$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/2AvKpmWvUowNHkD0zexsVuZZbbw.roa File: 2AvKpmWvUowNHkD0zexsVuZZbbw.roa (raw, json) Hash identifier: rkbtWRngXyIVCJm/bSOWnT4RtV+vByf+sbxvk0dt3+I= Subject key identifier: D8:0B:CA:A6:65:AF:52:8C:0D:1E:40:F4:CD:EC:6C:56:E6:59:6D:BC Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02ED Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/2AvKpmWvUowNHkD0zexsVuZZbbw.roa Signing time: Thu 09 Oct 2025 06:11:11 +0000 ROA not before: Thu 09 Oct 2025 06:11:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.248.28/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Oct 9 06:11:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D80BCAA665AF528C0D1E40F4CDEC6C56E6596DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:06:3a:d6:a3:ac:62:13:a0:90:20:f9:6d: 17:84:5e:a4:5a:5d:98:bd:19:0e:33:52:8f:e5:36: b3:4c:80:db:45:3f:60:0a:ae:9c:32:77:db:b0:0c: 53:f4:3f:2d:32:71:26:5e:20:11:92:65:b6:f6:cf: 0d:93:9a:2e:12:f0:8e:cb:af:c0:12:64:b1:64:77: 17:c3:e5:f0:30:f6:73:8f:36:79:d8:9f:d5:2e:82: 78:1e:ec:71:b0:41:49:d4:6c:a1:db:57:f1:7d:66: 6b:21:5d:10:33:0e:17:d6:c3:34:a0:8c:41:36:c7: 72:0e:f8:5f:26:df:10:79:9b:a8:48:79:8d:ed:1a: 6c:ec:fd:58:bd:c1:d2:7e:58:c6:4b:cd:24:e7:22: bf:24:a4:72:08:06:c3:6b:c3:0a:49:97:ac:a0:01: f0:2f:29:c3:37:a0:11:c1:45:b3:a1:c4:c0:3b:e4: 8b:2a:fe:47:6b:71:8c:19:0b:78:29:1e:95:ac:eb: f3:ed:0b:f4:78:4b:5c:e3:22:53:6f:17:ca:df:15: 90:f7:c3:b3:89:c8:f7:78:6e:17:13:dd:83:c0:c0: 48:8e:dd:d5:d1:55:6c:49:c1:fe:cd:ad:5a:07:29: 81:d4:a5:49:c8:97:3e:f2:ce:cb:a2:26:9c:39:29: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0B:CA:A6:65:AF:52:8C:0D:1E:40:F4:CD:EC:6C:56:E6:59:6D:BC X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/2AvKpmWvUowNHkD0zexsVuZZbbw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.28/30 Signature Algorithm: sha256WithRSAEncryption 9f:aa:31:9f:c8:bf:2f:31:f9:cf:1a:7f:4b:b4:c7:66:bf:9d: 7b:9a:4d:5a:6f:3c:c0:8e:0d:54:90:8b:f5:f1:3b:a1:ac:a0: c3:ca:64:38:19:ea:7d:ed:78:a6:72:73:e6:5d:da:17:b1:e8: 53:9c:7a:4f:f0:ee:13:2c:f9:1a:6c:a3:c5:6a:63:4a:f7:3d: 95:0e:b0:45:2d:4e:62:79:a3:d9:ce:56:d4:42:da:3e:63:ab: 3d:d7:0b:ba:d6:2f:55:1e:1e:2f:b7:23:88:30:31:4e:16:6b: 96:16:e7:33:62:9f:d8:66:a8:59:88:a3:7a:43:d9:3a:a5:1b: 38:09:b8:da:a6:75:a9:39:27:a5:9e:2f:b8:77:39:ab:39:2d: b6:cf:ac:43:e3:42:68:4c:b3:5e:b4:97:6e:fe:09:43:51:0a: d4:91:3d:bf:8e:12:74:3a:a6:95:49:82:61:7e:45:0e:68:11: 3e:a3:3d:f0:a2:2a:0e:ec:a3:2a:ee:08:6c:87:7a:2b:10:25: 6b:d2:9c:e0:91:59:72:1e:70:0a:92:0c:66:57:9d:ff:85:d9: 7e:84:2f:af:4d:c5:ad:f0:bb:0b:c5:aa:8d:70:66:84:14:29: 4f:64:0b:97:40:da:48:ca:2a:50:b1:65:61:5b:42:dc:4c:7b: 79:df:ac:d8 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTEwMDkw NjExMTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ4MEJDQUE2NjVBRjUy OEMwRDFFNDBGNENERUM2QzU2RTY1OTZEQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBrAY61qOsYhOgkCD5bReEXqRaXZi9GQ4zUo/lNrNMgNtFP2AK rpwyd9uwDFP0Py0ycSZeIBGSZbb2zw2Tmi4S8I7Lr8ASZLFkdxfD5fAw9nOPNnnY n9Uugnge7HGwQUnUbKHbV/F9ZmshXRAzDhfWwzSgjEE2x3IO+F8m3xB5m6hIeY3t Gmzs/Vi9wdJ+WMZLzSTnIr8kpHIIBsNrwwpJl6ygAfAvKcM3oBHBRbOhxMA75Isq /kdrcYwZC3gpHpWs6/PtC/R4S1zjIlNvF8rfFZD3w7OJyPd4bhcT3YPAwEiO3dXR VWxJwf7NrVoHKYHUpUnIlz7yzsuiJpw5KQ11AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU2AvKpmWvUowNHkD0zexsVuZZbbwwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvMkF2S3BtV3ZVb3dOSGtEMHpleHNW dVpaYmJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+Bww DQYJKoZIhvcNAQELBQADggEBAJ+qMZ/Ivy8x+c8af0u0x2a/nXuaTVpvPMCODVSQ i/XxO6GsoMPKZDgZ6n3teKZyc+Zd2hex6FOcek/w7hMs+Rpso8VqY0r3PZUOsEUt TmJ5o9nOVtRC2j5jqz3XC7rWL1UeHi+3I4gwMU4Wa5YW5zNin9hmqFmIo3pD2Tql GzgJuNqmdak5J6WeL7h3Oas5LbbPrEPjQmhMs160l27+CUNRCtSRPb+OEnQ6ppVJ gmF+RQ5oET6jPfCiKg7soyruCGyHeisQJWvSnOCRWXIecAqSDGZXnf+F2X6EL69N xa3wuwvFqo1wZoQUKU9kC5dA2kjKKlCxZWFbQtxMe3nfrNg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:13:50 2025 by rpki-client