$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/iwW5LVmMj3k1cMpWLeLAQl7HxeM.roa File: iwW5LVmMj3k1cMpWLeLAQl7HxeM.roa (raw, json) Hash identifier: nHKO6HQR2W7bF++PHDoslu69H8d2Ngr+YXouvidjk3k= Subject key identifier: 8B:05:B9:2D:59:8C:8F:79:35:70:CA:56:2D:E2:C0:42:5E:C7:C5:E3 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 1001 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iwW5LVmMj3k1cMpWLeLAQl7HxeM.roa Signing time: Fri 22 Aug 2025 08:55:49 +0000 ROA not before: Fri 22 Aug 2025 08:55:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17716 IP address blocks: 140.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 16:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4097 (0x1001) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8B05B92D598C8F793570CA562DE2C0425EC7C5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:24:cb:3c:e7:46:ae:0b:2a:01:36:79:12:4d: 35:da:2d:75:3f:e0:04:c5:28:2e:f5:d1:2d:03:8e: c2:0c:cd:65:98:cc:ac:48:d3:44:4b:fa:04:b0:35: f0:5e:54:db:de:fa:9c:37:19:ef:f8:2f:53:be:06: 32:64:5a:be:53:3d:b8:42:ec:7c:39:f2:6d:64:bd: b3:3d:b8:71:5f:35:ea:ef:5b:03:64:91:da:0f:a7: 12:42:42:4e:ab:80:57:1c:e4:5b:e7:19:c0:6a:7d: 54:4e:88:4c:06:a2:67:2d:52:a6:e1:46:4b:5f:1b: 28:77:30:18:61:f1:45:5f:c4:12:13:2f:62:32:04: 93:20:ed:39:65:7d:3f:58:f5:db:8d:b4:1c:34:65: be:0d:cf:2b:d4:0f:f3:61:16:b0:0b:3c:97:11:ad: b1:34:3f:38:49:79:65:50:3a:d8:8f:b9:df:05:74: 09:9e:55:4f:21:6f:78:3c:00:69:34:74:fc:c1:7d: 08:8e:b0:5c:f8:22:da:8d:8c:e6:f8:f1:21:f7:fc: 60:47:73:2a:bb:62:ea:34:cc:e5:f9:c9:97:82:26: 81:e4:43:3c:17:ef:46:52:55:07:04:57:10:0c:2a: 6d:5d:84:3f:1c:46:27:82:ac:65:67:44:dc:65:06: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:05:B9:2D:59:8C:8F:79:35:70:CA:56:2D:E2:C0:42:5E:C7:C5:E3 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/iwW5LVmMj3k1cMpWLeLAQl7HxeM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.112.0.0/16 Signature Algorithm: sha256WithRSAEncryption 77:5e:a0:f6:9c:0e:61:06:80:1a:91:a9:4c:fa:1a:61:60:2c: 42:10:55:71:47:3d:fe:c5:ae:ee:5f:61:6e:fc:eb:7f:89:8c: 21:1e:8f:cd:38:10:91:00:c9:18:92:a3:6b:ab:26:26:d5:1f: e1:c0:e0:4e:f4:a2:a4:81:0f:c8:33:00:e3:9e:49:11:07:a8: 0d:90:4f:af:80:3d:2e:ee:ca:44:1d:4f:23:11:0b:12:b9:23: 6f:62:48:4b:0d:93:6c:ec:73:9c:05:34:68:cf:cc:b9:1b:2e: a9:d2:25:bb:50:f5:6f:20:ae:7d:65:6c:a5:4a:b1:cf:14:2d: 59:25:bc:e0:f6:42:69:dd:a6:f1:9a:5f:de:e8:e7:da:a7:45: e9:fa:10:91:59:2d:49:94:15:b4:25:ed:ad:15:aa:c0:2d:59: 9b:6c:d2:2e:e4:92:2e:6c:c0:54:b3:fe:81:3d:5a:64:05:fd: 26:99:b8:4b:94:90:59:e9:17:48:b9:a3:2e:f0:cb:42:05:18: 9b:9b:ce:8d:d6:88:01:3f:61:b4:58:e3:0b:9e:bf:7d:8f:10: f5:f1:82:97:4b:3f:db:55:76:b1:7e:07:c3:04:62:c4:49:d8: 60:e3:10:9c:02:5d:ae:7e:7e:91:c9:4e:17:ff:33:2d:ce:7a: 6d:fc:16:88 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhCMDVCOTJENTk4QzhG NzkzNTcwQ0E1NjJERTJDMDQyNUVDN0M1RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtJMs850auCyoBNnkSTTXaLXU/4ATFKC710S0DjsIMzWWYzKxI 00RL+gSwNfBeVNve+pw3Ge/4L1O+BjJkWr5TPbhC7Hw58m1kvbM9uHFfNervWwNk kdoPpxJCQk6rgFcc5FvnGcBqfVROiEwGomctUqbhRktfGyh3MBhh8UVfxBITL2Iy BJMg7TllfT9Y9duNtBw0Zb4NzyvUD/NhFrALPJcRrbE0PzhJeWVQOtiPud8FdAme VU8hb3g8AGk0dPzBfQiOsFz4ItqNjOb48SH3/GBHcyq7Yuo0zOX5yZeCJoHkQzwX 70ZSVQcEVxAMKm1dhD8cRieCrGVnRNxlBsjlAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUiwW5LVmMj3k1cMpWLeLAQl7HxeMwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9pd1c1TFZtTWozazFjTXBXTGVM QVFsN0h4ZU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjHAw DQYJKoZIhvcNAQELBQADggEBAHdeoPacDmEGgBqRqUz6GmFgLEIQVXFHPf7Fru5f YW7863+JjCEej804EJEAyRiSo2urJibVH+HA4E70oqSBD8gzAOOeSREHqA2QT6+A PS7uykQdTyMRCxK5I29iSEsNk2zsc5wFNGjPzLkbLqnSJbtQ9W8grn1lbKVKsc8U LVklvOD2QmndpvGaX97o59qnRen6EJFZLUmUFbQl7a0VqsAtWZts0i7kki5swFSz /oE9WmQF/SaZuEuUkFnpF0i5oy7wy0IFGJubzo3WiAE/YbRY4wuev32PEPXxgpdL P9tVdrF+B8MEYsRJ2GDjEJwCXa5+fpHJThf/My3Oem38Fog= -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:42 2025 by rpki-client