$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/QKhJUhMXLQ-dk0cZSRnIq3hjQTM.roa File: QKhJUhMXLQ-dk0cZSRnIq3hjQTM.roa (raw, json) Hash identifier: cL4XN+3XoQHPzu/TQlKf0XbgsWghOWfijDuZ7wOe1Ws= Subject key identifier: 40:A8:49:52:13:17:2D:0F:9D:93:47:19:49:19:C8:AB:78:63:41:33 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02AA Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/QKhJUhMXLQ-dk0cZSRnIq3hjQTM.roa Signing time: Fri 22 Aug 2025 09:01:18 +0000 ROA not before: Fri 22 Aug 2025 09:01:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Aug 22 09:01:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=40A8495213172D0F9D9347194919C8AB78634133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:64:dd:07:e0:35:16:96:de:7b:74:be:c7: a7:f0:67:9b:64:81:71:85:0a:07:3b:74:02:4b:e2: f4:28:2c:49:d6:34:ae:fe:3b:00:13:a6:cf:b7:77: 35:26:ed:6b:05:c0:7a:ba:f4:ff:4b:d4:2b:ad:5f: 1f:4a:51:e7:47:4d:df:38:d8:70:5d:71:22:74:4c: 53:38:09:72:b8:50:d4:b3:3a:1b:0b:2f:83:02:0c: a6:d7:de:56:a8:f7:c4:24:7c:ed:62:2b:38:75:7c: 4d:ad:61:31:37:05:53:29:8c:6a:c9:fa:64:d9:e9: b6:ed:86:53:88:38:1b:21:98:18:67:30:b1:7b:b0: e7:e7:1f:a9:06:b5:9a:21:3b:bd:ec:63:13:91:ab: 36:3b:98:07:26:e4:93:d5:49:de:46:56:c7:12:2a: 8b:bd:5e:26:f3:6c:41:44:ec:76:fd:77:8d:2d:90: 9b:4e:31:b4:9d:cf:c3:ac:31:61:8c:c7:86:53:83: c4:19:61:f4:5e:50:2a:8b:47:93:2c:f4:03:b0:38: 55:dd:4e:1b:1d:62:24:9a:1d:29:68:7e:fb:62:78: 70:ae:f7:b7:b6:b0:e7:e4:50:a0:43:7b:61:d1:c1: d7:d6:cd:ce:97:78:cd:c7:32:79:3c:a7:dd:16:ad: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A8:49:52:13:17:2D:0F:9D:93:47:19:49:19:C8:AB:78:63:41:33 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/QKhJUhMXLQ-dk0cZSRnIq3hjQTM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.249.0/24 Signature Algorithm: sha256WithRSAEncryption af:61:fd:d2:73:95:b3:ce:1a:71:c7:d7:bb:6a:59:90:92:b0: 21:cf:15:18:26:fe:0d:d0:d2:17:6b:b1:fc:2f:3a:c9:27:2b: c0:e8:28:b0:22:fb:aa:52:f7:48:32:f3:be:d3:09:35:39:2e: 73:4c:dc:f3:c1:f0:7f:d1:2e:b8:21:8d:b8:a7:b0:c4:e8:2b: d0:08:87:91:ff:82:de:a0:b6:0a:7b:e6:07:30:e9:3f:c0:84: 13:29:52:ff:30:12:19:a5:52:55:82:d4:37:a9:14:82:7c:cb: c6:b0:fd:19:78:b2:e8:bd:0b:db:96:1c:e7:13:41:93:48:05: 0c:09:f2:7a:08:ae:0c:32:fa:b6:67:3c:ec:7d:2d:1d:5d:17: 2e:c9:a6:f5:68:53:15:12:d6:0b:9b:31:ff:e3:96:55:7a:d7: e7:98:0a:ef:76:ad:a0:69:9c:ed:0c:24:20:d0:75:eb:d8:17: f8:e1:3b:99:7c:63:6a:ff:5d:2c:82:32:bd:50:43:59:41:f1: cf:a8:5e:61:64:7c:75:d6:9e:54:0f:34:38:80:c3:1f:cd:7a: b3:c3:52:26:85:f9:2f:2d:29:f2:d6:14:c8:20:96:83:e8:f1: 51:09:af:87:b8:17:2e:41:6f:92:6b:64:9d:23:90:7b:ef:f4: 96:d2:3c:21 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA4MjIw OTAxMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwQTg0OTUyMTMxNzJE MEY5RDkzNDcxOTQ5MTlDOEFCNzg2MzQxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+q2TdB+A1Fpbee3S+x6fwZ5tkgXGFCgc7dAJL4vQoLEnWNK7+ OwATps+3dzUm7WsFwHq69P9L1CutXx9KUedHTd842HBdcSJ0TFM4CXK4UNSzOhsL L4MCDKbX3lao98QkfO1iKzh1fE2tYTE3BVMpjGrJ+mTZ6bbthlOIOBshmBhnMLF7 sOfnH6kGtZohO73sYxORqzY7mAcm5JPVSd5GVscSKou9XibzbEFE7Hb9d40tkJtO MbSdz8OsMWGMx4ZTg8QZYfReUCqLR5Ms9AOwOFXdThsdYiSaHSlofvtieHCu97e2 sOfkUKBDe2HRwdfWzc6XeM3HMnk8p90Wrb17AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQKhJUhMXLQ+dk0cZSRnIq3hjQTMwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvUUtoSlVoTVhMUS1kazBjWlNSbklx M2hqUVRNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0U+TAN BgkqhkiG9w0BAQsFAAOCAQEAr2H90nOVs84accfXu2pZkJKwIc8VGCb+DdDSF2ux /C86yScrwOgosCL7qlL3SDLzvtMJNTkuc0zc88Hwf9EuuCGNuKewxOgr0AiHkf+C 3qC2CnvmBzDpP8CEEylS/zASGaVSVYLUN6kUgnzLxrD9GXiy6L0L25Yc5xNBk0gF DAnyegiuDDL6tmc87H0tHV0XLsmm9WhTFRLWC5sx/+OWVXrX55gK73atoGmc7Qwk INB169gX+OE7mXxjav9dLIIyvVBDWUHxz6heYWR8ddaeVA80OIDDH816s8NSJoX5 Ly0p8tYUyCCWg+jxUQmvh7gXLkFvkmtknSOQe+/0ltI8IQ== -----END CERTIFICATE-----Generated at Sun Aug 24 13:42:15 2025 by rpki-client