$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/ACF2lpukprS6HufKSuGGO9RUTEQ.roa File: ACF2lpukprS6HufKSuGGO9RUTEQ.roa (raw, json) Hash identifier: tb+4k5oZISLz6DiBILELsP6AWEA0ZrCqv9O3E7qhZG4= Subject key identifier: 00:21:76:96:9B:A4:A6:B4:BA:1E:E7:CA:4A:E1:86:3B:D4:54:4C:44 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02E3 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ACF2lpukprS6HufKSuGGO9RUTEQ.roa Signing time: Thu 09 Oct 2025 06:10:14 +0000 ROA not before: Thu 09 Oct 2025 06:10:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.248.48/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Oct 9 06:10:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=002176969BA4A6B4BA1EE7CA4AE1863BD4544C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:36:0b:b3:be:b0:34:22:9b:de:26:3c:71: 00:e8:bd:2f:ab:b3:b2:56:64:c0:15:18:17:38:76: 63:00:c9:10:3b:b4:a3:33:c8:d7:0b:37:1d:2a:d8: 76:e5:9a:6e:af:96:11:1c:d8:5f:cd:1c:a2:ae:d2: a1:50:a8:34:5e:02:47:43:75:62:f7:b9:46:a3:83: 1c:5e:6c:83:d8:7c:2c:a6:d7:d3:f8:e8:f2:7a:44: 24:d1:3c:d4:66:de:97:1d:7f:94:91:38:5d:31:ae: 80:b9:c7:07:f7:c3:46:78:41:c4:59:42:26:5b:f6: 37:df:a6:a3:9e:01:5a:54:d0:46:d4:89:2b:70:51: e7:8d:e4:0e:15:e4:a2:c2:ca:1b:ce:78:f3:f3:df: cc:39:44:db:2c:db:03:bc:0d:78:4a:ab:ab:6c:50: 0a:7b:22:c7:58:08:75:f5:46:fb:f0:72:ca:7a:04: 47:10:81:58:79:2d:87:2e:1c:46:80:1c:01:7f:d6: 78:a7:d3:c7:81:c0:80:45:d8:3e:dd:51:c0:a5:66: 60:7a:b3:fa:91:b1:28:48:7b:32:4b:79:7e:86:5d: f9:6b:39:75:68:3b:24:8a:10:51:75:29:84:ec:2d: 0a:c9:dc:fa:df:f7:70:e5:be:78:fa:84:c4:ad:cb: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:76:96:9B:A4:A6:B4:BA:1E:E7:CA:4A:E1:86:3B:D4:54:4C:44 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/ACF2lpukprS6HufKSuGGO9RUTEQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.48/28 Signature Algorithm: sha256WithRSAEncryption b2:29:d7:85:78:a0:73:d0:bb:ab:74:1f:69:1e:22:0c:51:b4: d7:1e:c5:50:9e:19:e4:1f:9e:af:08:13:6b:f3:63:98:b2:c6: eb:16:0a:39:01:79:1d:01:97:fe:37:75:a4:95:6b:a6:a7:3d: 79:ad:78:be:db:f8:57:a2:98:a5:22:0f:ae:ce:7f:bd:56:28: 0b:e2:99:40:b9:38:10:3d:18:a1:d5:06:67:94:0e:88:9f:da: fd:25:f7:7c:10:44:ec:82:f1:c6:24:68:bc:1f:d3:c5:ae:66: fb:ae:6a:65:fc:53:fd:c8:1a:29:bb:d3:74:0c:4a:98:1b:88: 8a:8e:23:0e:b4:02:e4:75:55:f4:1e:fe:18:12:a5:c4:9a:9d: 6a:b9:21:5b:07:90:58:89:d0:9e:b3:21:83:ff:d7:e5:06:87: 61:f5:5b:d2:a3:83:13:dd:b1:6a:aa:b2:6f:be:da:55:57:7d: da:ae:65:66:f6:e1:cf:2c:9e:69:74:5d:4d:7f:84:db:a9:a5: 0a:41:9c:f0:58:0b:72:d1:3a:2e:bb:67:cb:0a:bb:17:6b:e0: 5f:2f:9d:13:db:dd:4c:96:64:fa:27:4e:e4:6a:65:3e:36:fd: 70:d2:10:22:71:2f:6f:b5:7c:dc:39:7c:dd:be:0a:f6:da:33: 4c:8c:6f:e4 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTEwMDkw NjEwMTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwMjE3Njk2OUJBNEE2 QjRCQTFFRTdDQTRBRTE4NjNCRDQ1NDRDNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDodzYLs76wNCKb3iY8cQDovS+rs7JWZMAVGBc4dmMAyRA7tKMz yNcLNx0q2Hblmm6vlhEc2F/NHKKu0qFQqDReAkdDdWL3uUajgxxebIPYfCym19P4 6PJ6RCTRPNRm3pcdf5SROF0xroC5xwf3w0Z4QcRZQiZb9jffpqOeAVpU0EbUiStw UeeN5A4V5KLCyhvOePPz38w5RNss2wO8DXhKq6tsUAp7IsdYCHX1Rvvwcsp6BEcQ gVh5LYcuHEaAHAF/1nin08eBwIBF2D7dUcClZmB6s/qRsShIezJLeX6GXflrOXVo OySKEFF1KYTsLQrJ3Prf93Dlvnj6hMSty4cBAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUACF2lpukprS6HufKSuGGO9RUTEQwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvQUNGMmxwdWtwclM2SHVmS1N1R0dP OVJVVEVRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBJ0U+DAw DQYJKoZIhvcNAQELBQADggEBALIp14V4oHPQu6t0H2keIgxRtNcexVCeGeQfnq8I E2vzY5iyxusWCjkBeR0Bl/43daSVa6anPXmteL7b+FeimKUiD67Of71WKAvimUC5 OBA9GKHVBmeUDoif2v0l93wQROyC8cYkaLwf08WuZvuuamX8U/3IGim703QMSpgb iIqOIw60AuR1VfQe/hgSpcSanWq5IVsHkFiJ0J6zIYP/1+UGh2H1W9KjgxPdsWqq sm++2lVXfdquZWb24c8snml0XU1/hNuppQpBnPBYC3LROi67Z8sKuxdr4F8vnRPb 3UyWZPonTuRqZT42/XDSECJxL2+1fNw5fN2+CvbaM0yMb+Q= -----END CERTIFICATE-----Generated at Tue Oct 21 01:21:52 2025 by rpki-client