$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/USAdAEn3Rzx9qlpWrNbcXmp_5cw.roa File: USAdAEn3Rzx9qlpWrNbcXmp_5cw.roa (raw, json) Hash identifier: TKCJvFXS1LHLJIzpSoTS5yFLG/fRMJPB/nsppzyesQ4= Subject key identifier: 51:20:1D:00:49:F7:47:3C:7D:AA:5A:56:AC:D6:DC:5E:6A:7F:E5:CC Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Certificate serial: 017D Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/USAdAEn3Rzx9qlpWrNbcXmp_5cw.roa Signing time: Fri 22 Aug 2025 08:57:03 +0000 ROA not before: Fri 22 Aug 2025 08:57:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 215470 IP address blocks: 160.30.99.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Validity Not Before: Aug 22 08:57:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=51201D0049F7473C7DAA5A56ACD6DC5E6A7FE5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:34:2f:41:f3:79:20:fb:2c:6d:92:f1:e2: 78:02:61:e7:b8:95:6b:7b:ba:3c:b1:be:18:86:a3: d1:74:cc:49:18:c3:ef:ae:eb:29:fb:19:60:ef:98: 84:20:4b:dc:36:8a:d2:41:9c:50:5e:5c:fd:da:33: 79:b0:db:f2:0a:29:c2:f0:a6:db:ee:d6:00:48:37: 68:19:76:0b:e7:d9:4f:b3:07:26:e8:86:d5:78:85: 79:da:eb:8a:f1:80:32:cc:10:06:a4:61:59:27:31: d3:8c:3b:04:28:a7:ad:28:6d:14:ad:50:09:46:29: 31:c8:db:22:e3:98:b9:62:e0:42:17:ba:3e:46:f8: 14:be:83:bf:6e:99:dd:d6:8d:13:f1:2b:ae:fb:7f: db:61:26:dc:24:62:11:e8:dc:56:61:16:b1:f5:4d: e3:4a:17:00:bf:19:8a:af:d4:89:47:99:b2:90:91: 38:4e:bb:5d:0b:45:88:9d:a5:55:9a:a4:2a:be:a9: 72:80:d7:1c:ae:c3:55:f4:11:f8:23:cf:49:12:44: 69:65:38:38:ac:d4:8e:d8:b7:30:ad:8e:5a:fb:19: 96:71:40:97:0a:36:09:c7:30:d1:53:ce:49:fa:63: 9f:96:df:51:8d:80:da:49:68:e5:38:20:34:5c:bf: 54:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:1D:00:49:F7:47:3C:7D:AA:5A:56:AC:D6:DC:5E:6A:7F:E5:CC X509v3 Authority Key Identifier: keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/USAdAEn3Rzx9qlpWrNbcXmp_5cw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.99.0/24 Signature Algorithm: sha256WithRSAEncryption 22:74:82:aa:1a:37:a0:98:ca:a5:ff:2d:be:9b:cd:de:76:46: f9:2c:06:5f:11:43:17:26:31:16:8b:7e:7e:55:e5:82:c2:4d: 00:c0:52:78:3e:45:07:36:b0:28:a6:77:e6:e2:9c:d7:4e:26: ce:3e:0f:f5:14:d9:4c:ba:74:fa:91:b8:fe:ad:20:d6:03:e7: 1b:7f:ec:9a:ac:1b:fd:ae:e3:16:1c:9c:ca:4b:e1:13:df:c7: 75:2f:a6:67:89:84:f1:0d:94:71:37:9b:ad:0f:6e:6f:17:0a: 76:a6:fe:8e:a6:ca:27:0b:25:81:cd:6c:bf:ba:7d:ab:9b:ba: 06:4d:d5:85:18:a1:3d:de:24:1b:66:46:48:24:3c:ad:31:1e: 94:99:34:64:79:ce:20:e6:af:cf:d0:db:14:7b:f9:04:d1:fc: be:aa:db:ca:94:c1:16:b4:74:1f:1a:18:49:02:45:b5:34:64: 9e:ca:05:b1:42:b9:61:b1:7a:33:33:00:a6:d5:1a:73:4a:eb: da:79:4b:be:23:cf:a6:50:ad:d6:75:53:de:f7:f1:aa:3d:72: 30:55:c9:d3:39:0a:f2:02:ea:8d:29:76:54:e3:96:08:f2:4d: a4:0e:97:ef:c2:59:f4:44:4c:39:5b:0f:38:d9:0e:e0:81:8e: 18:5b:29:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUUx OTQxQzM3QkQxRTJDRjEyNTEyRjk4QUIzNjZDMjlEQTc5QjcxODAeFw0yNTA4MjIw ODU3MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUxMjAxRDAwNDlGNzQ3 M0M3REFBNUE1NkFDRDZEQzVFNkE3RkU1Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtWTQvQfN5IPssbZLx4ngCYee4lWt7ujyxvhiGo9F0zEkYw++u 6yn7GWDvmIQgS9w2itJBnFBeXP3aM3mw2/IKKcLwptvu1gBIN2gZdgvn2U+zBybo htV4hXna64rxgDLMEAakYVknMdOMOwQop60obRStUAlGKTHI2yLjmLli4EIXuj5G +BS+g79umd3WjRPxK677f9thJtwkYhHo3FZhFrH1TeNKFwC/GYqv1IlHmbKQkThO u10LRYidpVWapCq+qXKA1xyuw1X0Efgjz0kSRGllODis1I7YtzCtjlr7GZZxQJcK NgnHMNFTzkn6Y5+W31GNgNpJaOU4IDRcv1QdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUSAdAEn3Rzx9qlpWrNbcXmp/5cwwHwYDVR0jBBgwFoAU7hlBw3vR4s8SUS+Y qzZsKdp5txgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExF LzdobEJ3M3ZSNHM4U1VTLVlxelpzS2RwNXR4Zy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvN2hsQnczdlI0czhTVVMtWXF6WnNLZHA1dHhnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExFL1VTQWRBRW4zUnp4OXFscFdy TmJjWG1wXzVjdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg HmMwDQYJKoZIhvcNAQELBQADggEBACJ0gqoaN6CYyqX/Lb6bzd52RvksBl8RQxcm MRaLfn5V5YLCTQDAUng+RQc2sCimd+binNdOJs4+D/UU2Uy6dPqRuP6tINYD5xt/ 7JqsG/2u4xYcnMpL4RPfx3UvpmeJhPENlHE3m60Pbm8XCnam/o6myicLJYHNbL+6 faubugZN1YUYoT3eJBtmRkgkPK0xHpSZNGR5ziDmr8/Q2xR7+QTR/L6q28qUwRa0 dB8aGEkCRbU0ZJ7KBbFCuWGxejMzAKbVGnNK69p5S74jz6ZQrdZ1U9738ao9cjBV ydM5CvIC6o0pdlTjlgjyTaQOl+/CWfRETDlbDzjZDuCBjhhbKcM= -----END CERTIFICATE-----Generated at Sun Aug 24 11:01:40 2025 by rpki-client