$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/xIcNgKzZoWe1PovY03mb5acHvD8.roa File: xIcNgKzZoWe1PovY03mb5acHvD8.roa (raw, json) Hash identifier: ofdMq8ibh+Yzgj7tboF2wTROxIJ2/9At9JKYmyv93go= Subject key identifier: C4:87:0D:80:AC:D9:A1:67:B5:3E:8B:D8:D3:79:9B:E5:A7:07:BC:3F Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Certificate serial: 0D70 Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/xIcNgKzZoWe1PovY03mb5acHvD8.roa Signing time: Fri 22 Aug 2025 08:44:24 +0000 ROA not before: Fri 22 Aug 2025 08:44:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17710 IP address blocks: 61.57.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Validity Not Before: Aug 22 08:44:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C4870D80ACD9A167B53E8BD8D3799BE5A707BC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:e8:7d:d8:6e:6e:f3:4d:a0:dc:ee:e9:3d: 2b:f9:d1:0d:d4:5d:ab:09:59:bf:ff:f8:bb:e0:cc: e0:57:0b:33:15:15:f4:47:2d:f7:df:dd:fa:99:02: 41:b8:74:cf:5d:1a:6b:0e:0b:b2:1c:a7:3f:a9:2e: bb:9e:9f:52:63:66:92:27:f0:95:5e:b6:8b:b6:52: 6c:b1:5d:cb:c6:47:20:96:6d:27:0f:66:75:e9:2d: b2:25:8f:fd:f2:18:79:b2:7d:6f:0a:45:f7:fa:d0: 7b:6a:68:33:15:41:35:a5:47:9b:0b:d0:51:45:48: 7b:64:73:75:16:b5:52:69:ed:d1:32:ae:3b:34:fe: d9:28:57:0b:5d:c2:fc:3a:0f:02:31:a8:40:20:5e: 43:96:b1:1c:a7:2b:b8:48:43:a7:a9:61:1e:44:f9: c0:2b:d9:9f:ae:58:8a:d8:fc:b0:ea:27:c0:e0:b5: 0d:39:9d:2f:80:f4:89:26:2e:81:7d:ac:82:6b:37: 28:4c:d9:92:c2:1d:29:7c:98:42:3b:fa:70:34:7b: ca:ab:57:55:8e:09:6e:c7:d4:ae:8e:6d:88:e3:8f: 9a:5a:d1:dc:ab:53:0b:f2:5e:a2:a9:e8:2f:7d:db: 04:22:cf:b2:88:12:72:e6:8a:22:c7:9b:77:85:7d: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:87:0D:80:AC:D9:A1:67:B5:3E:8B:D8:D3:79:9B:E5:A7:07:BC:3F X509v3 Authority Key Identifier: keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/xIcNgKzZoWe1PovY03mb5acHvD8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.224.0/20 Signature Algorithm: sha256WithRSAEncryption 08:88:05:9c:6b:fb:9c:b9:51:15:55:2e:7a:2f:52:a9:b8:51: 6f:9a:19:68:35:6c:4e:03:f3:84:06:18:36:bc:81:f6:49:9e: c7:32:1f:0d:01:df:ef:8e:17:a4:a0:1e:79:c3:43:cb:9d:c6: c9:1a:88:ae:b7:82:b1:fa:2e:87:ae:34:8f:3b:2e:80:0a:06: c0:ff:10:d2:ff:3f:cf:4f:2d:e9:09:4c:fd:63:8f:0e:c5:3d: 8f:a6:d8:de:3c:c5:0b:f8:2f:36:1d:48:31:f6:2f:93:98:e5: f6:c8:39:f9:5c:6f:39:33:79:20:68:94:5e:ad:49:84:f8:a3: e3:66:e5:86:00:cf:ce:72:4a:04:7c:e9:0d:ef:25:64:ca:2b: 3d:d1:9c:d4:5f:71:1d:3d:4c:f4:ad:d3:a1:ca:b9:44:e6:dd: 13:4d:89:00:9c:20:41:8a:bf:f0:ac:2f:be:90:58:45:b6:ef: 27:40:50:1d:71:90:a0:e3:7b:81:24:4e:ac:f2:84:da:61:1c: 8f:e5:01:dc:19:e4:5a:97:ee:32:64:02:96:16:b9:6b:36:7a: c4:07:6c:e0:83:05:ab:ac:0d:ab:4a:bf:7d:06:79:0d:07:67: 4f:17:4d:24:6a:70:a9:5c:f2:6a:c4:24:be:f0:6f:35:b4:5d: 10:12:1f:77 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3 OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yNTA4MjIw ODQ0MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM0ODcwRDgwQUNEOUEx NjdCNTNFOEJEOEQzNzk5QkU1QTcwN0JDM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuj+h92G5u802g3O7pPSv50Q3UXasJWb//+LvgzOBXCzMVFfRH Lfff3fqZAkG4dM9dGmsOC7Icpz+pLruen1JjZpIn8JVetou2UmyxXcvGRyCWbScP ZnXpLbIlj/3yGHmyfW8KRff60HtqaDMVQTWlR5sL0FFFSHtkc3UWtVJp7dEyrjs0 /tkoVwtdwvw6DwIxqEAgXkOWsRynK7hIQ6epYR5E+cAr2Z+uWIrY/LDqJ8DgtQ05 nS+A9IkmLoF9rIJrNyhM2ZLCHSl8mEI7+nA0e8qrV1WOCW7H1K6ObYjjj5pa0dyr UwvyXqKp6C992wQiz7KIEnLmiiLHm3eFfQSBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUxIcNgKzZoWe1PovY03mb5acHvD8wHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVUL3hJY05nS3pab1dlMVBvdlkw M21iNWFjSHZEOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OeAwDQYJKoZIhvcNAQELBQADggEBAAiIBZxr+5y5URVVLnovUqm4UW+aGWg1bE4D 84QGGDa8gfZJnscyHw0B3++OF6SgHnnDQ8udxskaiK63grH6LoeuNI87LoAKBsD/ ENL/P89PLekJTP1jjw7FPY+m2N48xQv4LzYdSDH2L5OY5fbIOflcbzkzeSBolF6t SYT4o+Nm5YYAz85ySgR86Q3vJWTKKz3RnNRfcR09TPSt06HKuUTm3RNNiQCcIEGK v/CsL76QWEW27ydAUB1xkKDje4EkTqzyhNphHI/lAdwZ5FqX7jJkApYWuWs2esQH bOCDBausDatKv30GeQ0HZ08XTSRqcKlc8mrEJL7wbzW0XRASH3c= -----END CERTIFICATE-----Generated at Wed Nov 5 20:44:49 2025 by rpki-client