$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BMSFhOkqIBxuS_d9IYZseVkZ6kk.roa File: BMSFhOkqIBxuS_d9IYZseVkZ6kk.roa (raw, json) Hash identifier: 6EBEeMEHWHE5GBZE/lphd5ydcibO9byIXTUkklQQR/8= Subject key identifier: 04:C4:85:84:E9:2A:20:1C:6E:4B:F7:7D:21:86:6C:79:59:19:EA:49 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13F7 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BMSFhOkqIBxuS_d9IYZseVkZ6kk.roa Signing time: Fri 22 Aug 2025 08:59:56 +0000 ROA not before: Fri 22 Aug 2025 08:59:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.201.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5111 (0x13f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=04C48584E92A201C6E4BF77D21866C795919EA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:f0:72:c0:b5:e5:07:d0:7a:e2:1d:f7:0e: fa:d9:f6:8b:7a:06:6f:21:ab:e5:f0:9c:58:46:3a: 6c:0c:05:c1:fa:47:4d:b0:29:bc:3b:d6:9d:8f:3d: 2e:64:c0:97:c2:10:14:87:c6:61:01:5f:42:d0:25: 4c:fe:60:67:a5:c9:37:3b:d3:6b:f3:b6:30:1c:28: 7c:9a:3d:95:93:ae:b3:ee:23:cb:12:1a:97:04:ea: d5:0b:ca:6e:41:9f:ce:b5:36:76:df:56:39:b5:e8: 50:e6:ae:6b:5d:eb:c2:28:e0:40:cb:a2:4d:99:f0: 3b:25:a0:72:b8:25:f8:5a:5e:78:15:fe:0d:61:1e: 9f:26:2e:97:63:19:b7:66:09:4b:0c:6b:b8:06:72: 23:84:67:f3:53:83:4a:66:6d:dd:41:19:6f:3e:b7: 70:38:5a:ac:7a:cb:c4:7c:b2:db:9d:6d:df:58:51: 75:9c:de:3e:80:2b:2d:a5:0f:8d:d0:11:88:f5:79: 38:74:08:bd:f7:e8:ff:a8:4e:bd:87:8f:f3:42:07: cf:85:28:fa:1f:83:34:7b:40:23:57:21:71:4a:dc: d0:8c:af:d6:70:9d:b4:55:42:87:fc:25:5d:b3:76: 31:c1:d5:4b:78:e0:35:84:1d:ec:e6:92:b2:0c:02: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C4:85:84:E9:2A:20:1C:6E:4B:F7:7D:21:86:6C:79:59:19:EA:49 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BMSFhOkqIBxuS_d9IYZseVkZ6kk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.72.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ae:f5:58:c1:64:56:c9:de:7b:fb:a9:d4:2f:b3:da:8a:98: 46:8a:34:8b:b2:be:1c:48:e6:f8:4f:11:16:55:fd:3e:58:e5: 6b:58:09:d7:7f:bb:0e:ab:44:1a:e3:b8:2d:f9:3b:26:be:61: 48:41:95:e8:e9:3e:bb:10:8d:4a:38:85:01:df:1a:39:59:74: 9c:ec:fa:47:df:65:74:88:07:f9:ac:dd:27:ae:dc:f1:57:7a: 52:1d:1f:1c:c2:66:87:13:33:7d:6b:c1:06:6e:05:e5:f3:c0: ca:51:fb:ee:a2:f9:50:c2:85:9f:3b:e8:42:cf:ab:d1:82:38: d2:3f:5d:7d:2a:cb:f6:c5:08:ce:97:b8:0b:91:32:c1:65:60: 00:f4:23:92:26:67:bc:52:f5:1f:cf:f4:18:96:27:d3:a7:eb: 1b:ff:ee:19:61:f4:01:e3:21:55:04:01:dd:a1:13:3b:7b:25: 96:32:1e:53:a5:15:73:5a:ca:94:ac:22:4b:1a:8e:58:7d:20: 0a:64:4e:68:b7:a5:8d:ed:fd:67:81:d7:70:a4:24:85:d9:8b: 8d:89:07:e9:d9:91:4e:4e:b8:71:9f:e0:d0:03:73:b9:d7:81: 76:75:bb:c2:b2:f3:1f:f6:50:9e:63:99:0c:26:2e:09:43:c9: 0c:14:c4:bf -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE/cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0QzQ4NTg0RTkyQTIw MUM2RTRCRjc3RDIxODY2Qzc5NTkxOUVBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTv/BywLXlB9B64h33DvrZ9ot6Bm8hq+XwnFhGOmwMBcH6R02w Kbw71p2PPS5kwJfCEBSHxmEBX0LQJUz+YGelyTc702vztjAcKHyaPZWTrrPuI8sS GpcE6tULym5Bn861NnbfVjm16FDmrmtd68Io4EDLok2Z8DsloHK4JfhaXngV/g1h Hp8mLpdjGbdmCUsMa7gGciOEZ/NTg0pmbd1BGW8+t3A4Wqx6y8R8studbd9YUXWc 3j6AKy2lD43QEYj1eTh0CL336P+oTr2Hj/NCB8+FKPofgzR7QCNXIXFK3NCMr9Zw nbRVQof8JV2zdjHB1Ut44DWEHezmkrIMAgwRAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBMSFhOkqIBxuS/d9IYZseVkZ6kkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0JNU0ZoT2txSUJ4dVNfZDlJWVpzZVZr WjZray5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyUgwDQYJ KoZIhvcNAQELBQADggEBAHCu9VjBZFbJ3nv7qdQvs9qKmEaKNIuyvhxI5vhPERZV /T5Y5WtYCdd/uw6rRBrjuC35Oya+YUhBlejpPrsQjUo4hQHfGjlZdJzs+kffZXSI B/ms3Seu3PFXelIdHxzCZocTM31rwQZuBeXzwMpR++6i+VDChZ876ELPq9GCONI/ XX0qy/bFCM6XuAuRMsFlYAD0I5ImZ7xS9R/P9BiWJ9On6xv/7hlh9AHjIVUEAd2h Ezt7JZYyHlOlFXNaypSsIksajlh9IApkTmi3pY3t/WeB13CkJIXZi42JB+nZkU5O uHGf4NADc7nXgXZ1u8Ky8x/2UJ5jmQwmLglDyQwUxL8= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:21 2025 by rpki-client