$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/IErJ5BhWjjrsvQSxqhNrO13V85U.roa File: IErJ5BhWjjrsvQSxqhNrO13V85U.roa (raw, json) Hash identifier: rM4SOX6jS9DjpPaDLBCPY5WkaZh0Qucsm4y/V+X7xbE= Subject key identifier: 20:4A:C9:E4:18:56:8E:3A:EC:BD:04:B1:AA:13:6B:3B:5D:D5:F3:95 Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Certificate serial: 0FB4 Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/IErJ5BhWjjrsvQSxqhNrO13V85U.roa Signing time: Fri 22 Aug 2025 08:51:12 +0000 ROA not before: Fri 22 Aug 2025 08:51:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.135.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4020 (0xfb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Validity Not Before: Aug 22 08:51:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=204AC9E418568E3AECBD04B1AA136B3B5DD5F395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f1:af:33:96:20:79:f2:b5:f0:c6:bd:5e:c2: 48:80:63:02:9f:0d:89:ba:c6:56:9e:38:b8:36:87: a0:5f:60:e5:08:fd:ec:09:aa:ba:df:2b:49:d3:05: 88:da:1d:f9:18:1b:6b:94:ed:e1:1c:fa:b6:a3:87: 9d:f6:5e:da:f6:33:95:58:89:4e:63:58:3d:52:3f: b4:b5:34:40:8c:ef:d0:73:c6:a9:fa:ea:b7:54:a7: c1:a5:99:2c:dd:c0:f0:8e:24:92:f0:b5:ad:2a:97: 4c:57:fa:9d:54:1a:48:0c:98:09:b6:fe:5e:31:a9: b4:d4:bb:f2:54:b5:a7:9a:f1:23:77:b2:54:41:21: b4:60:fc:76:9f:ae:a5:be:91:68:78:4c:15:9f:65: b5:d4:92:dd:ee:7c:ed:d4:7d:32:2f:3b:b9:f5:57: 13:20:04:77:e8:d3:dd:fd:f2:71:7e:9b:6b:f7:27: 60:6c:9b:5b:ac:64:d5:7f:af:28:02:04:d1:32:38: f9:7c:d2:c6:46:64:8f:89:a3:fb:f1:f7:e4:24:97: ad:2c:cf:98:d8:bd:7e:d3:1d:93:f4:61:74:1f:bc: e3:30:99:50:ef:25:a5:23:81:b1:ce:f4:82:49:17: 8e:24:ec:70:87:66:8e:1f:3c:c1:6d:6a:45:1b:ef: ef:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4A:C9:E4:18:56:8E:3A:EC:BD:04:B1:AA:13:6B:3B:5D:D5:F3:95 X509v3 Authority Key Identifier: keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/IErJ5BhWjjrsvQSxqhNrO13V85U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.116.0/22 Signature Algorithm: sha256WithRSAEncryption 09:dd:72:e7:42:59:30:ab:db:48:61:66:81:d3:b8:9b:64:e6: 0f:71:8d:33:e9:5a:2c:86:6c:19:0e:74:bb:ff:b8:13:c4:fa: 1f:c4:5c:5a:90:fb:be:4a:0d:c3:fc:76:7b:58:4b:02:39:9f: d3:2a:a1:70:fa:2f:f7:ba:95:99:b6:32:61:83:22:f3:7d:f4: 5a:e5:dd:73:1e:4b:fc:b4:71:13:df:46:ba:bd:32:9c:7f:b4: 67:2e:28:34:54:61:d7:b2:94:1a:22:d6:13:85:bb:b6:6b:5d: de:bc:06:25:6f:2d:d6:7e:f5:84:70:6f:53:df:22:24:30:2a: d4:bb:97:df:a0:60:8c:c5:b9:d3:50:d3:c3:ce:71:2e:96:f1: b5:e7:b7:7f:ec:8f:0a:8d:93:1e:6a:7f:9c:07:8c:bc:5f:88: d5:5c:9e:06:2d:f5:39:19:71:5c:74:ad:d8:8b:ef:87:18:d6: 81:da:6f:fb:1b:1f:dd:c5:94:dc:70:d6:1d:da:ed:e4:b6:53: 6d:b0:c1:67:43:d8:70:02:d8:08:2e:8b:0c:83:c1:fc:30:bf: ee:42:f8:0b:e1:20:c6:41:f7:2b:4f:da:71:62:48:6c:b3:33: 5c:e6:2e:24:7d:c4:46:30:e9:ec:25:9b:89:fa:19:46:da:78: 3f:13:34:93 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICD7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTJG QjczOTUyNUI3NDJBMjhBNzQzMzE1QzZDODhFNzY2QTdFMERDMzAeFw0yNTA4MjIw ODUxMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwNEFDOUU0MTg1NjhF M0FFQ0JEMDRCMUFBMTM2QjNCNURENUYzOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT8a8zliB58rXwxr1ewkiAYwKfDYm6xlaeOLg2h6BfYOUI/ewJ qrrfK0nTBYjaHfkYG2uU7eEc+rajh532Xtr2M5VYiU5jWD1SP7S1NECM79Bzxqn6 6rdUp8GlmSzdwPCOJJLwta0ql0xX+p1UGkgMmAm2/l4xqbTUu/JUtaea8SN3slRB IbRg/HafrqW+kWh4TBWfZbXUkt3ufO3UfTIvO7n1VxMgBHfo09398nF+m2v3J2Bs m1usZNV/rygCBNEyOPl80sZGZI+Jo/vx9+Qkl60sz5jYvX7THZP0YXQfvOMwmVDv JaUjgbHO9IJJF44k7HCHZo4fPMFtakUb7+8zAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUIErJ5BhWjjrsvQSxqhNrO13V85UwHwYDVR0jBBgwFoAUovtzlSW3QqKKdDMV xsiOdmp+DcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNM T1VEL292dHpsU1czUXFLS2RETVZ4c2lPZG1wLURjTS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0Evb3Z0emxTVzNRcUtLZERNVnhzaU9kbXAtRGNNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNMT1VEL0lFcko1QmhXampy c3ZRU3hxaE5yTzEzVjg1VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnh3QwDQYJKoZIhvcNAQELBQADggEBAAndcudCWTCr20hhZoHTuJtk5g9x jTPpWiyGbBkOdLv/uBPE+h/EXFqQ+75KDcP8dntYSwI5n9MqoXD6L/e6lZm2MmGD IvN99Frl3XMeS/y0cRPfRrq9Mpx/tGcuKDRUYdeylBoi1hOFu7ZrXd68BiVvLdZ+ 9YRwb1PfIiQwKtS7l9+gYIzFudNQ08POcS6W8bXnt3/sjwqNkx5qf5wHjLxfiNVc ngYt9TkZcVx0rdiL74cY1oHab/sbH93FlNxw1h3a7eS2U22wwWdD2HAC2AguiwyD wfwwv+5C+AvhIMZB9ytP2nFiSGyzM1zmLiR9xEYw6ewlm4n6GUbaeD8TNJM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:18:00 2025 by rpki-client