$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/W9CH2jNQPeE6F56GrqNNQaeMBnQ.roa File: W9CH2jNQPeE6F56GrqNNQaeMBnQ.roa (raw, json) Hash identifier: alE6qOzjvv1bdVpFxgmVkYRyaKHiH2nHE9BqToGwaAQ= Subject key identifier: 5B:D0:87:DA:33:50:3D:E1:3A:17:9E:86:AE:A3:4D:41:A7:8C:06:74 Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Certificate serial: 0D61 Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/W9CH2jNQPeE6F56GrqNNQaeMBnQ.roa Signing time: Fri 22 Aug 2025 08:56:53 +0000 ROA not before: Fri 22 Aug 2025 08:56:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 133747 IP address blocks: 103.119.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Validity Not Before: Aug 22 08:56:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5BD087DA33503DE13A179E86AEA34D41A78C0674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:41:fd:e9:8a:56:1d:49:cb:66:03:04:12: 51:1c:b0:6e:7f:e8:d0:cb:3d:37:6b:1b:b6:9a:f2: 09:13:1a:1e:5e:a4:dc:8a:3b:b5:e0:c9:68:3a:e5: ee:ac:19:12:3e:40:82:4e:ec:2f:81:1f:2f:03:0b: a7:20:0d:57:a4:e0:32:ed:1c:af:7a:ad:f9:e8:33: f9:f6:7a:70:7b:96:64:0c:c1:0e:e8:81:8c:24:c5: 5e:90:57:aa:90:07:74:de:81:ea:d0:1b:cf:bc:b3: 10:18:2b:77:7f:48:e3:65:b1:5b:69:77:41:0a:67: 2a:7b:da:50:86:3e:c6:4d:c1:6e:4c:a3:b8:79:de: 1f:15:6c:c4:50:17:f0:c7:59:f6:5d:a8:9f:be:55: 92:43:2e:f4:eb:08:c8:07:75:3d:31:bc:e7:66:4e: f1:f6:97:c2:c3:ad:54:b1:6e:7b:ed:00:52:48:42: c2:8f:6f:55:52:77:e0:51:14:2e:87:bb:8a:75:18: d6:57:5c:31:68:2a:0e:b4:03:d7:cd:d3:32:6a:5e: b3:be:d3:42:cc:95:41:40:04:69:93:ae:35:6f:dc: 9b:fe:57:bf:2a:ff:90:18:f9:eb:6b:9b:95:81:6d: bf:7b:aa:60:01:83:83:11:2c:fc:28:e6:f3:c6:29: e4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D0:87:DA:33:50:3D:E1:3A:17:9E:86:AE:A3:4D:41:A7:8C:06:74 X509v3 Authority Key Identifier: keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/W9CH2jNQPeE6F56GrqNNQaeMBnQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.212.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:ab:bf:e0:48:23:d8:23:b7:41:7d:27:69:bd:00:ce:3e:e2: 55:0c:3c:29:c7:84:1e:0d:1a:24:fe:37:0d:02:cc:12:8e:7e: ab:8c:4c:22:93:56:02:cb:64:51:50:c2:98:f2:79:1d:e1:f9: c9:02:31:fd:3d:a2:29:52:83:f1:95:59:6b:24:59:67:16:ad: a1:e1:cc:17:00:d3:27:94:0e:db:5b:e4:c8:71:a2:2d:d0:c6: f1:ab:95:e5:de:ca:e2:f0:5e:b4:2d:50:bc:c7:8e:73:c4:93: a0:47:73:7a:24:23:ca:15:ea:b2:dd:de:35:c2:5d:85:8c:bb: 59:57:96:4c:00:91:b2:6a:24:d5:9b:3b:07:02:84:64:f6:86: 7a:e3:9c:b6:f0:ca:ed:21:ce:e8:fd:70:41:3f:30:92:ba:47: bf:82:f1:3d:a5:89:b4:6c:93:7c:c2:5b:df:19:83:f2:f7:30: 93:3c:59:d2:0e:34:e9:4c:35:e7:8a:d2:ca:63:6d:b3:49:0b: 61:7a:0f:e1:29:4b:45:a0:a2:65:72:15:8a:11:2e:ee:b1:8f: b3:ab:d0:53:13:2c:41:5a:bf:c9:34:5b:62:cd:dd:92:64:dd: d6:9d:5b:4a:da:c1:a4:c1:b9:e8:5b:79:22:96:00:9d:80:2c: 7f:0e:2e:58 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yNTA4MjIw ODU2NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVCRDA4N0RBMzM1MDNE RTEzQTE3OUU4NkFFQTM0RDQxQTc4QzA2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLqkH96YpWHUnLZgMEElEcsG5/6NDLPTdrG7aa8gkTGh5epNyK O7XgyWg65e6sGRI+QIJO7C+BHy8DC6cgDVek4DLtHK96rfnoM/n2enB7lmQMwQ7o gYwkxV6QV6qQB3TegerQG8+8sxAYK3d/SONlsVtpd0EKZyp72lCGPsZNwW5Mo7h5 3h8VbMRQF/DHWfZdqJ++VZJDLvTrCMgHdT0xvOdmTvH2l8LDrVSxbnvtAFJIQsKP b1VSd+BRFC6Hu4p1GNZXXDFoKg60A9fN0zJqXrO+00LMlUFABGmTrjVv3Jv+V78q /5AY+etrm5WBbb97qmABg4MRLPwo5vPGKeQrAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUW9CH2jNQPeE6F56GrqNNQaeMBnQwHwYDVR0jBBgwFoAUXNEK1bakd108UE1m EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvVzlDSDJqTlFQZUU2RjU2 R3JxTk5RYWVNQm5RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amd31DANBgkqhkiG9w0BAQsFAAOCAQEAD6u/4Egj2CO3QX0nab0Azj7iVQw8KceE Hg0aJP43DQLMEo5+q4xMIpNWAstkUVDCmPJ5HeH5yQIx/T2iKVKD8ZVZayRZZxat oeHMFwDTJ5QO21vkyHGiLdDG8auV5d7K4vBetC1QvMeOc8SToEdzeiQjyhXqst3e NcJdhYy7WVeWTACRsmok1Zs7BwKEZPaGeuOctvDK7SHO6P1wQT8wkrpHv4LxPaWJ tGyTfMJb3xmD8vcwkzxZ0g406Uw154rSymNts0kLYXoP4SlLRaCiZXIVihEu7rGP s6vQUxMsQVq/yTRbYs3dkmTd1p1bStrBpMG56Ft5IpYAnYAsfw4uWA== -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:33 2025 by rpki-client