$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/Fn_SwMpljpxFXXkEr0N3Tnom6l0.roa File: Fn_SwMpljpxFXXkEr0N3Tnom6l0.roa (raw, json) Hash identifier: J8NqRwUakfp20kauS9hO5Z6ALEpdTtWVeeb6uoJlqi4= Subject key identifier: 16:7F:D2:C0:CA:65:8E:9C:45:5D:79:04:AF:43:77:4E:7A:26:EA:5D Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Certificate serial: 02BD Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/Fn_SwMpljpxFXXkEr0N3Tnom6l0.roa Signing time: Fri 22 Aug 2025 08:59:10 +0000 ROA not before: Fri 22 Aug 2025 08:59:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 8075 IP address blocks: 103.131.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Validity Not Before: Aug 22 08:59:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=167FD2C0CA658E9C455D7904AF43774E7A26EA5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:c6:5b:77:72:e5:58:21:45:fe:7d:31:8f: d6:f5:a7:a8:95:8b:e8:b9:26:14:9d:7a:62:7f:55: 1f:33:b6:13:fb:ca:3d:8d:ea:e3:16:f4:0a:d7:28: 85:e9:89:d4:cf:d3:b3:a7:95:5f:5c:22:21:d5:8c: e8:42:20:d9:85:82:cb:99:a5:89:84:13:24:8b:e5: 5b:bb:24:cb:b7:4b:6e:be:b0:36:5d:ba:96:cc:33: 9a:8a:66:54:fa:24:cc:7b:4f:c7:28:26:2b:e8:34: fb:e2:83:3a:37:4a:b1:5d:da:9e:ab:50:ac:17:d6: dd:25:e2:46:54:c4:fa:4c:e3:e0:e0:eb:41:86:f4: 90:53:59:63:38:a2:6d:4f:5a:ee:65:10:f7:ab:12: 1d:22:34:cf:0f:d1:c1:18:ed:86:93:39:ee:c4:0a: e2:a9:59:c8:a4:1c:3b:57:b5:d7:1f:76:23:76:ea: 5a:27:8d:6e:6b:5c:b9:bf:e8:ca:93:4f:7a:1c:f7: 6a:a6:46:6d:75:1f:bd:27:fe:cd:e6:27:0b:ba:5c: ff:5e:4a:ad:e9:67:8d:33:e6:6f:30:07:d3:64:ff: 07:21:47:ff:51:1c:9e:1e:d5:27:92:58:c6:ea:eb: d8:9c:82:c2:6d:a7:40:de:0f:fc:21:17:ce:b7:a3: 18:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7F:D2:C0:CA:65:8E:9C:45:5D:79:04:AF:43:77:4E:7A:26:EA:5D X509v3 Authority Key Identifier: keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/Fn_SwMpljpxFXXkEr0N3Tnom6l0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.131.148.0/24 Signature Algorithm: sha256WithRSAEncryption 64:4c:1e:d8:d9:8a:3b:7d:b2:3f:d2:03:6d:04:75:fe:57:c8: cd:4a:06:55:ee:f4:b7:80:ca:de:17:0d:35:d7:71:06:1e:b9: 8a:08:e8:84:f0:80:ab:01:10:16:47:0b:ba:b1:38:3b:01:db: cd:57:43:f0:7a:ad:08:2d:9e:c1:ef:ed:3a:56:bf:11:be:f4: 6e:ce:97:0e:a2:fe:b6:d1:e5:5c:a6:67:26:ea:e9:4c:3e:d0: 3b:27:49:e0:b0:97:cc:87:10:8a:b8:a7:cb:a4:0b:66:af:b1: 9d:b7:21:b5:b9:3b:b4:a3:1c:31:65:9e:d7:cb:d6:c5:d5:41: 0f:ab:49:70:9e:af:c3:06:80:39:b6:5c:fc:76:d6:6f:1d:e6: 48:4e:3f:fa:53:fb:36:5f:ab:30:0e:48:7a:13:09:58:e9:ba: b4:33:f8:93:eb:75:ba:40:1c:30:6c:a3:d6:cf:07:76:b5:56: e3:7d:13:69:f4:84:dc:87:49:1f:cf:95:34:83:bc:cd:dc:c9: 34:88:e7:37:fc:4f:85:33:ab:06:56:b1:d6:c5:bf:bf:17:cd: 49:59:88:9a:73:8d:07:81:ef:6c:de:3a:00:ed:2b:4b:4c:b8: 6b:d0:1b:ba:f8:fd:ce:6f:51:0c:fa:20:c5:20:b7:48:12:7d: f7:80:d3:14 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB NDRCNUUwNzg4NjVCQUVGOTM1MTM2OUQ5NjFENkJBMjU1NkQ0NzAeFw0yNTA4MjIw ODU5MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE2N0ZEMkMwQ0E2NThF OUM0NTVENzkwNEFGNDM3NzRFN0EyNkVBNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC71sZbd3LlWCFF/n0xj9b1p6iVi+i5JhSdemJ/VR8zthP7yj2N 6uMW9ArXKIXpidTP07OnlV9cIiHVjOhCINmFgsuZpYmEEySL5Vu7JMu3S26+sDZd upbMM5qKZlT6JMx7T8coJivoNPvigzo3SrFd2p6rUKwX1t0l4kZUxPpM4+Dg60GG 9JBTWWM4om1PWu5lEPerEh0iNM8P0cEY7YaTOe7ECuKpWcikHDtXtdcfdiN26lon jW5rXLm/6MqTT3oc92qmRm11H70n/s3mJwu6XP9eSq3pZ40z5m8wB9Nk/wchR/9R HJ4e1SeSWMbq69icgsJtp0DeD/whF863oxgvAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUFn/SwMpljpxFXXkEr0N3Tnom6l0wHwYDVR0jBBgwFoAU9aRLXgeIZbrvk1E2 nZYda6JVbUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVH UkVFLzlhUkxYZ2VJWmJydmsxRTJuWllkYTZKVmJVYy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvOWFSTFhnZUlaYnJ2azFFMm5aWWRhNkpWYlVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVHUkVFL0ZuX1N3TXBsanB4 RlhYa0VyME4zVG5vbTZsMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABng5QwDQYJKoZIhvcNAQELBQADggEBAGRMHtjZijt9sj/SA20Edf5XyM1K BlXu9LeAyt4XDTXXcQYeuYoI6ITwgKsBEBZHC7qxODsB281XQ/B6rQgtnsHv7TpW vxG+9G7Olw6i/rbR5VymZybq6Uw+0DsnSeCwl8yHEIq4p8ukC2avsZ23IbW5O7Sj HDFlntfL1sXVQQ+rSXCer8MGgDm2XPx21m8d5khOP/pT+zZfqzAOSHoTCVjpurQz +JPrdbpAHDBso9bPB3a1VuN9E2n0hNyHSR/PlTSDvM3cyTSI5zf8T4UzqwZWsdbF v78XzUlZiJpzjQeB72zeOgDtK0tMuGvQG7r4/c5vUQz6IMUgt0gSffeA0xQ= -----END CERTIFICATE-----Generated at Sun Aug 24 12:30:34 2025 by rpki-client