$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/j0AY6WtkOvSAZdTk5fz2QrBVYOM.roa File: j0AY6WtkOvSAZdTk5fz2QrBVYOM.roa (raw, json) Hash identifier: /Qta+fuNzyx808YN6X0fcjoKdkywvEN+Pe6q6u+rWeM= Subject key identifier: 8F:40:18:E9:6B:64:3A:F4:80:65:D4:E4:E5:FC:F6:42:B0:55:60:E3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13FC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/j0AY6WtkOvSAZdTk5fz2QrBVYOM.roa Signing time: Fri 22 Aug 2025 08:59:57 +0000 ROA not before: Fri 22 Aug 2025 08:59:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 218.34.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5116 (0x13fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F4018E96B643AF48065D4E4E5FCF642B05560E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9d:75:63:ba:97:ff:62:bc:fc:08:9c:78:f4: ce:f1:87:da:8b:78:a9:c1:c5:16:58:46:c7:ed:d6: 6b:9e:bc:be:56:a2:f1:f8:24:8a:de:1a:85:02:5f: 2a:03:a0:6a:cc:4f:25:db:42:c7:9f:d6:5f:5d:f8: 1b:31:37:f8:c4:22:e8:ce:d2:37:de:02:78:54:12: 55:56:d0:9a:4e:0a:64:10:af:ae:65:6b:32:4a:84: d8:6f:44:74:6b:0a:42:3b:80:10:33:42:27:e9:37: e7:5b:cd:cc:95:38:3d:0d:f2:2e:06:6b:82:2d:e6: ad:50:7d:28:57:21:40:92:6e:4a:d1:0f:cb:59:59: 14:5b:da:3b:7c:da:29:8e:61:51:2b:8d:25:35:7e: 4c:61:b2:84:64:32:61:09:fd:8d:a7:80:bf:de:0a: e7:1a:69:ed:73:1d:22:f8:84:8a:55:59:67:b1:9e: 83:fa:d9:ed:30:98:e6:cd:f0:51:7a:15:02:01:74: 95:fa:f4:31:09:79:38:7f:bc:bf:81:c7:84:80:4b: 4c:13:53:41:34:79:35:0e:22:a8:75:2b:51:06:b2: 66:e9:0f:0b:10:2d:ff:78:35:bd:9c:aa:e7:1f:f8: 9b:63:09:8d:d7:e1:08:9c:9a:47:0c:2a:dd:45:50: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:40:18:E9:6B:64:3A:F4:80:65:D4:E4:E5:FC:F6:42:B0:55:60:E3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/j0AY6WtkOvSAZdTk5fz2QrBVYOM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:27:a7:4c:61:84:0b:3f:5a:e8:67:fe:8b:6d:fb:66:a7:b0: 6e:54:8f:7c:08:e4:ea:79:16:86:e3:75:d9:2c:96:0d:68:99: 79:a1:41:53:8e:3d:19:e1:f6:57:62:a0:4f:ee:ec:6d:7e:39: 47:f6:43:61:c0:61:d5:1a:40:73:6f:da:96:fb:b9:42:81:1f: d5:ef:64:3c:88:11:3f:9c:20:71:4f:0f:d2:e4:78:c9:21:be: e5:e1:ea:bf:39:5a:f7:97:cb:ae:4f:c3:df:7a:4b:27:87:c7: a8:67:55:b5:67:b1:c9:69:f8:d2:53:06:58:40:b6:34:5e:65: b7:5f:b0:5a:fe:90:1a:a7:88:61:04:d8:a8:10:73:32:66:95: a6:56:bf:0c:3d:c5:19:64:cd:65:20:92:9b:bb:d6:0f:47:3c: f4:1b:9c:d8:b5:51:b2:f5:72:b6:af:ea:12:2f:3c:60:42:bd: 68:1e:7c:51:dd:7c:d2:7e:84:fd:0b:2b:55:52:43:7c:b9:48: bc:9c:44:7b:12:b6:9d:98:ca:ae:87:13:89:2c:ff:5f:18:68: 00:73:cc:d4:d1:99:4d:3a:1e:ac:f4:ca:a1:c2:45:e8:93:26: 84:c5:69:2d:e5:71:62:d5:32:93:bb:9c:a8:c4:99:75:96:40: c5:64:e1:5b -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICE/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGNDAxOEU5NkI2NDNB RjQ4MDY1RDRFNEU1RkNGNjQyQjA1NTYwRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjnXVjupf/Yrz8CJx49M7xh9qLeKnBxRZYRsft1muevL5WovH4 JIreGoUCXyoDoGrMTyXbQsef1l9d+BsxN/jEIujO0jfeAnhUElVW0JpOCmQQr65l azJKhNhvRHRrCkI7gBAzQifpN+dbzcyVOD0N8i4Ga4It5q1QfShXIUCSbkrRD8tZ WRRb2jt82imOYVErjSU1fkxhsoRkMmEJ/Y2ngL/eCucaae1zHSL4hIpVWWexnoP6 2e0wmObN8FF6FQIBdJX69DEJeTh/vL+Bx4SAS0wTU0E0eTUOIqh1K1EGsmbpDwsQ Lf94Nb2cqucf+JtjCY3X4QicmkcMKt1FUMwhAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUj0AY6WtkOvSAZdTk5fz2QrBVYOMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2owQVk2V3RrT3ZTQVpkVGs1ZnoyUXJC VllPTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDaIjANBgkq hkiG9w0BAQsFAAOCAQEAISenTGGECz9a6Gf+i237ZqewblSPfAjk6nkWhuN12SyW DWiZeaFBU449GeH2V2KgT+7sbX45R/ZDYcBh1RpAc2/alvu5QoEf1e9kPIgRP5wg cU8P0uR4ySG+5eHqvzla95fLrk/D33pLJ4fHqGdVtWexyWn40lMGWEC2NF5lt1+w Wv6QGqeIYQTYqBBzMmaVpla/DD3FGWTNZSCSm7vWD0c89Buc2LVRsvVytq/qEi88 YEK9aB58Ud180n6E/QsrVVJDfLlIvJxEexK2nZjKrocTiSz/XxhoAHPM1NGZTToe rPTKocJF6JMmhMVpLeVxYtUyk7ucqMSZdZZAxWThWw== -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:19 2025 by rpki-client