$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/WeFEdClD91TwMfWw0swZKW9Hxm8.roa File: WeFEdClD91TwMfWw0swZKW9Hxm8.roa (raw, json) Hash identifier: 6YwTs2s1E0VXYEAhcPF9sn6JfdcfdzvJDimP7m8gleI= Subject key identifier: 59:E1:44:74:29:43:F7:54:F0:31:F5:B0:D2:CC:19:29:6F:47:C6:6F Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 0241 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/WeFEdClD91TwMfWw0swZKW9Hxm8.roa Signing time: Sun 29 Jun 2025 11:04:28 +0000 ROA not before: Sun 29 Jun 2025 11:04:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.12/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 09:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Jun 29 11:04:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=59E144742943F754F031F5B0D2CC19296F47C66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:56:82:dd:b6:45:f9:52:fb:d8:38:99:e1: b9:06:e1:48:68:62:d8:d9:fb:da:86:49:12:4f:98: c4:ea:68:25:1d:56:79:30:92:f5:01:f0:5d:ea:34: b4:4a:4a:bc:28:82:60:01:1c:64:61:df:2a:f0:94: d8:5f:93:0c:ad:a3:7d:f7:06:92:c2:44:91:80:21: 8f:bf:9a:c2:54:72:88:d2:d0:81:18:41:8f:d4:0f: 6a:0c:d6:0e:bd:34:3a:c3:59:8e:16:5d:b5:80:8f: dc:2f:3a:27:72:7a:2b:a9:cb:5e:a2:ba:9a:2e:f7: 1e:07:41:7a:31:f3:0f:d5:76:d4:45:d4:24:34:18: 26:03:7c:1c:a6:5f:0c:59:f8:c1:5c:1c:93:b2:df: 20:77:9a:c0:c3:b6:5f:8f:42:ac:c3:84:f3:2b:8d: 88:64:38:e3:ac:4e:42:90:5c:db:36:83:8b:74:6c: 90:d7:30:3f:40:f1:cd:21:2f:93:d5:bf:a7:2e:91: 24:4c:fa:e7:11:e3:87:a3:77:30:67:98:10:28:71: 56:1a:ef:d4:50:f3:9c:14:35:f3:e5:89:b5:85:09: ad:91:2a:2d:11:b8:14:08:4a:51:17:9d:48:fc:37: 1a:80:34:6d:6e:59:55:e2:fe:ea:dc:15:5b:1b:90: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:44:74:29:43:F7:54:F0:31:F5:B0:D2:CC:19:29:6F:47:C6:6F X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/WeFEdClD91TwMfWw0swZKW9Hxm8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.12/30 Signature Algorithm: sha256WithRSAEncryption 94:09:7f:d7:9c:9b:57:79:9c:af:2d:3c:db:26:74:91:c2:2c: 20:9a:d2:52:33:a1:3d:22:f4:5e:3c:01:25:e0:fb:dd:3f:22: 9b:f9:4b:85:00:4c:24:7f:94:75:a5:6d:b2:46:f3:fb:d0:e1: 22:35:cd:cc:7b:56:09:59:7e:8e:c4:02:08:e1:0c:67:35:a0: 2d:45:4b:10:d4:8a:fa:9d:aa:7c:a6:93:8d:17:a3:fa:89:8a: 85:f7:27:16:8b:b3:3d:84:53:b2:f7:07:f7:48:48:91:21:c8: 9f:c6:a6:38:c7:b2:75:c1:00:00:1b:9b:ff:7b:fc:00:91:97: 2e:42:ad:69:0b:c6:bc:f6:ee:35:a4:fb:6f:2e:60:bd:a0:44: e2:d7:24:88:a6:16:9d:aa:40:72:a4:a5:82:f6:0f:84:c2:d9: d2:3b:dc:81:d7:42:63:10:e2:12:8a:07:85:10:b9:d2:53:44: 26:f8:4c:d9:63:1b:54:d6:77:c0:7a:85:0d:a3:5e:00:e0:76: 59:06:22:62:97:5b:d9:29:e8:58:82:e8:39:40:79:8b:c4:15: 44:d9:b1:01:ab:dd:8f:62:3b:b8:df:a5:b0:90:64:2c:12:07: 28:b4:94:41:32:be:b6:5d:16:9e:24:4f:45:fd:28:d1:ac:e2: ae:25:50:85 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA2Mjkx MTA0MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5RTE0NDc0Mjk0M0Y3 NTRGMDMxRjVCMEQyQ0MxOTI5NkY0N0M2NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvjVaC3bZF+VL72DiZ4bkG4UhoYtjZ+9qGSRJPmMTqaCUdVnkw kvUB8F3qNLRKSrwogmABHGRh3yrwlNhfkwyto333BpLCRJGAIY+/msJUcojS0IEY QY/UD2oM1g69NDrDWY4WXbWAj9wvOidyeiupy16iupou9x4HQXox8w/VdtRF1CQ0 GCYDfBymXwxZ+MFcHJOy3yB3msDDtl+PQqzDhPMrjYhkOOOsTkKQXNs2g4t0bJDX MD9A8c0hL5PVv6cukSRM+ucR44ejdzBnmBAocVYa79RQ85wUNfPlibWFCa2RKi0R uBQISlEXnUj8NxqANG1uWVXi/urcFVsbkAkhAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUWeFEdClD91TwMfWw0swZKW9Hxm8wHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvV2VGRWRDbEQ5MVR3TWZXdzBzd1pL VzlIeG04LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+Aww DQYJKoZIhvcNAQELBQADggEBAJQJf9ecm1d5nK8tPNsmdJHCLCCa0lIzoT0i9F48 ASXg+90/Ipv5S4UATCR/lHWlbbJG8/vQ4SI1zcx7VglZfo7EAgjhDGc1oC1FSxDU ivqdqnymk40Xo/qJioX3JxaLsz2EU7L3B/dISJEhyJ/GpjjHsnXBAAAbm/97/ACR ly5CrWkLxrz27jWk+28uYL2gROLXJIimFp2qQHKkpYL2D4TC2dI73IHXQmMQ4hKK B4UQudJTRCb4TNljG1TWd8B6hQ2jXgDgdlkGImKXW9kp6FiC6DlAeYvEFUTZsQGr 3Y9iO7jfpbCQZCwSByi0lEEyvrZdFp4kT0X9KNGs4q4lUIU= -----END CERTIFICATE-----Generated at Sat Jul 5 08:29:27 2025 by rpki-client