$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/EDNx7AHB_at2gFi9kWYWGh6wQS8.roa File: EDNx7AHB_at2gFi9kWYWGh6wQS8.roa (raw, json) Hash identifier: D0M8dXQS4ACLUCnicLBESzS0Y6eCOc8Lvn5RHwSSFBA= Subject key identifier: 10:33:71:EC:01:C1:FD:AB:76:80:58:BD:91:66:16:1A:1E:B0:41:2F Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0DEB Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/EDNx7AHB_at2gFi9kWYWGh6wQS8.roa Signing time: Fri 22 Aug 2025 08:57:07 +0000 ROA not before: Fri 22 Aug 2025 08:57:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24172 IP address blocks: 103.234.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Aug 22 08:57:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=103371EC01C1FDAB768058BD9166161A1EB0412F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:33:73:1e:fd:b8:a2:d5:6d:fc:d9:52:26: f3:54:5e:47:2a:af:ca:14:b1:11:1b:7e:6d:ca:0a: 47:34:84:60:a1:1b:eb:3b:9f:ba:e4:37:fa:c2:9d: 61:d5:40:14:8b:11:88:57:76:ca:d0:f2:ad:53:b8: 8c:9f:26:97:70:47:0f:94:5a:f8:93:f5:fc:37:99: aa:96:8a:65:5f:b1:55:86:7a:73:4c:17:9c:e7:9d: 28:16:b3:aa:17:36:00:80:28:aa:bd:2f:fe:b7:28: 69:c8:2b:7a:7b:52:33:f8:56:b0:87:f2:f1:92:91: ea:31:3e:7d:23:59:5e:26:40:9f:dc:24:45:04:0e: 41:12:5d:af:d6:a0:1f:3e:05:df:5c:ff:3a:23:08: 39:01:b1:b0:66:29:2c:24:07:e8:3d:96:3a:8c:87: 85:83:45:37:ca:52:e5:ee:d4:a3:02:a5:2b:c1:20: 8c:ee:c8:9c:5d:6e:8e:aa:88:b8:f9:74:2a:41:5d: 08:d4:78:01:12:df:15:dc:bd:5a:9c:b7:79:13:59: 52:6a:9c:20:da:d2:a3:c9:01:9b:71:e4:1c:00:6f: 0d:d1:e6:82:52:f8:98:85:89:41:e9:d2:dd:ed:68: 26:c2:55:e8:09:bb:12:60:d6:ca:0a:df:23:a9:3b: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:71:EC:01:C1:FD:AB:76:80:58:BD:91:66:16:1A:1E:B0:41:2F X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/EDNx7AHB_at2gFi9kWYWGh6wQS8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.224.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:18:ed:d9:e8:3f:04:90:5e:8a:40:76:de:66:de:f4:3e:dd: af:83:d1:e2:37:ed:94:b5:45:0c:c8:b6:ce:21:b8:96:20:f5: 92:9f:ef:b9:ec:07:a0:c0:a9:5d:87:14:21:fb:b7:b7:9f:bc: 92:2a:78:14:2a:db:6e:e8:f4:28:13:6d:f6:18:90:49:38:16: 3b:c3:74:56:bb:af:cc:d6:66:c9:97:55:44:88:5b:4e:7c:bb: 0a:0e:bd:37:fd:0b:3b:17:86:d6:1a:24:12:e2:60:85:0a:71: b2:64:82:97:36:78:17:c6:f5:d3:e2:38:37:62:14:f9:e9:7e: 38:4a:53:1c:2c:c5:f7:bc:50:df:8e:2c:25:69:00:13:a0:9f: 44:a5:0f:d0:02:00:cb:cf:60:27:bd:75:4b:e6:ab:b8:22:4f: 0e:de:e4:86:b6:91:0c:d7:df:f5:64:3b:ba:5b:30:0e:b8:19: cb:68:1f:32:62:9b:38:33:64:8a:dd:95:70:e4:c6:44:8d:b4: ab:9d:db:b2:76:69:76:c1:0e:78:34:c9:81:ce:a7:06:ec:5c: 0e:f4:e0:e0:a2:c5:73:e8:a3:96:53:3a:52:7b:07:d5:c2:11: 77:5d:89:86:91:d5:07:6f:bd:32:80:d4:99:97:5c:ca:ed:5b: a2:f7:51:51 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTA4MjIw ODU3MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEwMzM3MUVDMDFDMUZE QUI3NjgwNThCRDkxNjYxNjFBMUVCMDQxMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkcTNzHv24otVt/NlSJvNUXkcqr8oUsREbfm3KCkc0hGChG+s7 n7rkN/rCnWHVQBSLEYhXdsrQ8q1TuIyfJpdwRw+UWviT9fw3maqWimVfsVWGenNM F5znnSgWs6oXNgCAKKq9L/63KGnIK3p7UjP4VrCH8vGSkeoxPn0jWV4mQJ/cJEUE DkESXa/WoB8+Bd9c/zojCDkBsbBmKSwkB+g9ljqMh4WDRTfKUuXu1KMCpSvBIIzu yJxdbo6qiLj5dCpBXQjUeAES3xXcvVqct3kTWVJqnCDa0qPJAZtx5BwAbw3R5oJS +JiFiUHp0t3taCbCVegJuxJg1soK3yOpO4XJAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUEDNx7AHB/at2gFi9kWYWGh6wQS8wHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vRUROeDdBSEJf YXQyZ0ZpOWtXWVdHaDZ3UVM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfq4DANBgkqhkiG9w0BAQsFAAOCAQEAThjt2eg/BJBeikB23mbe9D7d r4PR4jftlLVFDMi2ziG4liD1kp/vuewHoMCpXYcUIfu3t5+8kip4FCrbbuj0KBNt 9hiQSTgWO8N0VruvzNZmyZdVRIhbTny7Cg69N/0LOxeG1hokEuJghQpxsmSClzZ4 F8b10+I4N2IU+el+OEpTHCzF97xQ344sJWkAE6CfRKUP0AIAy89gJ711S+aruCJP Dt7khraRDNff9WQ7ulswDrgZy2gfMmKbODNkit2VcOTGRI20q53bsnZpdsEOeDTJ gc6nBuxcDvTg4KLFc+ijllM6UnsH1cIRd12JhpHVB2+9MoDUmZdcyu1bovdRUQ== -----END CERTIFICATE-----Generated at Sun Aug 24 05:08:26 2025 by rpki-client