$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/UzV90e6UjzfZc79RG51z0hxwr40.roa File: UzV90e6UjzfZc79RG51z0hxwr40.roa (raw, json) Hash identifier: kEpb2yJWOEVzRzsyTyLJtl9sZXXjbYwMMxKEnSznnMY= Subject key identifier: 53:35:7D:D1:EE:94:8F:37:D9:73:BF:51:1B:9D:73:D2:1C:70:AF:8D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1398 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UzV90e6UjzfZc79RG51z0hxwr40.roa Signing time: Fri 22 Aug 2025 08:59:28 +0000 ROA not before: Fri 22 Aug 2025 08:59:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9311 IP address blocks: 210.200.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5016 (0x1398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=53357DD1EE948F37D973BF511B9D73D21C70AF8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:97:b1:49:92:be:8e:00:60:13:da:e9:2d:6f: 28:0d:29:f3:38:48:0f:ee:c8:a7:63:86:c0:c8:e8: ae:2f:f8:ff:0b:24:35:20:29:9d:10:87:8b:9f:13: 44:1f:3f:8c:c2:9c:7b:77:ac:b1:0b:1b:d1:79:2d: 4c:03:65:01:f2:34:4e:1f:98:54:5a:5f:9b:e1:ce: 32:0c:17:2d:44:0d:6c:9a:7d:38:1e:e3:2c:79:4b: 1f:7a:13:a4:18:70:69:b8:ec:34:d5:f6:7b:5b:1d: dc:46:f0:38:ea:ad:fa:da:2c:61:d8:6e:be:27:4c: 13:90:93:98:f2:29:8e:07:d4:b5:a4:af:36:18:d2: 94:75:f9:62:9c:2e:47:ac:a4:1e:06:18:10:e0:1b: d9:34:2d:97:6c:36:64:5b:9c:f7:0a:d1:6e:73:fb: b0:67:0d:e6:3a:c8:29:9d:d0:95:70:65:ff:43:f1: a4:85:e6:5c:96:79:32:a3:dd:20:14:0e:33:e1:d2: a2:85:0b:98:d9:9d:0b:85:95:5c:34:2b:bd:fa:59: 9e:77:62:c9:d2:fa:85:b6:73:67:87:e3:52:9f:ef: 40:77:5f:6d:9c:25:23:0c:fb:26:d2:18:c0:14:33: 0b:0e:e5:ff:fd:0b:26:ca:67:6d:ec:d9:cb:c1:1b: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:35:7D:D1:EE:94:8F:37:D9:73:BF:51:1B:9D:73:D2:1C:70:AF:8D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UzV90e6UjzfZc79RG51z0hxwr40.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.192.0/18 Signature Algorithm: sha256WithRSAEncryption 87:4c:6b:96:4e:79:9f:a2:a7:c8:c4:28:70:0c:ad:47:bd:49: 23:7b:da:70:e4:7a:b4:e9:fc:06:bc:26:10:c3:cf:b7:6d:94: 69:5e:85:a9:e7:86:27:d0:8f:08:a3:22:1d:88:58:ca:8f:87: 8a:ae:d0:b0:bc:62:05:47:b5:3a:47:9e:57:2b:45:48:a6:09: 94:54:05:27:da:65:a3:c8:9d:e0:a3:b5:81:ca:f1:a5:f5:8b: 2e:a1:f0:64:6f:7d:fc:3e:cf:d5:28:2e:03:29:8c:a1:ee:c7: 14:9f:cc:0d:ec:a1:1a:70:07:b8:a6:72:39:8a:5a:76:29:52: ab:a9:42:69:90:3f:3a:b9:36:1e:99:0d:0f:6e:c1:fb:dd:b8: d7:27:2b:44:a3:0c:54:db:6f:ba:51:ac:fd:90:3d:fd:7c:84: 8a:44:b9:b3:cc:c4:ad:70:20:1d:38:70:75:0c:6a:de:59:7e: 54:3c:f4:bb:cf:a6:f5:ce:c0:b5:eb:88:83:45:c5:74:46:16: 07:8b:6c:ba:07:0f:6c:31:9d:0b:ff:85:f8:79:3f:b2:6a:ef: c3:6e:7c:77:e3:26:fa:db:43:18:cf:e5:ca:53:9f:5f:67:b7: 12:25:5e:1c:18:af:e9:6e:ce:74:cc:b9:4b:e1:3a:24:2d:b5: 7a:c5:2a:b7 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUzMzU3REQxRUU5NDhG MzdEOTczQkY1MTFCOUQ3M0QyMUM3MEFGOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPl7FJkr6OAGAT2uktbygNKfM4SA/uyKdjhsDI6K4v+P8LJDUg KZ0Qh4ufE0QfP4zCnHt3rLELG9F5LUwDZQHyNE4fmFRaX5vhzjIMFy1EDWyafTge 4yx5Sx96E6QYcGm47DTV9ntbHdxG8DjqrfraLGHYbr4nTBOQk5jyKY4H1LWkrzYY 0pR1+WKcLkespB4GGBDgG9k0LZdsNmRbnPcK0W5z+7BnDeY6yCmd0JVwZf9D8aSF 5lyWeTKj3SAUDjPh0qKFC5jZnQuFlVw0K736WZ53YsnS+oW2c2eH41Kf70B3X22c JSMM+ybSGMAUMwsO5f/9CybKZ23s2cvBG1z3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUUzV90e6UjzfZc79RG51z0hxwr40wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1V6VjkwZTZVanpmWmM3OVJHNTF6MGh4 d3I0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyMAwDQYJ KoZIhvcNAQELBQADggEBAIdMa5ZOeZ+ip8jEKHAMrUe9SSN72nDkerTp/Aa8JhDD z7dtlGlehannhifQjwijIh2IWMqPh4qu0LC8YgVHtTpHnlcrRUimCZRUBSfaZaPI neCjtYHK8aX1iy6h8GRvffw+z9UoLgMpjKHuxxSfzA3soRpwB7imcjmKWnYpUqup QmmQPzq5Nh6ZDQ9uwfvduNcnK0SjDFTbb7pRrP2QPf18hIpEubPMxK1wIB04cHUM at5ZflQ89LvPpvXOwLXriINFxXRGFgeLbLoHD2wxnQv/hfh5P7Jq78NufHfjJvrb QxjP5cpTn19ntxIlXhwYr+luznTMuUvhOiQttXrFKrc= -----END CERTIFICATE-----Generated at Sat Sep 6 13:41:58 2025 by rpki-client