$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/EP1QC5jGh_8B5J5ZPc88D6MHONw.roa File: EP1QC5jGh_8B5J5ZPc88D6MHONw.roa (raw, json) Hash identifier: gycNu8u0JwFGQFGQi72xHqYyfqeqMBD1/XcZrSTFbNI= Subject key identifier: 10:FD:50:0B:98:C6:87:FF:01:E4:9E:59:3D:CF:3C:0F:A3:07:38:DC Certificate issuer: /CN=9E454EA69C0249FFAB072242AEDD882821269838 Certificate serial: 021B Authority key identifier: 9E:45:4E:A6:9C:02:49:FF:AB:07:22:42:AE:DD:88:28:21:26:98:38 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nkVOppwCSf-rByJCrt2IKCEmmDg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/EP1QC5jGh_8B5J5ZPc88D6MHONw.roa Signing time: Fri 22 Aug 2025 09:01:03 +0000 ROA not before: Fri 22 Aug 2025 09:01:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150756 IP address blocks: 203.99.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/nkVOppwCSf-rByJCrt2IKCEmmDg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/nkVOppwCSf-rByJCrt2IKCEmmDg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/nkVOppwCSf-rByJCrt2IKCEmmDg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E454EA69C0249FFAB072242AEDD882821269838 Validity Not Before: Aug 22 09:01:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=10FD500B98C687FF01E49E593DCF3C0FA30738DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:33:79:58:cf:81:7d:58:c9:96:33:e7:74: a0:ea:25:1f:fc:23:00:49:0e:e1:be:f9:c6:41:2c: b1:af:c9:1f:8f:7b:35:d3:39:68:bb:57:b4:64:fc: 97:6e:94:1b:09:cf:00:98:4e:e1:5d:ec:11:71:b3: 09:2d:11:5e:0a:5c:aa:c3:3d:e0:10:f1:3e:ad:dd: 28:3d:07:0d:40:0f:86:e3:22:f3:cd:2d:99:58:f8: ca:51:bd:9c:11:3d:2e:71:14:07:7b:31:54:65:30: 53:c9:be:7c:ee:fc:71:71:03:a6:64:1d:6b:2d:12: d0:de:3a:f1:38:4b:ff:33:70:2c:c0:84:a3:8e:b2: 4d:12:03:e9:ae:57:de:4a:03:f2:9f:6f:41:fe:5d: 40:d9:6d:95:54:51:9f:d2:f2:4b:64:91:c1:cd:71: b2:2f:2c:15:2f:a8:cd:52:a1:9f:38:7a:64:6c:b4: 7a:fe:75:74:e2:89:ca:54:62:ef:bd:45:b9:45:06: 8b:67:40:c4:18:a0:bd:05:ad:02:86:94:3e:39:f6: 2e:12:18:d8:d2:88:6d:c1:77:67:6b:be:86:a2:aa: ea:1b:8b:e5:25:e8:38:a7:ea:72:82:70:ef:8a:82: 09:b9:39:92:b4:b6:2f:de:75:20:b3:67:6e:02:94: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:50:0B:98:C6:87:FF:01:E4:9E:59:3D:CF:3C:0F:A3:07:38:DC X509v3 Authority Key Identifier: keyid:9E:45:4E:A6:9C:02:49:FF:AB:07:22:42:AE:DD:88:28:21:26:98:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/nkVOppwCSf-rByJCrt2IKCEmmDg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nkVOppwCSf-rByJCrt2IKCEmmDg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FLOPPY/EP1QC5jGh_8B5J5ZPc88D6MHONw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.99.146.0/23 Signature Algorithm: sha256WithRSAEncryption bb:c1:64:99:43:74:b0:4c:2b:e3:6f:dd:cc:d7:a4:68:a0:4d: 14:f4:f6:a0:78:2f:cb:bc:ad:f7:f1:d9:c6:8e:e1:73:52:da: e6:8e:ad:d0:ac:62:ec:33:63:83:98:1f:26:50:39:3b:0a:3e: c5:45:28:31:43:b2:a8:11:e2:31:2a:d6:21:fa:f5:1d:98:5c: c4:6a:ef:52:b1:03:cf:a3:26:11:6b:09:7c:cf:43:68:14:cf: 46:b6:45:67:4f:b9:af:5f:f0:ce:46:ea:56:05:b7:ea:ef:b3: c1:6c:ea:ff:45:1f:6e:a2:ed:f0:1d:af:b8:1d:fd:7a:5e:8f: 0f:bf:d0:06:94:49:98:bc:52:22:6d:65:f5:65:aa:5a:e2:b3: 7c:48:82:da:f7:fb:26:8d:1c:91:f0:02:f7:2c:c6:e8:16:1d: d4:13:aa:18:10:fb:47:b1:c7:69:79:ac:c9:ff:da:09:ad:1d: 43:3b:eb:1e:66:26:d9:e9:6e:28:1c:25:83:39:1d:74:a7:25: 1b:a7:1c:50:00:09:18:36:4d:a5:9b:bd:14:68:ac:29:62:ae: bc:6f:2f:04:88:25:6c:fe:30:1f:9e:6f:93:cd:9e:99:fc:3e: ae:e7:7d:dd:83:bb:0e:ca:44:c6:28:7a:17:9f:80:ce:ca:c4: 0b:b1:95:8a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUU0 NTRFQTY5QzAyNDlGRkFCMDcyMjQyQUVERDg4MjgyMTI2OTgzODAeFw0yNTA4MjIw OTAxMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEwRkQ1MDBCOThDNjg3 RkYwMUU0OUU1OTNEQ0YzQzBGQTMwNzM4REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz4DN5WM+BfVjJljPndKDqJR/8IwBJDuG++cZBLLGvyR+PezXT OWi7V7Rk/JdulBsJzwCYTuFd7BFxswktEV4KXKrDPeAQ8T6t3Sg9Bw1AD4bjIvPN LZlY+MpRvZwRPS5xFAd7MVRlMFPJvnzu/HFxA6ZkHWstEtDeOvE4S/8zcCzAhKOO sk0SA+muV95KA/Kfb0H+XUDZbZVUUZ/S8ktkkcHNcbIvLBUvqM1SoZ84emRstHr+ dXTiicpUYu+9RblFBotnQMQYoL0FrQKGlD459i4SGNjSiG3Bd2drvoaiquobi+Ul 6Din6nKCcO+Kggm5OZK0ti/edSCzZ24ClPn1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEP1QC5jGh/8B5J5ZPc88D6MHONwwHwYDVR0jBBgwFoAUnkVOppwCSf+rByJC rt2IKCEmmDgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkxPUFBZ L25rVk9wcHdDU2YtckJ5SkNydDJJS0NFbW1EZy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbmtWT3Bwd0NTZi1yQnlKQ3J0MklLQ0VtbURnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkxPUFBZL0VQMVFDNWpHaF84QjVKNVpQ Yzg4RDZNSE9Ody5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHL Y5IwDQYJKoZIhvcNAQELBQADggEBALvBZJlDdLBMK+Nv3czXpGigTRT09qB4L8u8 rffx2caO4XNS2uaOrdCsYuwzY4OYHyZQOTsKPsVFKDFDsqgR4jEq1iH69R2YXMRq 71KxA8+jJhFrCXzPQ2gUz0a2RWdPua9f8M5G6lYFt+rvs8Fs6v9FH26i7fAdr7gd /Xpejw+/0AaUSZi8UiJtZfVlqlris3xIgtr3+yaNHJHwAvcsxugWHdQTqhgQ+0ex x2l5rMn/2gmtHUM76x5mJtnpbigcJYM5HXSnJRunHFAACRg2TaWbvRRorClirrxv LwSIJWz+MB+eb5PNnpn8Pq7nfd2Duw7KRMYoehefgM7KxAuxlYo= -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:53 2025 by rpki-client