$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/xWmnv0vKzZDI3BVN8uj_GUp-Q60.roa File: xWmnv0vKzZDI3BVN8uj_GUp-Q60.roa (raw, json) Hash identifier: YWDS0ViCfvFhQticTPoxFVMypHmaD4V59bfDlKb/z4E= Subject key identifier: C5:69:A7:BF:4B:CA:CD:90:C8:DC:15:4D:F2:E8:FF:19:4A:7E:43:AD Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0DEC Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/xWmnv0vKzZDI3BVN8uj_GUp-Q60.roa Signing time: Fri 22 Aug 2025 08:52:10 +0000 ROA not before: Fri 22 Aug 2025 08:52:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 3949 IP address blocks: 61.58.41.176/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 22 08:52:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C569A7BF4BCACD90C8DC154DF2E8FF194A7E43AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:03:6f:c0:07:a7:0d:de:e7:83:fd:bb:77: 24:6c:34:7f:fa:21:9c:8c:63:d5:a3:35:d6:0d:c8: dc:22:1d:6b:4d:d7:c9:9c:5d:d0:5e:60:b5:96:69: 93:ca:23:91:12:6e:43:fd:2c:d5:37:db:c8:26:80: 5d:36:b3:90:bc:2b:c3:c5:f8:d7:86:43:65:75:d5: 70:e9:15:e3:0e:8c:8c:bf:ce:43:df:96:55:bb:fb: 37:b7:fd:29:79:71:f9:b7:f1:d6:56:be:4c:42:fe: 22:62:53:33:00:ba:54:2a:2a:5b:56:f6:77:c5:ab: c1:ab:24:1f:33:08:9a:0c:14:35:2e:02:81:f8:b1: 57:0b:53:df:d7:dc:d4:3a:38:06:91:2c:28:e2:f5: 7a:44:2a:e5:ee:ef:61:8a:d7:32:ee:4c:1e:06:27: f6:58:68:8f:06:c6:76:ed:6b:93:f1:ee:a0:48:48: 20:75:b4:d9:9c:1c:18:17:42:6d:f8:0a:9f:f7:39: 66:77:5f:97:a7:f7:20:4e:6a:50:79:5f:6e:52:38: 89:a5:f4:5f:89:a3:bf:ba:ed:3e:69:d7:1f:36:05: 58:f9:0e:81:d6:ae:2b:5e:8f:ab:40:23:ca:03:88: 56:4f:e5:99:a5:5f:19:c8:2e:7b:cf:6f:21:96:04: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:69:A7:BF:4B:CA:CD:90:C8:DC:15:4D:F2:E8:FF:19:4A:7E:43:AD X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/xWmnv0vKzZDI3BVN8uj_GUp-Q60.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.41.176/28 Signature Algorithm: sha256WithRSAEncryption 4a:6f:35:de:64:43:9f:a0:3e:a1:fd:b0:04:f3:12:8f:51:79: 12:dc:11:57:f3:e7:0a:22:58:9d:fc:91:f6:42:15:71:50:b1: 03:45:6e:73:a6:38:19:60:5a:05:44:f9:69:2b:5a:a1:81:b4: 87:76:2b:4b:64:30:26:86:61:69:33:c3:35:61:12:c3:0d:d9: 8a:1c:a3:41:30:3f:59:dc:3a:f6:af:4d:8e:d3:38:20:94:19: 47:df:03:be:ca:5e:d6:97:96:bd:4e:7b:ca:8a:ba:e8:b6:d0: c1:77:f3:66:5a:34:db:be:69:5f:29:05:be:17:36:af:9c:5e: 61:59:d7:01:bd:65:49:e5:6e:b2:9c:af:6d:91:43:54:9d:fa: f8:37:84:98:df:0c:d5:57:d3:3e:4d:d5:28:60:b0:ea:dc:cd: c5:7d:75:d4:6a:e4:d7:4a:3f:e2:13:08:56:4e:9f:81:42:05: 0a:ce:12:93:b7:c2:ee:8f:d2:00:cc:fa:23:d8:b9:38:40:02: 8e:54:e4:5d:64:40:5e:bb:7a:63:b1:e8:43:13:85:0f:31:92: 6e:8a:cd:09:12:56:61:fa:56:08:27:48:31:85:40:e4:28:2d: ac:2e:7c:16:63:ac:48:15:27:ef:8b:3a:69:75:f6:5d:cb:3d: cb:45:36:fb -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNTA4MjIw ODUyMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1NjlBN0JGNEJDQUNE OTBDOERDMTU0REYyRThGRjE5NEE3RTQzQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvcANvwAenDd7ng/27dyRsNH/6IZyMY9WjNdYNyNwiHWtN18mc XdBeYLWWaZPKI5ESbkP9LNU328gmgF02s5C8K8PF+NeGQ2V11XDpFeMOjIy/zkPf llW7+ze3/Sl5cfm38dZWvkxC/iJiUzMAulQqKltW9nfFq8GrJB8zCJoMFDUuAoH4 sVcLU9/X3NQ6OAaRLCji9XpEKuXu72GK1zLuTB4GJ/ZYaI8Gxnbta5Px7qBISCB1 tNmcHBgXQm34Cp/3OWZ3X5en9yBOalB5X25SOIml9F+Jo7+67T5p1x82BVj5DoHW ritej6tAI8oDiFZP5ZmlXxnILnvPbyGWBOAPAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUxWmnv0vKzZDI3BVN8uj/GUp+Q60wHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC94V21udjB2S3paREkzQlZOOHVq X0dVcC1RNjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEPTop sDANBgkqhkiG9w0BAQsFAAOCAQEASm813mRDn6A+of2wBPMSj1F5EtwRV/PnCiJY nfyR9kIVcVCxA0Vuc6Y4GWBaBUT5aStaoYG0h3YrS2QwJoZhaTPDNWESww3Zihyj QTA/Wdw69q9NjtM4IJQZR98Dvspe1peWvU57yoq66LbQwXfzZlo0275pXykFvhc2 r5xeYVnXAb1lSeVuspyvbZFDVJ36+DeEmN8M1VfTPk3VKGCw6tzNxX111Grk10o/ 4hMIVk6fgUIFCs4Sk7fC7o/SAMz6I9i5OEACjlTkXWRAXrt6Y7HoQxOFDzGSborN CRJWYfpWCCdIMYVA5CgtrC58FmOsSBUn74s6aXX2Xcs9y0U2+w== -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:48 2025 by rpki-client