$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/IJnVve9QI-ZV0sH7RR21AOtOTYU.roa File: IJnVve9QI-ZV0sH7RR21AOtOTYU.roa (raw, json) Hash identifier: bsPZmXIt0JI4sKspJljenCNpj9afsKdJj76ykssSn70= Subject key identifier: 20:99:D5:BD:EF:50:23:E6:55:D2:C1:FB:45:1D:B5:00:EB:4E:4D:85 Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Certificate serial: 0D5F Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/IJnVve9QI-ZV0sH7RR21AOtOTYU.roa Signing time: Fri 22 Aug 2025 08:56:53 +0000 ROA not before: Fri 22 Aug 2025 08:56:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 139637 IP address blocks: 103.119.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3423 (0xd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Validity Not Before: Aug 22 08:56:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2099D5BDEF5023E655D2C1FB451DB500EB4E4D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:56:28:57:09:dd:32:f3:fc:fc:f6:81:bf: 01:4d:39:e6:c7:df:16:b1:00:38:a2:b6:d4:05:54: d2:7e:c1:71:24:a8:3c:40:a2:ca:45:62:2f:74:6c: c3:1c:54:13:35:1c:6f:42:76:8c:6f:e2:63:85:88: 61:2e:66:80:97:eb:8b:7f:84:fa:9e:d1:67:9f:f9: 30:89:63:29:2b:8c:4c:48:90:71:98:e5:c4:ab:a5: be:81:e0:22:df:4d:7e:fe:9c:0e:00:4e:f6:c0:56: a3:20:08:a7:8f:06:8a:06:ce:e9:21:4a:46:90:b6: 10:86:e2:32:32:f1:d0:2e:87:c7:1b:f4:6e:8b:36: 5e:af:02:ab:61:23:8c:fe:3b:35:3a:9f:f8:0f:8b: 57:6d:2b:ce:8d:80:8f:73:9e:d8:54:fb:db:aa:cd: 11:17:a9:c0:d0:72:da:c4:3f:7c:8d:6f:40:df:33: ef:f4:04:7f:c7:1a:be:29:08:1d:7b:04:91:fa:30: 16:cb:10:d4:1a:be:94:a6:bc:2c:ac:a7:63:bb:e1: da:ec:44:f2:64:dd:83:27:96:10:a0:c3:61:9a:af: c8:85:e6:5a:44:1b:47:70:c2:00:af:ee:9d:d9:d0: 55:a2:12:1f:b2:b5:42:9f:63:12:8a:ec:c9:a4:e8: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:D5:BD:EF:50:23:E6:55:D2:C1:FB:45:1D:B5:00:EB:4E:4D:85 X509v3 Authority Key Identifier: keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/IJnVve9QI-ZV0sH7RR21AOtOTYU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.215.0/24 Signature Algorithm: sha256WithRSAEncryption 04:73:79:06:d2:cc:e2:76:cb:15:0c:79:d9:34:0f:db:69:d0: 4a:3b:4a:7d:9a:b1:31:8d:c6:e2:ee:ce:61:c1:35:b5:9f:8f: b4:a4:f8:93:f3:37:6f:cf:99:ae:12:cf:0c:e0:2a:63:73:89: 50:4c:a5:66:21:f2:0a:f2:45:69:90:07:ac:6d:8b:9b:5a:8a: 0d:a7:ae:e1:11:df:11:b1:42:bb:d3:1b:b6:ff:ee:3f:99:79: 1f:18:cd:5e:4c:ef:7f:69:dd:4d:28:3f:78:3e:1b:a7:22:20: a3:b6:9c:f8:00:69:c7:fd:e7:d2:0c:70:fa:2c:99:b4:7c:01: dd:23:fb:a4:0c:23:42:7e:99:22:5d:a7:e7:d3:5c:3a:a0:cc: d9:1c:f2:7f:fb:51:56:8c:28:5b:c5:9c:e4:13:66:3e:21:d1: 52:af:2e:08:ef:47:dd:99:64:a9:0c:23:b7:f1:8d:e0:8c:64: 71:5f:11:b7:d5:09:20:b0:40:8b:52:5e:6c:77:c1:3b:4a:6d: 85:cf:e4:3c:a1:ac:24:c2:a3:66:07:9e:88:fb:da:5f:70:9b: bc:14:28:53:92:62:d9:e9:87:66:b6:af:cf:98:d0:d9:90:ff: 98:32:b3:81:fb:be:47:f0:bc:52:7c:e6:5d:e1:b9:d9:cd:d8: 3c:f2:f2:5e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yNTA4MjIw ODU2NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwOTlENUJERUY1MDIz RTY1NUQyQzFGQjQ1MURCNTAwRUI0RTREODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnn1YoVwndMvP8/PaBvwFNOebH3xaxADiittQFVNJ+wXEkqDxA ospFYi90bMMcVBM1HG9Cdoxv4mOFiGEuZoCX64t/hPqe0Wef+TCJYykrjExIkHGY 5cSrpb6B4CLfTX7+nA4ATvbAVqMgCKePBooGzukhSkaQthCG4jIy8dAuh8cb9G6L Nl6vAqthI4z+OzU6n/gPi1dtK86NgI9znthU+9uqzREXqcDQctrEP3yNb0DfM+/0 BH/HGr4pCB17BJH6MBbLENQavpSmvCysp2O74drsRPJk3YMnlhCgw2Gar8iF5lpE G0dwwgCv7p3Z0FWiEh+ytUKfYxKK7Mmk6OIJAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUIJnVve9QI+ZV0sH7RR21AOtOTYUwHwYDVR0jBBgwFoAUXNEK1bakd108UE1m EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvSUpuVnZlOVFJLVpWMHNI N1JSMjFBT3RPVFlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd31zANBgkqhkiG9w0BAQsFAAOCAQEABHN5BtLM4nbLFQx52TQP22nQSjtKfZqx MY3G4u7OYcE1tZ+PtKT4k/M3b8+ZrhLPDOAqY3OJUEylZiHyCvJFaZAHrG2Lm1qK Daeu4RHfEbFCu9Mbtv/uP5l5HxjNXkzvf2ndTSg/eD4bpyIgo7ac+ABpx/3n0gxw +iyZtHwB3SP7pAwjQn6ZIl2n59NcOqDM2Rzyf/tRVowoW8Wc5BNmPiHRUq8uCO9H 3ZlkqQwjt/GN4IxkcV8Rt9UJILBAi1JebHfBO0pthc/kPKGsJMKjZgeeiPvaX3Cb vBQoU5Ji2emHZravz5jQ2ZD/mDKzgfu+R/C8UnzmXeG52c3YPPLyXg== -----END CERTIFICATE-----Generated at Sun Aug 24 11:07:17 2025 by rpki-client