7: 7c:5b:da:e6:56:3b:45:ef:26:4b:66:ea:c2:4e:82: af:66:52:d1:c9:1c:55:f0:bf:f3:43:c8:a8:41:dc: 68:e1:65:dd:c3:fd:34:5a:6d:9a:f2:ff:ea:88:ff: a3:8c:ae:5a:61:69:24:51:69:cc:15:19:78:26:94: 7e:05:f7:16:32:c5:1c:14:73:34:c9:3d:fd:0f:e3: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:48:9E:A1:7D:AB:51:1E:31:A2:39:24:6B:9C:17:6C:AB:6D:66 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/mdFInqF9q1EeMaI5JGucF2yrbWY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.69.0.0/16 Signature Algorithm: sha256WithRSAEncryption c8:94:d4:33:95:9f:6c:24:2e:3e:76:2a:8b:0c:6d:56:fb:7d: b4:4f:a5:f1:c1:59:2a:59:78:eb:65:21:d5:dc:d9:d5:9b:8b: 09:3d:60:27:a9:f2:6e:75:7f:28:c3:5f:80:5c:ee:da:7c:63: 78:71:ef:a9:20:b0:15:ba:10:bf:5d:b4:ef:d9:ed:8e:3c:10: 5b:b9:41:fb:9e:08:67:db:d3:25:29:00:f2:05:3f:f5:70:31: 3c:a6:c3:29:88:56:bd:77:4c:ca:7c:a4:68:04:03:3b:e4:15: 89:7a:94:98:87:c8:59:f0:26:12:fd:6e:15:5d:1c:17:8e:d6: 62:64:46:02:cd:d3:13:4f:d9:66:4e:2f:46:aa:da:18:70:7b: ce:c0:87:75:28:51:13:1c:bf:70:3e:df:eb:be:f1:3a:57:a9: 98:c1:cf:c4:87:a8:d9:38:70:57:4e:a9:48:82:da:2b:c5:e6: 7d:da:74:32:b6:d7:43:a6:4f:4b:2f:d1:2c:f4:1a:8e:1d:fe: c7:52:a8:65:c6:d5:ee:10:c1:4a:87:43:4d:54:c9:02:94:d3: e2:92:64:f2:34:a6:cf:5e:63:40:bd:4d:25:5e:87:51:60:b9: af:4a:b2:fd:b2:1f:e2:51:f4:b9:24:49:39:d5:e0:94:37:04: b0:fa:56:f1 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTA4MjIw ODU0MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk5RDE0ODlFQTE3REFC NTExRTMxQTIzOTI0NkI5QzE3NkNBQjZENjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs53CBqFAeOWZiz/p8Ix2zwIawdCDCEKidmyO2CbMD0rRysIHQ qRmg4tcpUD4HbSWs1IKwD5ihCtUHpnpsXvj2sOMIl8C29JWQyGKuyEu6KvL92OYs PX4b3dlQLerFmS3834r6yYgtm+Cvdqth3AGbpZX+JE3ow2SnzWLJnRsH9iLOp5lD 3YWjTq9ZQ0hBchfknEoV1c0SipxF4ROF0A0bwBa1i3XuQeG/jVeqmxUpWZzap3xb 2uZWO0XvJktm6sJOgq9mUtHJHFXwv/NDyKhB3GjhZd3D/TRabZry/+qI/6OMrlph aSRRacwVGXgmlH4F9xYyxRwUczTJPf0P4wJxAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUmdFInqF9q1EeMaI5JGucF2yrbWYwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL21kRklucUY5cTFFZU1hSTVKR3VjRjJ5 cmJXWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSRTANBgkq hkiG9w0BAQsFAAOCAQEAyJTUM5WfbCQuPnYqiwxtVvt9tE+l8cFZKll462Uh1dzZ 1ZuLCT1gJ6nybnV/KMNfgFzu2nxjeHHvqSCwFboQv12079ntjjwQW7lB+54IZ9vT JSkA8gU/9XAxPKbDKYhWvXdMynykaAQDO+QViXqUmIfIWfAmEv1uFV0cF47WYmRG As3TE0/ZZk4vRqraGHB7zsCHdShRExy/cD7f677xOlepmMHPxIeo2ThwV06pSILa K8Xmfdp0MrbXQ6ZPSy/RLPQajh3+x1KoZcbV7hDBSodDTVTJApTT4pJk8jSmz15j QL1NJV6HUWC5r0qy/bIf4lH0uSRJOdXglDcEsPpW8Q== -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:55 2025 by rpki-client