$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/amZf0XSxEvCB3od3SreEV4IbLPA.roa File: amZf0XSxEvCB3od3SreEV4IbLPA.roa (raw, json) Hash identifier: YmuGn5+Yn28oZgPnxxpZzgPHToGABtZlhbI0xICq4io= Subject key identifier: 6A:66:5F:D1:74:B1:12:F0:81:DE:87:77:4A:B7:84:57:82:1B:2C:F0 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 06D2 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/amZf0XSxEvCB3od3SreEV4IbLPA.roa Signing time: Fri 22 Aug 2025 08:48:57 +0000 ROA not before: Fri 22 Aug 2025 08:48:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 983 IP address blocks: 103.156.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Aug 22 08:48:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6A665FD174B112F081DE87774AB78457821B2CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:d9:22:72:f4:a8:95:3e:88:94:17:b3:42: d5:12:65:86:2d:6e:66:56:d4:29:c1:33:0c:3f:da: ac:cf:84:2a:b9:5c:9e:3a:b5:26:73:92:7b:94:9a: 87:29:78:c9:37:cc:46:25:13:72:90:ec:99:f4:5b: 15:14:b0:bc:21:e5:2e:7f:5d:14:c2:36:f3:41:9e: f2:c4:cf:d2:26:d3:8a:b6:fa:ba:bd:da:95:ca:24: eb:6c:09:24:b0:a9:03:97:32:7d:11:f0:c2:5b:7a: d7:5a:e2:06:c4:6b:40:34:54:6d:a6:f7:80:12:83: 54:56:86:98:17:bc:47:13:a0:8b:f7:28:ba:b6:cf: 3c:ed:41:1e:85:2a:33:9c:46:0b:5e:51:d1:77:ad: d3:99:a7:60:8a:bc:cf:15:71:23:b9:87:c0:c3:1a: 8c:44:ba:9a:d9:2b:a7:e2:26:39:9e:9a:f1:b3:07: 19:16:b0:c1:b5:aa:b0:3c:41:cc:76:ea:ea:cf:da: b1:18:1d:c4:f2:a1:d9:a2:6b:47:51:48:8a:e4:08: 6f:5b:66:45:48:5f:42:63:16:ab:2c:29:4f:a7:1a: 23:e3:7b:03:bb:43:d0:f7:d8:70:c5:eb:dc:74:e2: e1:e3:8c:77:f1:b6:aa:d4:30:66:2e:51:da:5d:f4: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:66:5F:D1:74:B1:12:F0:81:DE:87:77:4A:B7:84:57:82:1B:2C:F0 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/amZf0XSxEvCB3od3SreEV4IbLPA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.184.0/24 Signature Algorithm: sha256WithRSAEncryption a6:dd:4f:42:3e:af:81:5d:ab:99:c0:07:1b:22:b6:e8:1d:2a: 58:7d:d2:05:c4:b0:8e:82:f8:80:e2:0a:08:9f:a6:db:53:88: 7d:96:75:1e:2b:73:df:f9:f9:f1:c2:9e:81:23:c3:65:9f:b5: e2:a0:22:16:f4:be:4c:3b:6b:67:53:76:23:4e:29:30:c5:99: ee:bf:e7:aa:aa:74:2d:0d:a3:e1:de:98:a4:f6:48:3d:12:db: c7:36:a0:e5:9f:bd:21:3b:ae:32:5f:61:ab:c5:9c:17:d5:76: f4:a1:42:fa:d3:27:46:d8:79:91:70:4c:d2:c4:2a:bf:9e:20: 5c:6d:f8:9e:90:a8:48:21:49:df:10:51:01:aa:1b:77:62:25: 2e:13:e6:b9:b5:10:43:bd:c5:45:dc:bc:d5:ef:05:3e:0a:48: 10:9f:ef:d6:64:58:8e:92:09:e5:b5:d6:63:7a:65:9d:0c:a3: 18:a3:7a:d7:77:5d:d9:68:ad:6a:2d:bd:4f:3b:5c:e5:c6:a4: bb:34:3d:bd:59:19:42:ec:0b:e9:26:d5:a2:b5:dc:ff:ce:ba: 44:bb:d2:b4:b2:0a:9b:3f:cd:09:d2:e6:f2:8c:9e:f4:6d:bf: d3:d0:8b:b4:b0:16:db:5a:71:4c:47:34:e3:c3:ec:1d:e4:ce: b1:7f:e7:92 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNTA4MjIw ODQ4NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZBNjY1RkQxNzRCMTEy RjA4MURFODc3NzRBQjc4NDU3ODIxQjJDRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwntkicvSolT6IlBezQtUSZYYtbmZW1CnBMww/2qzPhCq5XJ46 tSZzknuUmocpeMk3zEYlE3KQ7Jn0WxUUsLwh5S5/XRTCNvNBnvLEz9Im04q2+rq9 2pXKJOtsCSSwqQOXMn0R8MJbetda4gbEa0A0VG2m94ASg1RWhpgXvEcToIv3KLq2 zzztQR6FKjOcRgteUdF3rdOZp2CKvM8VcSO5h8DDGoxEuprZK6fiJjmemvGzBxkW sMG1qrA8Qcx26urP2rEYHcTyodmia0dRSIrkCG9bZkVIX0JjFqssKU+nGiPjewO7 Q9D32HDF69x04uHjjHfxtqrUMGYuUdpd9PGtAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUamZf0XSxEvCB3od3SreEV4IbLPAwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvYW1aZjBYU3hFdkNCM29k M1NyZUVWNEliTFBBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuDANBgkqhkiG9w0BAQsFAAOCAQEApt1PQj6vgV2rmcAHGyK26B0qWH3SBcSw joL4gOIKCJ+m21OIfZZ1Hitz3/n58cKegSPDZZ+14qAiFvS+TDtrZ1N2I04pMMWZ 7r/nqqp0LQ2j4d6YpPZIPRLbxzag5Z+9ITuuMl9hq8WcF9V29KFC+tMnRth5kXBM 0sQqv54gXG34npCoSCFJ3xBRAaobd2IlLhPmubUQQ73FRdy81e8FPgpIEJ/v1mRY jpIJ5bXWY3plnQyjGKN613dd2Witai29Tztc5cakuzQ9vVkZQuwL6SbVorXc/866 RLvStLIKmz/NCdLm8oye9G2/09CLtLAW21pxTEc048PsHeTOsX/nkg== -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:32 2025 by rpki-client