$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/csZRwbSwHanxFT-pKdH2yAIvwTk.roa File: csZRwbSwHanxFT-pKdH2yAIvwTk.roa (raw, json) Hash identifier: nav2MBJTsSVvYXGZdu9fW5fxgr4mJoAwbQ+ZgLYj6wE= Subject key identifier: 72:C6:51:C1:B4:B0:1D:A9:F1:15:3F:A9:29:D1:F6:C8:02:2F:C1:39 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 14A4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/csZRwbSwHanxFT-pKdH2yAIvwTk.roa Signing time: Fri 22 Aug 2025 09:00:39 +0000 ROA not before: Fri 22 Aug 2025 09:00:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 222.156.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5284 (0x14a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=72C651C1B4B01DA9F1153FA929D1F6C8022FC139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:65:59:c3:3d:a1:95:3f:f1:45:8d:cc:8d: 55:95:77:84:0f:15:84:28:96:51:d7:3b:c0:17:57: 7f:35:8b:7b:ea:ca:22:41:8b:ac:90:3b:8d:06:87: d2:38:ae:1f:54:e1:35:32:e0:9e:16:8e:5e:ba:87: dd:20:12:73:06:35:c6:fe:af:e6:60:34:99:d5:8e: 56:f2:e3:c2:a8:cb:93:ee:19:22:c4:47:0f:a6:7b: ce:31:1a:d2:45:ba:4b:83:1f:70:c3:88:44:ae:b9: 36:9c:0d:52:fd:1b:60:42:26:19:10:d6:98:c6:1a: 90:63:45:5b:9b:ed:d6:bc:25:e8:dc:ef:d8:52:2c: fb:50:ae:1a:ee:57:66:33:c7:67:f2:7b:07:25:e7: 9d:2d:37:c4:7d:c5:a2:b8:57:09:7b:75:18:8f:56: 8f:40:31:f5:ae:78:87:2b:fb:68:16:7c:4a:07:e8: a1:8c:19:7a:17:a3:d9:18:13:aa:dc:9a:e0:a4:26: 5d:88:17:25:f2:29:94:67:de:c7:7d:dd:fb:f9:7a: 05:30:fb:17:2e:4e:f6:69:f2:3c:8b:2c:6a:26:5d: a7:78:0c:a1:82:c9:36:44:4f:89:91:ae:de:c2:4e: 18:3a:8b:56:21:32:1a:da:64:af:d3:4a:a8:8a:3f: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:51:C1:B4:B0:1D:A9:F1:15:3F:A9:29:D1:F6:C8:02:2F:C1:39 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/csZRwbSwHanxFT-pKdH2yAIvwTk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:3a:aa:af:b9:95:28:ab:6a:a0:11:92:6f:c4:ae:ae:1c:07: 97:bd:64:dd:86:86:33:f6:d2:7a:fd:d6:21:f9:26:68:94:93: aa:1c:90:4c:e2:8d:84:c5:cc:7c:d0:d8:17:99:ec:1f:63:28: 2f:65:d8:13:c0:b6:0f:42:93:8b:da:75:17:51:13:2b:fc:de: 80:26:dc:cb:2c:fd:4e:0f:3e:76:5f:5d:37:99:72:de:16:bb: 3d:3f:a9:75:6e:19:b8:de:b9:60:fc:bf:2f:ad:58:3d:b6:75: 3c:f0:e8:36:a7:0e:17:41:23:06:e3:25:97:77:27:09:21:b6: 2e:25:99:18:84:cf:18:81:7c:dd:d0:b6:58:06:c7:98:85:ed: 3b:b4:2c:7e:89:94:ce:e1:8f:18:8b:68:23:d5:3e:c6:06:1f: c0:18:b3:73:9b:fd:b4:bb:a9:ab:a6:3b:79:83:80:20:90:86: 06:ec:1d:c4:4b:94:d9:ad:c4:e6:6c:a4:ce:e3:a8:0d:f3:bc: ae:b3:59:80:e7:37:48:fc:d1:88:2b:cc:3f:f5:36:e9:8a:1f: c6:0e:8b:24:2e:2b:c4:4f:92:b1:19:34:e0:c9:18:37:a4:c8: 5d:58:a6:25:cf:ab:e2:48:6d:09:16:d5:ea:c7:a7:65:53:8d: 52:ac:f7:05 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICFKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcyQzY1MUMxQjRCMDFE QTlGMTE1M0ZBOTI5RDFGNkM4MDIyRkMxMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIa2VZwz2hlT/xRY3MjVWVd4QPFYQollHXO8AXV381i3vqyiJB i6yQO40Gh9I4rh9U4TUy4J4Wjl66h90gEnMGNcb+r+ZgNJnVjlby48Koy5PuGSLE Rw+me84xGtJFukuDH3DDiESuuTacDVL9G2BCJhkQ1pjGGpBjRVub7da8Jejc79hS LPtQrhruV2Yzx2fyewcl550tN8R9xaK4Vwl7dRiPVo9AMfWueIcr+2gWfEoH6KGM GXoXo9kYE6rcmuCkJl2IFyXyKZRn3sd93fv5egUw+xcuTvZp8jyLLGomXad4DKGC yTZET4mRrt7CThg6i1YhMhraZK/TSqiKP+eRAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUcsZRwbSwHanxFT+pKdH2yAIvwTkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2NzWlJ3YlN3SGFueEZULXBLZEgyeUFJ dndUay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenDANBgkq hkiG9w0BAQsFAAOCAQEAIjqqr7mVKKtqoBGSb8SurhwHl71k3YaGM/bSev3WIfkm aJSTqhyQTOKNhMXMfNDYF5nsH2MoL2XYE8C2D0KTi9p1F1ETK/zegCbcyyz9Tg8+ dl9dN5ly3ha7PT+pdW4ZuN65YPy/L61YPbZ1PPDoNqcOF0EjBuMll3cnCSG2LiWZ GITPGIF83dC2WAbHmIXtO7QsfomUzuGPGItoI9U+xgYfwBizc5v9tLupq6Y7eYOA IJCGBuwdxEuU2a3E5mykzuOoDfO8rrNZgOc3SPzRiCvMP/U26Yofxg6LJC4rxE+S sRk04MkYN6TIXVimJc+r4khtCRbV6senZVONUqz3BQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:36 2025 by rpki-client