$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/lwDkEEOiQongeggmpQ6VMHot_CI.roa File: lwDkEEOiQongeggmpQ6VMHot_CI.roa (raw, json) Hash identifier: D3ja5EeR7seVkTxbY8pOMGByB/tg/cMtFg3Wqg79OCs= Subject key identifier: 97:00:E4:10:43:A2:42:89:E0:7A:08:26:A5:0E:95:30:7A:2D:FC:22 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13D0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lwDkEEOiQongeggmpQ6VMHot_CI.roa Signing time: Fri 22 Aug 2025 08:59:46 +0000 ROA not before: Fri 22 Aug 2025 08:59:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9674 IP address blocks: 114.140.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5072 (0x13d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9700E41043A24289E07A0826A50E95307A2DFC22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:a4:7a:16:92:10:41:44:e2:e1:aa:34:9d: c1:c2:0c:03:23:22:cc:ec:b7:33:fc:df:4d:39:81: fd:6b:36:e6:99:1b:d3:20:10:17:37:62:b1:0b:45: 33:c4:e9:22:28:90:b9:8b:70:58:d9:cb:2a:00:fd: 41:c8:02:96:36:d2:ba:8c:32:ac:e0:59:66:2f:4e: a3:39:88:5c:c0:ee:08:0c:b0:ce:fa:4e:d1:4e:ef: d4:7f:2e:39:5d:6b:65:3e:49:62:4e:85:5e:bb:56: c3:c4:47:c7:13:7b:45:c2:8c:40:c2:44:c7:9b:2e: fb:ab:4a:d1:44:5f:3a:7e:8b:7e:ac:4c:10:57:6f: da:52:b2:61:75:62:6e:a3:93:d2:ef:98:a6:ca:78: f5:73:08:4f:ab:3c:81:d7:cd:e8:1e:0a:79:ae:ad: c1:e8:7a:50:12:e6:a0:19:c3:2a:a9:05:e6:13:e0: 5e:55:3a:35:b0:a7:26:df:b1:b9:b0:3a:2e:56:ee: df:5e:67:4e:bb:0a:f1:16:ed:3c:ac:a3:dd:74:e4: ab:73:0e:99:67:06:a0:89:8c:01:64:4b:5e:d8:f6: a9:50:87:03:f3:95:5c:a4:64:d2:a2:29:95:e4:48: e5:03:52:38:84:12:01:98:2b:62:ee:2f:40:b7:20: f8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:00:E4:10:43:A2:42:89:E0:7A:08:26:A5:0E:95:30:7A:2D:FC:22 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lwDkEEOiQongeggmpQ6VMHot_CI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:ad:a8:6a:46:1d:78:2e:a3:67:01:1f:09:ad:45:9e:bd:64: 7d:4e:77:ca:ff:e9:57:2c:2d:c1:8d:88:8b:2f:f4:69:0d:94: 99:03:f8:ea:3c:44:5f:51:05:9f:82:d7:b9:02:dd:e4:e6:31: 8d:55:02:c2:7c:6f:e8:59:77:d9:1d:3f:1e:74:ab:dc:8c:8f: c3:a8:42:5c:9f:29:ca:3a:1d:c0:38:ea:74:d4:03:aa:85:ef: 90:cc:77:98:32:e3:e1:e0:b5:e2:d3:f8:bc:75:e1:8d:f2:99: ad:0a:ec:a4:dc:50:1a:68:b1:59:06:73:29:b1:cd:3a:56:06: f4:d4:89:c7:e3:d8:52:4a:67:42:b5:83:e3:47:16:ec:8a:29: 84:7b:60:04:cb:bc:9b:1d:aa:34:17:f8:bb:d2:d4:44:ad:ae: a8:03:8a:9b:32:47:67:fc:84:dc:25:83:70:70:57:dc:e5:35: 15:7a:10:0e:f4:bc:3f:6d:64:d4:48:08:45:56:9a:6b:92:a7: a8:82:81:7f:98:44:08:9c:3b:28:82:76:73:ca:ac:e9:77:33: ad:66:c2:ad:82:2e:6f:06:79:b7:b0:dd:5d:05:1b:d0:9d:3f: 3c:cf:a4:77:52:46:fb:7a:2e:85:5d:ea:b1:5f:4f:c6:22:8f: 51:2a:63:09 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICE9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3MDBFNDEwNDNBMjQy ODlFMDdBMDgyNkE1MEU5NTMwN0EyREZDMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp9aR6FpIQQUTi4ao0ncHCDAMjIszstzP83005gf1rNuaZG9Mg EBc3YrELRTPE6SIokLmLcFjZyyoA/UHIApY20rqMMqzgWWYvTqM5iFzA7ggMsM76 TtFO79R/Ljlda2U+SWJOhV67VsPER8cTe0XCjEDCRMebLvurStFEXzp+i36sTBBX b9pSsmF1Ym6jk9LvmKbKePVzCE+rPIHXzegeCnmurcHoelAS5qAZwyqpBeYT4F5V OjWwpybfsbmwOi5W7t9eZ067CvEW7Tyso9105KtzDplnBqCJjAFkS17Y9qlQhwPz lVykZNKiKZXkSOUDUjiEEgGYK2LuL0C3IPgzAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUlwDkEEOiQongeggmpQ6VMHot/CIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2x3RGtFRU9pUW9uZ2VnZ21wUTZWTUhv dF9DSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwByjDANBgkq hkiG9w0BAQsFAAOCAQEAQ62oakYdeC6jZwEfCa1Fnr1kfU53yv/pVywtwY2Iiy/0 aQ2UmQP46jxEX1EFn4LXuQLd5OYxjVUCwnxv6Fl32R0/HnSr3IyPw6hCXJ8pyjod wDjqdNQDqoXvkMx3mDLj4eC14tP4vHXhjfKZrQrspNxQGmixWQZzKbHNOlYG9NSJ x+PYUkpnQrWD40cW7IophHtgBMu8mx2qNBf4u9LURK2uqAOKmzJHZ/yE3CWDcHBX 3OU1FXoQDvS8P21k1EgIRVaaa5KnqIKBf5hECJw7KIJ2c8qs6XczrWbCrYIubwZ5 t7DdXQUb0J0/PM+kd1JG+3ouhV3qsV9PxiKPUSpjCQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:44:59 2025 by rpki-client