$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/tWDPjob_Hw5ZsOAXQtcKnAncUq0.roa File: tWDPjob_Hw5ZsOAXQtcKnAncUq0.roa (raw, json) Hash identifier: l7A3SM3lbOomMJNxe1DkWFWJtgsUX7rnv/pVct39Y9M= Subject key identifier: B5:60:CF:8E:86:FF:1F:0E:59:B0:E0:17:42:D7:0A:9C:09:DC:52:AD Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 13F1 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/tWDPjob_Hw5ZsOAXQtcKnAncUq0.roa Signing time: Thu 10 Jul 2025 01:23:10 +0000 ROA not before: Thu 10 Jul 2025 01:23:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131636 IP address blocks: 211.76.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5105 (0x13f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Jul 10 01:23:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B560CF8E86FF1F0E59B0E01742D70A9C09DC52AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:7d:f8:ad:6a:34:54:ed:fa:80:fc:ff:6b: c6:42:00:50:bc:eb:07:d2:39:cf:8c:ea:11:29:0a: 6c:7f:f2:44:26:8c:a6:7f:ce:30:1b:56:6a:0f:8c: bb:09:1a:e0:aa:85:c2:b8:04:d5:23:f8:33:38:d1: f5:12:7d:81:6a:85:e5:be:ab:81:41:b4:b5:4e:b6: 99:d8:ce:a4:d7:53:12:38:2f:ef:f7:6a:c1:e6:ae: 6c:dc:9b:c1:a5:8a:2e:2f:41:6b:cd:bc:db:31:10: 3b:e2:3e:2c:e6:07:7b:b7:ae:f9:b8:f6:1b:f3:85: 5f:bf:21:b1:ca:06:56:e8:f1:55:15:a9:ba:00:c2: 3d:1d:f2:1b:45:1a:92:f9:1c:86:57:0e:4f:3b:7e: 74:68:52:89:79:e2:bf:96:80:cf:40:8a:f1:6c:ff: 3d:09:5b:dc:dd:ef:4d:03:0d:5a:f7:9b:b0:27:a9: a2:e5:ef:21:55:53:d5:37:e6:28:c2:11:40:a8:3c: 28:20:13:ed:18:b5:d9:b4:61:9b:95:5e:45:82:f5: 06:0c:07:55:48:77:74:c0:0a:90:82:00:c2:c3:51: 90:15:57:4e:5a:01:17:a6:d9:67:85:60:29:57:83: f7:63:a7:c2:5e:7d:ad:3b:3b:70:89:c0:2e:ab:81: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:60:CF:8E:86:FF:1F:0E:59:B0:E0:17:42:D7:0A:9C:09:DC:52:AD X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/tWDPjob_Hw5ZsOAXQtcKnAncUq0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.188.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:ae:36:75:5c:24:3f:ab:6f:7e:c6:0b:71:d2:13:83:09:8e: 30:41:8b:c1:f6:95:ef:b7:22:ef:56:e6:0e:55:2a:b5:ff:06: 72:44:b9:0f:9a:28:1a:c8:b1:bc:27:11:e2:dd:89:25:2b:c1: 71:7f:b3:29:75:e9:f2:16:20:e6:32:c3:21:ee:f4:d9:ee:7b: 4b:63:38:bf:5b:74:40:23:da:7d:ca:57:34:81:f8:b8:4b:85: fa:38:7c:4d:d0:fe:3e:b6:c0:b1:ae:99:f7:f3:e4:d1:03:96: 46:39:33:d8:be:69:a2:33:56:3e:8e:5b:f5:34:92:17:0e:8b: f5:b5:84:43:6b:65:89:f5:e5:5f:b8:8b:ad:bb:16:1f:03:01: 2b:73:bc:84:72:7b:d8:dc:82:ca:ec:1a:8f:cc:7c:7d:c1:67: b4:f2:3c:e8:16:3c:76:40:c7:c4:42:2f:f4:f6:ab:ac:3f:a6: 50:f6:2a:68:62:ed:a2:f1:2e:bc:9b:f3:38:80:51:c7:3e:22: 4c:48:55:aa:a7:b5:9c:29:d1:d6:26:4e:84:31:4a:ff:b2:f3: b6:ee:8b:04:de:5e:fb:a9:8e:4b:96:a2:b0:e1:b4:d9:53:5b: a7:47:92:3f:9e:5f:d2:79:38:b1:51:c6:3c:73:da:ed:26:02: cb:c4:e4:39 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNTA3MTAw MTIzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI1NjBDRjhFODZGRjFG MEU1OUIwRTAxNzQyRDcwQTlDMDlEQzUyQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkLX34rWo0VO36gPz/a8ZCAFC86wfSOc+M6hEpCmx/8kQmjKZ/ zjAbVmoPjLsJGuCqhcK4BNUj+DM40fUSfYFqheW+q4FBtLVOtpnYzqTXUxI4L+/3 asHmrmzcm8Glii4vQWvNvNsxEDviPizmB3u3rvm49hvzhV+/IbHKBlbo8VUVqboA wj0d8htFGpL5HIZXDk87fnRoUol54r+WgM9AivFs/z0JW9zd700DDVr3m7AnqaLl 7yFVU9U35ijCEUCoPCggE+0Ytdm0YZuVXkWC9QYMB1VId3TACpCCAMLDUZAVV05a ARem2WeFYClXg/djp8Jefa07O3CJwC6rgenfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUtWDPjob/Hw5ZsOAXQtcKnAncUq0wHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi90V0RQam9iX0h3NVpzT0FYUXRj S25BbmNVcTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB00y8 MA0GCSqGSIb3DQEBCwUAA4IBAQAOrjZ1XCQ/q29+xgtx0hODCY4wQYvB9pXvtyLv VuYOVSq1/wZyRLkPmigayLG8JxHi3YklK8Fxf7MpdenyFiDmMsMh7vTZ7ntLYzi/ W3RAI9p9ylc0gfi4S4X6OHxN0P4+tsCxrpn38+TRA5ZGOTPYvmmiM1Y+jlv1NJIX Dov1tYRDa2WJ9eVfuIutuxYfAwErc7yEcnvY3ILK7BqPzHx9wWe08jzoFjx2QMfE Qi/09qusP6ZQ9ipoYu2i8S68m/M4gFHHPiJMSFWqp7WcKdHWJk6EMUr/svO27osE 3l77qY5LlqKw4bTZU1unR5I/nl/SeTixUcY8c9rtJgLLxOQ5 -----END CERTIFICATE-----Generated at Wed Jul 23 12:07:17 2025 by rpki-client