$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/AHOaEjlRVgYRdvnV52Yb1jBsrfo.roa File: AHOaEjlRVgYRdvnV52Yb1jBsrfo.roa (raw, json) Hash identifier: cBAbXyboheYj75aKfxJyLLESn9uhqT4sJIdvPbU8Hao= Subject key identifier: 00:73:9A:12:39:51:56:06:11:76:F9:D5:E7:66:1B:D6:30:6C:AD:FA Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0E4E Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/AHOaEjlRVgYRdvnV52Yb1jBsrfo.roa Signing time: Fri 22 Aug 2025 08:52:41 +0000 ROA not before: Fri 22 Aug 2025 08:52:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 58.99.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3662 (0xe4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Aug 22 08:52:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=00739A12395156061176F9D5E7661BD6306CADFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:49:d3:f8:84:d8:93:e8:71:bf:87:fb:19: b0:94:0a:cd:f5:43:07:05:a5:3b:0c:3f:89:d5:0f: 36:b8:55:d3:4e:ff:97:07:54:62:06:39:14:88:18: 2b:b7:80:21:9b:da:29:2a:51:d3:c2:f0:d2:74:c5: f3:80:9c:ad:68:7f:49:8f:43:bf:20:d0:34:08:95: 57:a0:fe:0e:1c:82:0c:10:26:d1:7f:63:2a:58:b5: d6:fa:c3:8c:43:d0:cd:30:17:d8:7a:ac:97:a3:67: 23:da:ea:fd:58:82:e4:7f:5c:c3:ce:19:60:c1:59: 80:6d:aa:2c:4e:c8:3f:4d:56:76:15:a0:ea:f6:b2: 1f:df:bb:1c:52:19:12:1f:30:83:9e:5d:b9:0f:08: b0:48:fe:59:c4:f1:c4:b3:20:1a:b4:6b:87:43:d5: 0d:3c:8d:3f:61:16:df:14:f3:69:10:72:4e:ba:70: 31:dc:06:20:6c:58:dc:16:8b:f4:75:1e:ab:e6:da: 59:8b:dd:64:9a:b5:4c:ae:14:21:f9:e7:5d:5d:d4: 62:de:30:32:f4:4b:e9:29:91:11:42:ae:26:08:b8: e8:8a:80:41:ed:b0:2b:6c:c6:f9:ee:20:8c:42:07: 76:2c:c4:da:e5:a3:03:09:d7:89:87:9d:b3:c7:2d: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:9A:12:39:51:56:06:11:76:F9:D5:E7:66:1B:D6:30:6C:AD:FA X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/AHOaEjlRVgYRdvnV52Yb1jBsrfo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.99.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5a:ba:40:52:78:97:ee:e6:49:c1:2b:24:e2:38:fa:d5:76:c3: f9:b1:d9:33:1e:c3:5a:12:22:ec:0f:65:aa:b1:f1:f7:a4:66: c2:0c:24:ed:ac:39:bc:79:f3:18:c8:c4:42:fe:27:e9:1b:0c: ab:3a:7e:73:ef:29:bf:65:43:9e:09:fd:49:30:5d:df:f9:aa: fb:a3:a4:db:79:5d:26:99:b0:78:14:b8:16:42:fe:09:ba:86: 24:f5:fc:55:50:00:cd:ee:7a:37:52:4f:90:d3:55:d8:f3:ab: 17:fe:89:49:21:d5:e7:e7:d7:0a:01:ce:b9:74:c7:bb:5d:a3: 99:f5:69:8e:f1:4a:90:cb:b8:8c:56:3c:af:4d:0d:5d:3b:36: b8:c6:f6:cd:39:44:c4:1d:e3:ce:34:ba:44:fe:bc:3c:df:7a: 09:27:20:78:16:90:0d:14:0b:44:fa:81:8c:2b:2d:6d:27:7e: 0c:24:1c:07:3c:2c:f8:e1:cb:aa:85:d3:9c:2e:33:c7:f3:67: 15:f7:ce:6c:4b:03:f5:39:99:ad:93:4b:f8:a9:70:e8:08:b3: 24:8c:38:f0:e6:f3:cc:d8:b5:69:21:c5:d1:93:23:da:e6:f0: 5e:6f:cd:4f:c5:83:1a:e9:f1:5c:bc:c8:70:0e:d8:46:20:fc: 1b:8a:93:29 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTA4MjIw ODUyNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwNzM5QTEyMzk1MTU2 MDYxMTc2RjlENUU3NjYxQkQ2MzA2Q0FERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8XUnT+ITYk+hxv4f7GbCUCs31QwcFpTsMP4nVDza4VdNO/5cH VGIGORSIGCu3gCGb2ikqUdPC8NJ0xfOAnK1of0mPQ78g0DQIlVeg/g4cggwQJtF/ YypYtdb6w4xD0M0wF9h6rJejZyPa6v1YguR/XMPOGWDBWYBtqixOyD9NVnYVoOr2 sh/fuxxSGRIfMIOeXbkPCLBI/lnE8cSzIBq0a4dD1Q08jT9hFt8U82kQck66cDHc BiBsWNwWi/R1Hqvm2lmL3WSatUyuFCH5511d1GLeMDL0S+kpkRFCriYIuOiKgEHt sCtsxvnuIIxCB3YsxNrlowMJ14mHnbPHLWBtAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUAHOaEjlRVgYRdvnV52Yb1jBsrfowHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvQUhPYUVqbFJWZ1lSZHZuVjUyWWIx akJzcmZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpjADAN BgkqhkiG9w0BAQsFAAOCAQEAWrpAUniX7uZJwSsk4jj61XbD+bHZMx7DWhIi7A9l qrHx96Rmwgwk7aw5vHnzGMjEQv4n6RsMqzp+c+8pv2VDngn9STBd3/mq+6Ok23ld JpmweBS4FkL+CbqGJPX8VVAAze56N1JPkNNV2POrF/6JSSHV5+fXCgHOuXTHu12j mfVpjvFKkMu4jFY8r00NXTs2uMb2zTlExB3jzjS6RP68PN96CScgeBaQDRQLRPqB jCstbSd+DCQcBzws+OHLqoXTnC4zx/NnFffObEsD9TmZrZNL+Klw6AizJIw48Obz zNi1aSHF0ZMj2ubwXm/NT8WDGunxXLzIcA7YRiD8G4qTKQ== -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:06 2025 by rpki-client