$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/i1aVl1e8PjYrkLBHsb16fxph-A4.roa File: i1aVl1e8PjYrkLBHsb16fxph-A4.roa (raw, json) Hash identifier: O77iDjYVFrRYdufQDmsyMQHlscPenXbMwYP41+Ol29o= Subject key identifier: 8B:56:95:97:57:BC:3E:36:2B:90:B0:47:B1:BD:7A:7F:1A:61:F8:0E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13D9 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/i1aVl1e8PjYrkLBHsb16fxph-A4.roa Signing time: Fri 22 Aug 2025 08:59:48 +0000 ROA not before: Fri 22 Aug 2025 08:59:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 203.79.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5081 (0x13d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8B56959757BC3E362B90B047B1BD7A7F1A61F80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:ac:17:8c:91:a3:92:83:12:99:ff:79:65: 57:49:b8:d1:8c:21:d0:7f:4b:24:de:ae:2c:e5:5e: ad:28:70:ae:8a:ac:e5:7d:6c:27:86:cf:6f:c1:da: a1:c6:86:87:d2:03:cd:4e:e6:77:b8:7b:43:a9:08: 4b:b2:a7:ec:a3:28:73:6f:89:15:b8:25:59:bc:65: 85:f2:22:5e:1f:83:dc:14:0d:e7:54:cc:7b:7e:3b: 7f:1d:89:a8:b1:13:88:a7:36:41:a5:5d:54:fb:88: e9:c1:4d:7d:80:8b:21:53:40:83:93:27:2d:84:ea: d3:ce:cf:49:c4:88:c1:76:10:e9:4a:04:bb:53:4d: 32:a4:02:23:e3:f2:1e:02:da:24:a9:34:47:ef:5e: ee:85:75:e2:5a:d3:4b:96:8b:c6:4c:c0:e9:8f:db: 5a:a4:74:03:d3:bf:9d:ec:2d:6f:0c:4c:00:d4:d2: c7:89:72:80:fa:08:0b:1c:93:6c:e4:ec:47:f5:4d: 35:af:85:0f:52:79:ad:5f:33:6b:c4:00:c6:d5:c4: 41:dd:85:8d:ca:ce:c9:75:38:c3:93:27:ef:af:a9: c6:f8:c0:49:fd:06:13:e8:c1:ee:32:68:52:86:5c: a0:e8:89:8a:03:59:67:05:31:03:30:53:10:a0:14: ee:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:95:97:57:BC:3E:36:2B:90:B0:47:B1:BD:7A:7F:1A:61:F8:0E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/i1aVl1e8PjYrkLBHsb16fxph-A4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.208.0/21 Signature Algorithm: sha256WithRSAEncryption ae:e4:ad:1b:64:86:33:95:53:61:a4:9f:1b:f5:20:7b:14:2d: 15:37:d5:58:c9:eb:73:80:76:e1:e5:bf:2c:3d:ac:8d:13:5a: 4c:53:94:a3:e0:e0:4e:2b:23:eb:67:f7:e0:57:4f:74:5f:78: 4d:70:3d:5c:d4:0e:95:0e:a2:e1:20:fa:bd:91:92:ff:65:da: 8f:c3:69:e6:09:0d:9f:2e:7e:a3:9e:4e:b1:76:21:8b:68:82: e9:2a:ce:e1:a4:c1:d3:65:3b:8b:5b:0e:09:13:f4:de:d8:7d: 58:62:96:79:7e:66:bf:f6:aa:2b:cd:9f:02:0b:52:3e:19:f1: d2:96:2c:7e:f6:c8:f3:81:8c:f8:8d:5b:90:e3:95:59:ef:ad: 3e:b3:ed:e6:b5:35:70:1e:60:6e:38:3c:d5:13:75:1a:ba:f5: 4d:69:aa:3f:b0:75:86:31:d1:ea:2e:ae:8e:8b:47:40:0d:f4: 99:8d:ce:7a:a0:89:6a:2a:93:f9:1c:29:3a:e4:1c:5d:c3:6f: 2e:f5:af:a1:3d:09:6f:82:17:90:ca:18:ce:73:4e:d6:f5:c5: 5e:5e:57:c3:1a:95:0f:45:58:72:d4:8a:d6:67:cd:8c:54:b3: 4f:29:dd:83:83:a4:95:34:bf:ad:c0:09:2e:f8:01:0a:7e:cc: 10:27:93:f1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhCNTY5NTk3NTdCQzNF MzYyQjkwQjA0N0IxQkQ3QTdGMUE2MUY4MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDewawXjJGjkoMSmf95ZVdJuNGMIdB/SyTerizlXq0ocK6KrOV9 bCeGz2/B2qHGhofSA81O5ne4e0OpCEuyp+yjKHNviRW4JVm8ZYXyIl4fg9wUDedU zHt+O38diaixE4inNkGlXVT7iOnBTX2AiyFTQIOTJy2E6tPOz0nEiMF2EOlKBLtT TTKkAiPj8h4C2iSpNEfvXu6FdeJa00uWi8ZMwOmP21qkdAPTv53sLW8MTADU0seJ coD6CAsck2zk7Ef1TTWvhQ9Sea1fM2vEAMbVxEHdhY3Kzsl1OMOTJ++vqcb4wEn9 BhPowe4yaFKGXKDoiYoDWWcFMQMwUxCgFO6RAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUi1aVl1e8PjYrkLBHsb16fxph+A4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2kxYVZsMWU4UGpZcmtMQkhzYjE2Znhw aC1BNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPLT9AwDQYJ KoZIhvcNAQELBQADggEBAK7krRtkhjOVU2Gknxv1IHsULRU31VjJ63OAduHlvyw9 rI0TWkxTlKPg4E4rI+tn9+BXT3RfeE1wPVzUDpUOouEg+r2Rkv9l2o/DaeYJDZ8u fqOeTrF2IYtogukqzuGkwdNlO4tbDgkT9N7YfVhilnl+Zr/2qivNnwILUj4Z8dKW LH72yPOBjPiNW5DjlVnvrT6z7ea1NXAeYG44PNUTdRq69U1pqj+wdYYx0eouro6L R0AN9JmNznqgiWoqk/kcKTrkHF3Dby71r6E9CW+CF5DKGM5zTtb1xV5eV8MalQ9F WHLUitZnzYxUs08p3YODpJU0v63ACS74AQp+zBAnk/E= -----END CERTIFICATE-----Generated at Wed Nov 5 21:44:55 2025 by rpki-client