$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa File: X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa (raw, json) Hash identifier: Nu17R64WXaWslx/ReIjhLvq/lF2xFDfTtETTKppn/Io= Subject key identifier: 5F:FF:89:93:0A:DF:E3:0C:02:E8:8B:73:2D:08:4B:78:F6:B3:95:44 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 142C Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa Signing time: Fri 06 Jun 2025 07:21:52 +0000 ROA not before: Fri 06 Jun 2025 07:21:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 2404:178::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5164 (0x142c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Jun 6 07:21:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5FFF89930ADFE30C02E88B732D084B78F6B39544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:7e:10:bc:5c:ea:d0:5c:15:9e:5a:73:22: fe:a5:5a:1a:93:58:bb:6a:64:17:56:c2:84:9a:48: 20:9e:c9:53:18:62:71:80:59:49:2b:6d:ba:8c:95: ae:43:6b:28:e3:73:b1:37:65:92:ae:b7:0e:65:48: ca:04:93:1b:51:af:ae:40:7c:14:7b:eb:1e:b5:09: bd:a1:5c:74:1d:d0:62:af:47:46:24:e3:5b:b1:67: 4b:c6:b0:12:bf:80:0a:ec:60:1e:cc:1e:89:54:7a: e9:b1:82:dd:37:5e:1b:06:bc:06:3d:60:6c:9e:92: d8:08:74:53:cf:aa:8c:5e:d5:93:76:dd:cb:bc:05: 24:6b:97:2e:27:49:b6:13:da:16:87:df:4b:44:2e: 15:85:60:0e:70:44:c0:ec:c8:f3:c8:e9:c8:05:f9: 44:19:2a:93:2d:8f:eb:aa:f4:53:51:35:b4:0a:a2: 99:89:99:b7:4b:5c:8d:85:69:79:08:45:c1:63:e5: 16:e3:59:64:9e:99:b3:38:11:79:3c:1e:24:59:2f: 24:e4:23:65:e2:d2:dd:41:23:52:ea:ea:05:07:1e: f7:ec:7d:9d:9f:69:8a:bf:ba:76:5c:b2:03:aa:10: 72:8f:c0:71:26:77:a9:59:95:de:a3:3d:44:b9:59: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FF:89:93:0A:DF:E3:0C:02:E8:8B:73:2D:08:4B:78:F6:B3:95:44 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:178::/32 Signature Algorithm: sha256WithRSAEncryption 6b:90:92:8b:9a:c6:6f:8a:20:e8:72:0c:28:dd:05:10:e0:7d: 80:5b:63:9c:f8:23:3c:cb:09:19:fa:f2:0b:0c:34:35:16:7b: 1d:23:05:c1:bc:d9:ff:a9:4a:ea:de:53:f8:08:3f:d9:d9:2e: be:00:18:c8:8d:ce:a6:45:dd:d6:a1:51:da:65:42:c8:3f:07: 25:68:20:c0:76:b5:89:93:13:d8:da:5f:20:52:20:1f:77:f4: de:04:57:e4:ad:89:63:7e:b1:f2:68:b7:de:7d:03:44:f8:28: aa:11:30:39:b1:bb:73:e2:2d:33:4c:83:90:1e:37:21:f7:56: 7f:f8:a4:79:c0:1b:28:1c:89:9b:a8:31:dc:5d:34:a3:a8:d8: f0:da:c9:65:d0:22:7c:e1:38:fc:5c:52:8a:c8:fe:87:78:97: 6a:b6:1e:7d:94:47:17:9c:c6:65:ab:57:ae:a8:10:27:b2:59: cb:34:86:92:c9:e4:a8:66:64:3e:73:45:a4:78:3e:19:69:b6: f7:d9:9d:0a:fe:6b:e1:c5:67:e0:7c:ae:ba:27:4a:54:20:c6: fd:8b:24:63:df:34:cc:da:79:ea:b3:d0:46:5c:64:60:eb:e4: 0e:02:fe:92:ce:ef:ee:aa:90:50:dd:a0:15:4d:04:44:de:a3: a4:2a:06:cc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA2MDYw NzIxNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGRkY4OTkzMEFERkUz MEMwMkU4OEI3MzJEMDg0Qjc4RjZCMzk1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmp34QvFzq0FwVnlpzIv6lWhqTWLtqZBdWwoSaSCCeyVMYYnGA WUkrbbqMla5Dayjjc7E3ZZKutw5lSMoEkxtRr65AfBR76x61Cb2hXHQd0GKvR0Yk 41uxZ0vGsBK/gArsYB7MHolUeumxgt03XhsGvAY9YGyektgIdFPPqoxe1ZN23cu8 BSRrly4nSbYT2haH30tELhWFYA5wRMDsyPPI6cgF+UQZKpMtj+uq9FNRNbQKopmJ mbdLXI2FaXkIRcFj5RbjWWSembM4EXk8HiRZLyTkI2Xi0t1BI1Lq6gUHHvfsfZ2f aYq/unZcsgOqEHKPwHEmd6lZld6jPUS5WS3dAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUX/+Jkwrf4wwC6ItzLQhLePazlUQwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9YXy1Ka3dyZjR3d0M2SXR6TFFo TGVQYXpsVVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAQB eDANBgkqhkiG9w0BAQsFAAOCAQEAa5CSi5rGb4og6HIMKN0FEOB9gFtjnPgjPMsJ GfryCww0NRZ7HSMFwbzZ/6lK6t5T+Ag/2dkuvgAYyI3OpkXd1qFR2mVCyD8HJWgg wHa1iZMT2NpfIFIgH3f03gRX5K2JY36x8mi33n0DRPgoqhEwObG7c+ItM0yDkB43 IfdWf/ikecAbKByJm6gx3F00o6jY8NrJZdAifOE4/FxSisj+h3iXarYefZRHF5zG ZatXrqgQJ7JZyzSGksnkqGZkPnNFpHg+GWm299mdCv5r4cVn4HyuuidKVCDG/Ysk Y980zNp56rPQRlxkYOvkDgL+ks7v7qqQUN2gFU0ERN6jpCoGzA== -----END CERTIFICATE-----Generated at Fri Jul 25 13:30:21 2025 by rpki-client