$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/wrvzHqxTn9Ti9V9xMGbbzP8C3MM.roa File: wrvzHqxTn9Ti9V9xMGbbzP8C3MM.roa (raw, json) Hash identifier: kq+M01/aXYNoqR1tVl7JA4cvRTNPHOkluFSL0ADDM14= Subject key identifier: C2:BB:F3:1E:AC:53:9F:D4:E2:F5:5F:71:30:66:DB:CC:FF:02:DC:C3 Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0DEC Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/wrvzHqxTn9Ti9V9xMGbbzP8C3MM.roa Signing time: Thu 11 Sep 2025 03:31:05 +0000 ROA not before: Thu 11 Sep 2025 03:31:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 213430 IP address blocks: 210.67.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 16:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: Sep 11 03:31:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C2BBF31EAC539FD4E2F55F713066DBCCFF02DCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:e0:45:e9:12:5a:a1:f9:2d:0d:4a:e6:3a: a8:86:b0:8a:76:4c:20:f7:c8:2e:0c:cb:2d:0f:5d: 1a:6b:79:26:8b:d7:cd:69:ef:04:db:47:01:96:dc: 81:0c:d8:2e:99:cb:6a:8f:c9:eb:30:7e:5a:25:4f: 32:db:2b:d0:64:ec:62:18:b1:38:6f:3a:6b:9d:5f: ae:30:d8:ea:47:08:f4:9a:1a:64:25:f8:bd:70:56: 85:e9:a9:57:51:db:39:dd:28:9b:a0:43:9b:f5:f8: 22:73:9a:2d:15:a4:2b:d1:b0:af:17:3a:8d:6d:1b: 97:72:c2:3f:bf:fb:88:11:5b:a5:e1:bf:bd:7d:8a: 41:8b:0b:c8:5a:ad:74:b9:73:53:7b:97:eb:4c:4d: 78:20:cd:bf:64:46:43:5e:2a:e0:af:41:6e:2c:e7: 7b:a5:1c:f4:6e:e3:e1:1c:3a:b8:8b:ef:8a:6e:50: 1f:80:61:db:e8:cb:53:10:1a:5a:fc:a7:43:70:31: eb:86:a2:97:0f:81:5a:0f:e2:99:ab:b7:7a:2b:08: e9:4e:10:3a:87:4e:15:cc:60:eb:f0:bb:d6:04:31: 05:a3:98:f4:d1:26:86:ae:6d:97:ac:76:54:6d:9e: 7a:f8:97:70:45:04:22:a3:5d:f4:5c:17:e0:e0:a4: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BB:F3:1E:AC:53:9F:D4:E2:F5:5F:71:30:66:DB:CC:FF:02:DC:C3 X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/wrvzHqxTn9Ti9V9xMGbbzP8C3MM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.142.0/23 Signature Algorithm: sha256WithRSAEncryption 85:de:a5:93:a8:c2:83:5a:2f:ca:52:ff:f4:23:9f:e0:4e:ad: 85:c9:66:e3:32:2a:aa:0b:c4:44:5b:5d:e5:4d:b7:75:c6:94: 40:f4:10:0e:d8:dd:26:30:fa:ae:82:1a:70:60:3b:7b:39:0f: 31:8c:a3:94:d6:ed:36:d2:46:24:aa:b8:f4:78:5c:e3:63:db: 40:9e:f2:1e:45:a5:39:ee:7a:14:7b:1a:3a:f4:8d:21:df:28: 97:85:e9:2d:4c:17:a4:8f:53:99:43:35:b6:33:9e:c6:5d:f7: da:d6:8e:dc:50:b7:64:9e:9e:28:70:6b:70:ec:f1:e4:b3:3b: 63:99:d5:aa:fa:c7:d8:8f:8e:22:ff:66:c2:20:e4:78:ea:5e: a9:67:a5:ec:93:e0:6a:12:7a:39:ef:45:da:c4:46:f9:4a:f6: 46:9d:79:98:ca:bd:8f:ce:21:e2:34:2c:c2:ab:cf:d9:60:54: d3:09:64:94:5d:76:59:27:1d:6d:90:0f:83:6b:7c:f8:27:6d: 3a:63:97:78:02:85:f3:53:1a:94:b9:6d:87:d2:3e:8e:80:14: bc:22:9f:53:a1:2a:f1:f2:d8:f6:ad:75:46:86:59:cb:7f:8f: 4b:07:72:7e:5d:25:57:69:bc:28:66:37:66:22:b8:25:69:3d: 2c:b4:f6:c2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yNTA5MTEw MzMxMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyQkJGMzFFQUM1MzlG RDRFMkY1NUY3MTMwNjZEQkNDRkYwMkRDQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDi9+BF6RJaofktDUrmOqiGsIp2TCD3yC4Myy0PXRpreSaL181p 7wTbRwGW3IEM2C6Zy2qPyeswflolTzLbK9Bk7GIYsThvOmudX64w2OpHCPSaGmQl +L1wVoXpqVdR2zndKJugQ5v1+CJzmi0VpCvRsK8XOo1tG5dywj+/+4gRW6Xhv719 ikGLC8harXS5c1N7l+tMTXggzb9kRkNeKuCvQW4s53ulHPRu4+EcOriL74puUB+A Ydvoy1MQGlr8p0NwMeuGopcPgVoP4pmrt3orCOlOEDqHThXMYOvwu9YEMQWjmPTR JoaubZesdlRtnnr4l3BFBCKjXfRcF+DgpGKVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUwrvzHqxTn9Ti9V9xMGbbzP8C3MMwHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVUL3dydnpIcXhUbjlUaTlWOXhN R2JielA4QzNNTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHS Q44wDQYJKoZIhvcNAQELBQADggEBAIXepZOowoNaL8pS//Qjn+BOrYXJZuMyKqoL xERbXeVNt3XGlED0EA7Y3SYw+q6CGnBgO3s5DzGMo5TW7TbSRiSquPR4XONj20Ce 8h5FpTnuehR7Gjr0jSHfKJeF6S1MF6SPU5lDNbYznsZd99rWjtxQt2Senihwa3Ds 8eSzO2OZ1ar6x9iPjiL/ZsIg5HjqXqlnpeyT4GoSejnvRdrERvlK9kadeZjKvY/O IeI0LMKrz9lgVNMJZJRddlknHW2QD4NrfPgnbTpjl3gChfNTGpS5bYfSPo6AFLwi n1OhKvHy2PatdUaGWct/j0sHcn5dJVdpvChmN2YiuCVpPSy09sI= -----END CERTIFICATE-----Generated at Fri Oct 24 16:36:58 2025 by rpki-client