$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/yPar7qgsaT06IZHHXyk0z_cjvUk.roa File: yPar7qgsaT06IZHHXyk0z_cjvUk.roa (raw, json) Hash identifier: /3YzvliYUFGICf81R45/jiTAL8FEbAcIYTcLzsUNe3M= Subject key identifier: C8:F6:AB:EE:A8:2C:69:3D:3A:21:91:C7:5F:29:34:CF:F7:23:BD:49 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 147B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/yPar7qgsaT06IZHHXyk0z_cjvUk.roa Signing time: Fri 22 Aug 2025 09:00:28 +0000 ROA not before: Fri 22 Aug 2025 09:00:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 124.218.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5243 (0x147b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C8F6ABEEA82C693D3A2191C75F2934CFF723BD49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:e2:e0:61:57:5f:27:40:0f:52:6e:ea:36: eb:b6:55:15:20:1c:65:86:d7:a3:ef:85:f8:5e:93: ba:9c:cb:bf:62:2c:fd:64:70:39:90:7c:58:a8:18: b7:25:6b:a9:23:f5:5e:f1:2b:13:09:bc:12:29:82: d3:a7:91:bb:07:19:bc:20:fe:eb:56:c4:7c:fe:f3: c8:d8:51:c4:5a:74:a7:7c:fe:b0:f9:86:2b:6f:6b: 49:bb:8e:b7:2a:84:b6:2c:a4:b7:87:ce:46:11:05: c2:04:cb:a6:4c:fd:20:e5:46:aa:5c:7e:b1:86:81: d1:8b:af:32:ef:d6:2f:94:6c:46:1e:e2:88:9d:c1: 28:b8:57:3a:74:42:4b:0f:54:c7:fc:4d:1a:1b:c8: ce:46:0b:9e:5c:8f:e4:db:73:ff:5e:64:9e:5d:a1: 33:ae:13:75:67:de:e4:d3:f3:9c:00:03:46:88:33: 1b:66:bc:ac:09:37:82:14:a9:e2:6c:ae:5f:cf:52: ce:0d:d0:55:22:de:70:8a:a8:e1:2d:7f:36:42:3c: 02:e1:98:fb:2b:05:08:ad:8c:fb:2c:1a:bb:1a:91: 11:ac:33:af:5b:58:04:33:ec:3b:90:22:ce:35:2d: 4e:6a:3b:70:ea:fa:a3:e5:19:8c:52:5d:dc:29:90: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F6:AB:EE:A8:2C:69:3D:3A:21:91:C7:5F:29:34:CF:F7:23:BD:49 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/yPar7qgsaT06IZHHXyk0z_cjvUk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.96.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:44:1a:4e:27:fc:87:d4:89:c2:19:3a:13:38:41:9f:7d:0d: 3b:45:b0:8e:1a:55:16:65:b2:54:39:5f:da:64:e6:26:23:46: 5e:e7:96:c7:e5:98:9c:47:2e:2d:8e:b7:2d:28:12:f7:fb:36: c6:cb:8f:03:52:7c:12:09:a6:1e:db:b1:82:55:69:9b:5e:b6: 9c:17:16:c4:72:43:4d:33:ef:80:fb:11:d2:dd:e3:f2:f6:99: 77:6e:b4:44:db:4d:07:80:5a:d5:ca:ba:0c:a7:8d:b4:ca:71: 78:c0:67:5b:a9:75:51:ad:7f:d7:8a:12:d5:0d:d8:45:66:0f: 17:6a:26:6e:5b:e4:fe:72:bd:b9:f2:c8:a5:df:10:5f:21:9d: bd:50:19:9d:74:c5:8f:1a:81:f8:3a:be:d3:50:05:e2:53:fc: a3:95:97:6d:30:97:1e:29:41:19:a1:33:33:66:a2:a6:87:ec: e2:dd:7e:8b:3f:91:c4:f0:55:a5:78:04:17:3d:83:93:c3:be: 77:f6:93:59:9b:d5:8a:22:af:6e:b9:9e:7c:2a:37:e0:6a:93: f2:2c:26:67:d2:0d:3d:c9:a3:24:06:90:c3:13:26:28:36:6e: 16:c0:08:c7:a0:88:cb:05:48:f8:e0:cf:65:9e:25:93:33:ed: a5:22:4f:6f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFHswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM4RjZBQkVFQTgyQzY5 M0QzQTIxOTFDNzVGMjkzNENGRjcyM0JENDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvAOLgYVdfJ0APUm7qNuu2VRUgHGWG16Pvhfhek7qcy79iLP1k cDmQfFioGLcla6kj9V7xKxMJvBIpgtOnkbsHGbwg/utWxHz+88jYUcRadKd8/rD5 hitva0m7jrcqhLYspLeHzkYRBcIEy6ZM/SDlRqpcfrGGgdGLrzLv1i+UbEYe4oid wSi4Vzp0QksPVMf8TRobyM5GC55cj+Tbc/9eZJ5doTOuE3Vn3uTT85wAA0aIMxtm vKwJN4IUqeJsrl/PUs4N0FUi3nCKqOEtfzZCPALhmPsrBQitjPssGrsakRGsM69b WAQz7DuQIs41LU5qO3Dq+qPlGYxSXdwpkF5rAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUyPar7qgsaT06IZHHXyk0z/cjvUkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3lQYXI3cWdzYVQwNklaSEhYeWswel9j anZVay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82mAwDQYJ KoZIhvcNAQELBQADggEBAF1EGk4n/IfUicIZOhM4QZ99DTtFsI4aVRZlslQ5X9pk 5iYjRl7nlsflmJxHLi2Oty0oEvf7NsbLjwNSfBIJph7bsYJVaZtetpwXFsRyQ00z 74D7EdLd4/L2mXdutETbTQeAWtXKugynjbTKcXjAZ1updVGtf9eKEtUN2EVmDxdq Jm5b5P5yvbnyyKXfEF8hnb1QGZ10xY8agfg6vtNQBeJT/KOVl20wlx4pQRmhMzNm oqaH7OLdfos/kcTwVaV4BBc9g5PDvnf2k1mb1Yoir265nnwqN+Bqk/IsJmfSDT3J oyQGkMMTJig2bhbACMegiMsFSPjgz2WeJZMz7aUiT28= -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:53 2025 by rpki-client