$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/CwUtEVM1TNiCig5YarJZ3ZATpt4.roa File: CwUtEVM1TNiCig5YarJZ3ZATpt4.roa (raw, json) Hash identifier: 4FKnu/dRAQH09cc4QLt7NQzyg9yO2k0ADyWksvzhX34= Subject key identifier: 0B:05:2D:11:53:35:4C:D8:82:8A:0E:58:6A:B2:59:DD:90:13:A6:DE Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02A9 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/CwUtEVM1TNiCig5YarJZ3ZATpt4.roa Signing time: Fri 22 Aug 2025 09:01:17 +0000 ROA not before: Fri 22 Aug 2025 09:01:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Aug 22 09:01:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0B052D1153354CD8828A0E586AB259DD9013A6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:b2:e3:e4:6e:55:f1:35:0b:2a:6c:c4:bf: 6b:bb:7a:1e:2e:02:fa:55:dc:46:3b:73:0b:50:c1: 4d:87:c8:4a:3c:29:49:8a:98:e5:c0:74:3c:e9:c8: 60:86:dd:26:61:63:8f:0c:f3:08:83:ee:f7:50:eb: 4f:24:70:e8:61:4d:79:37:25:58:3c:dd:d1:aa:cd: f8:73:17:e7:2e:0a:98:3a:3a:99:bb:ee:34:2f:f1: 96:ba:ab:32:75:03:ab:94:cf:3c:46:57:77:6d:d8: 61:40:7a:0e:1b:42:e5:94:e8:82:d0:08:94:65:da: 83:7c:07:01:30:4a:57:a7:7b:7a:77:a2:b0:a5:56: 98:d0:76:25:f7:76:ff:ed:e8:be:3a:81:67:15:8b: 20:a8:45:1e:9e:78:d7:4c:ca:78:46:05:6a:fa:bd: 62:be:df:f0:7f:41:3f:8d:a7:9a:79:21:a1:bc:39: 1e:5e:54:14:fb:b4:ec:84:01:fd:c5:43:c3:45:c3: d5:a1:38:bf:17:7c:ac:14:5b:f8:e1:9c:7d:16:5e: 97:45:d0:1f:34:4d:4f:96:87:39:03:4c:a8:d3:04: 6d:1d:1f:e2:da:2e:30:29:c9:8f:59:41:74:91:12: 6c:74:e9:52:3b:ba:5f:cd:fd:62:b5:de:4e:d3:c6: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:05:2D:11:53:35:4C:D8:82:8A:0E:58:6A:B2:59:DD:90:13:A6:DE X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/CwUtEVM1TNiCig5YarJZ3ZATpt4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.0/24 Signature Algorithm: sha256WithRSAEncryption 31:4a:ba:29:44:5c:c3:db:b7:6d:64:32:18:24:62:59:21:1b: 0a:af:71:2d:18:95:c0:33:f9:b2:e5:e3:44:a7:63:2c:41:f9: 56:e0:48:45:5d:99:64:15:41:6c:ff:5b:3d:7f:3f:97:73:0a: ea:cc:30:1d:c6:b5:85:22:69:7c:8a:77:90:e4:78:52:21:b2: 98:7c:a9:72:7e:41:ee:ef:e5:e5:7e:bc:0a:2a:49:1a:6a:07: 0d:dd:70:e0:3d:9d:69:1d:4e:a4:be:ad:cb:7e:5e:4a:68:7b: b2:bb:83:12:90:21:f4:1a:b5:17:10:ee:34:de:b2:03:c9:3a: 1c:f8:9b:18:26:10:d2:13:4d:02:1a:7a:a8:ee:db:de:47:e5: e2:84:6b:74:bd:3b:4c:20:a2:2e:5e:0c:67:51:b0:db:80:59: c7:52:a4:e9:49:2e:fa:2f:82:0d:88:b0:e1:48:7e:d4:c4:ec: ed:6e:dd:a0:9f:f8:0c:94:6e:ac:e6:b0:fb:26:59:45:8f:80: fe:57:b1:66:a8:97:3e:a9:a3:e1:5a:a9:6f:2d:24:78:f7:22: 66:17:14:1a:fe:c0:b9:6e:97:a3:9d:c3:d8:98:77:71:61:38: 47:7d:2f:7d:68:c9:0a:33:09:08:00:01:85:6e:4b:b3:1e:4a: e7:7e:d3:bc -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA4MjIw OTAxMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBCMDUyRDExNTMzNTRD RDg4MjhBMEU1ODZBQjI1OUREOTAxM0E2REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh3bLj5G5V8TULKmzEv2u7eh4uAvpV3EY7cwtQwU2HyEo8KUmK mOXAdDzpyGCG3SZhY48M8wiD7vdQ608kcOhhTXk3JVg83dGqzfhzF+cuCpg6Opm7 7jQv8Za6qzJ1A6uUzzxGV3dt2GFAeg4bQuWU6ILQCJRl2oN8BwEwSlene3p3orCl VpjQdiX3dv/t6L46gWcViyCoRR6eeNdMynhGBWr6vWK+3/B/QT+Np5p5IaG8OR5e VBT7tOyEAf3FQ8NFw9WhOL8XfKwUW/jhnH0WXpdF0B80TU+WhzkDTKjTBG0dH+La LjApyY9ZQXSREmx06VI7ul/N/WK13k7Txub5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUCwUtEVM1TNiCig5YarJZ3ZATpt4wHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvQ3dVdEVWTTFUTmlDaWc1WWFySloz WkFUcHQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0U+DAN BgkqhkiG9w0BAQsFAAOCAQEAMUq6KURcw9u3bWQyGCRiWSEbCq9xLRiVwDP5suXj RKdjLEH5VuBIRV2ZZBVBbP9bPX8/l3MK6swwHca1hSJpfIp3kOR4UiGymHypcn5B 7u/l5X68CipJGmoHDd1w4D2daR1OpL6ty35eSmh7sruDEpAh9Bq1FxDuNN6yA8k6 HPibGCYQ0hNNAhp6qO7b3kfl4oRrdL07TCCiLl4MZ1Gw24BZx1Kk6Uku+i+CDYiw 4Uh+1MTs7W7doJ/4DJRurOaw+yZZRY+A/lexZqiXPqmj4Vqpby0kePciZhcUGv7A uW6Xo53D2Jh3cWE4R30vfWjJCjMJCAABhW5Lsx5K537TvA== -----END CERTIFICATE-----Generated at Sun Aug 24 13:35:57 2025 by rpki-client