$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/QZlrdCIyJ7crR5iE2UnumHSMdTo.roa File: QZlrdCIyJ7crR5iE2UnumHSMdTo.roa (raw, json) Hash identifier: ebgWJzUDOSOfD5gmXHGclkJIZmPyBy42ri+pB6YQyCs= Subject key identifier: 41:99:6B:74:22:32:27:B7:2B:47:98:84:D9:49:EE:98:74:8C:75:3A Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Certificate serial: 0DB4 Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/QZlrdCIyJ7crR5iE2UnumHSMdTo.roa Signing time: Mon 14 Jul 2025 16:28:44 +0000 ROA not before: Mon 14 Jul 2025 16:28:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 204677 IP address blocks: 43.224.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 20:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Validity Not Before: Jul 14 16:28:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=41996B74223227B72B479884D949EE98748C753A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c6:6b:21:06:f5:16:43:24:9b:5f:c8:6b:2f: c9:33:36:d3:f9:1a:07:b4:87:1b:68:c9:c0:c1:a5: db:a2:02:4a:02:6b:36:7c:bf:94:07:66:a6:75:f2: ad:4f:17:30:16:7a:11:58:7c:11:69:75:7e:b7:5b: e1:98:84:50:99:47:2a:1a:8f:4a:e4:b8:37:e0:0e: 71:84:37:d8:4c:b2:b8:8e:f4:7b:82:18:ff:6b:ed: a2:a0:01:f3:2c:e4:c4:dd:a1:e6:31:cd:8f:54:90: 6d:53:19:91:17:6e:57:d2:74:60:7c:e3:42:5b:eb: c0:25:59:c5:85:e1:14:e2:1e:47:13:10:36:62:39: 46:4f:88:8b:c9:0c:9d:d6:84:64:21:58:63:19:b8: d6:53:26:56:52:ea:09:af:0d:c9:99:2b:e6:fa:72: 45:7a:6a:c0:eb:8f:05:7c:94:3a:18:1e:c2:c1:0f: ef:89:3a:75:ff:a0:b9:a9:13:f6:0a:37:95:70:0b: 33:1f:0c:08:39:e8:63:e5:aa:95:ed:50:a8:29:5c: 3e:d6:09:94:c1:af:56:8f:f7:cd:18:03:87:61:a2: d9:d7:09:35:e3:ff:9e:73:f5:d1:55:3b:53:7b:1e: d8:5f:4f:9a:e9:bf:05:28:f7:c6:8b:57:23:fe:e2: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:99:6B:74:22:32:27:B7:2B:47:98:84:D9:49:EE:98:74:8C:75:3A X509v3 Authority Key Identifier: keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/QZlrdCIyJ7crR5iE2UnumHSMdTo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.224.21.0/24 Signature Algorithm: sha256WithRSAEncryption a8:b1:38:c3:57:2d:fc:ad:fe:33:b8:49:54:c9:2b:e2:a5:91: 7d:f6:74:f3:e1:10:d4:c4:c0:09:46:41:e1:1c:97:b3:0b:26: 8c:36:b0:22:ef:9c:8b:c6:a5:55:6d:c9:2e:89:e9:31:fa:82: 2c:15:55:16:1e:e7:92:8e:cb:40:0a:3f:5b:74:9b:0d:9b:bb: 7f:67:36:35:52:7e:45:0d:87:97:6e:0a:61:04:18:77:42:3d: 57:68:7d:61:a8:dc:21:99:63:43:cc:11:e2:b7:93:5b:84:90: 20:c5:3e:69:14:bb:00:ef:48:28:d8:a5:bc:43:17:63:e8:f7: 96:f3:e7:ff:55:eb:d7:d8:0d:13:73:98:c4:9a:91:9d:01:3f: 02:b1:85:41:5d:d6:f9:50:c7:b4:bc:fe:c1:1e:d7:ab:c6:a1: ef:f4:0c:1b:76:fa:90:0f:72:93:0e:1f:35:ae:da:a9:57:84: 61:06:67:97:c5:17:85:28:73:67:ee:14:27:e2:e7:ae:b1:7c: 03:44:9e:07:5a:6c:7e:85:c1:2b:3b:1d:2d:d8:7c:2d:fb:e3: ff:69:1f:ca:50:b3:5a:f7:93:a9:47:31:7a:af:a1:08:40:2e: a8:73:e3:6d:22:63:b3:fd:17:a6:36:15:70:ae:fc:4a:05:80: c9:e4:8c:59 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yNTA3MTQx NjI4NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxOTk2Qjc0MjIzMjI3 QjcyQjQ3OTg4NEQ5NDlFRTk4NzQ4Qzc1M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlxmshBvUWQySbX8hrL8kzNtP5Gge0hxtoycDBpduiAkoCazZ8 v5QHZqZ18q1PFzAWehFYfBFpdX63W+GYhFCZRyoaj0rkuDfgDnGEN9hMsriO9HuC GP9r7aKgAfMs5MTdoeYxzY9UkG1TGZEXblfSdGB840Jb68AlWcWF4RTiHkcTEDZi OUZPiIvJDJ3WhGQhWGMZuNZTJlZS6gmvDcmZK+b6ckV6asDrjwV8lDoYHsLBD++J OnX/oLmpE/YKN5VwCzMfDAg56GPlqpXtUKgpXD7WCZTBr1aP980YA4dhotnXCTXj /55z9dFVO1N7HthfT5rpvwUo98aLVyP+4j3RAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUQZlrdCIyJ7crR5iE2UnumHSMdTowHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9RWmxyZENJeUo3Y3JSNWlFMlVu dW1IU01kVG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+AV MA0GCSqGSIb3DQEBCwUAA4IBAQCosTjDVy38rf4zuElUySvipZF99nTz4RDUxMAJ RkHhHJezCyaMNrAi75yLxqVVbckuiekx+oIsFVUWHueSjstACj9bdJsNm7t/ZzY1 Un5FDYeXbgphBBh3Qj1XaH1hqNwhmWNDzBHit5NbhJAgxT5pFLsA70go2KW8Qxdj 6PeW8+f/VevX2A0Tc5jEmpGdAT8CsYVBXdb5UMe0vP7BHterxqHv9AwbdvqQD3KT Dh81rtqpV4RhBmeXxReFKHNn7hQn4ueusXwDRJ4HWmx+hcErOx0t2Hwt++P/aR/K ULNa95OpRzF6r6EIQC6oc+NtImOz/RemNhVwrvxKBYDJ5IxZ -----END CERTIFICATE-----Generated at Sun Jul 20 19:05:47 2025 by rpki-client