$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/eWKTi8FH8UVxyXBg9RM2zgraXRo.roa File: eWKTi8FH8UVxyXBg9RM2zgraXRo.roa (raw, json) Hash identifier: lKKsq5WaaLgDRpOWcghX5pJ4cFBSxjKkSP2hhn5ZZwc= Subject key identifier: 79:62:93:8B:C1:47:F1:45:71:C9:70:60:F5:13:36:CE:0A:DA:5D:1A Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 023F Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/eWKTi8FH8UVxyXBg9RM2zgraXRo.roa Signing time: Sun 29 Jun 2025 11:03:57 +0000 ROA not before: Sun 29 Jun 2025 11:03:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.16/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 09:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Jun 29 11:03:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7962938BC147F14571C97060F51336CE0ADA5D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:9b:99:d1:71:a3:80:a2:42:e1:25:4e:fe: 81:e0:dc:27:8e:7a:7f:e6:9b:99:5f:f0:04:e3:96: cb:1e:04:e0:b4:21:89:69:d5:c2:f8:28:36:66:1b: 27:78:ee:f9:4f:e1:6b:e3:95:05:3a:ca:a4:be:57: 29:a7:a1:71:0e:b3:43:64:3f:b9:be:f2:3d:b3:db: bf:40:3e:95:f2:e6:65:24:65:ee:80:24:08:95:ab: ce:db:d9:b8:1a:96:9e:78:08:26:8d:9b:96:6f:e6: 95:cd:3b:10:66:b4:5c:1a:38:c8:a9:3f:6d:50:bd: 33:f0:11:22:1e:a6:92:ae:ef:ee:6b:a6:81:19:68: 0c:7e:e2:82:82:b7:df:51:a4:9a:3a:b0:2e:84:6e: 5a:d6:30:81:6a:55:6b:4b:da:23:67:ae:e8:25:e3: ab:d2:45:07:72:90:50:1e:f9:71:ce:87:32:48:1d: 19:5b:55:75:ab:5d:3e:71:99:41:68:55:af:34:8c: 95:64:1b:bc:59:3b:73:1e:e7:a0:43:b4:7b:36:9d: de:02:41:29:ac:59:9b:58:76:cd:7c:6c:9f:3e:b8: 63:10:1e:5b:39:e7:a0:e0:d8:8c:e1:41:64:dc:bd: fc:f1:3f:e2:41:af:db:b8:22:a4:d6:d5:12:41:f3: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:93:8B:C1:47:F1:45:71:C9:70:60:F5:13:36:CE:0A:DA:5D:1A X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/eWKTi8FH8UVxyXBg9RM2zgraXRo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.16/30 Signature Algorithm: sha256WithRSAEncryption 0c:4d:88:57:b0:73:1f:9d:58:47:f8:27:82:68:68:9e:ff:53: bd:6a:db:63:8a:c1:7b:0e:b5:08:6c:dd:53:51:a2:c8:98:fc: 6f:c4:48:43:8b:bc:24:24:ef:82:79:df:5b:40:00:6c:4c:06: 63:58:89:04:4d:fb:93:d7:ba:56:1b:3e:f1:77:20:3e:7b:20: f9:59:8e:85:6d:ef:4d:2d:f4:0d:cd:59:1b:2a:22:ad:d8:0a: 64:23:14:c5:f7:a5:99:14:61:cf:c0:6b:96:78:b9:6e:6c:f5: 0c:bb:b9:00:a5:69:e0:61:bf:ae:d6:e0:76:59:7b:7a:0c:f3: bb:c0:4f:1c:2a:35:62:6a:e4:f5:2d:94:15:a3:23:58:a9:42: dd:e0:94:7e:81:7a:e4:49:e5:32:d2:c2:cf:49:5a:c5:f8:10: 02:f7:bd:36:d0:9b:54:b9:51:ca:f4:aa:99:4f:79:2d:9d:ab: f0:44:9e:d8:ee:e2:86:72:81:dc:d3:41:eb:d5:ca:5b:bd:c8: 98:3e:bd:08:bf:92:1b:57:93:31:7d:91:a7:a0:e8:2f:46:65: 20:0e:21:5d:96:19:07:06:03:e8:c0:cb:ab:4a:46:19:a1:8c: 0c:2b:c8:5c:e4:f6:3a:17:4a:ba:c4:56:dd:22:e7:b7:db:35: d6:1e:3a:6a -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA2Mjkx MTAzNTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5NjI5MzhCQzE0N0Yx NDU3MUM5NzA2MEY1MTMzNkNFMEFEQTVEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC7puZ0XGjgKJC4SVO/oHg3CeOen/mm5lf8ATjlsseBOC0IYlp 1cL4KDZmGyd47vlP4WvjlQU6yqS+VymnoXEOs0NkP7m+8j2z279APpXy5mUkZe6A JAiVq87b2bgalp54CCaNm5Zv5pXNOxBmtFwaOMipP21QvTPwESIeppKu7+5rpoEZ aAx+4oKCt99RpJo6sC6EblrWMIFqVWtL2iNnrugl46vSRQdykFAe+XHOhzJIHRlb VXWrXT5xmUFoVa80jJVkG7xZO3Me56BDtHs2nd4CQSmsWZtYds18bJ8+uGMQHls5 56Dg2IzhQWTcvfzxP+JBr9u4IqTW1RJB84aFAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUeWKTi8FH8UVxyXBg9RM2zgraXRowHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvZVdLVGk4Rkg4VVZ4eVhCZzlSTTJ6 Z3JhWFJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+BAw DQYJKoZIhvcNAQELBQADggEBAAxNiFewcx+dWEf4J4JoaJ7/U71q22OKwXsOtQhs 3VNRosiY/G/ESEOLvCQk74J531tAAGxMBmNYiQRN+5PXulYbPvF3ID57IPlZjoVt 700t9A3NWRsqIq3YCmQjFMX3pZkUYc/Aa5Z4uW5s9Qy7uQClaeBhv67W4HZZe3oM 87vATxwqNWJq5PUtlBWjI1ipQt3glH6BeuRJ5TLSws9JWsX4EAL3vTbQm1S5Ucr0 qplPeS2dq/BEntju4oZygdzTQevVylu9yJg+vQi/khtXkzF9kaeg6C9GZSAOIV2W GQcGA+jAy6tKRhmhjAwryFzk9joXSrrEVt0i57fbNdYeOmo= -----END CERTIFICATE-----Generated at Sat Jul 5 08:38:07 2025 by rpki-client