$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/LXZN3OnzxbPxipP_JSqQygn5g1s.roa File: LXZN3OnzxbPxipP_JSqQygn5g1s.roa (raw, json) Hash identifier: XdYWwll/us8wbfefHgI5HPlBHVCdHrFk/0J+Ukh1k94= Subject key identifier: 2D:76:4D:DC:E9:F3:C5:B3:F1:8A:93:FF:25:2A:90:CA:09:F9:83:5B Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1443 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LXZN3OnzxbPxipP_JSqQygn5g1s.roa Signing time: Fri 22 Aug 2025 09:00:14 +0000 ROA not before: Fri 22 Aug 2025 09:00:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 60.244.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5187 (0x1443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2D764DDCE9F3C5B3F18A93FF252A90CA09F9835B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:d9:9d:73:62:8d:30:8a:8e:a2:92:97:75: c5:9a:da:b1:34:fd:f2:ae:c1:93:7a:6d:86:40:1b: 3d:34:51:4a:76:19:38:67:0e:55:5e:73:8a:2c:a9: 29:c0:12:14:06:93:a1:84:65:a0:9d:e8:8e:e6:dc: ae:7b:b0:52:72:4a:20:2e:86:c0:51:9a:90:b9:2b: 05:64:89:c3:01:e4:56:46:20:b2:b7:50:d0:a5:a9: 0e:ab:0a:51:36:b2:af:74:8e:c9:be:6b:a8:25:fc: 3a:40:dd:48:dd:5b:d3:e0:75:9a:65:22:79:8b:a5: 1f:59:30:b4:9f:20:ec:4b:54:c4:49:99:19:5b:37: d5:7d:4d:87:c6:a5:88:16:b4:88:25:dd:3f:5b:08: 98:77:48:3e:b4:ba:b6:3a:ca:50:8d:32:ba:42:b2: c5:0f:66:b1:42:08:be:fe:f6:36:95:07:6b:13:7f: 36:46:03:52:12:69:68:08:6d:d4:cc:7d:64:79:5e: fd:c9:62:4c:2c:af:9c:01:7f:9c:46:6d:a4:6f:f5: f1:bf:4f:34:ba:41:2b:15:80:ad:3c:eb:ad:48:e8: 30:77:ce:1a:18:89:01:03:b3:c7:a5:d1:d0:45:f9: 8d:2b:8b:5c:e9:3c:f4:3e:c6:e0:7a:c6:55:36:4d: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:76:4D:DC:E9:F3:C5:B3:F1:8A:93:FF:25:2A:90:CA:09:F9:83:5B X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LXZN3OnzxbPxipP_JSqQygn5g1s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.128.0/17 Signature Algorithm: sha256WithRSAEncryption c8:58:8c:53:15:49:66:de:b6:b4:c9:0b:1a:77:2c:2b:b8:ea: 40:76:b8:84:a4:cd:ae:81:32:12:aa:94:0f:5f:46:eb:eb:37: d2:7b:ec:01:02:b0:23:f5:2d:5b:6c:1b:41:5d:2c:25:e7:f3: 57:79:05:45:0e:b2:db:27:e2:ed:5b:d5:1b:f6:94:18:53:60: 18:ca:5e:b2:74:1a:d2:3e:51:fa:36:b2:82:96:1b:98:4e:76: 44:35:7c:9b:a0:18:ef:8b:0f:79:60:10:f4:97:10:03:cc:df: 42:d9:0b:2d:72:41:bb:0a:d6:97:a6:ba:1b:12:d2:17:ed:fd: eb:28:d5:71:33:68:22:3b:dd:73:87:6d:8c:aa:a5:26:3b:14: 5e:c5:2e:27:0d:69:2a:0a:c4:56:0e:d3:47:b1:2f:b6:6b:57: 05:1a:ca:69:e4:e5:44:68:bb:2b:ff:7f:59:4a:ef:eb:f8:23: ad:80:0e:86:27:ce:79:be:47:98:50:e8:30:4f:c1:73:b7:d8: 50:56:98:a0:40:07:a9:1d:be:ae:ea:db:92:34:d8:59:28:0e: 08:6a:73:f9:fd:cc:5f:0a:c5:52:80:b1:6a:cc:e4:fe:e4:a3: 1f:00:79:e2:ac:dd:d4:ab:55:3f:be:5d:61:56:52:52:0e:42: d2:d8:68:60 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJENzY0RERDRTlGM0M1 QjNGMThBOTNGRjI1MkE5MENBMDlGOTgzNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjqtmdc2KNMIqOopKXdcWa2rE0/fKuwZN6bYZAGz00UUp2GThn DlVec4osqSnAEhQGk6GEZaCd6I7m3K57sFJySiAuhsBRmpC5KwVkicMB5FZGILK3 UNClqQ6rClE2sq90jsm+a6gl/DpA3UjdW9PgdZplInmLpR9ZMLSfIOxLVMRJmRlb N9V9TYfGpYgWtIgl3T9bCJh3SD60urY6ylCNMrpCssUPZrFCCL7+9jaVB2sTfzZG A1ISaWgIbdTMfWR5Xv3JYkwsr5wBf5xGbaRv9fG/TzS6QSsVgK08661I6DB3zhoY iQEDs8el0dBF+Y0ri1zpPPQ+xuB6xlU2TfahAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQULXZN3OnzxbPxipP/JSqQygn5g1swHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0xYWk4zT256eGJQeGlwUF9KU3FReWdu NWcxcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc89IAwDQYJ KoZIhvcNAQELBQADggEBAMhYjFMVSWbetrTJCxp3LCu46kB2uISkza6BMhKqlA9f RuvrN9J77AECsCP1LVtsG0FdLCXn81d5BUUOstsn4u1b1Rv2lBhTYBjKXrJ0GtI+ Ufo2soKWG5hOdkQ1fJugGO+LD3lgEPSXEAPM30LZCy1yQbsK1pemuhsS0hft/eso 1XEzaCI73XOHbYyqpSY7FF7FLicNaSoKxFYO00exL7ZrVwUaymnk5URouyv/f1lK 7+v4I62ADoYnznm+R5hQ6DBPwXO32FBWmKBAB6kdvq7q25I02FkoDghqc/n9zF8K xVKAsWrM5P7kox8AeeKs3dSrVT++XWFWUlIOQtLYaGA= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:10 2025 by rpki-client