$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KJjpCjJj291Ipo0fIx-R3ImKprw.roa File: KJjpCjJj291Ipo0fIx-R3ImKprw.roa (raw, json) Hash identifier: wiLdGNHqdCDKB4SHTJY1mL2+yUIG+oYgibQYePY4daQ= Subject key identifier: 28:98:E9:0A:32:63:DB:DD:48:A6:8D:1F:23:1F:91:DC:89:8A:A6:BC Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1491 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KJjpCjJj291Ipo0fIx-R3ImKprw.roa Signing time: Fri 22 Aug 2025 09:00:34 +0000 ROA not before: Fri 22 Aug 2025 09:00:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 218.34.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5265 (0x1491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2898E90A3263DBDD48A68D1F231F91DC898AA6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:1e:59:55:8e:0e:5c:13:9d:74:4a:ba:fe: a3:cb:30:c5:52:84:c0:55:07:ca:10:60:d2:20:0a: f8:95:3d:c5:c0:5d:2a:aa:dd:5d:4b:a3:84:11:70: a7:ad:6d:e0:ef:a7:32:27:08:ae:11:7c:a1:f6:e7: f2:77:18:c1:5b:14:cd:dd:4d:0b:07:36:8e:94:bd: 0a:e4:00:92:26:0b:7f:42:72:a0:58:7b:6a:9e:76: 41:04:fa:a5:1c:e7:0a:0d:0d:58:a4:b8:aa:8f:62: 54:da:85:d9:31:51:9e:32:09:e8:15:9c:2f:34:3a: a2:f4:c1:13:3f:37:7f:3d:b6:58:02:e3:49:7d:ab: ac:ad:cf:6a:0a:3c:43:9a:f1:b8:2c:e6:ab:1e:ec: c7:03:35:e1:9f:ad:dc:5d:c6:1a:b2:63:52:e0:54: ae:40:73:66:d2:41:12:bf:95:bd:a7:28:33:08:97: fa:2b:48:86:68:7f:e3:09:6e:2d:f0:e6:aa:ed:47: 87:33:5c:21:4d:e6:09:03:7b:24:28:84:e1:2f:89: 7f:79:b5:19:4c:19:34:b8:6a:42:b7:b4:5d:6f:ca: d4:c0:c5:aa:75:d9:eb:d5:f0:e2:1a:91:3e:90:78: 79:97:54:94:99:1b:52:4b:b1:c9:73:5d:89:ca:a4: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:98:E9:0A:32:63:DB:DD:48:A6:8D:1F:23:1F:91:DC:89:8A:A6:BC X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KJjpCjJj291Ipo0fIx-R3ImKprw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.112.0/20 Signature Algorithm: sha256WithRSAEncryption 83:82:f9:7a:26:be:c5:c4:cd:c8:64:bf:84:4e:97:7f:e0:7e: 80:24:b7:07:09:d9:48:f2:85:73:4f:d7:dc:e9:42:58:6a:bc: 8b:01:74:b2:a3:30:f2:76:83:00:64:55:04:00:8c:bc:4f:62: 7d:0b:7f:35:b0:34:48:f5:b6:a3:1d:03:37:25:33:a0:e5:a4: b7:4d:41:29:f2:48:c8:62:12:59:54:4d:52:7d:0d:38:0c:b6: 26:3e:5b:41:37:bd:c4:38:8b:1f:e0:05:78:4d:c6:2e:47:9b: 35:5f:62:88:9e:5b:da:9b:d8:90:34:f1:a2:2d:63:3b:a2:d1: b3:27:4e:8a:ed:21:6c:4b:5b:1b:df:6c:03:1a:90:b7:be:ad: 3a:9a:96:59:c0:35:93:c8:6e:41:b0:26:e2:86:cd:70:f5:7c: 96:b6:ac:4b:48:35:71:09:88:ac:e0:93:1e:01:fd:a2:eb:18: ed:8a:0d:7b:19:e5:a6:cd:55:2a:33:8a:e1:ef:de:3b:30:18: 16:96:4c:28:04:c4:18:af:c7:72:3d:97:b0:c0:d6:bc:c7:4e: d4:86:fa:d0:2b:d1:92:ce:28:1f:77:ac:a5:e8:ed:8f:fc:dc: ed:fa:11:6b:91:68:fa:b5:77:4d:1e:29:e4:81:34:ce:d6:b1: 49:9a:b0:fd -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4OThFOTBBMzI2M0RC REQ0OEE2OEQxRjIzMUY5MURDODk4QUE2QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvzh5ZVY4OXBOddEq6/qPLMMVShMBVB8oQYNIgCviVPcXAXSqq 3V1Lo4QRcKetbeDvpzInCK4RfKH25/J3GMFbFM3dTQsHNo6UvQrkAJImC39CcqBY e2qedkEE+qUc5woNDVikuKqPYlTahdkxUZ4yCegVnC80OqL0wRM/N389tlgC40l9 q6ytz2oKPEOa8bgs5qse7McDNeGfrdxdxhqyY1LgVK5Ac2bSQRK/lb2nKDMIl/or SIZof+MJbi3w5qrtR4czXCFN5gkDeyQohOEviX95tRlMGTS4akK3tF1vytTAxap1 2evV8OIakT6QeHmXVJSZG1JLsclzXYnKpEbXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKJjpCjJj291Ipo0fIx+R3ImKprwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0tKanBDakpqMjkxSXBvMGZJeC1SM0lt S3Bydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATaInAwDQYJ KoZIhvcNAQELBQADggEBAIOC+XomvsXEzchkv4ROl3/gfoAktwcJ2UjyhXNP19zp QlhqvIsBdLKjMPJ2gwBkVQQAjLxPYn0LfzWwNEj1tqMdAzclM6DlpLdNQSnySMhi EllUTVJ9DTgMtiY+W0E3vcQ4ix/gBXhNxi5HmzVfYoieW9qb2JA08aItYzui0bMn TortIWxLWxvfbAMakLe+rTqallnANZPIbkGwJuKGzXD1fJa2rEtINXEJiKzgkx4B /aLrGO2KDXsZ5abNVSoziuHv3jswGBaWTCgExBivx3I9l7DA1rzHTtSG+tAr0ZLO KB93rKXo7Y/83O36EWuRaPq1d00eKeSBNM7WsUmasP0= -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:19 2025 by rpki-client