$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/GIVjkPxCukOzPvCnTWHdebtgMvY.roa File: GIVjkPxCukOzPvCnTWHdebtgMvY.roa (raw, json) Hash identifier: W9idoiqXEyLHEG1u8/cyIoAj42KurxTdGkZ4YjiyBvI= Subject key identifier: 18:85:63:90:FC:42:BA:43:B3:3E:F0:A7:4D:61:DD:79:BB:60:32:F6 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02EB Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/GIVjkPxCukOzPvCnTWHdebtgMvY.roa Signing time: Thu 09 Oct 2025 06:11:02 +0000 ROA not before: Thu 09 Oct 2025 06:11:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.248.24/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Oct 9 06:11:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=18856390FC42BA43B33EF0A74D61DD79BB6032F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:6b:cc:24:80:0f:ad:af:a7:27:09:ab:98: 84:e6:6f:c0:65:9f:16:d9:9a:c8:b1:4f:54:a5:ec: eb:e2:d9:e2:de:b4:8e:de:d6:0c:06:0e:3e:8b:21: ff:4e:8c:a1:36:73:e4:42:72:d9:5d:72:75:66:2e: 0a:fe:5a:32:48:45:ff:16:16:9b:3b:bc:37:76:e7: 2c:db:6a:17:79:38:9e:c5:a3:d2:3c:ca:e3:92:81: 73:4d:4e:3e:f7:c4:56:99:4c:a5:20:75:fd:4e:41: 73:c0:81:fc:51:7c:30:57:c2:47:8f:f5:89:70:d8: ac:3d:6a:aa:99:7b:f1:3f:00:a4:00:49:55:47:59: f7:b0:ac:f6:97:05:71:36:c7:de:dc:df:73:df:9c: 31:fc:ab:6d:95:8e:79:37:12:02:e3:61:a4:8e:57: a9:37:05:f3:bd:83:1e:35:52:7f:26:b5:6f:84:71: 39:9d:c7:73:06:cd:30:08:57:06:c0:53:34:e1:97: c0:65:67:a7:59:c7:06:85:27:50:13:0f:c5:e7:24: d6:0b:90:51:9a:36:54:ce:84:26:77:7a:d4:45:ec: a6:14:45:be:3b:94:67:a3:c9:5c:6d:6b:a8:fc:6e: 7f:02:0e:bf:57:04:a0:3b:ae:c2:d5:3a:0f:58:78: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:85:63:90:FC:42:BA:43:B3:3E:F0:A7:4D:61:DD:79:BB:60:32:F6 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/GIVjkPxCukOzPvCnTWHdebtgMvY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.24/30 Signature Algorithm: sha256WithRSAEncryption 7f:fa:0e:09:02:d7:92:ed:ba:fa:dd:3e:8d:1d:11:e8:c2:96: b6:fe:52:66:69:45:53:91:65:36:99:05:27:6a:63:ed:e1:59: 04:35:2e:fe:66:3b:45:6c:23:39:f3:53:c1:d7:3d:e2:d2:ab: 98:12:ed:64:51:d3:e9:a4:51:39:3a:b8:45:4e:0a:46:87:0a: 39:1b:4d:5e:86:2b:9a:f0:d7:73:fe:27:c4:aa:74:55:a5:82: b4:d1:1e:6f:dd:f7:a5:85:08:d9:96:be:6a:ae:21:67:c8:10: 72:db:ec:1d:af:fd:f5:1d:b4:9c:cf:0f:f4:55:90:b8:a8:f5: 3e:45:5f:19:f5:9c:e5:26:b5:36:17:08:13:ba:31:90:b2:e0: 4e:84:53:11:45:89:92:f1:73:57:4c:b8:20:9e:68:43:ea:8a: 2e:e0:66:f6:2f:16:52:b4:54:c6:b7:2a:6b:51:77:79:e8:00: 93:81:4c:9e:de:8e:94:88:6e:79:e6:07:76:9f:52:0c:c6:64: 25:a6:58:06:56:dd:09:03:bf:81:63:c7:10:a9:2e:2c:fd:5f: 24:a1:eb:6f:af:91:ed:2b:07:e2:5d:ec:52:90:35:3f:dc:f7: e1:c1:64:4b:85:b4:b3:29:07:0a:19:a6:c8:ae:86:84:a0:a4: cb:5c:aa:e4 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTEwMDkw NjExMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4ODU2MzkwRkM0MkJB NDNCMzNFRjBBNzRENjFERDc5QkI2MDMyRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8vGvMJIAPra+nJwmrmITmb8BlnxbZmsixT1Sl7Ovi2eLetI7e 1gwGDj6LIf9OjKE2c+RCctldcnVmLgr+WjJIRf8WFps7vDd25yzbahd5OJ7Fo9I8 yuOSgXNNTj73xFaZTKUgdf1OQXPAgfxRfDBXwkeP9Ylw2Kw9aqqZe/E/AKQASVVH WfewrPaXBXE2x97c33PfnDH8q22Vjnk3EgLjYaSOV6k3BfO9gx41Un8mtW+EcTmd x3MGzTAIVwbAUzThl8BlZ6dZxwaFJ1ATD8XnJNYLkFGaNlTOhCZ3etRF7KYURb47 lGejyVxta6j8bn8CDr9XBKA7rsLVOg9YeEC5AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUGIVjkPxCukOzPvCnTWHdebtgMvYwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvR0lWamtQeEN1a096UHZDblRXSGRl YnRnTXZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+Bgw DQYJKoZIhvcNAQELBQADggEBAH/6DgkC15LtuvrdPo0dEejClrb+UmZpRVORZTaZ BSdqY+3hWQQ1Lv5mO0VsIznzU8HXPeLSq5gS7WRR0+mkUTk6uEVOCkaHCjkbTV6G K5rw13P+J8SqdFWlgrTRHm/d96WFCNmWvmquIWfIEHLb7B2v/fUdtJzPD/RVkLio 9T5FXxn1nOUmtTYXCBO6MZCy4E6EUxFFiZLxc1dMuCCeaEPqii7gZvYvFlK0VMa3 KmtRd3noAJOBTJ7ejpSIbnnmB3afUgzGZCWmWAZW3QkDv4FjxxCpLiz9XySh62+v ke0rB+Jd7FKQNT/c9+HBZEuFtLMpBwoZpsiuhoSgpMtcquQ= -----END CERTIFICATE-----Generated at Tue Oct 21 01:22:00 2025 by rpki-client