$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/OOTa8v2aWwMI94B_jT8q7CpaNjM.roa File: OOTa8v2aWwMI94B_jT8q7CpaNjM.roa (raw, json) Hash identifier: WHb3v3swGHiTZK6/A9tDpSR8bbgYwvskPbQfJi6l19Q= Subject key identifier: 38:E4:DA:F2:FD:9A:5B:03:08:F7:80:7F:8D:3F:2A:EC:2A:5A:36:33 Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0E5D Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/OOTa8v2aWwMI94B_jT8q7CpaNjM.roa Signing time: Fri 22 Aug 2025 08:56:26 +0000 ROA not before: Fri 22 Aug 2025 08:56:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 150.129.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3677 (0xe5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 22 08:56:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=38E4DAF2FD9A5B0308F7807F8D3F2AEC2A5A3633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:48:73:cd:50:74:49:8f:74:3f:71:8d:a7: 34:9c:50:39:a6:25:7d:9f:4c:a3:a0:c9:64:f2:1f: 8e:22:96:52:06:20:5c:c8:9b:84:ca:de:83:e4:6b: d7:f5:48:1d:ad:9f:aa:b4:1b:08:30:94:1f:07:25: 85:c9:0a:04:44:9d:5a:48:18:f6:9b:fe:24:81:3d: 76:53:a5:1c:18:b4:2b:11:be:f4:9b:80:07:c7:dd: 4a:75:e6:fa:17:52:54:c5:79:6e:fa:2c:59:c6:15: 90:b8:c3:6d:2a:c2:ae:2e:e6:1c:18:36:2a:72:ec: c1:2e:7f:4a:8f:73:dc:63:fd:30:8f:c2:58:5d:c5: eb:91:d9:c0:4b:be:8d:b6:da:d4:6c:fa:e0:ca:e3: 12:78:28:ca:34:8f:60:32:69:04:ef:b2:df:03:c5: 68:48:4e:3d:05:32:e7:df:36:14:e9:cb:ab:d9:7b: da:ad:c6:13:1d:a2:ad:d1:38:c6:61:a2:b4:b0:5b: 9e:b0:7f:5d:75:48:b8:db:ec:fa:50:f2:98:4e:35: f1:aa:b8:da:d0:54:11:87:fc:f6:0d:b4:b2:a3:94: 86:ae:3d:91:a3:e6:6a:cd:0b:0c:dd:6e:12:cc:74: eb:00:02:7f:4f:85:69:ac:d0:6f:4e:5e:b7:37:cd: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E4:DA:F2:FD:9A:5B:03:08:F7:80:7F:8D:3F:2A:EC:2A:5A:36:33 X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/OOTa8v2aWwMI94B_jT8q7CpaNjM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.129.228.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:d2:ef:23:c7:27:cf:8d:96:c3:39:2b:65:0f:99:03:20:07: 00:8f:d5:e5:df:c1:0a:2d:81:95:3b:12:79:66:6f:b9:52:a6: af:8f:d2:c6:01:05:dd:ba:b4:78:58:28:6b:5f:11:4a:a7:f5: 30:46:6d:44:e9:e3:25:e8:6d:f9:e7:81:16:49:73:e7:c8:b6: b4:cc:b3:de:ab:06:7b:e7:ca:e7:2d:7a:97:d6:f5:69:32:8c: ad:4a:ab:9b:a2:38:69:42:d4:e2:57:df:ee:7f:6e:23:0c:22: 95:e5:a7:7d:82:9e:ab:f6:a7:50:7b:0b:ca:31:2a:76:51:c5: be:35:16:d6:9c:49:7c:e6:5f:0a:54:01:82:6b:d3:6d:4c:ad: 02:da:79:81:3e:ed:a0:4a:a7:f5:c6:0b:e9:17:60:f7:44:a0: ee:a3:e1:38:b1:e2:39:e9:94:50:78:4c:13:4b:f0:8b:07:56: d2:94:05:c9:b5:93:16:e5:50:4a:d1:84:cd:91:f2:e0:44:aa: b0:48:3e:41:a0:f0:a5:bd:03:2e:20:3f:07:aa:64:bd:b9:61: 7d:aa:97:87:d7:33:ec:a7:eb:30:e8:bf:82:f5:b5:79:74:fc: c7:d0:69:ea:f3:5c:06:c6:01:cd:88:05:01:33:62:90:cc:a8: 67:58:f1:15 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw ODU2MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM4RTREQUYyRkQ5QTVC MDMwOEY3ODA3RjhEM0YyQUVDMkE1QTM2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUGEhzzVB0SY90P3GNpzScUDmmJX2fTKOgyWTyH44illIGIFzI m4TK3oPka9f1SB2tn6q0GwgwlB8HJYXJCgREnVpIGPab/iSBPXZTpRwYtCsRvvSb gAfH3Up15voXUlTFeW76LFnGFZC4w20qwq4u5hwYNipy7MEuf0qPc9xj/TCPwlhd xeuR2cBLvo222tRs+uDK4xJ4KMo0j2AyaQTvst8DxWhITj0FMuffNhTpy6vZe9qt xhMdoq3ROMZhorSwW56wf111SLjb7PpQ8phONfGquNrQVBGH/PYNtLKjlIauPZGj 5mrNCwzdbhLMdOsAAn9PhWms0G9OXrc3zSsJAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUOOTa8v2aWwMI94B/jT8q7CpaNjMwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9PT1RhOHYyYVd3TUk5NEJfalQ4 cTdDcGFOak0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCloHk MA0GCSqGSIb3DQEBCwUAA4IBAQBf0u8jxyfPjZbDOStlD5kDIAcAj9Xl38EKLYGV OxJ5Zm+5Uqavj9LGAQXdurR4WChrXxFKp/UwRm1E6eMl6G3554EWSXPnyLa0zLPe qwZ758rnLXqX1vVpMoytSqubojhpQtTiV9/uf24jDCKV5ad9gp6r9qdQewvKMSp2 UcW+NRbWnEl85l8KVAGCa9NtTK0C2nmBPu2gSqf1xgvpF2D3RKDuo+E4seI56ZRQ eEwTS/CLB1bSlAXJtZMW5VBK0YTNkfLgRKqwSD5BoPClvQMuID8HqmS9uWF9qpeH 1zPsp+sw6L+C9bV5dPzH0Gnq81wGxgHNiAUBM2KQzKhnWPEV -----END CERTIFICATE-----Generated at Sun Aug 24 07:40:58 2025 by rpki-client