$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/iZ4dwZMQfQ43J7PiCZYdXu9_2ls.roa File: iZ4dwZMQfQ43J7PiCZYdXu9_2ls.roa (raw, json) Hash identifier: R5mXt/ORfoCCtdTIWeVqzvhmw5RGgFEs/RcZSgjL4oM= Subject key identifier: 89:9E:1D:C1:93:10:7D:0E:37:27:B3:E2:09:96:1D:5E:EF:7F:DA:5B Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 107C Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iZ4dwZMQfQ43J7PiCZYdXu9_2ls.roa Signing time: Fri 22 Aug 2025 08:55:32 +0000 ROA not before: Fri 22 Aug 2025 08:55:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 120.108.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4220 (0x107c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=899E1DC193107D0E3727B3E209961D5EEF7FDA5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:9e:c4:0b:6c:81:4f:4c:77:f3:9d:75:c7: 66:41:52:05:b9:17:31:17:f0:ba:32:4e:84:91:05: 1d:6f:19:ce:4d:89:da:55:30:90:8c:6f:39:58:04: 2f:7a:57:ea:5f:b7:93:4f:f9:bd:ae:a8:42:64:8b: 9e:43:25:e3:91:24:49:ab:88:0b:02:8e:37:b1:b9: 12:72:2f:8a:5b:d2:47:7d:aa:c9:83:19:d8:87:d2: 6c:a8:05:f6:2b:11:14:37:b2:bd:d4:92:23:05:ae: fb:a3:ef:69:b0:b2:27:4d:87:af:9a:51:99:05:d2: 68:11:87:91:d5:e7:e9:6b:22:31:e0:04:11:b1:9a: ea:c5:13:7d:b6:51:4e:e4:aa:6e:0c:c1:61:e9:6f: c2:bb:02:65:1e:7f:f1:bc:f6:6a:bb:ed:d9:a6:3d: 29:2b:53:ef:ec:96:66:d2:00:dc:26:b1:50:be:85: da:8b:1f:65:75:b6:75:3d:8e:82:04:c9:c1:ba:d1: 66:31:e9:ae:08:77:f4:4b:a6:5c:e4:ce:dc:78:cd: 9e:84:15:c6:57:5e:40:39:08:c6:fe:e5:8f:80:fa: ea:4c:c6:33:9a:0d:fe:b6:c0:02:c6:01:57:02:b7: c3:37:0d:7f:80:8c:dc:fe:9f:fa:dd:33:ad:50:bd: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:1D:C1:93:10:7D:0E:37:27:B3:E2:09:96:1D:5E:EF:7F:DA:5B X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iZ4dwZMQfQ43J7PiCZYdXu9_2ls.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.108.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:15:57:6c:1f:23:93:6e:13:e5:9a:89:93:93:40:e9:dc:84: b0:e9:0b:c2:be:fb:32:d9:9d:48:1c:35:d0:ed:f8:a4:c0:97: 31:b9:69:a9:fd:cd:5d:77:2f:ba:33:de:e0:a4:42:e8:28:f8: bf:e2:f5:ea:8c:1c:6f:c6:28:10:a0:4d:24:d9:a1:0b:45:15: b9:39:57:f4:e1:c2:28:cb:0d:8a:63:03:37:99:bd:ec:8d:7b: 9b:62:df:27:e6:d6:81:db:30:58:fa:bc:66:c8:93:05:02:e3: 72:5f:2d:e7:3d:72:ab:4c:ef:82:67:c3:09:c6:51:43:40:6c: dd:60:3f:f8:22:2d:2c:2d:5f:03:39:4f:a5:b9:d0:12:e3:4c: fd:d1:62:96:8e:21:e6:be:4a:7c:96:42:a7:7d:b1:3c:d0:b2: 30:05:cb:24:72:68:d6:60:3b:63:df:71:36:7a:a5:cd:7a:ed: 86:b0:80:48:57:80:12:5a:7f:41:06:3f:c6:8a:27:19:81:3f: b7:91:ba:29:75:53:77:0e:86:2a:d8:64:76:ea:8c:a8:71:93: f1:0c:d6:da:5b:c5:87:f3:92:8c:d2:6f:cb:7c:be:58:04:48: 09:70:eb:e2:0f:82:a9:e7:e4:a9:c8:24:f4:fc:dc:78:91:a9: 96:c7:b7:f9 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg5OUUxREMxOTMxMDdE MEUzNzI3QjNFMjA5OTYxRDVFRUY3RkRBNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClDZ7EC2yBT0x38511x2ZBUgW5FzEX8LoyToSRBR1vGc5NidpV MJCMbzlYBC96V+pft5NP+b2uqEJki55DJeORJEmriAsCjjexuRJyL4pb0kd9qsmD GdiH0myoBfYrERQ3sr3UkiMFrvuj72mwsidNh6+aUZkF0mgRh5HV5+lrIjHgBBGx murFE322UU7kqm4MwWHpb8K7AmUef/G89mq77dmmPSkrU+/slmbSANwmsVC+hdqL H2V1tnU9joIEycG60WYx6a4Id/RLplzkztx4zZ6EFcZXXkA5CMb+5Y+A+upMxjOa Df62wALGAVcCt8M3DX+AjNz+n/rdM61QvR7XAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUiZ4dwZMQfQ43J7PiCZYdXu9/2lswHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9pWjRkd1pNUWZRNDNKN1BpQ1pZ ZFh1OV8ybHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeGww DQYJKoZIhvcNAQELBQADggEBAFgVV2wfI5NuE+WaiZOTQOnchLDpC8K++zLZnUgc NdDt+KTAlzG5aan9zV13L7oz3uCkQugo+L/i9eqMHG/GKBCgTSTZoQtFFbk5V/Th wijLDYpjAzeZveyNe5ti3yfm1oHbMFj6vGbIkwUC43JfLec9cqtM74JnwwnGUUNA bN1gP/giLSwtXwM5T6W50BLjTP3RYpaOIea+SnyWQqd9sTzQsjAFyyRyaNZgO2Pf cTZ6pc167YawgEhXgBJaf0EGP8aKJxmBP7eRuil1U3cOhirYZHbqjKhxk/EM1tpb xYfzkozSb8t8vlgESAlw6+IPgqnn5KnIJPT83HiRqZbHt/k= -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:33 2025 by rpki-client