$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPEN/8SDdfWWdA2UKWED7VTFb-Jl53qk.roa File: 8SDdfWWdA2UKWED7VTFb-Jl53qk.roa (raw, json) Hash identifier: 3TropPm4x94A2igPbqGZDYqbWA5IKl6TPjf8pTJ1xac= Subject key identifier: F1:20:DD:7D:65:9D:03:65:0A:58:40:FB:55:31:5B:F8:99:79:DE:A9 Certificate issuer: /CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD Certificate serial: 05 Authority key identifier: 96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/8SDdfWWdA2UKWED7VTFb-Jl53qk.roa Signing time: Tue 16 Sep 2025 06:36:39 +0000 ROA not before: Tue 16 Sep 2025 06:36:39 +0000 ROA not after: Wed 09 Sep 2026 15:30:25 +0000 asID: 134823 IP address blocks: 202.66.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD Validity Not Before: Sep 16 06:36:39 2025 GMT Not After : Sep 9 15:30:25 2026 GMT Subject: CN=F120DD7D659D03650A5840FB55315BF89979DEA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:a2:a0:04:2a:b8:91:69:f4:cf:35:0f:01: 0f:ee:f1:8e:c5:94:23:26:08:36:97:7a:4e:98:95: ab:21:dd:85:d6:d9:30:f4:71:87:45:2c:46:66:bf: c8:4a:4d:44:a5:4d:d2:7e:54:95:ac:37:05:d9:08: b0:11:b9:47:17:43:6a:21:3d:96:aa:27:b3:91:3e: ca:52:83:a5:20:72:f7:c2:ab:ff:ef:f9:ac:26:ac: 13:31:9b:23:32:ad:a9:90:9b:c4:d7:b1:b6:c9:f7: 3f:45:06:d8:89:27:b6:40:33:08:f4:37:a6:0e:c2: 32:a8:c5:f3:35:61:56:91:49:d9:73:04:60:fb:a7: 62:ef:19:a6:95:1a:01:59:07:e9:07:ce:7d:29:c6: ec:fd:ae:ed:c8:2b:7c:75:66:af:c5:67:ee:bc:22: 5d:c7:f5:84:10:4a:bd:0e:04:94:0d:02:50:dc:b9: d5:c0:92:df:81:cc:66:3e:7c:3c:00:6c:3e:e1:59: db:0b:ed:8c:f4:c0:b3:44:87:5a:1a:e6:38:68:6c: 24:d9:96:39:c4:5d:53:98:21:df:ea:56:fe:49:c0: 19:cf:8d:da:eb:64:de:c7:d0:66:f1:aa:5e:2b:ce: 4a:bc:8d:6e:4c:e6:3c:04:50:7d:b5:e3:65:ef:72: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:20:DD:7D:65:9D:03:65:0A:58:40:FB:55:31:5B:F8:99:79:DE:A9 X509v3 Authority Key Identifier: keyid:96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/8SDdfWWdA2UKWED7VTFb-Jl53qk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.66.184.0/23 Signature Algorithm: sha256WithRSAEncryption 53:7a:55:8b:b6:30:e3:7d:f8:f5:42:56:42:3c:6d:b6:46:4f: df:5a:42:3c:61:ca:22:c9:29:8a:df:06:b0:4c:80:bc:1f:e0: 4e:eb:6e:53:ab:e6:b4:61:40:a6:34:0b:71:43:74:90:67:b4: f9:3a:4a:a6:47:60:a8:e0:df:a9:c2:87:e1:d9:a0:8c:37:c5: 80:80:60:f6:8f:f5:d6:ee:3e:00:e2:5c:1f:8c:74:ef:25:a3: ce:c7:57:08:8c:b4:90:47:b0:08:ff:2b:fb:17:aa:46:09:1f: 46:f3:31:92:00:b1:7b:9f:b0:9b:7b:c4:0e:17:b4:e2:4d:95: 5c:2f:9b:6e:4b:d7:fe:c7:0e:b6:ce:9a:5a:3b:9a:17:a4:15: 53:7e:66:47:c1:03:0c:e7:5c:64:d4:61:cb:45:d6:2c:7d:f8: f5:2f:eb:5f:a4:e5:7c:8c:43:71:c8:a0:1f:3d:73:d4:33:27: 01:c1:85:d9:78:33:59:28:5a:5c:2f:2e:15:c0:3a:e1:a2:8e: 37:74:b2:dc:9d:dc:b1:94:87:5c:49:03:06:61:99:fc:98:15: 34:5a:69:0f:48:d5:a4:82:a6:82:98:f6:86:83:54:8c:dd:68: d2:09:68:f6:f4:f5:03:d4:76:ca:bf:44:ec:ee:0e:df:0d:79: d9:0d:73:1b -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkI4 QTA4RTc1OUM5MDIxMTczMkRFRTg0RkQ0QkUyNTlEQUEwRkZEMB4XDTI1MDkxNjA2 MzYzOVoXDTI2MDkwOTE1MzAyNVowMzExMC8GA1UEAxMoRjEyMEREN0Q2NTlEMDM2 NTBBNTg0MEZCNTUzMTVCRjg5OTc5REVBOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMp9oqAEKriRafTPNQ8BD+7xjsWUIyYINpd6TpiVqyHdhdbZMPRx h0UsRma/yEpNRKVN0n5Ulaw3BdkIsBG5RxdDaiE9lqons5E+ylKDpSBy98Kr/+/5 rCasEzGbIzKtqZCbxNextsn3P0UG2IkntkAzCPQ3pg7CMqjF8zVhVpFJ2XMEYPun Yu8ZppUaAVkH6QfOfSnG7P2u7cgrfHVmr8Vn7rwiXcf1hBBKvQ4ElA0CUNy51cCS 34HMZj58PABsPuFZ2wvtjPTAs0SHWhrmOGhsJNmWOcRdU5gh3+pW/knAGc+N2utk 3sfQZvGqXivOSryNbkzmPARQfbXjZe9ybDsCAwEAAaOCAeowggHmMB0GA1UdDgQW BBTxIN19ZZ0DZQpYQPtVMVv4mXneqTAfBgNVHSMEGDAWgBSWuKCOdZyQIRcy3uhP 1L4lnaoP/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOL2xy aWdqbldja0NFWE10N29UOVMtSloycURfMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bHJpZ2puV2NrQ0VYTXQ3b1Q5Uy1KWjJxRF8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTi84U0RkZldXZEEyVUtXRUQ3VlRGYi1K bDUzcWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBykK4MA0G CSqGSIb3DQEBCwUAA4IBAQBTelWLtjDjffj1QlZCPG22Rk/fWkI8YcoiySmK3waw TIC8H+BO625Tq+a0YUCmNAtxQ3SQZ7T5OkqmR2Co4N+pwofh2aCMN8WAgGD2j/XW 7j4A4lwfjHTvJaPOx1cIjLSQR7AI/yv7F6pGCR9G8zGSALF7n7Cbe8QOF7TiTZVc L5tuS9f+xw62zppaO5oXpBVTfmZHwQMM51xk1GHLRdYsffj1L+tfpOV8jENxyKAf PXPUMycBwYXZeDNZKFpcLy4VwDrhoo43dLLcndyxlIdcSQMGYZn8mBU0WmkPSNWk gqaCmPaGg1SM3WjSCWj29PUD1HbKv0Ts7g7fDXnZDXMb -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:56 2025 by rpki-client