$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MXLSsThm_ErnZu_VI1woSotiDZA.roa File: MXLSsThm_ErnZu_VI1woSotiDZA.roa (raw, json) Hash identifier: fjxNk0/r+ALspX2p24IjroGmVUBSyeMdLkjCNiN+U7A= Subject key identifier: 31:72:D2:B1:38:66:FC:4A:E7:66:EF:D5:23:5C:28:4A:8B:62:0D:90 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1971 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MXLSsThm_ErnZu_VI1woSotiDZA.roa Signing time: Fri 22 Aug 2025 08:53:00 +0000 ROA not before: Fri 22 Aug 2025 08:53:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 59.104.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6513 (0x1971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3172D2B13866FC4AE766EFD5235C284A8B620D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:07:55:83:50:0d:29:53:0c:89:1f:34:b7: 94:cf:7b:e5:b0:8f:3d:0a:98:72:dc:fb:a2:98:07: 9c:7f:0b:57:8e:28:31:31:94:05:af:8a:8d:06:78: f5:a0:c4:ea:aa:86:20:cb:cb:47:c4:62:fc:70:ce: a7:bd:4a:67:68:fe:56:a2:c9:b2:1e:8e:90:4e:9e: ad:59:9f:af:2e:d6:88:31:6f:9b:df:bf:d6:23:98: 86:50:43:7a:50:7e:0e:69:a3:d5:76:3b:50:ef:6d: ba:52:3f:6c:e0:4a:dd:32:f1:1e:ef:a3:bf:15:cc: e3:9d:81:64:e3:43:d0:b8:15:bf:81:cb:52:14:be: 5d:91:cb:d1:a4:10:12:bc:63:b9:79:7f:d2:6a:79: 5f:62:f6:30:2a:01:36:6d:e1:51:90:f1:ca:69:b8: 55:b9:87:d1:f4:f1:93:90:61:7d:a2:93:f6:2b:52: df:3d:0c:d6:12:9c:12:93:94:51:a5:c0:28:21:c9: 45:dc:db:4e:35:f4:8a:8f:eb:8a:5e:85:3c:b5:bd: ff:06:8b:b7:4d:0f:32:69:d8:5d:48:f2:0a:a1:36: f2:8e:14:a2:0f:96:e0:73:5e:75:56:d5:d9:37:4c: 67:d3:07:4d:11:fb:73:d1:95:84:1f:f2:4a:79:68: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:72:D2:B1:38:66:FC:4A:E7:66:EF:D5:23:5C:28:4A:8B:62:0D:90 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MXLSsThm_ErnZu_VI1woSotiDZA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.104.0.0/15 Signature Algorithm: sha256WithRSAEncryption 05:2d:9d:fc:9d:b8:5e:21:23:92:91:23:07:d3:ba:41:4e:79: af:1c:f0:b0:1a:20:5c:4f:4a:d3:4a:e4:66:81:7d:19:ce:0f: d0:31:fc:d0:ba:bd:d0:cd:12:f0:62:44:3f:d5:67:fc:12:84: 75:b1:07:4e:e8:03:51:ca:6d:a7:8f:82:b5:eb:e9:9c:29:0d: e9:aa:9a:ca:6c:93:b0:c7:ed:34:11:16:aa:3d:ea:d6:11:4b: 4d:a1:fe:80:ff:52:92:c0:f8:0a:ee:b7:c5:c8:06:42:6a:50: ea:d6:a6:f7:ed:03:c1:c2:9b:40:7c:97:9f:a8:f2:96:58:02: d3:72:54:0a:0a:83:d7:39:2d:6d:86:18:cf:f6:62:97:38:7f: 08:a6:e3:54:d1:18:96:c5:5a:2c:a3:3a:2c:2f:a1:41:e3:58: d9:80:48:f1:2a:4a:3e:33:c7:3f:62:db:53:42:c6:16:62:55: 86:a9:79:0d:02:64:98:c9:30:3a:75:1a:e0:b2:b1:42:e4:06: b0:06:1a:d4:e2:69:2c:68:af:20:f2:1d:0d:c2:58:05:4f:a7: 29:e1:0f:68:95:f5:3e:02:9a:a3:5a:a7:84:2c:44:3e:5c:68: b7:24:82:7e:c9:ac:2d:32:c4:02:b0:69:a6:ce:f6:4d:a6:a1: fd:6c:38:6e -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICGXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMxNzJEMkIxMzg2NkZD NEFFNzY2RUZENTIzNUMyODRBOEI2MjBEOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuwAdVg1ANKVMMiR80t5TPe+Wwjz0KmHLc+6KYB5x/C1eOKDEx lAWvio0GePWgxOqqhiDLy0fEYvxwzqe9Smdo/laiybIejpBOnq1Zn68u1ogxb5vf v9YjmIZQQ3pQfg5po9V2O1DvbbpSP2zgSt0y8R7vo78VzOOdgWTjQ9C4Fb+By1IU vl2Ry9GkEBK8Y7l5f9JqeV9i9jAqATZt4VGQ8cppuFW5h9H08ZOQYX2ik/YrUt89 DNYSnBKTlFGlwCghyUXc20419IqP64pehTy1vf8Gi7dNDzJp2F1I8gqhNvKOFKIP luBzXnVW1dk3TGfTB00R+3PRlYQf8kp5aHqNAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUMXLSsThm/ErnZu/VI1woSotiDZAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTVhMU3NUaG1fRXJuWnVfVkkxd29T b3RpRFpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATtoMA0G CSqGSIb3DQEBCwUAA4IBAQAFLZ38nbheISOSkSMH07pBTnmvHPCwGiBcT0rTSuRm gX0Zzg/QMfzQur3QzRLwYkQ/1Wf8EoR1sQdO6ANRym2nj4K16+mcKQ3pqprKbJOw x+00ERaqPerWEUtNof6A/1KSwPgK7rfFyAZCalDq1qb37QPBwptAfJefqPKWWALT clQKCoPXOS1thhjP9mKXOH8IpuNU0RiWxVosozosL6FB41jZgEjxKko+M8c/YttT QsYWYlWGqXkNAmSYyTA6dRrgsrFC5AawBhrU4mksaK8g8h0NwlgFT6cp4Q9olfU+ ApqjWqeELEQ+XGi3JIJ+yawtMsQCsGmmzvZNpqH9bDhu -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:57 2025 by rpki-client