$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/cxUDqvDn8bGRUX5ydC1MP_07Cz4.roa File: cxUDqvDn8bGRUX5ydC1MP_07Cz4.roa (raw, json) Hash identifier: Adv9aMocM2FIJHfmWBNL0WL6NZDgi4CNiVpffx1+60k= Subject key identifier: 73:15:03:AA:F0:E7:F1:B1:91:51:7E:72:74:2D:4C:3F:FD:3B:0B:3E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1477 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/cxUDqvDn8bGRUX5ydC1MP_07Cz4.roa Signing time: Fri 22 Aug 2025 09:00:27 +0000 ROA not before: Fri 22 Aug 2025 09:00:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 124.219.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5239 (0x1477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=731503AAF0E7F1B191517E72742D4C3FFD3B0B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:5e:c0:1a:e9:a1:d3:3b:48:cb:a2:79:da: 79:32:24:39:b3:21:80:9d:c0:17:ce:8a:23:88:45: 1d:2d:a2:2e:b0:69:c1:80:7a:20:86:ed:77:f8:cb: 97:01:dc:06:ec:d4:54:85:0b:46:ff:ba:c4:6c:5e: a9:4f:2e:ee:dd:b6:45:04:b3:59:a9:62:40:9d:2c: ef:24:d9:b5:d1:71:ba:8b:14:f1:59:9b:fb:2d:cd: 06:43:ec:95:cd:d0:1f:18:5d:89:b1:c4:20:23:d8: 2f:8f:10:e2:d5:8c:d1:af:f7:47:e0:ed:6b:26:6b: 6e:0e:45:d0:eb:ce:7e:7d:b9:10:c8:6a:14:53:c9: 71:35:86:b2:47:9c:e4:b9:ca:bc:63:a3:e3:0f:5a: 39:22:7a:d3:26:df:cd:36:36:db:d1:9f:02:da:36: c1:06:0e:36:e3:79:37:08:fa:20:cd:3b:35:2f:eb: 2f:c2:29:56:cd:2f:e3:bd:b1:7c:70:ac:dc:f9:65: 26:42:0b:b9:21:cb:c6:50:0e:86:86:8e:5b:90:d2: 0c:31:3e:c5:cf:84:98:7e:48:52:58:38:a8:6d:66: 9e:c7:00:2e:ea:ad:e9:99:b9:c3:c5:af:53:87:b9: 1f:8b:4c:4d:7d:82:0a:13:55:fb:d3:93:f3:2a:0f: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:15:03:AA:F0:E7:F1:B1:91:51:7E:72:74:2D:4C:3F:FD:3B:0B:3E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/cxUDqvDn8bGRUX5ydC1MP_07Cz4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption b7:b5:c5:45:1b:9b:86:e1:15:fe:c5:31:92:b5:0c:93:3e:c3: 05:f4:45:b2:63:e7:f5:68:b3:76:28:ec:e9:2d:56:a6:d7:b6: a7:b3:5d:15:dd:a8:b8:1b:30:5f:0c:15:d7:bf:38:5a:91:19: e7:ef:a9:45:57:05:fc:9e:d5:13:32:8e:96:7e:48:6a:42:24: be:0b:92:1d:77:4c:89:fd:04:91:7c:70:71:3d:6d:ca:d5:b9: 66:77:dd:f3:81:51:ad:01:fe:12:0b:06:56:18:cf:34:28:bd: e4:f9:ea:d0:91:51:f8:11:ff:24:a2:7d:92:70:17:00:4f:42: db:82:94:23:30:93:91:ac:0d:63:6d:3d:05:02:c6:1f:fa:58: 41:9f:1c:b1:81:8d:c8:b7:4b:f6:d4:03:f4:a4:b3:7c:b5:7c: f7:c5:e1:f8:e1:bb:2c:74:0b:be:fa:d6:64:21:5b:ce:14:61: 8e:b6:76:93:6c:36:82:af:e9:1c:4f:ea:47:cb:36:5a:76:98: ea:5b:6c:89:e0:df:4c:5e:cd:c1:25:35:06:53:39:01:b5:48: 06:eb:7c:c0:a6:62:8b:fe:29:2c:0c:05:9f:ea:c4:08:db:f3: 1f:03:bd:50:eb:14:93:d7:d9:ac:c5:42:b1:b2:f8:82:12:ae: 2b:51:c9:44 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDczMTUwM0FBRjBFN0Yx QjE5MTUxN0U3Mjc0MkQ0QzNGRkQzQjBCM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbz17AGumh0ztIy6J52nkyJDmzIYCdwBfOiiOIRR0toi6wacGA eiCG7Xf4y5cB3Abs1FSFC0b/usRsXqlPLu7dtkUEs1mpYkCdLO8k2bXRcbqLFPFZ m/stzQZD7JXN0B8YXYmxxCAj2C+PEOLVjNGv90fg7Wsma24ORdDrzn59uRDIahRT yXE1hrJHnOS5yrxjo+MPWjkietMm3802NtvRnwLaNsEGDjbjeTcI+iDNOzUv6y/C KVbNL+O9sXxwrNz5ZSZCC7khy8ZQDoaGjluQ0gwxPsXPhJh+SFJYOKhtZp7HAC7q remZucPFr1OHuR+LTE19ggoTVfvTk/MqD2HlAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUcxUDqvDn8bGRUX5ydC1MP/07Cz4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2N4VURxdkRuOGJHUlVYNXlkQzFNUF8w N0N6NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd82wAwDQYJ KoZIhvcNAQELBQADggEBALe1xUUbm4bhFf7FMZK1DJM+wwX0RbJj5/Vos3Yo7Okt VqbXtqezXRXdqLgbMF8MFde/OFqRGefvqUVXBfye1RMyjpZ+SGpCJL4Lkh13TIn9 BJF8cHE9bcrVuWZ33fOBUa0B/hILBlYYzzQoveT56tCRUfgR/ySifZJwFwBPQtuC lCMwk5GsDWNtPQUCxh/6WEGfHLGBjci3S/bUA/Sks3y1fPfF4fjhuyx0C7761mQh W84UYY62dpNsNoKv6RxP6kfLNlp2mOpbbIng30xezcElNQZTOQG1SAbrfMCmYov+ KSwMBZ/qxAjb8x8DvVDrFJPX2azFQrGy+IISritRyUQ= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:05 2025 by rpki-client