$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/0f_-NuP5tkMNqydkxFRz-2kSLAE.roa File: 0f_-NuP5tkMNqydkxFRz-2kSLAE.roa (raw, json) Hash identifier: qUkbl1kgH0GjE0cskLl2GwkscNyeE9C2Txp6pxLQpas= Subject key identifier: D1:FF:FE:36:E3:F9:B6:43:0D:AB:27:64:C4:54:73:FB:69:12:2C:01 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1462 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/0f_-NuP5tkMNqydkxFRz-2kSLAE.roa Signing time: Fri 22 Aug 2025 08:51:28 +0000 ROA not before: Fri 22 Aug 2025 08:51:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 2404:178::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5218 (0x1462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D1FFFE36E3F9B6430DAB2764C45473FB69122C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:19:04:c6:c2:ad:37:e3:1a:5c:26:02:0f: 16:64:46:b0:d6:4f:5b:1a:07:69:b0:2c:c6:de:23: 15:87:eb:ef:98:be:bb:3b:be:7e:7e:4c:0a:e6:fa: b0:71:82:3c:37:f9:ba:56:c2:58:24:f2:b0:87:59: 0c:fe:94:02:25:4c:4d:0c:72:9e:39:d4:0a:7a:90: 44:fa:46:bf:92:de:13:57:6a:64:6d:cd:b8:1c:60: dc:b7:bb:bb:8d:f8:0d:31:b0:91:16:ee:f2:ab:0f: d7:de:17:db:0f:74:48:96:81:6f:ac:99:d9:6c:a2: e1:f3:0e:47:e1:5a:c6:5c:c5:16:ce:b2:19:63:28: a2:0a:c0:d7:8a:27:c3:0f:ea:f2:e8:ae:4b:3e:46: 14:2b:33:6f:67:9f:04:10:62:1e:8a:56:cb:87:d6: e5:42:e5:7a:37:ed:27:48:e6:4a:01:ed:38:49:59: 7e:0e:0e:4b:f6:34:4d:ac:10:ab:f8:ae:05:0c:81: 39:78:33:d6:ec:82:12:a8:a3:00:db:04:ca:30:48: 63:86:16:f9:d4:b5:72:ff:6b:ca:c8:8f:cd:0d:82: b0:2d:5e:4a:fa:6a:99:e0:0d:94:45:73:f4:85:25: dc:1f:db:ad:8d:e4:4a:b1:dc:24:b8:11:17:ee:3f: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:FE:36:E3:F9:B6:43:0D:AB:27:64:C4:54:73:FB:69:12:2C:01 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/0f_-NuP5tkMNqydkxFRz-2kSLAE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:178::/32 Signature Algorithm: sha256WithRSAEncryption 40:5a:96:91:00:07:6d:56:8e:48:53:a2:ac:ae:60:75:02:86: a5:34:5b:6b:4f:cd:1e:da:57:2c:24:ef:c2:31:a1:c6:10:9d: c6:1d:e1:33:19:fe:8a:1d:24:4e:5b:51:d6:f2:64:eb:32:7e: 03:8c:6c:ba:6b:b4:5c:56:18:8f:ad:01:a9:5c:80:4e:ed:34: 27:50:d1:38:c5:27:0b:0e:dc:b6:f1:a5:c3:e9:eb:52:d7:12: 6d:e7:64:83:cc:4e:f4:ac:64:12:09:6c:38:01:4d:eb:f6:2e: 47:86:3c:e8:b9:d9:fb:95:3e:71:ae:ef:25:50:e2:74:0a:6d: 31:5d:03:e0:4f:ca:42:9e:49:fc:fa:86:d6:f5:fc:a4:77:3a: 3b:1b:8c:d3:19:bb:49:9d:ad:af:7c:38:06:b4:5b:b1:33:8e: f5:9c:53:92:2f:4c:b9:b1:67:0e:6c:73:44:48:2a:fd:11:f9: a8:83:02:17:58:ea:79:d1:f1:13:5f:9b:6c:ce:03:b9:06:bc: 8b:54:fd:99:e8:85:aa:00:5e:bd:62:35:e5:f1:a0:ef:24:8a: ec:36:14:bb:ae:78:5c:24:f8:bc:b6:e2:ea:98:55:44:3e:5e: 0e:a1:4c:c3:87:a6:63:b3:64:e2:09:9b:40:c4:64:e2:61:cb: 6b:92:27:f9 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxRkZGRTM2RTNGOUI2 NDMwREFCMjc2NEM0NTQ3M0ZCNjkxMjJDMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaeBkExsKtN+MaXCYCDxZkRrDWT1saB2mwLMbeIxWH6++Yvrs7 vn5+TArm+rBxgjw3+bpWwlgk8rCHWQz+lAIlTE0Mcp451Ap6kET6Rr+S3hNXamRt zbgcYNy3u7uN+A0xsJEW7vKrD9feF9sPdEiWgW+smdlsouHzDkfhWsZcxRbOshlj KKIKwNeKJ8MP6vLorks+RhQrM29nnwQQYh6KVsuH1uVC5Xo37SdI5koB7ThJWX4O Dkv2NE2sEKv4rgUMgTl4M9bsghKoowDbBMowSGOGFvnUtXL/a8rIj80NgrAtXkr6 apngDZRFc/SFJdwf262N5Eqx3CS4ERfuP3nFAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU0f/+NuP5tkMNqydkxFRz+2kSLAEwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy8wZl8tTnVQNXRrTU5xeWRreEZS ei0ya1NMQUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAQB eDANBgkqhkiG9w0BAQsFAAOCAQEAQFqWkQAHbVaOSFOirK5gdQKGpTRba0/NHtpX LCTvwjGhxhCdxh3hMxn+ih0kTltR1vJk6zJ+A4xsumu0XFYYj60BqVyATu00J1DR OMUnCw7ctvGlw+nrUtcSbedkg8xO9KxkEglsOAFN6/YuR4Y86LnZ+5U+ca7vJVDi dAptMV0D4E/KQp5J/PqG1vX8pHc6OxuM0xm7SZ2tr3w4BrRbsTOO9ZxTki9MubFn DmxzREgq/RH5qIMCF1jqedHxE1+bbM4DuQa8i1T9meiFqgBevWI15fGg7ySK7DYU u654XCT4vLbi6phVRD5eDqFMw4emY7Nk4gmbQMRk4mHLa5In+Q== -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:28 2025 by rpki-client