$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/Xe8onzJlieCJTQEf75c1_yTcRA8.roa File: Xe8onzJlieCJTQEf75c1_yTcRA8.roa (raw, json) Hash identifier: sdHuMczH+ii09SNSEqwMYxo/wRIK2HL4tUJHIIkvRPg= Subject key identifier: 5D:EF:28:9F:32:65:89:E0:89:4D:01:1F:EF:97:35:FF:24:DC:44:0F Certificate issuer: /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Certificate serial: 0B37 Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/Xe8onzJlieCJTQEf75c1_yTcRA8.roa Signing time: Fri 22 Aug 2025 08:56:37 +0000 ROA not before: Fri 22 Aug 2025 08:56:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 211.76.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Validity Not Before: Aug 22 08:56:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5DEF289F326589E0894D011FEF9735FF24DC440F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1b:e1:2c:f5:0a:86:40:3d:92:ee:ba:55:75: 42:5e:2c:b7:28:60:e1:de:7d:bc:0b:0f:58:14:85: d2:70:c0:a9:e2:66:e7:ca:17:bf:14:44:f1:bc:c8: e9:5f:ef:05:c8:67:3a:7d:fe:c3:25:9a:66:ba:1c: 4f:71:e0:73:e4:b0:b0:38:52:b2:8e:71:31:b3:69: 6f:6d:8f:e9:91:8d:83:93:98:50:8d:c8:ff:e5:c8: a9:1c:9b:70:9b:4e:c0:4d:63:9e:59:c3:54:62:30: 30:d9:2e:c5:be:42:d3:2a:21:cb:4c:a0:13:20:2b: 5c:ed:d7:e6:79:07:fd:fa:0d:67:03:52:e0:1c:d0: 21:48:13:09:5c:77:65:cd:b0:f1:fe:7f:d2:5b:b1: 87:05:2a:9a:d3:46:7c:b7:49:83:02:89:62:a2:c0: f0:46:90:b6:ec:46:84:53:1a:12:46:0a:7b:a7:6b: 3e:92:af:42:63:48:87:c6:79:7c:a6:74:c1:11:90: f5:9e:85:78:d1:d2:c0:3c:5c:29:70:41:a8:39:a0: a5:d0:23:54:ed:e0:63:86:fd:7b:33:7b:10:6e:c6: 17:f2:bb:a0:7c:02:a9:42:73:d6:2e:dd:6b:c3:bb: f8:8b:10:21:f7:b8:3c:7a:ff:b1:ab:4d:3a:6a:69: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:28:9F:32:65:89:E0:89:4D:01:1F:EF:97:35:FF:24:DC:44:0F X509v3 Authority Key Identifier: keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/Xe8onzJlieCJTQEf75c1_yTcRA8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.180.0/23 Signature Algorithm: sha256WithRSAEncryption 99:f3:b1:da:05:15:6e:84:92:aa:4a:af:fe:47:bb:4a:2f:d3: 2e:3d:12:07:79:72:09:6d:fc:63:ce:40:b6:90:7c:6b:4f:0b: dd:3b:e8:06:0a:46:9a:5d:1e:8a:38:de:17:e0:ac:46:2e:db: dd:1e:64:5a:58:0d:47:a9:5d:ce:bf:7e:c9:78:b6:8e:d9:b4: 7a:35:c0:0d:32:a3:f1:33:1c:ab:fb:4e:3c:ef:74:d2:3d:e0: 9b:74:17:7a:e3:33:61:0a:7e:fc:d1:6c:58:c3:da:bd:e9:a9: fd:9e:df:ae:a5:1a:f9:55:ff:13:8b:20:85:50:54:d9:37:03: 38:4d:75:aa:86:3e:14:8f:f4:0e:b5:60:c4:91:1b:25:ae:ba: f5:c8:bc:ce:8d:c3:b0:44:2d:ba:8c:1f:96:2f:e6:d6:cc:1f: 23:76:12:2f:1d:1c:b5:6b:96:8e:10:50:cb:c5:ef:0b:1b:86: b8:61:7c:5b:1f:cc:70:cf:1e:d9:5d:b3:05:f2:79:88:2c:23: 1d:dd:7f:c0:b7:6b:d4:29:97:aa:ed:3b:bb:d6:9b:1f:b1:4d: 58:9f:14:37:cb:05:88:3c:6d:4e:a9:bf:83:4f:40:01:48:25: 7e:ea:55:42:65:75:5e:eb:13:98:a6:1a:fd:d9:ba:f5:e1:2e: b9:48:a5:41 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkx QkFGNkEwQzE3NkNFMEEzMjQyMzY2NkJDRTc4RjlEOTE4MjRDQjAeFw0yNTA4MjIw ODU2MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVERUYyODlGMzI2NTg5 RTA4OTREMDExRkVGOTczNUZGMjREQzQ0MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXG+Es9QqGQD2S7rpVdUJeLLcoYOHefbwLD1gUhdJwwKniZufK F78URPG8yOlf7wXIZzp9/sMlmma6HE9x4HPksLA4UrKOcTGzaW9tj+mRjYOTmFCN yP/lyKkcm3CbTsBNY55Zw1RiMDDZLsW+QtMqIctMoBMgK1zt1+Z5B/36DWcDUuAc 0CFIEwlcd2XNsPH+f9JbsYcFKprTRny3SYMCiWKiwPBGkLbsRoRTGhJGCnunaz6S r0JjSIfGeXymdMERkPWehXjR0sA8XClwQag5oKXQI1Tt4GOG/XszexBuxhfyu6B8 AqlCc9Yu3WvDu/iLECH3uDx6/7GrTTpqabGPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUXe8onzJlieCJTQEf75c1/yTcRA8wHwYDVR0jBBgwFoAUKRuvagwXbOCjJCNm a854+dkYJMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdEUy9L UnV2YWd3WGJPQ2pKQ05tYTg1NC1ka1lKTXMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0tSdXZhZ3dYYk9DakpDTm1hODU0LWRrWUpNcy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RXRFMvWGU4b256SmxpZUNKVFFFZjc1YzFf eVRjUkE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdNMtDAN BgkqhkiG9w0BAQsFAAOCAQEAmfOx2gUVboSSqkqv/ke7Si/TLj0SB3lyCW38Y85A tpB8a08L3TvoBgpGml0eijjeF+CsRi7b3R5kWlgNR6ldzr9+yXi2jtm0ejXADTKj 8TMcq/tOPO900j3gm3QXeuMzYQp+/NFsWMPavemp/Z7frqUa+VX/E4sghVBU2TcD OE11qoY+FI/0DrVgxJEbJa669ci8zo3DsEQtuowfli/m1swfI3YSLx0ctWuWjhBQ y8XvCxuGuGF8Wx/McM8e2V2zBfJ5iCwjHd1/wLdr1CmXqu07u9abH7FNWJ8UN8sF iDxtTqm/g09AAUglfupVQmV1XusTmKYa/dm69eEuuUilQQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:06:19 2025 by rpki-client