$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/l0rXUoTh_xLUPs7d5-Nlb3JIaZI.roa File: l0rXUoTh_xLUPs7d5-Nlb3JIaZI.roa (raw, json) Hash identifier: Jnkka3SwH42MQr34xBXmyRwTQKDUuBpqeRrjMItSBHE= Subject key identifier: 97:4A:D7:52:84:E1:FF:12:D4:3E:CE:DD:E7:E3:65:6F:72:48:69:92 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 09DA Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/l0rXUoTh_xLUPs7d5-Nlb3JIaZI.roa Signing time: Fri 22 Aug 2025 08:55:25 +0000 ROA not before: Fri 22 Aug 2025 08:55:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 2405:cdc0::/32 maxlen: 124 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2522 (0x9da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Aug 22 08:55:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=974AD75284E1FF12D43ECEDDE7E3656F72486992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:ae:c1:b7:4b:dd:15:ae:71:75:85:64:09: a2:a8:f5:4b:84:eb:9a:72:9a:76:f1:31:93:2f:40: 7b:49:84:57:2e:40:83:e1:7e:cb:0a:3f:19:33:8b: 06:57:fc:38:6c:6b:1f:3b:dc:63:26:da:ff:b3:02: 6b:64:bb:9b:a4:bc:cf:f1:90:84:ed:1c:1c:86:19: 3c:a6:3f:ef:49:b7:05:b4:be:0a:cc:71:3d:44:19: f2:0a:90:8c:6d:8d:ad:a2:1a:f6:ed:db:da:1e:15: 91:d1:e5:f9:95:56:0c:e2:4d:be:a2:a7:78:e0:d2: 02:84:e1:0a:81:80:d1:75:ed:5e:b3:b0:65:02:01: e0:6a:a1:da:aa:b1:2d:eb:78:eb:d9:5d:d7:3d:9b: eb:a9:12:d5:55:72:5b:ee:7b:b3:14:30:f8:d6:c8: c6:c5:02:d9:6d:af:55:a4:97:8b:b4:9a:70:4e:47: 63:a0:d7:df:24:fd:71:fd:53:07:08:61:a2:8a:54: 58:03:56:c3:22:e4:9f:ee:a1:d5:46:ba:97:cb:b6: 69:10:9f:bb:8d:88:53:c3:4a:73:ae:d5:00:de:be: bd:88:3c:45:7f:13:1e:05:b9:4f:58:52:b2:73:70: 45:ee:f3:1c:38:1e:25:77:e8:a9:a4:43:c2:44:d5: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4A:D7:52:84:E1:FF:12:D4:3E:CE:DD:E7:E3:65:6F:72:48:69:92 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/l0rXUoTh_xLUPs7d5-Nlb3JIaZI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 44:19:ee:6b:53:86:c7:e7:aa:96:0b:13:88:67:c5:c7:40:74: 68:5c:72:cd:fd:33:a7:76:cf:51:c6:c9:84:5d:72:87:36:c3: 4c:99:e3:10:45:67:bf:7d:d3:42:9f:5a:af:ff:1f:2a:c2:9d: 05:98:40:36:58:0a:2e:d4:f3:83:87:ff:b3:00:81:7c:da:a9: d2:fa:c5:13:e1:8f:02:24:f2:58:62:f0:2e:f9:48:00:18:b4: 9e:08:52:50:88:60:40:ce:50:d6:0e:c3:56:b0:ff:95:4b:b7: 10:2e:f2:c9:1f:00:76:1d:bd:a5:f5:67:99:91:c3:b6:7f:51: 52:a2:61:fa:e2:a7:29:82:24:d8:55:59:c6:87:b5:5a:ee:2f: ac:53:fb:d3:19:23:6d:c6:eb:8a:ff:e6:d8:98:2e:e4:70:2c: 5e:20:62:21:1d:9f:b9:f9:40:fc:33:cc:19:22:34:f0:33:24: 37:93:5c:22:91:60:d3:23:f8:47:4c:9c:a5:86:c3:51:16:bf: 4e:ea:56:c2:15:06:88:d5:2e:05:f0:59:fa:73:0c:c2:7c:03: 78:be:9e:55:e5:e7:7f:b6:66:08:88:c3:cd:f1:64:2b:5e:ff: 43:91:d4:61:e8:17:e1:9e:14:f3:92:53:ae:b2:77:7a:28:62: 86:eb:1d:27 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICCdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNTA4MjIw ODU1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3NEFENzUyODRFMUZG MTJENDNFQ0VEREU3RTM2NTZGNzI0ODY5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCona7Bt0vdFa5xdYVkCaKo9UuE65pymnbxMZMvQHtJhFcuQIPh fssKPxkziwZX/Dhsax873GMm2v+zAmtku5ukvM/xkITtHByGGTymP+9JtwW0vgrM cT1EGfIKkIxtja2iGvbt29oeFZHR5fmVVgziTb6ip3jg0gKE4QqBgNF17V6zsGUC AeBqodqqsS3reOvZXdc9m+upEtVVclvue7MUMPjWyMbFAtltr1Wkl4u0mnBOR2Og 198k/XH9UwcIYaKKVFgDVsMi5J/uodVGupfLtmkQn7uNiFPDSnOu1QDevr2IPEV/ Ex4FuU9YUrJzcEXu8xw4HiV36KmkQ8JE1cZ7AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUl0rXUoTh/xLUPs7d5+Nlb3JIaZIwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL2wwclhVb1RoX3hMVVBzN2Q1LU5sYjNK SWFaSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBc3AMA0G CSqGSIb3DQEBCwUAA4IBAQBEGe5rU4bH56qWCxOIZ8XHQHRoXHLN/TOnds9RxsmE XXKHNsNMmeMQRWe/fdNCn1qv/x8qwp0FmEA2WAou1PODh/+zAIF82qnS+sUT4Y8C JPJYYvAu+UgAGLSeCFJQiGBAzlDWDsNWsP+VS7cQLvLJHwB2Hb2l9WeZkcO2f1FS omH64qcpgiTYVVnGh7Va7i+sU/vTGSNtxuuK/+bYmC7kcCxeIGIhHZ+5+UD8M8wZ IjTwMyQ3k1wikWDTI/hHTJylhsNRFr9O6lbCFQaI1S4F8Fn6cwzCfAN4vp5V5ed/ tmYIiMPN8WQrXv9DkdRh6BfhnhTzklOusnd6KGKG6x0n -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:37 2025 by rpki-client