$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/muHKtd9q8EJKlETqDKyVgTo2xdo.roa File: muHKtd9q8EJKlETqDKyVgTo2xdo.roa (raw, json) Hash identifier: hdrxlvxm12hZ5xMDV9CkICihPRIiKD1I8o541bkSi74= Subject key identifier: 9A:E1:CA:B5:DF:6A:F0:42:4A:94:44:EA:0C:AC:95:81:3A:36:C5:DA Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 109C Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/muHKtd9q8EJKlETqDKyVgTo2xdo.roa Signing time: Fri 22 Aug 2025 08:55:39 +0000 ROA not before: Fri 22 Aug 2025 08:55:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 203.71.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4252 (0x109c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9AE1CAB5DF6AF0424A9444EA0CAC95813A36C5DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:15:b8:0d:e1:db:45:c2:cd:51:67:70:cf: fc:a9:3a:9a:b1:70:7d:e5:c0:5f:29:6c:41:05:98: 00:65:c7:75:fb:26:f9:c2:66:0d:68:ef:cd:6e:d3: 62:ff:4d:13:7d:57:94:4c:d4:71:a5:9c:9c:1c:00: 8a:3d:a3:29:33:d0:04:d1:e1:29:2b:70:b1:c5:06: 6e:f7:4a:85:39:88:d2:da:ae:c2:91:6c:ed:ce:3e: a3:f7:e3:7b:f7:16:b0:97:a2:04:e3:83:76:05:24: 58:9f:af:3f:f6:f5:b9:dc:c8:68:f3:f4:da:24:f1: 56:81:c8:55:59:4a:74:ae:bb:54:fd:ab:42:43:21: dd:5b:bd:c9:d4:92:1d:a5:d3:3c:8a:06:c0:fa:54: 9c:c8:16:75:fb:c8:96:1d:56:d2:60:3e:c0:14:21: df:02:e7:3a:0c:55:1e:8a:99:88:9b:6d:ca:ef:2f: 8f:51:a2:e3:f8:42:5b:98:1b:34:95:c8:4d:0e:ec: a6:01:c8:ec:11:9d:15:db:ae:7e:ca:55:70:de:4c: f0:2c:9b:66:69:9c:f5:ac:cf:c1:5f:7e:39:f9:75: be:d0:bb:c4:24:6b:1d:ce:4b:3f:98:6e:ab:4c:5a: 1e:1a:8e:92:0d:17:73:8b:91:b4:9a:8d:a9:38:6f: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E1:CA:B5:DF:6A:F0:42:4A:94:44:EA:0C:AC:95:81:3A:36:C5:DA X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/muHKtd9q8EJKlETqDKyVgTo2xdo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.71.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:e7:4a:8a:08:a6:c1:64:d7:05:1a:63:20:a3:4c:05:53:79: 52:ed:3b:47:5f:9e:0d:f5:6f:0e:ae:38:89:92:58:eb:d1:88: 8b:61:61:de:ab:fd:71:36:54:c0:de:27:3d:4f:e9:1a:dd:32: e8:7d:42:aa:3c:cc:fd:69:02:81:96:38:4e:6d:e4:a7:5a:c2: 4a:ea:e0:aa:e5:2f:77:34:9e:92:0a:b0:38:da:99:27:22:b2: dd:54:76:e1:55:72:fa:89:ce:9f:43:4f:12:58:f8:54:f7:6e: 50:f4:9c:64:94:51:93:3b:8e:fb:ae:d4:15:81:da:72:a0:34: e2:fc:69:a0:b2:63:b9:a1:f8:8f:f2:56:70:cf:a3:5e:9a:87: 11:f2:a9:4d:e1:8d:ba:c0:60:88:bd:dd:0d:06:6c:42:c6:53: 26:6c:1e:8e:38:0f:b0:ba:18:6d:30:50:a3:94:8f:05:bf:6c: 89:b5:2c:d1:7f:2e:38:f6:ac:ef:f8:f1:60:f9:9a:96:6e:6a: 9b:39:eb:08:e9:7f:c0:c4:0d:72:6c:e4:54:48:83:ca:62:eb: 62:50:5d:0f:63:32:33:92:5f:68:19:9d:2b:54:2d:98:3d:4a: fb:bc:0e:d2:07:60:06:67:b7:56:87:e7:d0:dc:a2:42:15:f7: 35:cf:b2:4d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBRTFDQUI1REY2QUYw NDI0QTk0NDRFQTBDQUM5NTgxM0EzNkM1REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9kRW4DeHbRcLNUWdwz/ypOpqxcH3lwF8pbEEFmABlx3X7JvnC Zg1o781u02L/TRN9V5RM1HGlnJwcAIo9oykz0ATR4SkrcLHFBm73SoU5iNLarsKR bO3OPqP343v3FrCXogTjg3YFJFifrz/29bncyGjz9Nok8VaByFVZSnSuu1T9q0JD Id1bvcnUkh2l0zyKBsD6VJzIFnX7yJYdVtJgPsAUId8C5zoMVR6KmYibbcrvL49R ouP4QluYGzSVyE0O7KYByOwRnRXbrn7KVXDeTPAsm2ZpnPWsz8Fffjn5db7Qu8Qk ax3OSz+YbqtMWh4ajpINF3OLkbSajak4b0P5AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUmuHKtd9q8EJKlETqDKyVgTo2xdowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9tdUhLdGQ5cThFSktsRVRxREt5 VmdUbzJ4ZG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0cw DQYJKoZIhvcNAQELBQADggEBAFbnSooIpsFk1wUaYyCjTAVTeVLtO0dfng31bw6u OImSWOvRiIthYd6r/XE2VMDeJz1P6RrdMuh9Qqo8zP1pAoGWOE5t5Kdawkrq4Krl L3c0npIKsDjamScist1UduFVcvqJzp9DTxJY+FT3blD0nGSUUZM7jvuu1BWB2nKg NOL8aaCyY7mh+I/yVnDPo16ahxHyqU3hjbrAYIi93Q0GbELGUyZsHo44D7C6GG0w UKOUjwW/bIm1LNF/Ljj2rO/48WD5mpZuaps56wjpf8DEDXJs5FRIg8pi62JQXQ9j MjOSX2gZnStULZg9Svu8DtIHYAZnt1aH59DcokIV9zXPsk0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:18 2025 by rpki-client