$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa File: I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa (raw, json) Hash identifier: L8A2jdQkowzyLRP7tI8d1O2rgaSllBH6XNO0Turak5o= Subject key identifier: 23:4B:A4:F5:DA:AD:A1:3F:EE:0E:43:71:90:B9:9A:1C:C3:64:44:61 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0DF0 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa Signing time: Fri 22 Aug 2025 08:52:12 +0000 ROA not before: Fri 22 Aug 2025 08:52:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18018 IP address blocks: 122.255.94.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 22 08:52:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=234BA4F5DAADA13FEE0E437190B99A1CC3644461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:fa:80:4b:63:3b:cc:2e:f4:03:fa:a9:39: 5e:67:f7:29:8b:af:66:62:20:9f:3b:62:bd:6e:e9: 94:fc:b9:61:0d:dd:35:13:35:96:a4:60:a8:cc:89: d7:f8:3c:32:84:6d:18:dc:e4:ba:fc:5a:cf:df:08: 5f:37:18:89:b0:65:10:fc:b6:bc:5c:39:30:61:7a: 7a:85:d7:59:0f:cf:57:0a:a8:f4:0d:46:73:02:fd: 77:de:c8:72:fa:eb:a3:9a:9d:26:61:08:ce:76:5f: 1a:7b:f4:09:bd:7f:10:b4:5f:06:52:65:6e:cf:2b: b8:f6:b7:34:c1:74:50:9e:98:b7:70:98:85:82:a5: 33:18:1a:78:32:a5:f7:4b:e3:79:5f:41:eb:49:80: 9d:54:25:1d:a3:94:af:d5:00:c5:b4:98:76:00:38: 7f:db:a3:fc:24:2a:53:b8:ca:97:7a:7b:c8:dd:d7: 18:cd:21:86:a4:07:42:9c:f7:fe:0a:20:99:02:61: 07:52:f1:4c:24:0b:52:de:f4:8b:57:b0:8d:0a:cb: b0:32:fd:51:40:3a:8e:6b:ac:bf:1f:4b:1b:7c:10: 53:3e:68:24:9e:82:18:33:cf:ff:77:38:9f:58:8b: cd:98:09:a3:54:69:90:20:4b:3e:b7:58:a3:ab:94: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4B:A4:F5:DA:AD:A1:3F:EE:0E:43:71:90:B9:9A:1C:C3:64:44:61 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/I0uk9dqtoT_uDkNxkLmaHMNkRGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.94.0/28 Signature Algorithm: sha256WithRSAEncryption bc:45:16:74:f4:96:07:53:8e:bf:fc:b6:fd:00:12:48:40:94: 01:65:c3:fa:16:09:8e:75:f9:9f:30:60:4c:79:fb:e8:8d:24: 6b:a3:33:cc:c7:3d:de:58:ee:03:88:de:73:e3:5c:a6:8e:15: bd:8a:d9:c1:76:cc:da:fd:c3:f6:83:f7:86:a9:bf:8f:28:3b: d2:c8:3b:b3:9f:e3:47:ac:bc:f0:2a:1a:90:c0:fd:23:ed:6b: c3:9b:49:a4:83:ab:84:10:d1:be:47:96:52:4e:34:e5:3d:40: 69:02:71:2c:10:af:f0:9b:93:68:f2:b2:93:c1:fe:30:3f:43: 1f:dc:d3:b7:3d:6b:48:3f:a2:24:24:44:06:44:29:c6:c4:f2: d9:ae:72:ce:68:f2:12:84:c4:88:62:0b:fd:1b:c9:5c:00:54: e7:93:56:0b:a4:f1:47:1d:0e:55:75:5d:d8:3e:d9:b0:65:b7: bf:db:a2:d3:32:74:92:94:c1:73:73:84:61:e6:76:67:0f:4e: b8:e9:d3:f1:d4:5d:8b:19:9d:40:0c:9e:4c:1c:42:b6:ce:15: 75:d5:3a:7c:22:3e:c5:82:bd:72:9d:c8:f7:b4:97:ff:8d:53: eb:0d:f3:1e:67:71:c5:aa:0e:08:46:04:82:14:b9:ce:ed:1f: 8c:df:03:d6 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw ODUyMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzNEJBNEY1REFBREEx M0ZFRTBFNDM3MTkwQjk5QTFDQzM2NDQ0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIdfqAS2M7zC70A/qpOV5n9ymLr2ZiIJ87Yr1u6ZT8uWEN3TUT NZakYKjMidf4PDKEbRjc5Lr8Ws/fCF83GImwZRD8trxcOTBhenqF11kPz1cKqPQN RnMC/XfeyHL666OanSZhCM52Xxp79Am9fxC0XwZSZW7PK7j2tzTBdFCemLdwmIWC pTMYGngypfdL43lfQetJgJ1UJR2jlK/VAMW0mHYAOH/bo/wkKlO4ypd6e8jd1xjN IYakB0Kc9/4KIJkCYQdS8UwkC1Le9ItXsI0Ky7Ay/VFAOo5rrL8fSxt8EFM+aCSe ghgzz/93OJ9Yi82YCaNUaZAgSz63WKOrlJRjAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUI0uk9dqtoT/uDkNxkLmaHMNkRGEwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9JMHVrOWRxdG9UX3VEa054a0xt YUhNTmtSR0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEev9e ADANBgkqhkiG9w0BAQsFAAOCAQEAvEUWdPSWB1OOv/y2/QASSECUAWXD+hYJjnX5 nzBgTHn76I0ka6MzzMc93ljuA4jec+Ncpo4VvYrZwXbM2v3D9oP3hqm/jyg70sg7 s5/jR6y88CoakMD9I+1rw5tJpIOrhBDRvkeWUk405T1AaQJxLBCv8JuTaPKyk8H+ MD9DH9zTtz1rSD+iJCREBkQpxsTy2a5yzmjyEoTEiGIL/RvJXABU55NWC6TxRx0O VXVd2D7ZsGW3v9ui0zJ0kpTBc3OEYeZ2Zw9OuOnT8dRdixmdQAyeTBxCts4VddU6 fCI+xYK9cp3I97SX/41T6w3zHmdxxaoOCEYEghS5zu0fjN8D1g== -----END CERTIFICATE-----Generated at Mon Oct 20 21:00:23 2025 by rpki-client