$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/zWE-TE2amDOnjAMsPX6eFXUA-m4.roa File: zWE-TE2amDOnjAMsPX6eFXUA-m4.roa (raw, json) Hash identifier: DqCV7q/facD9tax0P/ph0uxpmehV8sHVuAE9yxMfhKM= Subject key identifier: CD:61:3E:4C:4D:9A:98:33:A7:8C:03:2C:3D:7E:9E:15:75:00:FA:6E Certificate issuer: /CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Certificate serial: 0161 Authority key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/zWE-TE2amDOnjAMsPX6eFXUA-m4.roa Signing time: Fri 12 Sep 2025 13:55:53 +0000 ROA not before: Fri 12 Sep 2025 13:55:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 148996 IP address blocks: 165.101.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 01:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Validity Not Before: Sep 12 13:55:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CD613E4C4D9A9833A78C032C3D7E9E157500FA6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:23:53:1f:ac:25:33:73:26:15:b5:3c:e0: b7:a8:c7:6f:f5:8c:17:23:a2:28:ab:f3:5f:8f:07: c8:38:a9:7f:80:84:92:a6:22:f4:78:0b:d4:27:13: 07:ee:8f:71:25:07:a7:4d:33:66:5f:17:f9:34:df: c8:58:1f:74:f4:a0:3f:f0:94:71:67:50:bd:44:78: 0a:87:87:6e:d8:16:69:de:6e:94:75:a9:d1:63:4a: f6:f2:bd:b0:8a:80:06:b9:93:60:f4:91:a6:78:30: 01:14:5e:33:0f:6e:bb:80:bc:06:93:a9:8f:0a:10: f4:de:8d:39:22:55:63:14:20:a4:55:02:a6:11:27: 01:5f:6f:4e:13:f3:f3:e2:b1:5c:93:20:3b:10:1c: b9:7c:a1:aa:16:8b:5a:85:37:9a:76:7d:a6:50:1b: dc:ce:f6:1d:7e:0a:e4:a2:10:2e:ec:e0:54:f5:8c: c4:f8:8b:76:39:78:7a:98:d0:0b:99:ac:1d:99:e2: 8d:3b:dc:0a:5d:cc:03:ae:bf:c9:1d:47:6d:c7:e4: e6:aa:19:3a:33:f0:e6:43:bf:e1:08:0e:1a:9a:9a: 61:64:df:fc:10:13:b0:76:61:46:a5:56:da:9b:f2: 8f:f6:41:3e:a9:81:51:97:7c:79:f5:38:91:2d:3b: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:61:3E:4C:4D:9A:98:33:A7:8C:03:2C:3D:7E:9E:15:75:00:FA:6E X509v3 Authority Key Identifier: keyid:7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/zWE-TE2amDOnjAMsPX6eFXUA-m4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.153.0/24 Signature Algorithm: sha256WithRSAEncryption 84:95:f5:ea:40:dc:21:dd:25:02:70:41:96:b5:b9:b8:8d:d7: 17:3b:dc:10:c7:78:40:67:31:15:fc:0e:3a:bb:0d:30:bf:cb: 13:39:64:af:ad:86:be:33:1e:4b:60:90:a4:0b:7c:98:9d:f4: ea:98:cd:51:a5:51:98:b3:05:0a:57:16:10:43:fc:a1:55:53: 80:85:b7:6a:d3:5a:a8:e4:e7:15:b0:0d:3b:62:e5:ba:04:bf: 1e:c9:cd:db:ef:21:99:0c:a5:9c:8d:96:b2:b8:f5:d1:fb:ee: 4d:dd:95:76:89:f6:a1:58:ca:99:e3:f0:c8:9b:e7:a7:ae:57: e6:a9:2f:9d:9f:9d:30:44:b8:e5:5b:18:30:25:e2:e3:94:77: 96:e2:d1:ab:cb:be:95:1e:1b:3f:81:19:55:6d:51:28:0c:c9: 47:25:7d:1f:d4:80:4d:66:b7:3d:29:01:a2:0a:66:62:a8:c7: 7b:d2:d4:2c:4a:e3:eb:eb:68:ae:16:bc:3c:cc:67:3f:2c:65: b9:51:2c:1c:92:11:1f:de:1d:bf:d1:83:1e:5f:34:e7:b8:86: 5f:1c:db:03:d4:84:dc:a1:da:45:c3:d1:b1:70:57:8f:f3:56: 54:0e:6e:ae:d8:19:a8:f0:64:66:a4:fe:5d:06:d8:b6:05:0b: c7:47:82:b4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VE ODMwOTY3MTAyN0I3RTZGQzlBRTI3QjlDNjhDOUM0RTI5QzU3NTAeFw0yNTA5MTIx MzU1NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENENjEzRTRDNEQ5QTk4 MzNBNzhDMDMyQzNEN0U5RTE1NzUwMEZBNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTyyNTH6wlM3MmFbU84Leox2/1jBcjoiir81+PB8g4qX+AhJKm IvR4C9QnEwfuj3ElB6dNM2ZfF/k038hYH3T0oD/wlHFnUL1EeAqHh27YFmnebpR1 qdFjSvbyvbCKgAa5k2D0kaZ4MAEUXjMPbruAvAaTqY8KEPTejTkiVWMUIKRVAqYR JwFfb04T8/PisVyTIDsQHLl8oaoWi1qFN5p2faZQG9zO9h1+CuSiEC7s4FT1jMT4 i3Y5eHqY0AuZrB2Z4o073ApdzAOuv8kdR23H5OaqGToz8OZDv+EIDhqammFk3/wQ E7B2YUalVtqb8o/2QT6pgVGXfHn1OJEtO9FLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzWE+TE2amDOnjAMsPX6eFXUA+m4wHwYDVR0jBBgwFoAUftgwlnECe35vya4n ucaMnE4pxXUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNQkVT T04vZnRnd2xuRUNlMzV2eWE0bnVjYU1uRTRweFhVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9mdGd3bG5FQ2UzNXZ5YTRudWNhTW5FNHB4WFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1CRVNPTi96V0UtVEUyYW1ET25q QU1zUFg2ZUZYVUEtbTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQApWWZMA0GCSqGSIb3DQEBCwUAA4IBAQCElfXqQNwh3SUCcEGWtbm4jdcXO9wQ x3hAZzEV/A46uw0wv8sTOWSvrYa+Mx5LYJCkC3yYnfTqmM1RpVGYswUKVxYQQ/yh VVOAhbdq01qo5OcVsA07YuW6BL8eyc3b7yGZDKWcjZayuPXR++5N3ZV2ifahWMqZ 4/DIm+enrlfmqS+dn50wRLjlWxgwJeLjlHeW4tGry76VHhs/gRlVbVEoDMlHJX0f 1IBNZrc9KQGiCmZiqMd70tQsSuPr62iuFrw8zGc/LGW5USwckhEf3h2/0YMeXzTn uIZfHNsD1ITcodpFw9GxcFeP81ZUDm6u2Bmo8GRmpP5dBti2BQvHR4K0 -----END CERTIFICATE-----Generated at Tue Oct 28 00:12:49 2025 by rpki-client