$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/_40La91SdSDUNpi13LuUPWFDMfA.roa File: _40La91SdSDUNpi13LuUPWFDMfA.roa (raw, json) Hash identifier: crACswso246NZQXS0mCcLTzq/nfSkzs3LBj99oTSlkk= Subject key identifier: FF:8D:0B:6B:DD:52:75:20:D4:36:98:B5:DC:BB:94:3D:61:43:31:F0 Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0D4F Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/_40La91SdSDUNpi13LuUPWFDMfA.roa Signing time: Fri 22 Aug 2025 09:04:01 +0000 ROA not before: Fri 22 Aug 2025 09:04:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.104.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3407 (0xd4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: Aug 22 09:04:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FF8D0B6BDD527520D43698B5DCBB943D614331F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:97:82:f6:35:75:91:b9:93:83:bc:96:a9: 18:55:81:85:56:af:cf:e0:fa:0d:ba:e5:1b:cf:23: 51:bd:78:14:90:d4:74:39:43:8b:70:4a:8f:65:de: 01:2f:4f:9e:32:d4:6d:c5:c9:d6:ac:c1:ea:46:ea: 5f:7d:bf:32:54:28:50:2a:6a:48:ea:6c:fa:6c:0f: 31:9d:67:c8:47:0f:b1:b0:40:2a:96:39:68:5f:41: 7b:a4:b0:9e:9d:7b:88:e1:75:96:35:ef:74:a4:a4: 5f:ef:ce:5b:c9:3b:e1:20:d7:2b:5b:b2:1f:2f:4a: fb:ea:5c:8b:4a:37:4f:f7:c2:89:12:3c:c1:f9:74: 86:f8:e8:ff:39:88:c0:77:1f:44:98:45:8d:e4:20: 22:59:a8:3e:13:e3:38:31:9e:72:4a:c6:63:1d:85: 31:7b:f9:7b:08:f1:71:64:9f:67:e0:19:d7:d1:6a: fb:44:b3:15:c7:d1:b4:4e:93:ff:b5:94:85:73:77: c1:11:be:83:84:13:d8:cc:9c:0e:a2:4e:cf:32:2e: ad:12:b5:02:6e:58:19:d6:9f:10:30:9f:30:d6:81: 6c:ac:68:7d:22:9c:7b:88:ec:05:b1:3b:53:33:03: 64:29:e1:d1:93:45:fe:7b:39:15:59:26:ae:a1:bb: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:0B:6B:DD:52:75:20:D4:36:98:B5:DC:BB:94:3D:61:43:31:F0 X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/_40La91SdSDUNpi13LuUPWFDMfA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.151.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:d9:d4:82:94:8b:6a:0f:3a:04:10:d6:74:28:9e:5b:96:ff: bb:ac:88:db:82:1e:c8:0e:e2:af:f6:7d:b8:ef:00:24:3b:67: cf:9b:5f:b7:3d:13:0a:49:f9:c4:64:ef:73:f8:d9:2a:26:5c: 88:a5:4a:1b:74:10:95:73:4c:f4:d8:ac:3c:56:d4:a2:b2:f2: 83:73:1a:53:cb:79:7c:43:2a:54:6f:5b:ce:b5:9f:cf:40:a3: 96:ce:71:12:79:8e:f2:ae:ce:99:b2:01:4b:67:49:1e:13:6c: f8:32:74:e2:5a:d6:6f:74:37:03:45:6b:7c:87:8f:75:e6:d4: e7:8d:87:62:35:da:96:e6:c8:c4:f5:78:ab:13:77:9f:c8:7d: cd:72:f9:47:b6:8d:4f:03:bd:6c:16:5d:4d:49:5a:50:44:f4: 9d:53:5a:07:15:68:6a:f3:6a:cb:d9:10:0d:69:27:43:a3:ce: d7:aa:ff:af:11:45:2b:f2:17:9c:03:f5:4b:89:cd:9f:59:96: 88:b4:0e:57:74:8e:99:66:96:3b:72:b6:bd:86:66:eb:2e:4f: ef:30:9b:b1:b1:b7:9c:04:91:22:3c:83:b3:11:eb:67:25:95: 3b:dd:3f:7c:64:ff:e7:e6:a0:a8:8d:fb:6d:9f:19:f1:10:fa: 55:3a:5e:f1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNTA4MjIw OTA0MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZGOEQwQjZCREQ1Mjc1 MjBENDM2OThCNURDQkI5NDNENjE0MzMxRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChiZeC9jV1kbmTg7yWqRhVgYVWr8/g+g265RvPI1G9eBSQ1HQ5 Q4twSo9l3gEvT54y1G3FydaswepG6l99vzJUKFAqakjqbPpsDzGdZ8hHD7GwQCqW OWhfQXuksJ6de4jhdZY173SkpF/vzlvJO+Eg1ytbsh8vSvvqXItKN0/3wokSPMH5 dIb46P85iMB3H0SYRY3kICJZqD4T4zgxnnJKxmMdhTF7+XsI8XFkn2fgGdfRavtE sxXH0bROk/+1lIVzd8ERvoOEE9jMnA6iTs8yLq0StQJuWBnWnxAwnzDWgWysaH0i nHuI7AWxO1MzA2Qp4dGTRf57ORVZJq6huzqtAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU/40La91SdSDUNpi13LuUPWFDMfAwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC9fNDBMYTkxU2RTRFVO cGkxM0x1VVBXRkRNZkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2iXMA0GCSqGSIb3DQEBCwUAA4IBAQAb2dSClItqDzoEENZ0KJ5blv+7rIjb gh7IDuKv9n247wAkO2fPm1+3PRMKSfnEZO9z+NkqJlyIpUobdBCVc0z02Kw8VtSi svKDcxpTy3l8QypUb1vOtZ/PQKOWznESeY7yrs6ZsgFLZ0keE2z4MnTiWtZvdDcD RWt8h4915tTnjYdiNdqW5sjE9XirE3efyH3NcvlHto1PA71sFl1NSVpQRPSdU1oH FWhq82rL2RANaSdDo87Xqv+vEUUr8hecA/VLic2fWZaItA5XdI6ZZpY7cra9hmbr Lk/vMJuxsbecBJEiPIOzEetnJZU73T98ZP/n5qCojfttnxnxEPpVOl7x -----END CERTIFICATE-----Generated at Sun Aug 24 06:48:44 2025 by rpki-client