$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/33myjhQAYuV2DMgBYKJCyUk9-qs.roa File: 33myjhQAYuV2DMgBYKJCyUk9-qs.roa (raw, json) Hash identifier: YZzgae8CmMoH7oQwxUaFZQxmobEXIeIlGiSIMLx3o6g= Subject key identifier: DF:79:B2:8E:14:00:62:E5:76:0C:C8:01:60:A2:42:C9:49:3D:FA:AB Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F Certificate serial: 050F Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/33myjhQAYuV2DMgBYKJCyUk9-qs.roa Signing time: Fri 22 Aug 2025 08:58:57 +0000 ROA not before: Fri 22 Aug 2025 08:58:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 103.158.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 12:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F Validity Not Before: Aug 22 08:58:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DF79B28E140062E5760CC80160A242C9493DFAAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:68:47:7a:d8:b1:e2:56:96:2c:9f:07:89: 52:b7:99:ad:63:49:4b:b6:08:a3:1c:4d:d6:9b:33: cc:55:7d:23:c1:b7:45:aa:d8:a4:f6:ac:4f:d9:86: c2:74:00:c5:1d:5c:d3:00:d0:bd:ae:d5:45:b7:a8: df:af:ab:ed:a7:05:a3:85:0d:b5:61:3c:29:19:fa: f1:76:61:a2:a5:8f:8e:d5:70:21:5c:5d:0a:d6:f9: 2b:d0:ea:e7:54:97:99:db:3f:62:e2:01:f9:56:cc: fa:8d:f0:5a:16:cb:27:ce:2c:cd:ca:9b:52:c9:80: 9a:66:df:dc:85:e5:81:05:11:dc:37:fa:5f:41:6b: e3:3b:64:8e:04:4f:2f:1c:3b:5b:9c:c3:96:a0:fc: 66:5d:04:95:0a:a9:3f:6f:97:36:f4:85:db:10:79: e4:93:f4:6d:2c:78:5c:39:c2:8d:ed:46:4b:df:87: 16:f1:2c:7f:ec:b6:6f:aa:5d:af:91:c7:85:cc:43: 68:87:9f:10:d5:4e:1a:07:cf:b8:47:81:96:b0:fa: 89:69:64:b6:68:a4:35:9a:d7:85:71:ab:ff:78:6e: b6:96:28:e3:61:95:3f:1b:89:1b:b4:af:b1:60:20: 11:dd:48:de:dc:cf:7d:25:20:78:8c:13:e7:13:3e: 03:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:B2:8E:14:00:62:E5:76:0C:C8:01:60:A2:42:C9:49:3D:FA:AB X509v3 Authority Key Identifier: keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/33myjhQAYuV2DMgBYKJCyUk9-qs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.158.228.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:bf:fb:ad:55:72:0a:92:63:ac:bd:d5:86:b1:87:c0:09:10: ee:03:fa:f7:e2:3a:4e:a9:71:c2:5a:72:b8:d5:b0:ca:96:2e: 95:a6:29:d6:b2:bd:2f:11:db:60:0c:8d:35:eb:ee:f8:40:58: c3:da:13:69:05:6c:fb:f1:0d:e2:03:d5:f0:53:fa:40:57:7f: c4:e2:76:af:e3:03:b3:52:fc:b9:89:1d:d3:f1:b4:4d:5f:d2: e2:d9:27:f7:0b:ce:e2:52:af:f0:59:fc:32:28:4a:9e:31:63: ef:1b:24:5c:e2:c4:da:76:29:58:61:49:2e:91:c1:d9:5e:2c: 8e:5f:6f:6c:25:9c:25:3a:94:5a:d0:99:08:29:17:c5:04:fa: 16:7d:cc:d9:4b:e2:96:9f:ff:38:1c:c3:5b:b5:43:eb:53:5d: 46:d3:eb:f1:de:a9:d8:cb:87:98:9b:58:8b:00:71:15:e1:f9: f8:6c:9d:ec:0d:7f:7b:02:ef:2a:24:96:45:70:86:98:26:25: 5d:c6:30:32:3f:07:a9:3c:27:81:ec:58:f2:a0:a3:68:0f:74: de:5f:a4:08:6d:d9:3e:fb:39:9b:64:47:da:05:10:0e:2f:b7: a3:5b:a9:4c:4b:1c:63:8e:27:39:13:17:3b:52:fc:61:9d:ff: 9a:46:43:b4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTBF QTg4NUE3RTY5NzFDOTkzNDI3NzdFN0REREJBNjVEMEVCMTMxRjAeFw0yNTA4MjIw ODU4NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERGNzlCMjhFMTQwMDYy RTU3NjBDQzgwMTYwQTI0MkM5NDkzREZBQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdc2hHetix4laWLJ8HiVK3ma1jSUu2CKMcTdabM8xVfSPBt0Wq 2KT2rE/ZhsJ0AMUdXNMA0L2u1UW3qN+vq+2nBaOFDbVhPCkZ+vF2YaKlj47VcCFc XQrW+SvQ6udUl5nbP2LiAflWzPqN8FoWyyfOLM3Km1LJgJpm39yF5YEFEdw3+l9B a+M7ZI4ETy8cO1ucw5ag/GZdBJUKqT9vlzb0hdsQeeST9G0seFw5wo3tRkvfhxbx LH/stm+qXa+Rx4XMQ2iHnxDVThoHz7hHgZaw+olpZLZopDWa14Vxq/94braWKONh lT8biRu0r7FgIBHdSN7cz30lIHiME+cTPgMzAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU33myjhQAYuV2DMgBYKJCyUk9+qswHwYDVR0jBBgwFoAU4OqIWn5pccmTQnd+ fd26ZdDrEx8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRVRJTUUv NE9xSVduNXBjY21UUW5kLWZkMjZaZERyRXg4LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80T3FJV241cGNjbVRRbmQtZmQyNlpkRHJFeDguY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FVElNRS8zM215amhRQVl1VjJETWdCWUtK Q3lVazktcXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ57k MA0GCSqGSIb3DQEBCwUAA4IBAQCfv/utVXIKkmOsvdWGsYfACRDuA/r34jpOqXHC WnK41bDKli6VpinWsr0vEdtgDI016+74QFjD2hNpBWz78Q3iA9XwU/pAV3/E4nav 4wOzUvy5iR3T8bRNX9Li2Sf3C87iUq/wWfwyKEqeMWPvGyRc4sTadilYYUkukcHZ XiyOX29sJZwlOpRa0JkIKRfFBPoWfczZS+KWn/84HMNbtUPrU11G0+vx3qnYy4eY m1iLAHEV4fn4bJ3sDX97Au8qJJZFcIaYJiVdxjAyPwepPCeB7FjyoKNoD3TeX6QI bdk++zmbZEfaBRAOL7ejW6lMSxxjjic5Exc7Uvxhnf+aRkO0 -----END CERTIFICATE-----Generated at Sat Oct 25 11:36:31 2025 by rpki-client