$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/uDcdSwyEicQSFIhPyI7y-T3U8Co.roa File: uDcdSwyEicQSFIhPyI7y-T3U8Co.roa (raw, json) Hash identifier: kaJK1ZX0zzUEzVE4Q+BIqKkazgYlfyCof4oJnWjIyBU= Subject key identifier: B8:37:1D:4B:0C:84:89:C4:12:14:88:4F:C8:8E:F2:F9:3D:D4:F0:2A Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Certificate serial: 0FB3 Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/uDcdSwyEicQSFIhPyI7y-T3U8Co.roa Signing time: Fri 22 Aug 2025 08:51:12 +0000 ROA not before: Fri 22 Aug 2025 08:51:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.135.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4019 (0xfb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Validity Not Before: Aug 22 08:51:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B8371D4B0C8489C41214884FC88EF2F93DD4F02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:22:f6:44:d1:44:33:42:57:bf:a0:aa:1b:56: e7:4d:73:d8:67:a3:47:0f:f6:c1:f1:93:15:f3:75: ab:a5:55:21:fb:d2:77:50:16:ce:a5:3a:de:c9:99: 6d:61:16:a1:88:4d:63:94:c0:0e:9a:25:8b:5e:e4: be:53:77:dc:b4:f4:5d:1c:59:59:ab:5d:e8:76:5f: f7:c3:34:26:db:6a:31:2f:af:0f:f3:7d:f1:f4:72: 49:4e:b9:8a:38:af:cc:d5:be:82:3d:e0:d0:ee:00: 47:1b:bf:20:57:48:9c:05:90:2a:1e:18:29:ce:c0: 19:fc:8d:87:3c:24:55:7f:d9:c7:7d:ee:b7:fb:d5: 47:58:9e:45:15:fc:29:d6:47:d3:45:13:f7:6f:c8: 60:4c:da:5d:1c:4f:96:ee:44:34:7f:83:63:f3:c6: de:b2:1e:66:9d:c6:b1:7e:41:49:0e:df:ee:7e:0d: 39:6f:cc:1f:94:c1:71:57:f1:e7:02:16:95:04:ec: 4c:ba:fa:4c:f2:b7:f6:77:94:5f:5b:16:37:fe:f1: c4:00:ad:a7:d3:ca:59:ef:cd:a5:1e:90:b5:c4:87: a6:95:cb:8a:54:58:8d:4c:e3:e3:82:9b:49:9a:41: dc:e1:1d:2c:36:f8:94:5b:c0:1d:79:bc:d6:8d:d0: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:37:1D:4B:0C:84:89:C4:12:14:88:4F:C8:8E:F2:F9:3D:D4:F0:2A X509v3 Authority Key Identifier: keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/uDcdSwyEicQSFIhPyI7y-T3U8Co.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.118.0/24 Signature Algorithm: sha256WithRSAEncryption 33:51:b8:b6:8f:99:df:eb:29:28:dc:88:b8:af:a1:98:df:62: b1:e4:f3:81:f6:d8:a2:73:cf:28:95:32:8f:c2:43:46:2c:26: 0a:58:e5:5c:62:23:e9:8a:b0:b7:5c:57:8d:f7:cf:e3:03:81: ff:89:1a:38:97:0d:03:f3:01:15:8d:fa:c2:73:67:12:2a:de: ab:dd:63:0a:d2:b0:7f:cc:15:c6:82:bb:d1:c2:ba:89:59:04: de:de:02:67:99:c5:85:12:b9:68:f7:d6:eb:a6:1d:cc:af:04: 32:b5:3f:55:63:b0:77:54:48:1c:eb:a7:64:fe:0f:39:08:99: b7:99:cd:44:80:02:a1:97:a2:e0:66:d2:39:50:34:4e:a5:5e: 80:f3:f3:d5:54:ec:ba:7d:af:53:25:a9:5f:9e:bf:66:38:b5: c6:37:d0:b8:0d:07:71:c4:99:4f:8e:ff:ca:e3:2b:73:b2:75: 28:b8:49:f5:5f:9f:17:33:99:e4:be:88:98:f4:3b:14:07:02: 03:59:6f:e0:67:c7:44:f5:3a:78:1c:77:37:f1:dc:75:d3:1b: de:9f:01:61:50:c8:21:39:39:06:a1:40:17:9c:d2:3f:f7:32: 58:2b:c3:50:8c:08:c1:c9:83:c5:64:02:1f:38:65:bf:40:30: 04:bf:72:5b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTJG QjczOTUyNUI3NDJBMjhBNzQzMzE1QzZDODhFNzY2QTdFMERDMzAeFw0yNTA4MjIw ODUxMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI4MzcxRDRCMEM4NDg5 QzQxMjE0ODg0RkM4OEVGMkY5M0RENEYwMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1IvZE0UQzQle/oKobVudNc9hno0cP9sHxkxXzdaulVSH70ndQ Fs6lOt7JmW1hFqGITWOUwA6aJYte5L5Td9y09F0cWVmrXeh2X/fDNCbbajEvrw/z ffH0cklOuYo4r8zVvoI94NDuAEcbvyBXSJwFkCoeGCnOwBn8jYc8JFV/2cd97rf7 1UdYnkUV/CnWR9NFE/dvyGBM2l0cT5buRDR/g2Pzxt6yHmadxrF+QUkO3+5+DTlv zB+UwXFX8ecCFpUE7Ey6+kzyt/Z3lF9bFjf+8cQArafTylnvzaUekLXEh6aVy4pU WI1M4+OCm0maQdzhHSw2+JRbwB15vNaN0HHtAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUuDcdSwyEicQSFIhPyI7y+T3U8CowHwYDVR0jBBgwFoAUovtzlSW3QqKKdDMV xsiOdmp+DcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNM T1VEL292dHpsU1czUXFLS2RETVZ4c2lPZG1wLURjTS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0Evb3Z0emxTVzNRcUtLZERNVnhzaU9kbXAtRGNNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNMT1VEL3VEY2RTd3lFaWNR U0ZJaFB5STd5LVQzVThDby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnh3YwDQYJKoZIhvcNAQELBQADggEBADNRuLaPmd/rKSjciLivoZjfYrHk 84H22KJzzyiVMo/CQ0YsJgpY5VxiI+mKsLdcV433z+MDgf+JGjiXDQPzARWN+sJz ZxIq3qvdYwrSsH/MFcaCu9HCuolZBN7eAmeZxYUSuWj31uumHcyvBDK1P1VjsHdU SBzrp2T+DzkImbeZzUSAAqGXouBm0jlQNE6lXoDz89VU7Lp9r1MlqV+ev2Y4tcY3 0LgNB3HEmU+O/8rjK3OydSi4SfVfnxczmeS+iJj0OxQHAgNZb+Bnx0T1Ongcdzfx 3HXTG96fAWFQyCE5OQahQBec0j/3Mlgrw1CMCMHJg8VkAh84Zb9AMAS/cls= -----END CERTIFICATE-----Generated at Sun Aug 24 09:06:01 2025 by rpki-client