$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/3WejPDpdJfpOltF6LxGIKSs9Lis.roa File: 3WejPDpdJfpOltF6LxGIKSs9Lis.roa (raw, json) Hash identifier: XqB0Gx6hwO7vq4ibyYIs68+uFTDnsZ38ACG/+Hkkrfk= Subject key identifier: DD:67:A3:3C:3A:5D:25:FA:4E:96:D1:7A:2F:11:88:29:2B:3D:2E:2B Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0E16 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/3WejPDpdJfpOltF6LxGIKSs9Lis.roa Signing time: Fri 22 Aug 2025 09:00:51 +0000 ROA not before: Fri 22 Aug 2025 09:00:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 101.3.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3606 (0xe16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 22 09:00:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DD67A33C3A5D25FA4E96D17A2F1188292B3D2E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:c0:9f:96:d3:e8:4d:25:5e:b7:0a:8e:42: b1:8c:4f:3f:67:eb:ff:bc:69:9e:b6:5c:1a:62:6d: 0b:8e:bf:64:72:5d:df:81:36:6c:9e:4c:3d:8a:fb: e7:ba:04:29:b2:02:95:d9:fc:8e:9b:61:85:3e:83: 85:3d:41:8b:bf:60:50:18:7c:7f:8b:37:00:ac:66: 68:2f:e9:0b:25:e5:9b:80:78:25:39:74:ed:52:3e: 1e:39:18:d0:0d:4e:2f:2d:83:a1:36:7a:fd:32:53: e0:97:72:d2:92:a6:9e:d7:98:f3:9c:dc:5f:19:94: e0:a2:64:c3:00:85:18:98:f2:2a:6b:85:e2:5c:86: a3:96:a4:a4:d3:d9:1c:17:d5:e6:3b:04:58:8d:98: 16:d3:35:44:dc:5c:2e:93:7c:96:e1:56:65:d3:e4: b4:4e:9c:62:06:42:21:9d:51:58:db:39:5e:e0:ea: cb:68:d2:94:d4:0e:2d:96:0d:a0:88:d2:68:a8:d7: 3f:9b:c3:ac:b8:f1:14:bd:04:0b:ff:7c:d0:62:16: 54:d8:c6:d3:39:5e:8c:e9:4b:9d:d7:1f:96:f9:f3: a3:7e:bd:6c:02:7b:2b:d5:54:15:4a:91:4a:49:1e: 76:4d:b6:c2:ae:e8:ca:8f:84:42:46:b5:01:ac:3f: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:67:A3:3C:3A:5D:25:FA:4E:96:D1:7A:2F:11:88:29:2B:3D:2E:2B X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/3WejPDpdJfpOltF6LxGIKSs9Lis.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.208.0/22 Signature Algorithm: sha256WithRSAEncryption 24:32:61:81:d7:f3:44:9c:32:a3:c4:4d:66:4e:92:3d:b2:97: 80:92:be:70:8a:2a:7e:c8:72:6e:78:62:36:ef:dc:d3:32:98: ee:c8:85:14:4b:b7:22:5f:df:17:8a:dd:cf:36:8b:6d:3d:d3: 80:aa:42:38:80:dc:49:7f:9b:64:08:f0:10:27:39:9b:2c:f7: 25:39:29:9f:19:79:db:df:e7:9f:2d:8e:2b:92:cc:77:2f:fb: f2:5a:6f:a6:04:aa:84:9d:d0:f7:d1:94:e5:38:2b:47:ad:48: c2:69:e0:af:29:d5:b4:2a:0b:98:d6:60:03:5b:4d:1e:b3:6d: 49:d0:e4:e4:e2:27:df:4f:a6:96:0e:34:47:41:a7:3d:e4:b2: 47:0e:a3:30:f5:74:06:ae:bb:94:56:c8:15:c5:db:5d:c8:ed: eb:e6:92:6b:19:a2:19:51:40:a7:25:94:24:06:02:a2:13:c9: d4:03:b1:03:01:f6:4a:c9:1f:b4:fa:64:db:c5:ec:21:3a:cd: 23:8d:36:51:df:d8:b0:f8:53:20:5b:ac:c7:02:b8:b6:8d:33: cf:8c:3e:b7:b2:6d:5f:ab:8f:06:41:57:8d:ad:c5:a6:70:27: a9:ad:c7:b6:f0:b0:59:d0:69:4d:fd:3e:29:ef:0b:16:e3:d8: a5:31:28:f5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTA4MjIw OTAwNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERENjdBMzNDM0E1RDI1 RkE0RTk2RDE3QTJGMTE4ODI5MkIzRDJFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwIsCfltPoTSVetwqOQrGMTz9n6/+8aZ62XBpibQuOv2RyXd+B NmyeTD2K++e6BCmyApXZ/I6bYYU+g4U9QYu/YFAYfH+LNwCsZmgv6Qsl5ZuAeCU5 dO1SPh45GNANTi8tg6E2ev0yU+CXctKSpp7XmPOc3F8ZlOCiZMMAhRiY8iprheJc hqOWpKTT2RwX1eY7BFiNmBbTNUTcXC6TfJbhVmXT5LROnGIGQiGdUVjbOV7g6sto 0pTUDi2WDaCI0mio1z+bw6y48RS9BAv/fNBiFlTYxtM5XozpS53XH5b586N+vWwC eyvVVBVKkUpJHnZNtsKu6MqPhEJGtQGsP2rtAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU3WejPDpdJfpOltF6LxGIKSs9LiswHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2LzNXZWpQRHBkSmZw T2x0RjZMeEdJS1NzOUxpcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJlA9AwDQYJKoZIhvcNAQELBQADggEBACQyYYHX80ScMqPETWZOkj2yl4CS vnCKKn7Icm54Yjbv3NMymO7IhRRLtyJf3xeK3c82i20904CqQjiA3El/m2QI8BAn OZss9yU5KZ8Zedvf558tjiuSzHcv+/Jab6YEqoSd0PfRlOU4K0etSMJp4K8p1bQq C5jWYANbTR6zbUnQ5OTiJ99PppYONEdBpz3kskcOozD1dAauu5RWyBXF213I7evm kmsZohlRQKcllCQGAqITydQDsQMB9krJH7T6ZNvF7CE6zSONNlHf2LD4UyBbrMcC uLaNM8+MPreybV+rjwZBV42txaZwJ6mtx7bwsFnQaU39PinvCxbj2KUxKPU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:42:00 2025 by rpki-client