$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/3JelqMAZJEQ-TJODQD40gHZ82vY.roa File: 3JelqMAZJEQ-TJODQD40gHZ82vY.roa (raw, json) Hash identifier: XwWgCJkvYzhqiA1p6tVFiAf4tp5T2jA6CKUecxGo8h0= Subject key identifier: DC:97:A5:A8:C0:19:24:44:3E:4C:93:83:40:3E:34:80:76:7C:DA:F6 Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0E45 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/3JelqMAZJEQ-TJODQD40gHZ82vY.roa Signing time: Fri 22 Aug 2025 08:52:38 +0000 ROA not before: Fri 22 Aug 2025 08:52:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 27.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3653 (0xe45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Aug 22 08:52:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DC97A5A8C01924443E4C9383403E3480767CDAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:57:ee:22:6c:00:d0:4a:0f:01:e0:e3:fd: 4c:f1:a1:8b:e2:51:52:5c:70:ab:b0:53:b7:84:8c: 43:a0:43:96:9d:78:0f:b4:59:e8:62:be:aa:05:6c: 0c:a0:d3:04:67:ee:03:1f:dc:fe:32:04:15:d9:ae: 69:36:63:71:7d:3c:e6:95:5c:7d:70:4f:b3:b8:5b: 73:e3:bc:0d:83:8b:79:a0:c3:7f:1a:16:f1:46:b4: ff:cf:d3:fa:1f:57:3a:ec:78:48:b9:00:e7:7f:87: d9:78:a7:c1:35:57:c5:02:71:e5:c0:76:73:65:5f: 84:ce:99:e1:3e:c8:f8:97:7d:64:d8:87:5c:9b:80: 9e:88:d9:75:a0:71:ab:6f:e3:47:42:6b:6b:eb:77: b8:cf:45:e1:0d:4b:1a:5f:6a:5f:a7:a3:11:42:82: 1e:b3:3c:b6:3e:e6:f5:83:cb:68:2c:0d:24:67:ac: b2:3a:ce:3c:29:00:b8:3e:c1:4e:fc:c8:3d:f8:66: 09:39:b0:0e:37:fd:30:e5:3e:5f:1a:00:6d:86:4a: af:77:18:46:57:3b:a3:2c:06:d9:20:45:af:f9:d5: 51:82:da:80:d7:fc:f6:2a:78:61:56:cc:50:d2:49: 09:12:54:65:0f:c5:19:6f:74:03:a4:c4:27:d5:5d: bb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:97:A5:A8:C0:19:24:44:3E:4C:93:83:40:3E:34:80:76:7C:DA:F6 X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/3JelqMAZJEQ-TJODQD40gHZ82vY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 50:c0:e0:7f:d3:8c:82:7e:27:2c:0e:bb:85:87:3e:37:85:7b: 80:b6:60:cb:a9:2b:63:35:9e:e0:a8:c1:22:61:3d:71:11:76: 7d:ee:a0:24:10:61:b6:27:d9:1f:0e:10:1f:56:88:af:8f:72: 99:5a:0a:24:5f:61:c8:10:5c:52:3f:60:41:0a:c4:3b:21:8e: b3:65:62:8d:b5:0d:6f:06:b2:e7:31:80:91:99:e6:c8:bb:c2: a0:31:2a:1f:71:e7:ef:e6:55:f2:13:31:3a:10:c0:15:ab:f2: 05:4b:5c:2a:80:64:c5:67:65:54:c5:5f:c8:f2:2f:8c:1e:ac: 5a:ec:89:86:12:4d:27:b0:19:3b:cc:9f:98:5a:ea:09:4f:f5: 6a:3d:3e:bc:5d:e7:eb:48:0e:0d:27:e5:43:d2:69:6f:81:66: fe:f5:bf:1d:51:71:5a:a9:67:6e:71:3a:f3:14:e3:40:c2:b9: 46:38:a3:22:35:4e:e8:32:75:08:5a:88:73:5b:f9:3d:0f:87: 0d:4d:b8:8e:7b:eb:bf:f4:32:79:49:dd:7d:08:15:77:d2:ba: 82:87:d4:25:6b:70:49:56:3b:2e:73:58:6b:d8:4c:ea:9d:4e: d6:33:f2:50:ae:40:ad:de:ba:d8:a1:cb:dd:4f:cd:e8:8e:1a: 5b:ff:0d:b8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTA4MjIw ODUyMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERDOTdBNUE4QzAxOTI0 NDQzRTRDOTM4MzQwM0UzNDgwNzY3Q0RBRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC31FfuImwA0EoPAeDj/UzxoYviUVJccKuwU7eEjEOgQ5adeA+0 WehivqoFbAyg0wRn7gMf3P4yBBXZrmk2Y3F9POaVXH1wT7O4W3PjvA2Di3mgw38a FvFGtP/P0/ofVzrseEi5AOd/h9l4p8E1V8UCceXAdnNlX4TOmeE+yPiXfWTYh1yb gJ6I2XWgcatv40dCa2vrd7jPReENSxpfal+noxFCgh6zPLY+5vWDy2gsDSRnrLI6 zjwpALg+wU78yD34Zgk5sA43/TDlPl8aAG2GSq93GEZXO6MsBtkgRa/51VGC2oDX /PYqeGFWzFDSSQkSVGUPxRlvdAOkxCfVXbtJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU3JelqMAZJEQ+TJODQD40gHZ82vYwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvM0plbHFNQVpKRVEtVEpPRFFENDBn SFo4MnZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBhtkQDAN BgkqhkiG9w0BAQsFAAOCAQEAUMDgf9OMgn4nLA67hYc+N4V7gLZgy6krYzWe4KjB ImE9cRF2fe6gJBBhtifZHw4QH1aIr49ymVoKJF9hyBBcUj9gQQrEOyGOs2VijbUN bway5zGAkZnmyLvCoDEqH3Hn7+ZV8hMxOhDAFavyBUtcKoBkxWdlVMVfyPIvjB6s WuyJhhJNJ7AZO8yfmFrqCU/1aj0+vF3n60gODSflQ9Jpb4Fm/vW/HVFxWqlnbnE6 8xTjQMK5RjijIjVO6DJ1CFqIc1v5PQ+HDU24jnvrv/QyeUndfQgVd9K6gofUJWtw SVY7LnNYa9hM6p1O1jPyUK5Ard662KHL3U/N6I4aW/8NuA== -----END CERTIFICATE-----Generated at Sun Aug 24 14:22:49 2025 by rpki-client