$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xQ7A1P9nnDf-0CTo38PyTgpR65o.roa File: xQ7A1P9nnDf-0CTo38PyTgpR65o.roa (raw, json) Hash identifier: zWeiId2+wadXqaVwkxtRzCCqGfCilBm7eA7S3Fx0XbY= Subject key identifier: C5:0E:C0:D4:FF:67:9C:37:FE:D0:24:E8:DF:C3:F2:4E:0A:51:EB:9A Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0E65 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xQ7A1P9nnDf-0CTo38PyTgpR65o.roa Signing time: Fri 22 Aug 2025 08:56:29 +0000 ROA not before: Fri 22 Aug 2025 08:56:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 124.109.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3685 (0xe65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 22 08:56:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C50EC0D4FF679C37FED024E8DFC3F24E0A51EB9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:f0:c5:46:fd:2b:e9:21:b5:d6:a3:83:21: 5c:42:1a:e4:78:db:46:4f:3c:69:07:11:46:1f:86: 99:2f:b4:53:73:0c:d5:a1:50:e8:01:3e:40:82:81: 04:1d:74:06:48:2f:3a:fb:17:f9:68:82:54:03:0b: 30:ad:2f:86:85:d0:9e:46:ff:b7:a8:e8:d3:62:a9: dc:0d:8c:f3:db:92:5d:6a:56:5e:fd:00:41:2b:fe: 9b:b5:5a:48:ad:4a:9f:cb:26:36:0b:73:7f:cb:6c: 78:65:82:1c:63:ed:67:4e:f3:dd:e0:bd:e6:2a:3c: fb:59:fb:1b:53:7b:59:d4:ac:c8:6f:e1:5a:78:e5: 08:1f:94:14:b8:67:be:fd:5e:49:ad:14:0b:44:7c: ca:d3:4f:f9:24:f1:c7:49:52:09:13:1b:df:af:ad: 62:7f:05:5f:97:02:ac:1c:e1:ae:28:04:a9:33:9d: 1d:6a:99:1e:7f:a3:ad:ab:c1:91:14:f2:63:93:ee: 05:7c:59:06:86:da:81:e7:00:68:19:62:e6:40:f2: 2f:aa:b1:1c:57:53:ba:74:04:d6:72:70:c5:74:d8: 32:7e:aa:42:61:4f:96:c7:63:89:57:d3:24:c3:fa: 80:e0:d2:dc:ca:80:f2:1c:98:22:4f:4e:be:bc:1a: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0E:C0:D4:FF:67:9C:37:FE:D0:24:E8:DF:C3:F2:4E:0A:51:EB:9A X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/xQ7A1P9nnDf-0CTo38PyTgpR65o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.109.112.0/20 Signature Algorithm: sha256WithRSAEncryption 16:57:42:26:92:d6:5d:4d:04:52:ab:5e:c6:ef:84:0a:c1:49: 1c:0b:33:3c:cd:1a:e9:6c:55:27:ed:9a:12:27:e2:b6:07:6e: a1:e4:ce:d1:cb:76:b9:f5:8b:d9:0e:bd:e9:d8:ec:65:d7:ff: ec:7c:c5:0a:b2:e0:a1:4b:a3:1d:e7:ea:18:85:05:8d:fa:3e: c7:fb:d0:e3:9a:34:2e:0e:2b:cb:55:9b:8e:7f:cd:3a:5a:4b: bd:d7:7d:6c:b4:b7:a1:18:42:71:aa:63:5b:dd:17:c9:a8:4e: c9:74:13:3b:cf:dd:68:d2:07:9c:f2:9f:94:f3:da:76:31:6e: 1f:15:6f:60:16:1e:6d:98:3e:16:45:a9:ba:3f:c5:22:19:22: cd:e5:4c:57:4f:0d:3f:de:82:e5:dd:c0:2a:73:73:53:c7:4f: 60:3e:75:f0:45:be:8e:fb:bf:f3:04:cd:bc:d9:47:02:7d:c9: 94:8e:df:31:37:63:5d:61:a4:55:22:2d:d9:48:9d:04:c0:ee: 90:9b:64:19:9f:29:62:19:6d:25:43:82:a2:b2:13:81:78:c8: 6b:9f:b2:40:e1:01:69:57:6f:e0:c9:d8:9d:ca:09:df:03:98: 1b:59:ae:1e:aa:ac:1f:ae:38:c4:de:90:70:cf:be:65:58:71: a9:54:e6:fe -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw ODU2MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM1MEVDMEQ0RkY2NzlD MzdGRUQwMjRFOERGQzNGMjRFMEE1MUVCOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCji/DFRv0r6SG11qODIVxCGuR420ZPPGkHEUYfhpkvtFNzDNWh UOgBPkCCgQQddAZILzr7F/loglQDCzCtL4aF0J5G/7eo6NNiqdwNjPPbkl1qVl79 AEEr/pu1WkitSp/LJjYLc3/LbHhlghxj7WdO893gveYqPPtZ+xtTe1nUrMhv4Vp4 5QgflBS4Z779XkmtFAtEfMrTT/kk8cdJUgkTG9+vrWJ/BV+XAqwc4a4oBKkznR1q mR5/o62rwZEU8mOT7gV8WQaG2oHnAGgZYuZA8i+qsRxXU7p0BNZycMV02DJ+qkJh T5bHY4lX0yTD+oDg0tzKgPIcmCJPTr68Gr/dAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUxQ7A1P9nnDf+0CTo38PyTgpR65owHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS94UTdBMVA5bm5EZi0wQ1RvMzhQ eVRncFI2NW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEfG1w MA0GCSqGSIb3DQEBCwUAA4IBAQAWV0ImktZdTQRSq17G74QKwUkcCzM8zRrpbFUn 7ZoSJ+K2B26h5M7Ry3a59YvZDr3p2Oxl1//sfMUKsuChS6Md5+oYhQWN+j7H+9Dj mjQuDivLVZuOf806Wku9131stLehGEJxqmNb3RfJqE7JdBM7z91o0gec8p+U89p2 MW4fFW9gFh5tmD4WRam6P8UiGSLN5UxXTw0/3oLl3cAqc3NTx09gPnXwRb6O+7/z BM282UcCfcmUjt8xN2NdYaRVIi3ZSJ0EwO6Qm2QZnyliGW0lQ4KishOBeMhrn7JA 4QFpV2/gydidygnfA5gbWa4eqqwfrjjE3pBwz75lWHGpVOb+ -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:17 2025 by rpki-client