$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa File: WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa (raw, json) Hash identifier: sNcMjvLor2NKzVTpJSKI09p16/cORTksRWi6s+CJHpI= Subject key identifier: 5A:39:87:8E:C8:B0:FA:BE:AB:ED:C5:F9:AE:FB:5A:87:B5:01:4E:64 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 146C Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa Signing time: Fri 22 Aug 2025 08:51:30 +0000 ROA not before: Fri 22 Aug 2025 08:51:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131644 IP address blocks: 182.173.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5228 (0x146c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5A39878EC8B0FABEABEDC5F9AEFB5A87B5014E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:de:0a:dd:9a:39:18:95:06:e2:88:47:66: 6f:09:32:cd:ce:bd:20:fa:c7:4f:be:c0:0c:56:32: c0:dc:d0:20:8b:c5:78:bf:b8:6f:80:79:6d:f3:9c: d5:67:1c:5e:33:54:d0:33:2b:a3:cf:c3:7f:9c:c8: bd:dc:e8:a7:18:45:74:b6:c7:74:98:31:17:da:d4: a0:35:af:31:7d:86:bc:34:14:85:2d:1f:60:f2:08: 6c:96:7c:a8:38:46:6f:56:bc:2d:b2:23:8d:a4:ab: 95:3b:e1:67:99:aa:3e:00:88:a3:5a:19:02:6c:d8: b5:8c:43:4a:e7:95:02:42:62:17:80:5e:ab:c6:d0: 56:a6:4a:5e:5d:03:80:c2:13:d9:c2:52:a7:80:b1: 88:4f:d3:61:bc:42:09:69:4f:bc:f5:84:6f:2c:fa: 56:b7:32:00:43:1d:b9:08:3b:cf:28:18:0a:2e:61: f4:4c:f7:0d:28:61:61:10:80:2b:1d:4d:07:13:68: 02:7f:e8:92:12:dc:d1:b1:25:83:68:eb:0c:44:92: 68:4b:08:2e:84:39:2f:46:6c:21:e8:b8:e0:66:05: 7b:cc:6f:39:51:cf:99:45:e3:a6:70:b5:f7:90:3e: 02:26:7b:82:7d:f1:b5:48:d1:62:79:06:80:9b:44: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:87:8E:C8:B0:FA:BE:AB:ED:C5:F9:AE:FB:5A:87:B5:01:4E:64 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 182.173.12.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:16:d9:df:c1:14:21:d1:4a:bd:a2:71:13:cb:5a:f1:89:45: 4d:67:58:1b:50:af:02:92:2a:ef:c5:73:91:02:4e:6e:ff:53: 16:1a:dc:ca:17:ef:98:d9:1f:80:fb:56:8d:e9:52:1b:07:7a: 54:7e:c1:a0:2c:a9:1e:ec:9e:f1:15:8f:dc:9a:fd:56:be:94: 88:7d:56:c4:38:62:18:34:c8:bc:d1:db:3f:de:ec:f1:e3:14: 35:ec:26:f7:7c:72:7b:77:90:19:5d:1c:83:4a:4e:da:10:2c: bf:f8:46:81:e9:88:c7:a9:33:93:83:4e:1b:64:3f:39:2b:65: d1:3e:33:78:ba:78:b3:43:6c:94:10:56:ba:81:70:75:f2:aa: 42:11:5d:51:5c:60:80:27:a6:b9:d4:22:2f:da:de:94:5b:45: db:1d:1d:81:d3:9d:61:c2:db:fd:32:9b:d1:4c:d1:d5:a2:f9: 79:7c:21:9d:1d:25:b7:f2:fd:81:16:37:df:6e:ec:e2:f1:fb: 11:4e:0f:59:48:a3:f5:2c:e7:1a:34:d9:c1:c5:2c:66:a7:46: 85:61:43:01:66:66:cf:cd:93:07:cd:30:03:cf:36:1f:6c:36: c0:0f:5f:d6:cb:04:e6:a4:c5:41:67:0a:37:63:13:f3:31:71: d1:c5:95:34 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBMzk4NzhFQzhCMEZB QkVBQkVEQzVGOUFFRkI1QTg3QjUwMTRFNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/Ut4K3Zo5GJUG4ohHZm8JMs3OvSD6x0++wAxWMsDc0CCLxXi/ uG+AeW3znNVnHF4zVNAzK6PPw3+cyL3c6KcYRXS2x3SYMRfa1KA1rzF9hrw0FIUt H2DyCGyWfKg4Rm9WvC2yI42kq5U74WeZqj4AiKNaGQJs2LWMQ0rnlQJCYheAXqvG 0FamSl5dA4DCE9nCUqeAsYhP02G8QglpT7z1hG8s+la3MgBDHbkIO88oGAouYfRM 9w0oYWEQgCsdTQcTaAJ/6JIS3NGxJYNo6wxEkmhLCC6EOS9GbCHouOBmBXvMbzlR z5lF46ZwtfeQPgIme4J98bVI0WJ5BoCbRONpAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUWjmHjsiw+r6r7cX5rvtah7UBTmQwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9Xam1IanNpdy1yNnI3Y1g1cnZ0 YWg3VUJUbVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtq0M MA0GCSqGSIb3DQEBCwUAA4IBAQB8FtnfwRQh0Uq9onETy1rxiUVNZ1gbUK8Ckirv xXORAk5u/1MWGtzKF++Y2R+A+1aN6VIbB3pUfsGgLKke7J7xFY/cmv1WvpSIfVbE OGIYNMi80ds/3uzx4xQ17Cb3fHJ7d5AZXRyDSk7aECy/+EaB6YjHqTOTg04bZD85 K2XRPjN4unizQ2yUEFa6gXB18qpCEV1RXGCAJ6a51CIv2t6UW0XbHR2B051hwtv9 MpvRTNHVovl5fCGdHSW38v2BFjffbuzi8fsRTg9ZSKP1LOcaNNnBxSxmp0aFYUMB ZmbPzZMHzTADzzYfbDbAD1/WywTmpMVBZwo3YxPzMXHRxZU0 -----END CERTIFICATE-----Generated at Sat Sep 6 07:09:59 2025 by rpki-client