$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/TuJlri5TzNvW6K9PbtJF19euOoM.roa File: TuJlri5TzNvW6K9PbtJF19euOoM.roa (raw, json) Hash identifier: MwK38JJvgg31m358F5bXpel7nZ0DM+3DwPzVH7LQVaI= Subject key identifier: 4E:E2:65:AE:2E:53:CC:DB:D6:E8:AF:4F:6E:D2:45:D7:D7:AE:3A:83 Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Certificate serial: 0D87 Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/TuJlri5TzNvW6K9PbtJF19euOoM.roa Signing time: Fri 06 Jun 2025 09:22:27 +0000 ROA not before: Fri 06 Jun 2025 09:22:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38136 IP address blocks: 43.224.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Validity Not Before: Jun 6 09:22:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4EE265AE2E53CCDBD6E8AF4F6ED245D7D7AE3A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:44:ed:60:1a:b7:02:92:81:d8:9c:22:7a: 4c:c9:2f:fd:f2:02:f7:63:15:c1:b9:34:bb:86:41: 6f:d7:d3:d0:62:ef:5c:9f:44:f3:da:b6:98:f3:f6: 2f:da:3b:99:c1:93:68:c9:eb:19:20:03:7d:61:35: f2:04:d9:36:ef:f0:10:49:d7:f7:4a:61:07:6a:aa: ab:64:68:ff:4a:14:b4:89:18:c7:fd:7b:4d:01:0f: 58:f9:ff:49:71:10:7e:ea:55:a6:28:e0:14:a1:d4: e0:13:27:80:a3:c9:6f:03:ef:43:30:93:07:5e:46: 7d:ee:1f:a3:2d:13:19:54:ca:7d:a4:29:00:5b:70: e9:a1:5a:68:18:68:81:1c:8f:42:52:ad:dd:c7:c1: ff:3d:d0:76:e4:eb:a8:3a:e2:81:8a:33:57:a0:96: a0:73:48:0c:ad:11:53:d6:90:56:78:3a:aa:e3:ab: a8:30:52:1c:46:d9:d7:58:47:66:ba:ca:2e:50:ce: 97:25:79:f9:0a:bd:7d:2b:a9:dc:13:eb:89:64:f5: 92:44:eb:d9:a3:be:94:f7:28:7d:45:39:e4:7b:73: ca:7a:c2:0b:90:fb:38:04:36:f0:c3:27:8a:01:a4: d8:0f:b7:6d:28:59:b9:e4:1d:86:85:41:1b:62:67: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E2:65:AE:2E:53:CC:DB:D6:E8:AF:4F:6E:D2:45:D7:D7:AE:3A:83 X509v3 Authority Key Identifier: keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/TuJlri5TzNvW6K9PbtJF19euOoM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.224.21.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:a7:ee:56:18:06:ee:e7:fc:5c:d3:34:5c:12:ef:d8:76:f6: 13:f5:29:54:48:7e:05:ad:bc:24:19:9e:b3:2d:06:e9:5b:04: 49:46:4f:47:e2:2d:a0:42:52:dd:f1:2a:0a:67:d5:4a:c9:b4: 52:90:e8:2b:86:38:a8:64:11:87:44:d7:6d:2a:16:cf:47:64: b9:8a:74:f1:71:96:53:21:52:b2:12:4d:bb:65:47:77:42:62: 3f:04:19:df:b9:85:62:0d:6d:61:5a:bf:d4:23:72:84:ad:b4: 95:8c:f4:36:da:50:8f:ec:db:6a:83:37:21:12:b5:55:19:72: 2e:37:cb:5b:eb:40:33:4c:b3:60:c7:a6:3d:bc:c2:11:92:4b: 89:5e:94:97:c8:23:76:8e:6c:dc:dc:d9:41:77:13:18:ec:10: d0:a9:9b:a6:95:38:a9:b7:b4:9c:a8:15:70:b4:33:74:0f:03: 00:c5:a7:da:0b:cd:be:29:3b:b2:37:d5:d9:e5:f7:c3:79:26: b8:c5:8e:dd:42:ee:4f:96:4c:4a:f0:5b:e5:ab:3d:03:5d:8b: a7:6a:42:cc:e8:9c:37:17:aa:d0:af:de:f7:ec:32:02:87:55: 3d:98:15:35:d2:b9:38:82:7d:63:af:01:d8:f9:89:f3:55:80: e9:e8:e8:d6 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yNTA2MDYw OTIyMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFRTI2NUFFMkU1M0ND REJENkU4QUY0RjZFRDI0NUQ3RDdBRTNBODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtLUTtYBq3ApKB2JwiekzJL/3yAvdjFcG5NLuGQW/X09Bi71yf RPPatpjz9i/aO5nBk2jJ6xkgA31hNfIE2Tbv8BBJ1/dKYQdqqqtkaP9KFLSJGMf9 e00BD1j5/0lxEH7qVaYo4BSh1OATJ4CjyW8D70MwkwdeRn3uH6MtExlUyn2kKQBb cOmhWmgYaIEcj0JSrd3Hwf890Hbk66g64oGKM1eglqBzSAytEVPWkFZ4Oqrjq6gw UhxG2ddYR2a6yi5QzpclefkKvX0rqdwT64lk9ZJE69mjvpT3KH1FOeR7c8p6wguQ +zgENvDDJ4oBpNgPt20oWbnkHYaFQRtiZ/SLAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUTuJlri5TzNvW6K9PbtJF19euOoMwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9UdUpscmk1VHpOdlc2SzlQYnRK RjE5ZXVPb00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+AV MA0GCSqGSIb3DQEBCwUAA4IBAQB9p+5WGAbu5/xc0zRcEu/YdvYT9SlUSH4Frbwk GZ6zLQbpWwRJRk9H4i2gQlLd8SoKZ9VKybRSkOgrhjioZBGHRNdtKhbPR2S5inTx cZZTIVKyEk27ZUd3QmI/BBnfuYViDW1hWr/UI3KErbSVjPQ22lCP7NtqgzchErVV GXIuN8tb60AzTLNgx6Y9vMIRkkuJXpSXyCN2jmzc3NlBdxMY7BDQqZumlTipt7Sc qBVwtDN0DwMAxafaC82+KTuyN9XZ5ffDeSa4xY7dQu5PlkxK8Fvlqz0DXYunakLM 6Jw3F6rQr9737DICh1U9mBU10rk4gn1jrwHY+YnzVYDp6OjW -----END CERTIFICATE-----Generated at Sat Jun 21 18:12:07 2025 by rpki-client