$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CROWN/UZoCbnjLoO4BaHSQrR36SjBhSj8.roa File: UZoCbnjLoO4BaHSQrR36SjBhSj8.roa (raw, json) Hash identifier: Hyjn0OpDnYxY1GnrSqONjxYyOeA06xVT1xeOStgakio= Subject key identifier: 51:9A:02:6E:78:CB:A0:EE:01:68:74:90:AD:1D:FA:4A:30:61:4A:3F Certificate issuer: /CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9 Certificate serial: 0269 Authority key identifier: 4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/UZoCbnjLoO4BaHSQrR36SjBhSj8.roa Signing time: Fri 22 Aug 2025 09:01:53 +0000 ROA not before: Fri 22 Aug 2025 09:01:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 103.255.210.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9 Validity Not Before: Aug 22 09:01:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=519A026E78CBA0EE01687490AD1DFA4A30614A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:ab:2b:0f:ba:42:b9:fb:e1:1e:d8:b4:5e: 8a:94:66:ad:93:c7:db:9f:7e:e7:c2:3f:8f:9f:47: 15:ae:37:c9:a5:a4:1f:be:ff:33:58:2b:8c:b9:9b: d7:a1:fa:aa:f3:13:49:a0:5e:f4:ea:9c:63:3b:a1: ab:11:8a:2b:af:57:c6:6b:5a:fc:95:7e:09:a2:c2: 40:ea:3f:32:ce:30:7b:cd:b4:f1:f6:d3:35:d5:a6: 59:44:5c:1f:7a:b3:2b:fa:d6:bd:7a:18:cb:7a:b4: df:0c:91:4b:cf:e4:81:ee:0e:aa:a1:90:18:b9:11: 9d:ac:fe:1e:86:ef:bc:8f:89:44:d9:bc:9d:d9:66: 19:fc:91:e9:79:33:ee:78:94:ad:73:f1:40:0f:35: ae:a1:1f:ac:6b:6e:26:a0:dd:2b:b7:d8:e1:14:ce: 62:0e:b6:1e:bb:46:03:96:a5:20:b6:a7:73:87:a0: d5:66:8d:88:db:c1:5b:fa:7e:0c:4e:ca:ef:74:6f: 87:ac:cf:01:dc:ae:d2:d5:90:14:ef:f4:96:77:c5: e6:7d:eb:0a:3d:be:9b:6c:28:2e:9c:c3:a0:0c:d1: 92:9f:1f:40:be:3d:e8:2e:13:57:80:29:21:d9:e1: 1a:4e:d2:c5:e6:2d:e0:77:24:4c:19:67:f5:bc:7f: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9A:02:6E:78:CB:A0:EE:01:68:74:90:AD:1D:FA:4A:30:61:4A:3F X509v3 Authority Key Identifier: keyid:4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/UZoCbnjLoO4BaHSQrR36SjBhSj8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.255.210.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:3f:22:ac:2a:25:0e:5e:3d:70:90:24:ac:2d:08:7a:d8:e9: a5:99:58:6e:64:ea:76:6d:1a:3a:ed:69:ba:a2:66:02:b5:be: 3d:41:44:84:95:e2:9c:bb:fa:f3:83:4c:96:a5:41:1c:8c:2c: f5:90:e6:46:e6:d2:a7:27:7d:60:60:5e:a1:57:b6:8a:09:ec: 51:13:26:2f:58:9e:ec:50:c6:1b:6b:06:00:d5:ad:6d:0b:66: e3:ad:81:b1:f9:02:c7:c7:a2:6e:27:b8:a2:4e:ad:09:8c:02: 8f:0b:1c:fc:9b:fb:13:f6:9d:1f:d3:86:00:0e:d3:0d:79:ab: bb:d4:b5:cf:98:ac:b4:be:b8:d6:78:90:36:b3:19:87:b3:dc: a5:2f:61:8b:7d:f6:db:e2:07:21:a3:f0:09:36:ef:87:7e:0d: 94:a5:7e:4f:1f:ac:e5:b7:74:b5:7f:38:23:38:f0:2f:c2:7e: 3d:87:f3:ae:b6:1e:b1:78:2b:cc:dd:43:9b:f7:65:f7:3d:11: f0:2c:31:8a:85:55:7f:f4:13:5a:93:39:ae:64:e4:c3:28:5c: 68:00:98:b8:91:ef:1b:f4:2d:30:17:85:26:f1:7f:42:81:56: 16:de:b4:76:25:b9:dd:75:fd:ee:b4:ec:38:0e:a3:88:ea:cd: 74:c3:38:96 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEE3 QjVGRkY5N0I4OUM4N0JEQkZENDYxNjRFRTkyNEE4N0Q2OTZFOTAeFw0yNTA4MjIw OTAxNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUxOUEwMjZFNzhDQkEw RUUwMTY4NzQ5MEFEMURGQTRBMzA2MTRBM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtRKsrD7pCufvhHti0XoqUZq2Tx9uffufCP4+fRxWuN8mlpB++ /zNYK4y5m9eh+qrzE0mgXvTqnGM7oasRiiuvV8ZrWvyVfgmiwkDqPzLOMHvNtPH2 0zXVpllEXB96syv61r16GMt6tN8MkUvP5IHuDqqhkBi5EZ2s/h6G77yPiUTZvJ3Z Zhn8kel5M+54lK1z8UAPNa6hH6xrbiag3Su32OEUzmIOth67RgOWpSC2p3OHoNVm jYjbwVv6fgxOyu90b4eszwHcrtLVkBTv9JZ3xeZ96wo9vptsKC6cw6AM0ZKfH0C+ PeguE1eAKSHZ4RpO0sXmLeB3JEwZZ/W8f0oFAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUUZoCbnjLoO4BaHSQrR36SjBhSj8wHwYDVR0jBBgwFoAUSntf/5e4nIe9v9Rh ZO6SSofWlukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1JPV04v U250Zl81ZTRuSWU5djlSaFpPNlNTb2ZXbHVrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TbnRmXzVlNG5JZTl2OVJoWk82U1NvZldsdWsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUk9XTi9VWm9DYm5qTG9PNEJhSFNRclIz NlNqQmhTajgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ//S MA0GCSqGSIb3DQEBCwUAA4IBAQBbPyKsKiUOXj1wkCSsLQh62OmlmVhuZOp2bRo6 7Wm6omYCtb49QUSEleKcu/rzg0yWpUEcjCz1kOZG5tKnJ31gYF6hV7aKCexREyYv WJ7sUMYbawYA1a1tC2bjrYGx+QLHx6JuJ7iiTq0JjAKPCxz8m/sT9p0f04YADtMN eau71LXPmKy0vrjWeJA2sxmHs9ylL2GLffbb4gcho/AJNu+Hfg2UpX5PH6zlt3S1 fzgjOPAvwn49h/Outh6xeCvM3UOb92X3PRHwLDGKhVV/9BNakzmuZOTDKFxoAJi4 ke8b9C0wF4Um8X9CgVYW3rR2Jbnddf3utOw4DqOI6s10wziW -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:58 2025 by rpki-client