$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/XIhWOlBKRqMagkzqFrODB_R8sI8.roa File: XIhWOlBKRqMagkzqFrODB_R8sI8.roa (raw, json) Hash identifier: 9l8Iouic8Gg8mE30CkufgikNUXR5oK1+0q+hXl9OL1g= Subject key identifier: 5C:88:56:3A:50:4A:46:A3:1A:82:4C:EA:16:B3:83:07:F4:7C:B0:8F Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 1410 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/XIhWOlBKRqMagkzqFrODB_R8sI8.roa Signing time: Fri 22 Aug 2025 08:58:55 +0000 ROA not before: Fri 22 Aug 2025 08:58:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131636 IP address blocks: 211.76.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5136 (0x1410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Aug 22 08:58:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C88563A504A46A31A824CEA16B38307F47CB08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:11:51:7d:81:e4:d7:4f:e0:2f:14:48:1a: 59:be:a5:cb:84:28:94:10:d5:c9:78:b6:9e:db:0c: bf:28:da:89:ba:9c:aa:3d:3b:6e:0e:1a:76:b2:a6: d3:68:bf:94:c3:cc:9b:80:50:eb:25:5d:4b:86:4e: 89:52:06:11:2b:10:68:db:0d:f8:25:db:00:9a:83: a3:d8:3e:74:80:b1:67:e3:d7:c6:01:1b:8c:c8:d0: b9:39:ef:15:26:8a:ea:1a:2f:46:aa:73:fc:d3:33: ad:03:87:ce:3c:36:34:ff:db:08:4d:f1:d3:b0:60: 90:a7:97:83:dc:72:53:9f:06:ff:cd:91:3c:76:f3: fb:a7:a0:58:d4:87:8a:07:67:44:8d:52:ee:c1:12: 0b:38:2a:cd:b2:19:1a:7c:e4:53:f0:68:d5:37:71: 76:2a:15:eb:fa:82:9d:36:98:2b:b8:8f:14:53:79: 02:5e:6a:4f:b8:5c:a1:48:77:3e:54:33:fc:44:da: 2f:7e:af:10:d8:e9:90:31:71:20:09:ed:73:16:e3: b9:f1:cb:4f:5b:05:3b:4c:ae:88:b3:29:35:9a:3a: 25:4b:7c:a6:f0:75:75:52:fa:a7:46:a0:8c:a8:a2: 6b:18:e4:60:83:ef:60:63:59:70:2a:17:15:f9:fd: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:56:3A:50:4A:46:A3:1A:82:4C:EA:16:B3:83:07:F4:7C:B0:8F X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/XIhWOlBKRqMagkzqFrODB_R8sI8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.188.0/23 Signature Algorithm: sha256WithRSAEncryption 63:65:c6:17:04:8f:f8:ad:68:11:7a:56:cf:43:d6:37:5d:21: 57:6f:e4:fc:ad:b5:28:7e:c8:9c:d7:aa:5c:23:a3:f7:ae:1d: 2a:23:a9:11:a2:53:9c:94:1e:4c:26:e7:7c:7b:4e:b6:d8:85: 95:ec:a5:23:df:65:00:db:2d:1e:8b:35:12:25:45:61:ed:6e: 3d:32:3e:39:a0:1f:d7:43:03:e6:0e:c9:f9:1d:84:d3:9d:c9: fb:5d:8c:c9:fa:3b:dc:20:29:29:40:23:de:5c:43:92:ac:97: 6f:c5:71:2d:84:98:fb:ec:6c:35:1a:92:9a:bb:8b:27:0c:1f: 27:27:e0:db:2f:a5:bd:42:2e:3b:ed:78:bf:95:3d:90:09:32: 82:2e:8a:19:60:c9:00:12:cb:ea:6b:24:7d:2e:d2:47:55:91: b9:24:ed:65:83:2f:49:30:90:59:ef:61:4b:b4:c6:33:6b:1a: 6a:42:af:1e:b1:a2:dc:b4:7c:a0:ee:07:60:1f:09:5b:62:d0: 9f:65:55:d5:a9:8d:8a:34:4c:09:1e:55:86:7d:54:c6:17:4a: b4:82:22:f0:dc:b3:40:98:11:3c:5f:b2:dc:26:2a:05:7d:0c: a5:1e:2a:85:cb:8d:59:5f:c7:bf:71:06:2c:56:18:09:fb:76: af:18:d4:51 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNTA4MjIw ODU4NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDODg1NjNBNTA0QTQ2 QTMxQTgyNENFQTE2QjM4MzA3RjQ3Q0IwOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6nBFRfYHk10/gLxRIGlm+pcuEKJQQ1cl4tp7bDL8o2om6nKo9 O24OGnayptNov5TDzJuAUOslXUuGTolSBhErEGjbDfgl2wCag6PYPnSAsWfj18YB G4zI0Lk57xUmiuoaL0aqc/zTM60Dh848NjT/2whN8dOwYJCnl4PcclOfBv/NkTx2 8/unoFjUh4oHZ0SNUu7BEgs4Ks2yGRp85FPwaNU3cXYqFev6gp02mCu4jxRTeQJe ak+4XKFIdz5UM/xE2i9+rxDY6ZAxcSAJ7XMW47nxy09bBTtMroizKTWaOiVLfKbw dXVS+qdGoIyoomsY5GCD72BjWXAqFxX5/SwxAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUXIhWOlBKRqMagkzqFrODB/R8sI8wHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9YSWhXT2xCS1JxTWFna3pxRnJP REJfUjhzSTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB00y8 MA0GCSqGSIb3DQEBCwUAA4IBAQBjZcYXBI/4rWgRelbPQ9Y3XSFXb+T8rbUofsic 16pcI6P3rh0qI6kRolOclB5MJud8e0622IWV7KUj32UA2y0eizUSJUVh7W49Mj45 oB/XQwPmDsn5HYTTncn7XYzJ+jvcICkpQCPeXEOSrJdvxXEthJj77Gw1GpKau4sn DB8nJ+DbL6W9Qi477Xi/lT2QCTKCLooZYMkAEsvqayR9LtJHVZG5JO1lgy9JMJBZ 72FLtMYzaxpqQq8esaLctHyg7gdgHwlbYtCfZVXVqY2KNEwJHlWGfVTGF0q0giLw 3LNAmBE8X7LcJioFfQylHiqFy41ZX8e/cQYsVhgJ+3avGNRR -----END CERTIFICATE-----Generated at Sun Aug 24 07:05:15 2025 by rpki-client