$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5CKrqlArVRKKLJU17p7vNXQZdM0.roa File: 5CKrqlArVRKKLJU17p7vNXQZdM0.roa (raw, json) Hash identifier: tj3oi8vLnK5Gh5rX+PGOAJn0zL3Qj61LcofAwp95n3s= Subject key identifier: E4:22:AB:AA:50:2B:55:12:8A:2C:95:35:EE:9E:EF:35:74:19:74:CD Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1078 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5CKrqlArVRKKLJU17p7vNXQZdM0.roa Signing time: Fri 22 Aug 2025 08:55:31 +0000 ROA not before: Fri 22 Aug 2025 08:55:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18177 IP address blocks: 120.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4216 (0x1078) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E422ABAA502B55128A2C9535EE9EEF35741974CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:db:20:e9:c1:3f:43:7b:50:73:ac:45:e0: 68:c6:1e:4e:1e:1d:0d:b6:ab:5e:e6:63:60:15:a9: 20:c2:c1:cc:9a:ce:17:05:c4:e6:4f:28:08:ff:7b: 4c:ac:e0:e0:b0:8e:24:92:d4:10:98:74:9c:d6:53: 30:e2:79:38:12:89:07:7e:8d:97:e4:34:a6:ca:2a: 8c:a1:9c:e5:06:1d:64:fc:da:c0:f0:2e:91:7b:8d: d4:f9:d4:39:d4:57:3e:77:91:3e:04:5b:3d:0b:3e: 5b:53:5a:73:f9:5a:e1:7b:16:32:72:65:5d:04:1f: 4f:ce:43:74:2e:03:b3:07:d4:69:0e:57:7d:8f:5b: f0:14:c8:a7:b6:2b:93:d7:a7:fa:a1:b5:fa:27:a6: f2:d8:cb:37:12:b1:17:52:ac:a0:69:09:30:92:74: bc:75:2a:d3:52:86:07:22:01:e0:e7:ea:2f:d2:c5: 85:ab:16:ed:87:93:14:eb:27:1c:7c:f8:1b:7a:12: 63:aa:52:45:f8:67:16:af:8f:15:a6:1c:71:ba:56: 9a:e4:ac:98:7d:57:0e:d7:09:61:a9:57:83:1c:b1: 64:74:3c:d4:77:4e:da:03:46:92:62:ca:72:03:27: 57:9e:1c:b9:47:27:0b:8d:67:e8:72:e2:3f:a4:16: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:22:AB:AA:50:2B:55:12:8A:2C:95:35:EE:9E:EF:35:74:19:74:CD X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5CKrqlArVRKKLJU17p7vNXQZdM0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3f:9b:82:29:43:92:9e:5e:93:98:f9:93:3b:44:f0:af:ee:97: 74:34:31:66:b3:3d:65:49:28:28:ef:4e:c7:57:f8:78:14:e9: a5:9f:b5:5a:13:7c:b4:df:e0:20:a9:d5:80:e4:5c:df:62:be: fa:f7:09:ce:3d:84:02:4b:2f:94:68:60:14:8f:d5:e9:be:68: 81:94:7e:91:20:cb:15:8e:c6:f6:38:24:31:92:ca:c1:f0:6b: ca:15:7b:c2:4b:86:56:67:2c:d8:22:a4:4a:01:41:9b:98:22: ab:72:e9:31:bd:07:75:72:c9:c2:a6:8c:ae:60:21:ac:ae:64: fa:fb:51:ab:18:0a:1a:8e:4b:9e:28:74:5c:b5:88:62:23:f2: 6b:be:ba:35:49:bb:21:d2:b7:eb:d6:9b:b1:18:e1:5d:28:2a: 03:b4:6d:0a:ca:42:0a:d4:0b:1e:42:84:a8:94:de:5a:55:4b: 9f:b5:ac:8d:bc:eb:27:b3:68:6d:d8:5e:2e:0c:e2:49:79:76: 19:c2:b1:e0:65:6f:4d:df:a2:5e:b6:63:ea:5a:85:bd:be:c8: 9e:ac:24:4f:99:df:16:1a:fd:16:f5:f8:dd:2c:cd:87:fb:f6: b7:cf:4c:4a:4c:bf:b7:2e:fe:14:5a:a0:c9:81:29:f6:66:11: b2:26:d0:ef -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU0MjJBQkFBNTAyQjU1 MTI4QTJDOTUzNUVFOUVFRjM1NzQxOTc0Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAAdsg6cE/Q3tQc6xF4GjGHk4eHQ22q17mY2AVqSDCwcyazhcF xOZPKAj/e0ys4OCwjiSS1BCYdJzWUzDieTgSiQd+jZfkNKbKKoyhnOUGHWT82sDw LpF7jdT51DnUVz53kT4EWz0LPltTWnP5WuF7FjJyZV0EH0/OQ3QuA7MH1GkOV32P W/AUyKe2K5PXp/qhtfonpvLYyzcSsRdSrKBpCTCSdLx1KtNShgciAeDn6i/SxYWr Fu2HkxTrJxx8+Bt6EmOqUkX4ZxavjxWmHHG6VprkrJh9Vw7XCWGpV4McsWR0PNR3 TtoDRpJiynIDJ1eeHLlHJwuNZ+hy4j+kFtbTAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU5CKrqlArVRKKLJU17p7vNXQZdM0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC81Q0tycWxBclZSS0tMSlUxN3A3 dk5YUVpkTTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeHIw DQYJKoZIhvcNAQELBQADggEBAD+bgilDkp5ek5j5kztE8K/ul3Q0MWazPWVJKCjv TsdX+HgU6aWftVoTfLTf4CCp1YDkXN9ivvr3Cc49hAJLL5RoYBSP1em+aIGUfpEg yxWOxvY4JDGSysHwa8oVe8JLhlZnLNgipEoBQZuYIqty6TG9B3VyycKmjK5gIayu ZPr7UasYChqOS54odFy1iGIj8mu+ujVJuyHSt+vWm7EY4V0oKgO0bQrKQgrUCx5C hKiU3lpVS5+1rI286yezaG3YXi4M4kl5dhnCseBlb03fol62Y+pahb2+yJ6sJE+Z 3xYa/Rb1+N0szYf79rfPTEpMv7cu/hRaoMmBKfZmEbIm0O8= -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:18 2025 by rpki-client