$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/0XJAlX0Ahec0LThLoeXtzx8M9yo.roa File: 0XJAlX0Ahec0LThLoeXtzx8M9yo.roa (raw, json) Hash identifier: LOZe9MUHIdwrpX+pYOeFQSUU/vxOy9gO6YM2ldrEevs= Subject key identifier: D1:72:40:95:7D:00:85:E7:34:2D:38:4B:A1:E5:ED:CF:1F:0C:F7:2A Certificate issuer: /CN=93D96B0699BEBA157D50548029BC117929AD20E7 Certificate serial: 02B9 Authority key identifier: 93:D9:6B:06:99:BE:BA:15:7D:50:54:80:29:BC:11:79:29:AD:20:E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/k9lrBpm-uhV9UFSAKbwReSmtIOc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/0XJAlX0Ahec0LThLoeXtzx8M9yo.roa Signing time: Fri 22 Aug 2025 08:58:01 +0000 ROA not before: Fri 22 Aug 2025 08:58:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131149 IP address blocks: 103.118.148.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/k9lrBpm-uhV9UFSAKbwReSmtIOc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D96B0699BEBA157D50548029BC117929AD20E7 Validity Not Before: Aug 22 08:58:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D17240957D0085E7342D384BA1E5EDCF1F0CF72A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:d2:3d:42:cd:bc:eb:66:6e:e7:58:cd:a4: f5:64:fb:6a:59:e1:31:35:f9:8c:49:d6:58:c0:5d: c4:71:0a:bf:5b:b2:b3:5d:2f:d4:1b:6a:dd:9c:43: 9c:35:15:df:16:2c:44:34:6d:40:3a:13:c3:9e:8a: 36:97:6a:8d:37:e8:39:d3:92:df:81:b3:36:9b:6d: 23:38:97:ff:0a:53:34:38:98:c9:a7:3c:4c:e2:da: 33:03:9c:d4:e3:aa:a1:50:4e:5c:75:31:92:b1:27: fe:96:24:33:47:fd:cb:30:53:fc:a6:73:9c:4a:54: 64:2a:2d:ac:de:71:6c:15:b2:0b:8e:67:bd:9a:48: ff:d7:f1:29:9a:dc:c8:99:06:6f:68:f2:a9:37:da: 21:93:67:57:df:08:b3:ac:ea:16:b0:6d:51:2c:f3: 95:17:50:1a:ed:fe:18:02:6d:73:65:0a:f9:44:e8: f5:3f:da:67:6f:0f:67:ac:52:ac:d7:49:38:77:b1: db:6c:7e:02:9e:34:00:db:d3:90:29:25:ac:78:2c: a6:4b:96:29:23:39:df:7f:22:9d:b4:dc:2f:d9:ea: 4a:47:e5:58:bc:02:7d:1b:e6:2d:2a:e6:1c:0e:2d: 3f:57:ef:cd:c8:ac:d2:27:87:bd:95:4f:17:45:8c: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:72:40:95:7D:00:85:E7:34:2D:38:4B:A1:E5:ED:CF:1F:0C:F7:2A X509v3 Authority Key Identifier: keyid:93:D9:6B:06:99:BE:BA:15:7D:50:54:80:29:BC:11:79:29:AD:20:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/k9lrBpm-uhV9UFSAKbwReSmtIOc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/k9lrBpm-uhV9UFSAKbwReSmtIOc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOWNWIN/0XJAlX0Ahec0LThLoeXtzx8M9yo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.148.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:c2:50:a8:c1:7c:eb:60:7b:1a:9c:e4:97:55:40:a7:31:c3: b8:b1:7d:23:a2:cc:24:fd:cf:45:96:04:52:dd:e6:f8:7e:25: 94:ad:0b:eb:2e:20:ec:60:0d:21:8d:f9:b6:3a:fd:e4:dd:f2: 58:7c:63:84:8e:40:6f:c5:b1:18:7c:56:16:fc:5a:49:ea:51: 66:9b:55:7e:ea:38:ef:b6:5a:32:91:5d:3c:91:04:d4:22:69: 84:bc:c2:c9:e4:9b:53:9c:89:80:5a:f3:97:b5:46:8b:48:12: 09:00:b6:99:51:0f:92:84:2a:f5:39:cb:48:37:46:e0:bb:c1: cf:58:92:c9:be:61:5d:76:74:e2:6c:d6:46:fb:53:7a:0c:9b: 77:2f:3f:04:6a:20:3e:f3:5c:84:16:fa:8d:18:b6:fa:06:15: 73:b6:94:21:de:d8:3b:18:78:54:af:1f:13:77:a6:bb:d3:0a: 71:66:64:e0:68:19:8b:2c:ea:a2:f4:d5:16:c6:5d:e2:c1:11: dd:bf:55:21:3a:3b:06:cd:8d:9a:f9:32:b3:33:52:cf:ab:a1: 62:ea:7d:2a:a2:62:63:2b:38:8c:c0:6c:70:74:23:36:f0:9e: 15:91:6c:3f:fa:9b:b5:d2:c5:48:c2:8b:e4:41:61:76:5e:10: 3c:5a:9f:0d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTNE OTZCMDY5OUJFQkExNTdENTA1NDgwMjlCQzExNzkyOUFEMjBFNzAeFw0yNTA4MjIw ODU4MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxNzI0MDk1N0QwMDg1 RTczNDJEMzg0QkExRTVFRENGMUYwQ0Y3MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDewNI9Qs2862Zu51jNpPVk+2pZ4TE1+YxJ1ljAXcRxCr9bsrNd L9Qbat2cQ5w1Fd8WLEQ0bUA6E8OeijaXao036DnTkt+BszabbSM4l/8KUzQ4mMmn PEzi2jMDnNTjqqFQTlx1MZKxJ/6WJDNH/cswU/ymc5xKVGQqLazecWwVsguOZ72a SP/X8Sma3MiZBm9o8qk32iGTZ1ffCLOs6hawbVEs85UXUBrt/hgCbXNlCvlE6PU/ 2mdvD2esUqzXSTh3sdtsfgKeNADb05ApJax4LKZLlikjOd9/Ip203C/Z6kpH5Vi8 An0b5i0q5hwOLT9X783IrNInh72VTxdFjFzxAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU0XJAlX0Ahec0LThLoeXtzx8M9yowHwYDVR0jBBgwFoAUk9lrBpm+uhV9UFSA KbwReSmtIOcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9XTldJ Ti9rOWxyQnBtLXVoVjlVRlNBS2J3UmVTbXRJT2MuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2s5bHJCcG0tdWhWOVVGU0FLYndSZVNtdElPYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RPV05XSU4vMFhKQWxYMEFoZWMwTFRo TG9lWHR6eDhNOXlvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWd2lDANBgkqhkiG9w0BAQsFAAOCAQEAbcJQqMF862B7Gpzkl1VApzHDuLF9I6LM JP3PRZYEUt3m+H4llK0L6y4g7GANIY35tjr95N3yWHxjhI5Ab8WxGHxWFvxaSepR ZptVfuo477ZaMpFdPJEE1CJphLzCyeSbU5yJgFrzl7VGi0gSCQC2mVEPkoQq9TnL SDdG4LvBz1iSyb5hXXZ04mzWRvtTegybdy8/BGogPvNchBb6jRi2+gYVc7aUId7Y Oxh4VK8fE3emu9MKcWZk4GgZiyzqovTVFsZd4sER3b9VITo7Bs2NmvkyszNSz6uh Yup9KqJiYys4jMBscHQjNvCeFZFsP/qbtdLFSMKL5EFhdl4QPFqfDQ== -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:25 2025 by rpki-client