$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa File: PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa (raw, json) Hash identifier: 9n2jIbNXXlW3qMBCrLzWj0o4VjPoZDBdIZ21q4Pblac= Subject key identifier: 3D:9C:48:AF:86:59:FE:3C:C2:71:E1:1A:8D:17:6A:3C:B9:78:2B:33 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0DEE Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa Signing time: Fri 22 Aug 2025 08:52:12 +0000 ROA not before: Fri 22 Aug 2025 08:52:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18018 IP address blocks: 122.255.93.112/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3566 (0xdee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 22 08:52:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3D9C48AF8659FE3CC271E11A8D176A3CB9782B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:01:d1:87:4c:20:03:36:c8:5d:6a:a0:ef: 92:95:0e:da:e3:2e:a2:4e:db:ac:30:a6:34:b4:63: a4:b2:49:f4:45:d2:e5:b3:d8:d3:d3:4e:5f:4a:32: 94:5c:b9:b0:76:13:13:96:9e:17:cd:8e:eb:88:9d: 4c:ab:87:73:03:d7:0f:82:ad:d2:d8:ad:bf:45:57: 81:f1:29:88:d0:6c:5a:3d:b8:bb:ac:cd:4a:29:9a: bc:74:5c:d4:11:95:34:ee:61:a0:2c:19:36:d2:dd: 18:76:29:cc:6f:78:8b:fb:11:f2:e6:ab:d1:56:c5: c6:0e:a6:11:28:cd:cb:e3:99:28:33:04:28:e8:05: 59:1a:0d:d2:99:aa:75:6b:db:41:95:20:31:32:79: b5:53:fe:32:05:76:21:f0:26:9b:0d:e1:66:10:ec: 77:d8:63:d6:58:60:3b:75:00:ce:48:96:64:66:ea: 38:df:f9:36:87:16:63:92:a1:22:c7:91:1b:8d:4c: d2:67:81:60:92:98:c6:b0:e1:bc:49:27:97:47:bf: a2:8f:3f:ca:06:40:10:bd:c9:5e:40:fe:96:16:ac: 0d:ae:2b:38:43:fd:11:8d:aa:b9:e7:bb:a1:70:91: 6c:5f:06:f4:1b:a2:dc:d5:69:38:bc:8f:9f:9f:0a: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:48:AF:86:59:FE:3C:C2:71:E1:1A:8D:17:6A:3C:B9:78:2B:33 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/PZxIr4ZZ_jzCceEajRdqPLl4KzM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.93.112/28 Signature Algorithm: sha256WithRSAEncryption 8d:11:94:7b:ec:ea:bc:ba:11:16:0a:f6:49:09:d7:c7:e1:1f: 19:20:eb:07:6d:bf:d3:f8:8e:be:47:30:4c:bb:9b:bc:4f:78: 4a:5c:b3:6d:af:8c:9c:25:dc:06:81:7c:8c:3c:c0:55:4a:dd: 28:75:6c:57:4e:16:e6:7b:78:5e:b8:ad:ac:d7:fd:25:c6:75: 91:ae:2d:84:7b:53:64:a9:fd:29:9d:d3:d1:61:2b:64:80:31: b3:c5:91:98:a4:83:28:05:bb:66:52:2e:74:9b:92:5a:fe:f4: d3:5c:48:dd:9d:a9:ec:0f:4f:96:97:4e:f6:27:ba:72:cb:20: be:6a:ad:af:1c:d9:df:c1:7f:ea:d7:65:02:9a:b8:d9:01:1a: db:4d:50:33:ec:35:41:25:3a:02:bc:38:45:d4:df:5d:ee:e1: 21:38:1c:90:3a:2f:8e:c3:9c:e7:b7:3b:e1:83:bf:0d:c8:f1: 6d:34:c0:5c:a1:93:b1:aa:88:0f:69:e4:46:04:a6:34:8a:01: 8c:d1:ef:ae:ca:c5:0c:f5:30:e2:ef:cd:d8:42:82:70:fc:fa: cc:1a:c1:ec:93:d2:e9:5c:5a:0b:f1:ec:42:55:a0:c8:38:b2: 67:57:9d:d6:1c:7c:4f:bb:91:36:f0:4e:50:d3:28:34:07:26: 1a:5c:b1:95 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw ODUyMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNEOUM0OEFGODY1OUZF M0NDMjcxRTExQThEMTc2QTNDQjk3ODJCMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcIgHRh0wgAzbIXWqg75KVDtrjLqJO26wwpjS0Y6SySfRF0uWz 2NPTTl9KMpRcubB2ExOWnhfNjuuInUyrh3MD1w+CrdLYrb9FV4HxKYjQbFo9uLus zUopmrx0XNQRlTTuYaAsGTbS3Rh2KcxveIv7EfLmq9FWxcYOphEozcvjmSgzBCjo BVkaDdKZqnVr20GVIDEyebVT/jIFdiHwJpsN4WYQ7HfYY9ZYYDt1AM5IlmRm6jjf +TaHFmOSoSLHkRuNTNJngWCSmMaw4bxJJ5dHv6KPP8oGQBC9yV5A/pYWrA2uKzhD /RGNqrnnu6FwkWxfBvQbotzVaTi8j5+fCkqjAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUPZxIr4ZZ/jzCceEajRdqPLl4KzMwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9QWnhJcjRaWl9qekNjZUVhalJk cVBMbDRLek0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEev9d cDANBgkqhkiG9w0BAQsFAAOCAQEAjRGUe+zqvLoRFgr2SQnXx+EfGSDrB22/0/iO vkcwTLubvE94Slyzba+MnCXcBoF8jDzAVUrdKHVsV04W5nt4XritrNf9JcZ1ka4t hHtTZKn9KZ3T0WErZIAxs8WRmKSDKAW7ZlIudJuSWv7001xI3Z2p7A9PlpdO9ie6 cssgvmqtrxzZ38F/6tdlApq42QEa201QM+w1QSU6Arw4RdTfXe7hITgckDovjsOc 57c74YO/DcjxbTTAXKGTsaqID2nkRgSmNIoBjNHvrsrFDPUw4u/N2EKCcPz6zBrB 7JPS6VxaC/HsQlWgyDiyZ1ed1hx8T7uRNvBOUNMoNAcmGlyxlQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:43:35 2025 by rpki-client