$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-SHnxMP_fsn8C8MwWdtkJEXRxys.roa File: -SHnxMP_fsn8C8MwWdtkJEXRxys.roa (raw, json) Hash identifier: nROoIHBM7JVk56+H0y9sLYcCmoYljmjLrHC9SH5wrhM= Subject key identifier: F9:21:E7:C4:C3:FF:7E:C9:FC:0B:C3:30:59:DB:64:24:45:D1:C7:2B Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 142D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-SHnxMP_fsn8C8MwWdtkJEXRxys.roa Signing time: Fri 22 Aug 2025 09:00:09 +0000 ROA not before: Fri 22 Aug 2025 09:00:09 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.203.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5165 (0x142d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:09 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F921E7C4C3FF7EC9FC0BC33059DB642445D1C72B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:98:64:9f:5d:ea:fe:06:09:df:41:a7:3d:9c: 13:ca:74:46:57:13:26:56:26:4f:c0:f6:71:a8:ca: 1d:d8:68:ac:64:01:84:83:24:73:5c:01:30:a2:7a: 14:61:0b:c5:bf:0b:95:6e:aa:34:e7:86:42:89:41: d9:3f:f4:59:29:22:f5:4e:c6:b6:d4:b5:f3:29:39: c0:6d:08:e6:8e:3d:36:81:1f:3c:e9:d4:95:d8:0a: 6e:fb:be:1e:15:df:d7:59:8a:7a:37:7b:82:7c:b4: 3e:d1:34:38:a8:66:94:9e:57:ef:84:ed:70:93:f5: 0e:a8:2d:60:d7:69:28:6e:a2:44:a9:56:7b:68:c2: fd:ba:f1:4a:16:d1:50:8b:7d:6d:44:bc:1e:d4:e6: 64:71:33:d3:75:79:aa:80:64:7a:e6:71:d5:1a:aa: c1:ff:83:01:a2:1d:92:29:b2:58:b8:8e:83:c2:07: eb:16:bd:04:3a:18:a3:77:7b:e5:8a:24:e7:ef:cc: 07:78:58:e3:1f:86:23:5b:f7:03:40:2d:bc:63:80: ca:e6:02:92:20:9e:9c:99:32:80:f7:7f:19:e7:8b: 91:e0:a2:9a:d2:08:af:15:e1:78:1e:d7:4c:d3:3a: 7a:4c:c0:e6:45:15:fe:b2:da:95:e6:57:10:e0:51: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:21:E7:C4:C3:FF:7E:C9:FC:0B:C3:30:59:DB:64:24:45:D1:C7:2B X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-SHnxMP_fsn8C8MwWdtkJEXRxys.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.0.0/24 Signature Algorithm: sha256WithRSAEncryption bd:9e:47:df:60:92:8e:a0:d8:ae:9c:74:57:3f:1a:b9:c1:f1: e3:cd:97:16:2c:19:cb:be:5d:23:e3:eb:2d:c0:4f:74:2f:1f: 34:45:1f:76:5c:81:c0:33:a4:0b:19:7a:8a:2f:0e:57:81:85: 26:a0:76:8f:33:de:e2:f4:2a:73:d8:d8:20:13:56:e9:e6:a7: de:be:19:03:74:72:e7:8e:5e:2e:e7:e7:ac:be:05:9a:05:e3: 6a:6a:cc:48:d4:f6:e4:16:13:6c:77:68:f0:43:d8:bb:66:4d: 40:4b:b3:09:17:1f:fd:cf:2b:c4:07:bc:bf:fc:79:df:b8:61: 01:f4:cb:63:10:11:9a:e1:74:5a:60:a7:6c:04:94:39:47:c0: a5:9a:e7:7f:d5:af:f4:96:e8:db:be:40:54:23:d2:d0:8f:5e: a5:fe:10:9b:f8:42:22:02:63:c0:6f:55:9d:d1:29:5e:8f:0f: 9b:9b:2f:dd:fe:9d:03:91:99:90:68:26:5b:9e:a1:4c:1a:39: 85:1b:0b:9f:c1:4b:91:66:0b:ae:07:31:5d:90:80:a3:4a:dc: 20:4a:65:e5:99:a5:61:5d:da:93:45:44:6d:1a:1d:9f:bc:76: 5c:c2:87:06:ae:90:0f:2f:76:62:23:8b:71:2d:0e:8d:eb:97: 57:21:4e:a4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY5MjFFN0M0QzNGRjdF QzlGQzBCQzMzMDU5REI2NDI0NDVEMUM3MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDymGSfXer+BgnfQac9nBPKdEZXEyZWJk/A9nGoyh3YaKxkAYSD JHNcATCiehRhC8W/C5VuqjTnhkKJQdk/9FkpIvVOxrbUtfMpOcBtCOaOPTaBHzzp 1JXYCm77vh4V39dZino3e4J8tD7RNDioZpSeV++E7XCT9Q6oLWDXaShuokSpVnto wv268UoW0VCLfW1EvB7U5mRxM9N1eaqAZHrmcdUaqsH/gwGiHZIpsli4joPCB+sW vQQ6GKN3e+WKJOfvzAd4WOMfhiNb9wNALbxjgMrmApIgnpyZMoD3fxnni5HgoprS CK8V4Xge10zTOnpMwOZFFf6y2pXmVxDgUbatAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU+SHnxMP/fsn8C8MwWdtkJEXRxyswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy1TSG54TVBfZnNuOEM4TXdXZHRrSkVY Unh5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSywAwDQYJ KoZIhvcNAQELBQADggEBAL2eR99gko6g2K6cdFc/GrnB8ePNlxYsGcu+XSPj6y3A T3QvHzRFH3ZcgcAzpAsZeoovDleBhSagdo8z3uL0KnPY2CATVunmp96+GQN0cueO Xi7n56y+BZoF42pqzEjU9uQWE2x3aPBD2LtmTUBLswkXH/3PK8QHvL/8ed+4YQH0 y2MQEZrhdFpgp2wElDlHwKWa53/Vr/SW6Nu+QFQj0tCPXqX+EJv4QiICY8BvVZ3R KV6PD5ubL93+nQORmZBoJlueoUwaOYUbC5/BS5FmC64HMV2QgKNK3CBKZeWZpWFd 2pNFRG0aHZ+8dlzChwaukA8vdmIji3EtDo3rl1chTqQ= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:25 2025 by rpki-client