$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/vQ2HnS3PoPkH4TgRACdQJsIApRk.roa File: vQ2HnS3PoPkH4TgRACdQJsIApRk.roa (raw, json) Hash identifier: tS9Lz9p0U+Sryb1X+2KQqiUGKS5S2BSrpCqbyD4mFl4= Subject key identifier: BD:0D:87:9D:2D:CF:A0:F9:07:E1:38:11:00:27:50:26:C2:00:A5:19 Certificate issuer: /CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Certificate serial: 03D6 Authority key identifier: 57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/vQ2HnS3PoPkH4TgRACdQJsIApRk.roa Signing time: Fri 22 Aug 2025 08:50:43 +0000 ROA not before: Fri 22 Aug 2025 08:50:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63893 IP address blocks: 103.180.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Validity Not Before: Aug 22 08:50:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BD0D879D2DCFA0F907E1381100275026C200A519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:3c:d1:f1:55:41:1a:77:9a:18:ea:18:a3: 80:de:0c:ed:7b:48:e4:c5:cc:94:19:6f:45:c5:7b: 6e:44:15:68:54:d6:ae:5f:10:89:09:51:c0:fe:84: ff:32:29:b0:61:94:d3:87:4d:ae:6c:dc:71:79:84: af:7b:04:47:ec:5f:ef:cf:f5:c2:50:8c:35:0a:c9: a9:33:8f:b1:83:84:94:9c:f2:f3:dc:4c:ed:b0:3c: 5a:56:c7:8b:83:3e:72:89:23:38:c4:2e:4a:78:18: be:f1:60:b7:6e:8a:0c:8b:51:9d:c3:09:83:ca:10: 64:4b:15:44:dc:34:bf:91:43:ce:e5:ce:1f:d5:3d: aa:4d:8f:b7:b5:21:ce:02:6c:d4:8c:23:b7:4c:ad: b7:c5:e0:85:46:35:61:fe:bd:9d:b2:d7:a4:d4:b0: 2f:0e:65:53:fc:5a:fc:58:64:3d:b4:7c:cf:54:bd: ba:a6:74:11:71:c5:ef:ba:81:7d:f1:47:6f:79:97: 83:96:5f:9c:2f:bd:cd:42:47:88:aa:02:09:00:61: cb:6e:39:4d:90:f3:91:09:e0:6d:7b:78:27:63:e6: 50:a2:e2:06:d8:d0:e8:5b:83:97:80:ae:4a:9c:16: 21:9a:dc:8b:97:3a:6d:6b:ad:2e:03:93:7e:78:99: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0D:87:9D:2D:CF:A0:F9:07:E1:38:11:00:27:50:26:C2:00:A5:19 X509v3 Authority Key Identifier: keyid:57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/vQ2HnS3PoPkH4TgRACdQJsIApRk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.180.14.0/23 Signature Algorithm: sha256WithRSAEncryption 96:a5:22:56:66:20:58:19:34:20:91:17:2d:ff:d1:8d:11:e0: 4f:d7:1a:05:95:fd:26:c8:c7:4b:79:aa:08:b4:9d:5d:03:04: f2:d8:35:f7:b3:0c:5c:07:e9:c4:71:0d:b7:5a:e0:2f:9c:e2: cf:e3:13:aa:ea:18:18:b7:1e:fa:d6:5d:52:c7:37:60:a5:36: f8:a2:64:be:ae:ca:41:4e:08:75:44:03:5b:2a:9c:e5:58:6c: 11:b4:0b:03:b5:37:f7:38:df:3c:f3:d3:55:52:c2:d1:83:b6: cc:41:dd:60:c5:c5:f7:75:77:94:1f:db:7f:bf:0f:8e:39:4f: 70:5d:3c:2a:fa:42:c5:7c:cd:1c:ee:10:ce:6e:ec:2c:a7:69: 9a:23:c7:7c:3a:74:68:28:27:8a:58:f5:3f:b5:b2:fe:04:b1: 7a:a8:70:8c:8a:ed:b7:be:8b:bf:b4:66:15:91:98:ed:40:a7: fe:1a:c4:e1:33:e8:c9:9a:02:6a:31:fc:03:0d:8c:74:fb:ca: e3:fe:90:7a:cc:10:16:ff:bd:35:f1:13:aa:35:5c:fd:da:07: 30:00:e8:c8:3d:6a:1a:a3:d3:2b:90:6d:fe:b3:4e:60:b6:0f: 07:bb:32:84:d0:d2:2e:ce:17:cf:ad:55:d8:90:b9:5f:0f:1c: b0:ae:bd:79 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTc4 MTgzQTBGRTVEQTRBMEYzQzA1NDZGQjZFQzI2Q0JEMTIzMkY5OTAeFw0yNTA4MjIw ODUwNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJEMEQ4NzlEMkRDRkEw RjkwN0UxMzgxMTAwMjc1MDI2QzIwMEE1MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+XzzR8VVBGneaGOoYo4DeDO17SOTFzJQZb0XFe25EFWhU1q5f EIkJUcD+hP8yKbBhlNOHTa5s3HF5hK97BEfsX+/P9cJQjDUKyakzj7GDhJSc8vPc TO2wPFpWx4uDPnKJIzjELkp4GL7xYLduigyLUZ3DCYPKEGRLFUTcNL+RQ87lzh/V PapNj7e1Ic4CbNSMI7dMrbfF4IVGNWH+vZ2y16TUsC8OZVP8WvxYZD20fM9Uvbqm dBFxxe+6gX3xR295l4OWX5wvvc1CR4iqAgkAYctuOU2Q85EJ4G17eCdj5lCi4gbY 0Ohbg5eArkqcFiGa3IuXOm1rrS4Dk354mSXzAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUvQ2HnS3PoPkH4TgRACdQJsIApRkwHwYDVR0jBBgwFoAUV4GDoP5dpKDzwFRv tuwmy9EjL5kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ3MC9WNEdEb1A1ZHBLRHp3RlJ2dHV3bXk5RWpMNWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1Y0R0RvUDVkcEtEendGUnZ0dXdteTlFakw1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0NzAvdlEySG5TM1Bv UGtINFRnUkFDZFFKc0lBcFJrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWe0DjANBgkqhkiG9w0BAQsFAAOCAQEAlqUiVmYgWBk0IJEXLf/RjRHg T9caBZX9JsjHS3mqCLSdXQME8tg197MMXAfpxHENt1rgL5ziz+MTquoYGLce+tZd Usc3YKU2+KJkvq7KQU4IdUQDWyqc5VhsEbQLA7U39zjfPPPTVVLC0YO2zEHdYMXF 93V3lB/bf78PjjlPcF08KvpCxXzNHO4Qzm7sLKdpmiPHfDp0aCgnilj1P7Wy/gSx eqhwjIrtt76Lv7RmFZGY7UCn/hrE4TPoyZoCajH8Aw2MdPvK4/6QeswQFv+9NfET qjVc/doHMADoyD1qGqPTK5Bt/rNOYLYPB7syhNDSLs4Xz61V2JC5Xw8csK69eQ== -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:48 2025 by rpki-client