$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/V9YEmLdJhQFtsWJWorisoXIvVtw.roa File: V9YEmLdJhQFtsWJWorisoXIvVtw.roa (raw, json) Hash identifier: /VKlDId99UKtfPkAw8js8diP9eE4bkubMMbxq+BGPmY= Subject key identifier: 57:D6:04:98:B7:49:85:01:6D:B1:62:56:A2:B8:AC:A1:72:2F:56:DC Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 09D8 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/V9YEmLdJhQFtsWJWorisoXIvVtw.roa Signing time: Fri 22 Aug 2025 08:55:25 +0000 ROA not before: Fri 22 Aug 2025 08:55:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 103.137.246.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Aug 22 08:55:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=57D60498B74985016DB16256A2B8ACA1722F56DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:da:bc:b5:33:16:bd:d2:a2:d2:36:c9:33: 8d:c2:5a:32:74:94:3e:9a:59:9d:3b:09:fa:e8:39: db:4c:cd:a3:5f:16:67:88:c6:61:31:fc:be:16:8d: 07:38:cc:8c:20:55:bb:c1:1d:45:59:01:e0:9a:7f: a5:db:43:b2:85:a6:29:65:ab:91:00:90:b9:ca:5d: ff:dd:7e:c3:02:63:ac:d1:e0:f8:dd:ad:86:c3:02: 73:f1:93:2f:ae:03:89:97:08:52:08:b8:36:61:4c: 8e:34:8f:4b:0b:ab:2e:d4:0f:43:b5:30:bf:ec:28: 6e:e7:a0:16:f5:3b:92:1b:d8:82:36:40:89:df:f8: bd:5e:43:4f:2f:be:9b:b4:0b:da:8f:e0:35:74:ef: ae:87:77:6f:e9:6b:53:db:ec:b9:f5:a5:a2:1b:20: f8:18:ec:6a:33:b7:25:5e:fc:81:3d:bf:35:85:70: a6:0d:53:99:0d:35:7a:b3:43:84:5e:36:02:12:57: 28:17:c2:e1:3a:c9:71:50:5f:02:3c:49:4d:b0:d9: 04:ab:68:67:b8:63:3f:af:88:59:16:f5:f0:c2:d2: 9e:d2:fb:fd:01:49:2b:61:3b:7b:d1:e2:4e:cd:35: db:fa:5d:a3:f1:05:28:18:9f:4a:7a:45:ff:78:a9: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D6:04:98:B7:49:85:01:6D:B1:62:56:A2:B8:AC:A1:72:2F:56:DC X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/V9YEmLdJhQFtsWJWorisoXIvVtw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.246.0/23 Signature Algorithm: sha256WithRSAEncryption 63:e0:23:88:15:11:8b:1a:73:df:79:6e:6d:82:b0:72:e1:2b: fb:c6:cc:b8:6d:32:bd:94:55:2c:63:d4:3c:a4:28:e8:55:45: 8c:ab:b7:47:cc:d4:89:8c:c7:e5:e7:ad:ba:c2:c8:da:01:7d: e5:d4:19:5c:74:6f:dc:3d:cf:af:95:85:67:b9:7a:24:b7:7b: bf:cb:89:25:d3:63:b3:bb:66:31:d5:e3:c6:e5:37:dd:97:f7: 65:22:2f:88:2f:91:8c:0e:75:ac:ba:00:66:63:6b:fc:13:e2: 75:9b:5d:78:17:7d:b7:ec:ba:ac:b0:50:4b:d0:55:5b:cf:a1: 1b:59:0e:01:ba:f9:82:88:f2:5a:b9:83:c0:61:85:23:8b:14: f9:cd:00:56:b5:5f:bb:fa:2f:a3:e7:51:b5:41:d4:0b:7c:79: 3d:72:7a:8a:45:77:f0:96:6f:98:51:37:50:83:62:57:db:9d: c7:aa:8f:cf:64:7c:e5:e9:d2:c6:71:1d:21:a4:ec:bb:b7:6d: 0b:4b:c5:88:59:a7:26:33:ab:ce:b9:e4:39:6c:2b:ea:c6:6c: 04:d6:23:74:57:bc:4f:fb:de:fe:39:48:3e:e2:bc:dc:b1:15: aa:ff:c2:04:ef:05:76:f0:4a:e2:e3:1e:ed:23:b5:28:63:6a: 93:72:77:49 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNTA4MjIw ODU1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU3RDYwNDk4Qjc0OTg1 MDE2REIxNjI1NkEyQjhBQ0ExNzIyRjU2REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpkdq8tTMWvdKi0jbJM43CWjJ0lD6aWZ07CfroOdtMzaNfFmeI xmEx/L4WjQc4zIwgVbvBHUVZAeCaf6XbQ7KFpillq5EAkLnKXf/dfsMCY6zR4Pjd rYbDAnPxky+uA4mXCFIIuDZhTI40j0sLqy7UD0O1ML/sKG7noBb1O5Ib2II2QInf +L1eQ08vvpu0C9qP4DV0766Hd2/pa1Pb7Ln1paIbIPgY7GoztyVe/IE9vzWFcKYN U5kNNXqzQ4ReNgISVygXwuE6yXFQXwI8SU2w2QSraGe4Yz+viFkW9fDC0p7S+/0B SSthO3vR4k7NNdv6XaPxBSgYn0p6Rf94qS21AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUV9YEmLdJhQFtsWJWorisoXIvVtwwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL1Y5WUVtTGRKaFFGdHNXSldvcmlzb1hJ dlZ0dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnifYwDQYJ KoZIhvcNAQELBQADggEBAGPgI4gVEYsac995bm2CsHLhK/vGzLhtMr2UVSxj1Dyk KOhVRYyrt0fM1ImMx+XnrbrCyNoBfeXUGVx0b9w9z6+VhWe5eiS3e7/LiSXTY7O7 ZjHV48blN92X92UiL4gvkYwOday6AGZja/wT4nWbXXgXfbfsuqywUEvQVVvPoRtZ DgG6+YKI8lq5g8BhhSOLFPnNAFa1X7v6L6PnUbVB1At8eT1yeopFd/CWb5hRN1CD Ylfbnceqj89kfOXp0sZxHSGk7Lu3bQtLxYhZpyYzq8655DlsK+rGbATWI3RXvE/7 3v45SD7ivNyxFar/wgTvBXbwSuLjHu0jtShjapNyd0k= -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:29 2025 by rpki-client