$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/CFCORxQJJcg57Sf32NrjCHwWFiY.roa File: CFCORxQJJcg57Sf32NrjCHwWFiY.roa (raw, json) Hash identifier: /rsWCBeFvef9VAJP9YJmxLFtRXPo6dtCCeLJmXpoe6E= Subject key identifier: 08:50:8E:47:14:09:25:C8:39:ED:27:F7:D8:DA:E3:08:7C:16:16:26 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 109A Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CFCORxQJJcg57Sf32NrjCHwWFiY.roa Signing time: Fri 22 Aug 2025 08:55:39 +0000 ROA not before: Fri 22 Aug 2025 08:55:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 163.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4250 (0x109a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=08508E47140925C839ED27F7D8DAE3087C161626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:53:fe:1d:71:6e:13:cb:fb:f8:b2:68:9b: 84:14:37:73:97:85:62:57:a1:04:05:4b:6a:66:62: 99:3c:72:be:6c:84:a7:91:55:9c:c9:f8:95:2e:d1: 32:74:e1:fe:3a:e9:50:6d:34:c2:c1:c6:4d:7f:8b: f6:3c:c9:a7:d2:23:49:e4:6b:8b:d3:07:02:d7:d3: 82:58:9e:91:ee:d1:88:bb:68:73:1e:37:1f:e9:88: d3:87:d0:35:87:01:f2:65:0e:6b:78:6a:bb:2a:84: d9:33:91:d8:d8:90:bc:cd:e5:d9:e4:ea:2f:75:a8: 25:7b:de:d9:f0:1e:52:23:ff:6d:16:83:8b:b6:fb: 7d:16:24:48:4a:bc:0a:06:06:50:48:ac:29:c9:90: a8:37:49:b7:0a:89:73:13:84:ef:42:6b:bb:5e:79: 83:9d:c0:84:fb:e2:41:ea:ca:51:7c:d3:0e:ea:f3: f9:1e:b4:d0:60:b6:fb:08:cb:fa:c3:10:15:f6:b2: 82:fb:95:d6:24:1c:a0:19:a3:58:20:64:fd:c7:7b: 2a:57:fb:b6:bc:73:1b:61:60:85:65:d4:81:4c:be: d7:74:bb:87:6c:1b:e8:b3:9e:45:12:0f:25:aa:31: a7:61:75:e6:5f:eb:a9:ca:23:43:43:a7:01:0a:1c: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:8E:47:14:09:25:C8:39:ED:27:F7:D8:DA:E3:08:7C:16:16:26 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CFCORxQJJcg57Sf32NrjCHwWFiY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:b8:21:47:82:36:f2:2e:91:f8:88:65:05:14:25:fa:2e:92: 95:30:ad:4a:b9:90:46:2a:87:ad:6d:b6:c2:b8:f7:e3:7d:12: 07:7c:31:16:b1:57:2d:a2:55:41:ff:6e:72:96:4e:89:a5:1b: ec:c0:7b:d6:f8:08:b0:72:1f:50:63:21:ae:33:fc:54:69:db: f1:c8:be:af:57:b1:a1:c6:d0:35:e0:ce:60:5c:d3:f8:4b:56: 60:f7:52:c7:2a:82:91:83:54:d3:de:b7:3c:c5:cc:e0:23:aa: a5:4b:af:d4:0e:4a:9f:75:58:ee:06:75:c5:f0:3e:f2:2f:37: 1c:9d:79:1a:56:68:84:73:00:59:1e:25:1c:b6:83:ec:e2:74: d4:1a:37:6f:0d:91:6e:9f:8d:c2:8c:47:9f:cd:c2:5c:2a:21: 5b:af:22:24:4f:58:5e:aa:69:30:21:04:ec:70:1a:58:66:ad: fd:9c:b9:17:97:f5:28:ff:f9:9d:e4:45:a9:a8:c5:d7:eb:6c: 65:64:65:07:29:83:44:75:bb:f3:4e:78:21:6d:3d:fc:07:cc: 0d:4f:e4:41:bd:45:da:6d:2e:3a:09:cb:06:2f:63:94:8b:dd: 69:27:ae:45:50:d1:cb:db:e1:bf:a3:26:5c:76:e1:c9:f5:78: 2e:42:d5:0c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA4NTA4RTQ3MTQwOTI1 QzgzOUVEMjdGN0Q4REFFMzA4N0MxNjE2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCT1P+HXFuE8v7+LJom4QUN3OXhWJXoQQFS2pmYpk8cr5shKeR VZzJ+JUu0TJ04f466VBtNMLBxk1/i/Y8yafSI0nka4vTBwLX04JYnpHu0Yi7aHMe Nx/piNOH0DWHAfJlDmt4arsqhNkzkdjYkLzN5dnk6i91qCV73tnwHlIj/20Wg4u2 +30WJEhKvAoGBlBIrCnJkKg3SbcKiXMThO9Ca7teeYOdwIT74kHqylF80w7q8/ke tNBgtvsIy/rDEBX2soL7ldYkHKAZo1ggZP3HeypX+7a8cxthYIVl1IFMvtd0u4ds G+iznkUSDyWqMadhdeZf66nKI0NDpwEKHOuLAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUCFCORxQJJcg57Sf32NrjCHwWFiYwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9DRkNPUnhRSkpjZzU3U2YzMk5y akNId1dGaVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoyAw DQYJKoZIhvcNAQELBQADggEBAHq4IUeCNvIukfiIZQUUJfoukpUwrUq5kEYqh61t tsK49+N9Egd8MRaxVy2iVUH/bnKWTomlG+zAe9b4CLByH1BjIa4z/FRp2/HIvq9X saHG0DXgzmBc0/hLVmD3UscqgpGDVNPetzzFzOAjqqVLr9QOSp91WO4GdcXwPvIv NxydeRpWaIRzAFkeJRy2g+zidNQaN28NkW6fjcKMR5/NwlwqIVuvIiRPWF6qaTAh BOxwGlhmrf2cuReX9Sj/+Z3kRamoxdfrbGVkZQcpg0R1u/NOeCFtPfwHzA1P5EG9 RdptLjoJywYvY5SL3WknrkVQ0cvb4b+jJlx24cn1eC5C1Qw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:19 2025 by rpki-client