$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/rHJi2EbxAIld0K7ftWI1OvAiwD0.roa File: rHJi2EbxAIld0K7ftWI1OvAiwD0.roa (raw, json) Hash identifier: Yj7yfiipZhMclsEZuRgyTjtgxq1pCYcegWvSHDDRxUk= Subject key identifier: AC:72:62:D8:46:F1:00:89:5D:D0:AE:DF:B5:62:35:3A:F0:22:C0:3D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 139A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rHJi2EbxAIld0K7ftWI1OvAiwD0.roa Signing time: Fri 22 Aug 2025 08:59:29 +0000 ROA not before: Fri 22 Aug 2025 08:59:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 60.244.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5018 (0x139a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AC7262D846F100895DD0AEDFB562353AF022C03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:52:2c:f4:18:eb:34:ac:7c:a6:82:ed:7c: f8:73:21:86:c4:ec:c1:65:1b:12:f9:a1:3d:59:d0: f7:0e:1f:de:85:00:c6:24:f5:6a:4d:4e:65:06:6a: 69:70:c0:77:33:9b:1a:32:36:39:eb:b6:c6:b7:bb: 22:e9:02:48:e7:eb:ca:4c:72:b0:71:4a:34:30:5f: 32:ff:e3:af:72:fd:6c:1f:4f:62:82:1c:31:66:28: cb:a9:b3:1c:ac:52:d3:0c:91:79:3d:6c:f2:aa:87: 9a:5d:fe:ce:c6:87:db:4b:65:e1:dc:c1:ee:27:ce: 65:53:a9:da:c4:f0:db:71:a0:a9:f7:61:66:b2:5a: 36:cd:fb:4b:f0:11:fa:8a:f7:71:7d:79:c0:94:8d: 8a:30:f8:f5:e6:f9:70:e0:1c:eb:b6:1c:60:9d:d8: 16:0c:97:db:e3:cd:34:92:62:bb:14:6d:b6:f1:d3: 8b:a0:65:d6:fe:df:cb:38:21:8a:22:9f:5f:a8:a6: 02:1e:e5:2d:6a:85:8a:11:7d:66:c7:96:4c:d7:5c: da:3c:33:91:a8:fc:99:4d:e2:b8:d0:ea:b6:4f:98: 8c:70:cc:5c:98:88:5d:12:7c:0c:6e:12:e3:88:84: b9:02:08:4e:4b:b7:f1:ec:18:19:0a:e8:4d:a8:15: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:72:62:D8:46:F1:00:89:5D:D0:AE:DF:B5:62:35:3A:F0:22:C0:3D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rHJi2EbxAIld0K7ftWI1OvAiwD0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.128.0/17 Signature Algorithm: sha256WithRSAEncryption 56:f2:b5:bf:5e:58:5b:77:9e:92:29:95:2f:6f:60:51:2a:e8: 9e:1b:9b:9f:69:38:64:17:ad:61:18:9c:42:f1:4b:b7:b9:a3: dc:ac:20:49:31:d6:59:77:df:06:14:a2:69:15:a1:46:75:dd: b0:d2:36:41:6b:a7:3d:ef:16:cf:e9:77:8a:87:e0:12:1d:8c: bf:ca:b1:c6:cf:5f:c0:26:e7:60:7e:3d:e0:71:21:96:29:9a: bf:b5:31:9a:95:10:b7:87:d9:96:58:57:e2:a6:41:40:16:3d: 1b:e5:aa:ad:1e:43:e8:8f:cb:ab:b0:64:95:50:d6:65:13:9a: 9d:8e:39:bf:6e:bb:15:e8:e9:21:0c:9e:b9:92:ed:91:b9:89: 0d:cf:45:b4:f4:09:e4:64:4c:f4:56:c3:94:0b:da:b1:bf:0b: 0c:8d:10:24:3f:24:a2:64:1d:0d:dd:5c:b5:c1:36:52:f1:14: 66:e1:a2:a0:ca:a4:9b:af:8d:e4:b6:b4:1c:35:97:c7:92:69: 17:9d:5e:96:43:88:c2:62:f8:c3:9d:9e:c4:18:44:7c:6f:d3: 91:df:23:83:13:fb:e8:e0:92:bb:4b:b3:53:c6:ce:d3:41:6c: d2:fa:07:0c:8e:98:d8:2f:8c:a9:8b:aa:a2:70:80:5c:08:f3: 23:85:ec:b6 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFDNzI2MkQ4NDZGMTAw ODk1REQwQUVERkI1NjIzNTNBRjAyMkMwM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFmVIs9BjrNKx8poLtfPhzIYbE7MFlGxL5oT1Z0PcOH96FAMYk 9WpNTmUGamlwwHczmxoyNjnrtsa3uyLpAkjn68pMcrBxSjQwXzL/469y/WwfT2KC HDFmKMupsxysUtMMkXk9bPKqh5pd/s7Gh9tLZeHcwe4nzmVTqdrE8NtxoKn3YWay WjbN+0vwEfqK93F9ecCUjYow+PXm+XDgHOu2HGCd2BYMl9vjzTSSYrsUbbbx04ug Zdb+38s4IYoin1+opgIe5S1qhYoRfWbHlkzXXNo8M5Go/JlN4rjQ6rZPmIxwzFyY iF0SfAxuEuOIhLkCCE5Lt/HsGBkK6E2oFUN5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUrHJi2EbxAIld0K7ftWI1OvAiwD0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3JISmkyRWJ4QUlsZDBLN2Z0V0kxT3ZB aXdEMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc89IAwDQYJ KoZIhvcNAQELBQADggEBAFbytb9eWFt3npIplS9vYFEq6J4bm59pOGQXrWEYnELx S7e5o9ysIEkx1ll33wYUomkVoUZ13bDSNkFrpz3vFs/pd4qH4BIdjL/KscbPX8Am 52B+PeBxIZYpmr+1MZqVELeH2ZZYV+KmQUAWPRvlqq0eQ+iPy6uwZJVQ1mUTmp2O Ob9uuxXo6SEMnrmS7ZG5iQ3PRbT0CeRkTPRWw5QL2rG/CwyNECQ/JKJkHQ3dXLXB NlLxFGbhoqDKpJuvjeS2tBw1l8eSaRedXpZDiMJi+MOdnsQYRHxv05HfI4MT++jg krtLs1PGztNBbNL6BwyOmNgvjKmLqqJwgFwI8yOF7LY= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:35 2025 by rpki-client