$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZoID3Op7APOX8z4ZXRLTuKMjY6E.roa File: ZoID3Op7APOX8z4ZXRLTuKMjY6E.roa (raw, json) Hash identifier: WpA0L1Tyy190oFD0eZbpzuNi+W4tuixD7FgU7jev3nw= Subject key identifier: 66:82:03:DC:EA:7B:00:F3:97:F3:3E:19:5D:12:D3:B8:A3:23:63:A1 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E73 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZoID3Op7APOX8z4ZXRLTuKMjY6E.roa Signing time: Fri 22 Aug 2025 08:58:18 +0000 ROA not before: Fri 22 Aug 2025 08:58:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 59.102.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3699 (0xe73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=668203DCEA7B00F397F33E195D12D3B8A32363A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:9f:fd:c0:98:87:c0:2f:a8:43:0d:50:22: f7:94:31:54:69:ad:8e:4b:63:fa:f4:c0:00:d2:26: 66:48:ef:8e:4c:d3:79:51:97:7e:d2:b3:c5:3b:13: ab:af:02:00:92:ec:f3:62:46:23:43:89:6e:84:e4: 7a:c4:31:f7:69:c5:b0:ac:e6:07:d1:ce:f2:bb:e4: e3:54:5c:ce:c4:7f:8d:f1:ae:d9:4d:e7:4d:95:1f: 9e:f6:49:52:63:a1:1f:c2:48:ae:f7:af:37:8b:b6: af:63:9c:d2:71:2f:70:4e:75:6d:f0:f9:bd:67:82: ae:9b:40:93:78:4a:79:eb:d9:51:4b:51:a4:89:40: 30:3b:6d:bb:98:4c:11:f5:14:09:9f:f6:90:c3:6d: b3:cb:c3:d0:32:8c:b6:e4:3f:f2:18:cc:ca:fc:bc: 88:13:6f:62:ee:c5:8a:de:80:98:b9:81:93:fb:86: cf:99:39:0b:51:40:f4:cb:78:22:54:f1:b2:90:2c: b0:96:ee:cb:6c:ca:c3:e4:cb:f2:07:f0:b4:96:19: 53:1c:3f:0c:f9:b3:a7:b4:e3:5a:3e:68:b5:56:b1: c6:85:06:03:a5:c5:db:0d:be:e1:eb:97:15:55:1a: 05:44:20:d3:a5:b2:3a:ce:88:fc:66:eb:f4:04:c6: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:82:03:DC:EA:7B:00:F3:97:F3:3E:19:5D:12:D3:B8:A3:23:63:A1 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZoID3Op7APOX8z4ZXRLTuKMjY6E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.102.128.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:fb:0d:d5:4e:95:81:16:44:75:fe:ae:4d:8f:30:d7:95:08: bd:6b:76:18:10:da:f2:55:40:63:42:0e:bd:2c:40:b1:8b:e2: e2:78:3c:aa:0b:6c:f3:f7:00:c6:ea:75:ae:04:91:09:b3:fd: 0e:2c:9f:71:56:f2:de:1d:5f:bf:a9:2a:3b:0a:be:49:0d:fc: 47:6b:60:63:df:e6:2e:59:f8:54:f3:84:18:33:b9:0a:ac:70: d2:31:9c:be:36:7a:51:f7:5a:5a:a0:c3:2b:e4:39:07:40:c2: fb:6f:51:4e:7b:b2:e5:66:11:20:5b:39:4a:da:b1:85:0d:10: c4:9e:2a:41:a2:95:53:9e:d3:2a:cf:96:01:ab:5c:0b:e0:6f: 97:02:51:e8:3c:10:83:b1:ad:34:ea:97:ae:34:77:37:3c:5c: 8e:bc:c8:95:b4:7b:33:03:db:32:18:c3:79:ca:36:72:f6:d2: 5a:4e:ad:e3:2c:4a:7b:03:b6:00:84:15:c7:e1:2e:cc:c1:e1: 77:f1:58:a9:4c:15:64:a1:2a:8a:8d:52:50:84:00:88:00:70: d4:6d:69:28:03:55:5b:f2:2d:73:07:8a:ac:dc:af:78:25:74: bb:ca:81:9c:d9:f8:d2:26:fc:01:ae:68:d6:4c:52:54:de:5c: c1:93:34:27 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY2ODIwM0RDRUE3QjAw RjM5N0YzM0UxOTVEMTJEM0I4QTMyMzYzQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWIp/9wJiHwC+oQw1QIveUMVRprY5LY/r0wADSJmZI745M03lR l37Ss8U7E6uvAgCS7PNiRiNDiW6E5HrEMfdpxbCs5gfRzvK75ONUXM7Ef43xrtlN 502VH572SVJjoR/CSK73rzeLtq9jnNJxL3BOdW3w+b1ngq6bQJN4Snnr2VFLUaSJ QDA7bbuYTBH1FAmf9pDDbbPLw9AyjLbkP/IYzMr8vIgTb2LuxYregJi5gZP7hs+Z OQtRQPTLeCJU8bKQLLCW7stsysPky/IH8LSWGVMcPwz5s6e041o+aLVWscaFBgOl xdsNvuHrlxVVGgVEINOlsjrOiPxm6/QExpINAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUZoID3Op7APOX8z4ZXRLTuKMjY6EwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9ab0lEM09wN0FQT1g4ejRaWFJM VHVLTWpZNkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCO2aA MA0GCSqGSIb3DQEBCwUAA4IBAQA++w3VTpWBFkR1/q5NjzDXlQi9a3YYENryVUBj Qg69LECxi+LieDyqC2zz9wDG6nWuBJEJs/0OLJ9xVvLeHV+/qSo7Cr5JDfxHa2Bj 3+YuWfhU84QYM7kKrHDSMZy+NnpR91paoMMr5DkHQML7b1FOe7LlZhEgWzlK2rGF DRDEnipBopVTntMqz5YBq1wL4G+XAlHoPBCDsa006peuNHc3PFyOvMiVtHszA9sy GMN5yjZy9tJaTq3jLEp7A7YAhBXH4S7MweF38VipTBVkoSqKjVJQhACIAHDUbWko A1Vb8i1zB4qs3K94JXS7yoGc2fjSJvwBrmjWTFJU3lzBkzQn -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:26 2025 by rpki-client