$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/QWjpKbYGDGuloDnaczpvukOznJM.roa File: QWjpKbYGDGuloDnaczpvukOznJM.roa (raw, json) Hash identifier: DFgGYBjJxvKYFPwQ3bld/TLqv9xGm0zNxJ/0Aorj+nE= Subject key identifier: 41:68:E9:29:B6:06:0C:6B:A5:A0:39:DA:73:3A:6F:BA:43:B3:9C:93 Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0E43 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/QWjpKbYGDGuloDnaczpvukOznJM.roa Signing time: Fri 22 Aug 2025 08:52:37 +0000 ROA not before: Fri 22 Aug 2025 08:52:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 58.99.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3651 (0xe43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Aug 22 08:52:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4168E929B6060C6BA5A039DA733A6FBA43B39C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:bf:b7:16:bb:6b:33:14:ab:a8:11:c5:80: d9:bb:d9:6a:93:b6:ac:9f:23:8c:6c:ae:2a:df:fe: 01:d3:2f:78:f8:1a:58:16:6e:6d:36:4a:89:c2:4d: 56:f1:c4:7a:ba:83:df:ae:f7:83:bd:81:64:f0:7a: eb:49:3d:8f:b2:e0:3d:fc:7b:8c:b8:e2:91:7e:f4: d0:73:b9:cf:5d:2e:ab:76:d5:07:0a:a2:e1:8e:e3: be:49:a3:3b:9e:dd:25:36:cb:d2:1d:c7:07:92:3a: 1f:68:87:75:34:6d:8e:c8:4d:fe:3f:b5:f0:6f:5d: 34:ed:e4:9b:63:fd:fa:39:d2:6b:53:17:8b:29:d8: f9:68:2b:2b:c0:f0:ac:c9:6b:77:db:e1:d9:65:fe: 20:0c:fd:58:9d:a7:68:0f:d7:b7:60:01:41:3a:99: 4c:87:3a:ef:f0:07:bb:bd:e5:f5:d0:b1:f2:09:1d: f8:7a:3f:dd:10:99:db:a6:98:12:25:98:d3:50:ef: fb:1e:4f:b5:a7:bf:09:87:9e:f6:8d:24:6e:10:5c: 0a:57:d5:20:a6:a4:17:1b:1f:8f:e0:f0:61:68:9d: e2:09:a8:c7:36:f8:c1:8b:37:43:f1:2b:6e:d4:fa: 9c:d7:38:65:8b:4c:86:ca:c9:4d:d2:15:bd:80:ad: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:68:E9:29:B6:06:0C:6B:A5:A0:39:DA:73:3A:6F:BA:43:B3:9C:93 X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/QWjpKbYGDGuloDnaczpvukOznJM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.99.64.0/18 Signature Algorithm: sha256WithRSAEncryption 65:cf:f5:9f:70:6e:69:74:7a:81:a4:90:e5:32:ca:87:68:cb: d1:86:4b:0b:a2:91:04:d0:3b:1f:e7:b8:a6:3d:99:d9:d3:f3: bc:d8:a4:a6:0a:80:ae:6b:97:c6:e0:c4:48:4b:04:cd:81:d6: 9c:93:5e:d0:6b:04:b4:ba:f1:6f:7e:4f:ef:da:9d:5b:a1:9a: 33:4c:07:f8:98:71:c9:81:1f:83:d2:b8:bf:40:28:da:a9:ff: fd:55:86:1b:41:74:0f:e1:82:d0:f4:f4:e3:3b:0d:a7:1e:0b: e7:b0:b4:da:63:cb:61:87:ef:db:9b:87:6f:93:21:3f:44:9e: 9b:de:b5:1c:56:40:72:49:7e:13:63:d7:f1:68:02:3d:93:3d: 2e:70:7f:0f:4b:96:ef:29:05:ea:ef:50:41:ee:a8:bf:02:7a: fa:d9:59:43:0a:05:dd:d3:e4:61:f8:96:c1:25:5e:62:3f:06: 81:74:9a:35:67:b7:fa:1e:dc:45:69:60:6b:8d:45:a9:21:7a: 18:b3:f1:a6:10:a0:42:a6:e9:4f:b4:f7:10:49:50:ae:e2:dd: ca:dd:f6:08:a6:51:a3:53:43:4b:e8:37:fe:33:c2:52:9a:a6: 52:93:59:be:f0:3b:42:bf:95:dc:10:04:ee:25:92:e1:a6:69: ec:40:b7:ac -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTA4MjIw ODUyMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxNjhFOTI5QjYwNjBD NkJBNUEwMzlEQTczM0E2RkJBNDNCMzlDOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDalL+3FrtrMxSrqBHFgNm72WqTtqyfI4xsrirf/gHTL3j4GlgW bm02SonCTVbxxHq6g9+u94O9gWTweutJPY+y4D38e4y44pF+9NBzuc9dLqt21QcK ouGO475Jozue3SU2y9IdxweSOh9oh3U0bY7ITf4/tfBvXTTt5Jtj/fo50mtTF4sp 2PloKyvA8KzJa3fb4dll/iAM/Vidp2gP17dgAUE6mUyHOu/wB7u95fXQsfIJHfh6 P90QmdummBIlmNNQ7/seT7WnvwmHnvaNJG4QXApX1SCmpBcbH4/g8GFoneIJqMc2 +MGLN0PxK27U+pzXOGWLTIbKyU3SFb2ArcelAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQWjpKbYGDGuloDnaczpvukOznJMwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvUVdqcEtiWUdER3Vsb0RuYWN6cHZ1 a096bkpNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpjQDAN BgkqhkiG9w0BAQsFAAOCAQEAZc/1n3BuaXR6gaSQ5TLKh2jL0YZLC6KRBNA7H+e4 pj2Z2dPzvNikpgqArmuXxuDESEsEzYHWnJNe0GsEtLrxb35P79qdW6GaM0wH+Jhx yYEfg9K4v0Ao2qn//VWGG0F0D+GC0PT04zsNpx4L57C02mPLYYfv25uHb5MhP0Se m961HFZAckl+E2PX8WgCPZM9LnB/D0uW7ykF6u9QQe6ovwJ6+tlZQwoF3dPkYfiW wSVeYj8GgXSaNWe3+h7cRWlga41FqSF6GLPxphCgQqbpT7T3EElQruLdyt32CKZR o1NDS+g3/jPCUpqmUpNZvvA7Qr+V3BAE7iWS4aZp7EC3rA== -----END CERTIFICATE-----Generated at Sun Aug 24 14:17:19 2025 by rpki-client