$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/PXzsIWSyWUUgSmELsY6oMMtyaHM.roa File: PXzsIWSyWUUgSmELsY6oMMtyaHM.roa (raw, json) Hash identifier: w7IGvR1/DMkrvXuRX9RzQucwCS+ifgXfs0mDnuCBssQ= Subject key identifier: 3D:7C:EC:21:64:B2:59:45:20:4A:61:0B:B1:8E:A8:30:CB:72:68:73 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 148E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PXzsIWSyWUUgSmELsY6oMMtyaHM.roa Signing time: Fri 22 Aug 2025 09:00:32 +0000 ROA not before: Fri 22 Aug 2025 09:00:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 218.35.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5262 (0x148e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3D7CEC2164B25945204A610BB18EA830CB726873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:ae:db:5b:31:db:8e:86:24:f1:35:37:88: 45:79:1f:de:f1:19:dd:20:9c:f4:33:ac:68:72:51: c7:c8:3f:44:4d:b6:aa:69:3e:15:91:c2:81:a3:6c: 8f:b7:71:ea:ca:7d:9e:20:29:7e:a7:63:39:b8:38: b2:57:ad:6e:b1:50:c9:ef:79:0d:80:80:63:e9:fa: f9:01:ae:83:d6:21:f3:83:cb:8b:91:ef:0e:6c:a9: 78:eb:fc:ac:5d:bd:ce:57:0c:7c:a3:f9:e6:bb:b2: f5:de:84:ab:d1:4f:37:0a:41:c0:7f:91:be:77:ef: 4e:f7:f1:1b:28:75:71:ea:a2:2e:8f:ae:03:40:b8: fb:2a:34:60:04:35:9d:82:30:30:b0:81:b8:f8:58: 3c:d0:28:d1:e5:ff:a2:70:90:aa:1a:4a:7e:03:c0: 09:2f:33:30:b3:cb:61:70:a1:8c:e6:4c:34:fe:2c: fb:4b:1d:5c:2e:6b:48:d1:0e:60:4c:e1:ee:33:74: b4:09:e1:15:64:1d:e2:4f:50:7b:f0:01:03:b4:bf: 02:4b:ad:54:45:da:57:7f:ac:e2:eb:12:ff:41:4d: e8:3b:f0:3a:7b:01:ef:dc:67:77:1b:22:38:dc:f8: 35:53:42:af:0c:8c:14:35:3d:9f:ec:c1:f8:78:50: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7C:EC:21:64:B2:59:45:20:4A:61:0B:B1:8E:A8:30:CB:72:68:73 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PXzsIWSyWUUgSmELsY6oMMtyaHM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.96.0/21 Signature Algorithm: sha256WithRSAEncryption 26:76:df:e1:61:66:05:34:95:49:d5:d5:24:13:bb:a1:93:fb: 2b:96:da:e2:95:2d:0d:79:1b:a8:4b:70:7f:2d:44:a3:8b:24: 8f:76:66:e1:6b:dc:6b:e8:35:3b:c0:b8:a9:9c:2d:94:7f:7b: 56:eb:e0:6b:1b:4d:bb:14:57:d2:20:38:6d:cc:b7:35:26:6c: 09:6c:70:73:10:e6:28:47:55:88:eb:f0:86:50:19:fd:7c:d6: cb:88:1b:fa:35:80:eb:24:2c:e3:7c:3c:c3:8d:34:b0:71:d7: ea:7b:f8:e6:2e:55:33:ce:9e:54:cb:52:be:20:fb:9c:6c:6a: 96:61:23:49:3f:c0:7d:4c:d7:28:2d:a0:ab:ec:68:f0:cf:ba: f0:8d:ea:27:ca:2f:e5:43:70:8a:7a:1e:0e:e1:32:0e:93:62: 3b:0d:d5:3f:1c:82:e5:0c:23:a4:46:4d:28:d0:d4:a5:30:44: e9:c7:16:7f:9e:f4:35:2d:79:4e:68:43:16:a7:26:9e:3e:7b: bc:46:90:5f:7e:49:83:a4:41:be:d8:6d:d1:86:51:02:34:21: ff:aa:69:88:8c:a1:31:02:d8:88:38:d0:2a:50:ca:93:43:20: 54:c4:7d:41:c6:99:e3:48:6c:79:27:5e:3d:08:b3:a1:57:08: d4:53:f6:7b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNEN0NFQzIxNjRCMjU5 NDUyMDRBNjEwQkIxOEVBODMwQ0I3MjY4NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGFK7bWzHbjoYk8TU3iEV5H97xGd0gnPQzrGhyUcfIP0RNtqpp PhWRwoGjbI+3cerKfZ4gKX6nYzm4OLJXrW6xUMnveQ2AgGPp+vkBroPWIfODy4uR 7w5sqXjr/Kxdvc5XDHyj+ea7svXehKvRTzcKQcB/kb5370738RsodXHqoi6PrgNA uPsqNGAENZ2CMDCwgbj4WDzQKNHl/6JwkKoaSn4DwAkvMzCzy2FwoYzmTDT+LPtL HVwua0jRDmBM4e4zdLQJ4RVkHeJPUHvwAQO0vwJLrVRF2ld/rOLrEv9BTeg78Dp7 Ae/cZ3cbIjjc+DVTQq8MjBQ1PZ/swfh4UIMJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUPXzsIWSyWUUgSmELsY6oMMtyaHMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1BYenNJV1N5V1VVZ1NtRUxzWTZvTU10 eWFITS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaI2AwDQYJ KoZIhvcNAQELBQADggEBACZ23+FhZgU0lUnV1SQTu6GT+yuW2uKVLQ15G6hLcH8t RKOLJI92ZuFr3GvoNTvAuKmcLZR/e1br4GsbTbsUV9IgOG3MtzUmbAlscHMQ5ihH VYjr8IZQGf181suIG/o1gOskLON8PMONNLBx1+p7+OYuVTPOnlTLUr4g+5xsapZh I0k/wH1M1ygtoKvsaPDPuvCN6ifKL+VDcIp6Hg7hMg6TYjsN1T8cguUMI6RGTSjQ 1KUwROnHFn+e9DUteU5oQxanJp4+e7xGkF9+SYOkQb7YbdGGUQI0If+qaYiMoTEC 2Ig40CpQypNDIFTEfUHGmeNIbHknXj0Is6FXCNRT9ns= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:16 2025 by rpki-client