$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CWTW/RuQSuPaBx2Qj4g5VCNpK0YMo-p4.roa File: RuQSuPaBx2Qj4g5VCNpK0YMo-p4.roa (raw, json) Hash identifier: OGPMaChvWwgGYIgj/poHabwtA4/TTNMJoVr72CEXsIA= Subject key identifier: 46:E4:12:B8:F6:81:C7:64:23:E2:0E:55:08:DA:4A:D1:83:28:FA:9E Certificate issuer: /CN=996D67023ED27754ACB1B568433D4376C88200F5 Certificate serial: 04BC Authority key identifier: 99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/RuQSuPaBx2Qj4g5VCNpK0YMo-p4.roa Signing time: Fri 22 Aug 2025 08:56:51 +0000 ROA not before: Fri 22 Aug 2025 08:56:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131646 IP address blocks: 103.161.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996D67023ED27754ACB1B568433D4376C88200F5 Validity Not Before: Aug 22 08:56:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=46E412B8F681C76423E20E5508DA4AD18328FA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:99:ac:96:63:80:a2:2f:04:96:ab:bb:f7: 42:57:87:b8:a6:a8:10:4e:f2:7c:ba:52:25:cc:eb: ab:80:e7:4b:36:84:8b:96:de:45:7b:8d:9c:2b:04: b0:0a:94:41:a0:0e:a6:ba:ff:f4:f8:58:4f:e2:79: 83:1d:78:6e:96:00:56:7d:a3:fc:bc:b7:d8:1d:d1: 4d:5a:b1:f4:37:12:1f:6f:45:47:e1:50:29:a8:a4: f9:86:8d:b9:c9:75:f2:19:cf:2e:d4:55:94:01:72: 03:0d:16:15:de:e4:0d:1d:d4:da:93:08:d0:43:23: 86:a9:d9:29:fa:81:4c:6c:16:18:18:1e:40:d2:37: 18:8a:9a:27:50:c3:75:de:40:b5:c5:62:0e:31:a2: 0b:3a:09:51:2b:b3:bc:5e:32:b5:67:5d:2d:b1:60: b0:39:7d:f6:98:b8:12:06:92:67:51:d9:80:c4:41: 6b:90:e1:60:9a:c3:b4:50:ef:21:7a:3d:ce:17:e8: de:24:64:31:2e:3b:a3:b2:36:29:52:15:d8:33:6f: ed:4a:af:bb:ca:3a:ab:47:5a:db:98:15:74:0f:53: 88:d7:6b:9a:ee:0c:3e:5f:8f:8a:5e:f8:d0:d7:54: ff:34:cd:34:a8:18:3f:19:da:09:45:0c:a4:7c:86: 26:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E4:12:B8:F6:81:C7:64:23:E2:0E:55:08:DA:4A:D1:83:28:FA:9E X509v3 Authority Key Identifier: keyid:99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/RuQSuPaBx2Qj4g5VCNpK0YMo-p4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.161.78.0/23 Signature Algorithm: sha256WithRSAEncryption b2:b0:7b:c6:9f:13:9e:94:a3:12:d2:93:fc:0e:fb:3d:c2:a6: 79:86:33:c6:d6:bb:83:6b:aa:a4:25:be:58:30:37:e8:0f:4f: 11:5e:5b:fa:07:95:cb:d9:ae:62:db:27:37:47:b4:c8:0e:63: 2e:0f:87:05:7b:f8:cc:21:45:01:e2:1f:86:58:9f:b5:0c:cf: 51:de:e4:b6:93:e9:0a:74:c4:a9:c3:89:8f:25:ca:3e:ed:65: 89:b0:7b:41:94:e7:d5:7c:2d:59:32:c7:6a:c9:7f:99:b7:45: 3c:d9:be:44:cc:f1:92:79:7b:ce:07:ef:f2:29:9a:af:76:c7: 83:2e:12:6a:de:50:63:a6:27:8c:f5:1f:86:20:21:77:e2:76: ce:93:f9:37:24:1b:0f:04:6c:e4:05:11:50:d6:aa:84:51:5b: 62:44:87:36:59:28:d2:b2:e5:45:10:0b:69:ed:0e:b6:43:ee: 68:d2:21:00:7f:33:5f:61:dd:fd:e7:ea:ff:b0:05:f7:e5:47: 31:c0:36:78:14:c3:0a:57:e8:53:d6:38:9b:cb:a5:c8:63:b9: 51:5c:9d:a9:e3:fe:7c:e0:48:44:33:6d:e4:de:6b:d0:42:18: 2d:ec:06:ce:1c:f0:72:12:94:20:6e:43:b5:73:ed:75:41:d0: 53:5a:f6:4e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk2 RDY3MDIzRUQyNzc1NEFDQjFCNTY4NDMzRDQzNzZDODgyMDBGNTAeFw0yNTA4MjIw ODU2NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ2RTQxMkI4RjY4MUM3 NjQyM0UyMEU1NTA4REE0QUQxODMyOEZBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3BJmslmOAoi8Elqu790JXh7imqBBO8ny6UiXM66uA50s2hIuW 3kV7jZwrBLAKlEGgDqa6//T4WE/ieYMdeG6WAFZ9o/y8t9gd0U1asfQ3Eh9vRUfh UCmopPmGjbnJdfIZzy7UVZQBcgMNFhXe5A0d1NqTCNBDI4ap2Sn6gUxsFhgYHkDS NxiKmidQw3XeQLXFYg4xogs6CVErs7xeMrVnXS2xYLA5ffaYuBIGkmdR2YDEQWuQ 4WCaw7RQ7yF6Pc4X6N4kZDEuO6OyNilSFdgzb+1Kr7vKOqtHWtuYFXQPU4jXa5ru DD5fj4pe+NDXVP80zTSoGD8Z2glFDKR8hiYRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQURuQSuPaBx2Qj4g5VCNpK0YMo+p4wHwYDVR0jBBgwFoAUmW1nAj7Sd1SssbVo Qz1DdsiCAPUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1dUVy9t VzFuQWo3U2QxU3NzYlZvUXoxRGRzaUNBUFUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L21XMW5BajdTZDFTc3NiVm9RejFEZHNpQ0FQVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0NXVFcvUnVRU3VQYUJ4MlFqNGc1VkNOcEsw WU1vLXA0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWehTjAN BgkqhkiG9w0BAQsFAAOCAQEAsrB7xp8TnpSjEtKT/A77PcKmeYYzxta7g2uqpCW+ WDA36A9PEV5b+geVy9muYtsnN0e0yA5jLg+HBXv4zCFFAeIfhliftQzPUd7ktpPp CnTEqcOJjyXKPu1libB7QZTn1XwtWTLHasl/mbdFPNm+RMzxknl7zgfv8imar3bH gy4Sat5QY6YnjPUfhiAhd+J2zpP5NyQbDwRs5AURUNaqhFFbYkSHNlko0rLlRRAL ae0OtkPuaNIhAH8zX2Hd/efq/7AF9+VHMcA2eBTDClfoU9Y4m8ulyGO5UVydqeP+ fOBIRDNt5N5r0EIYLewGzhzwchKUIG5DtXPtdUHQU1r2Tg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:19:50 2025 by rpki-client