$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/sR-6bw8LF4Hfi5H0qnPWMUWuPx8.roa File: sR-6bw8LF4Hfi5H0qnPWMUWuPx8.roa (raw, json) Hash identifier: fyX0uA2G1oSgbKaLJ54qVoQ0h/7PhHyKFZ6GI5TLijU= Subject key identifier: B1:1F:BA:6F:0F:0B:17:81:DF:8B:91:F4:AA:73:D6:31:45:AE:3F:1F Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 023D Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/sR-6bw8LF4Hfi5H0qnPWMUWuPx8.roa Signing time: Sun 29 Jun 2025 11:03:18 +0000 ROA not before: Sun 29 Jun 2025 11:03:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.28/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Jun 29 11:03:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B11FBA6F0F0B1781DF8B91F4AA73D63145AE3F1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:19:c6:b2:05:1a:4f:8e:6a:28:2a:e9:b9: 21:63:21:66:b3:07:e2:90:3d:b2:f9:40:a1:ad:df: ff:2f:da:35:bc:df:71:77:8a:e8:0b:57:52:ee:ae: 74:97:0b:3c:09:25:2b:2f:3a:3b:95:71:51:04:26: 6b:ee:f1:53:86:06:bc:45:16:cb:41:c2:a7:15:27: 42:a8:28:00:ea:52:0e:37:51:37:fe:fa:5f:3b:e1: 0f:06:59:6c:f0:5c:5b:16:06:ee:2f:1a:84:4d:96: dc:da:09:90:96:5f:13:f5:c3:6e:9f:4b:7d:1e:fb: e8:f9:1c:70:fa:c2:01:cc:e4:aa:13:69:86:7b:3d: bf:c3:d0:86:f9:f9:fa:7c:19:38:18:93:49:53:c6: 4b:a7:23:b0:89:f9:e3:56:77:55:3d:8c:33:75:55: 8e:b6:77:de:ad:f1:0e:e2:dd:2e:85:06:3d:c5:7f: 3f:5c:97:7f:78:fe:34:3f:99:23:57:ac:f7:c4:1e: 0e:19:50:95:78:5b:2a:c8:71:50:8c:ad:c7:48:be: c9:33:07:04:60:d0:87:ed:d6:70:4d:14:66:63:3f: 38:06:42:87:c8:25:22:5b:0e:77:9a:13:4c:8f:e2: 9f:15:2e:2b:9e:4a:da:93:74:b7:5a:ef:c6:6d:4a: d4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1F:BA:6F:0F:0B:17:81:DF:8B:91:F4:AA:73:D6:31:45:AE:3F:1F X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/sR-6bw8LF4Hfi5H0qnPWMUWuPx8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.28/30 Signature Algorithm: sha256WithRSAEncryption 7c:2f:66:f8:87:62:83:bb:a2:ba:fd:18:de:41:93:77:21:d0: 8b:03:63:17:16:50:fb:90:ba:0e:fe:aa:de:ed:77:3d:ee:50: a2:f2:17:db:cc:2c:0c:a3:77:82:d6:78:df:47:95:12:f0:1d: 08:15:64:eb:24:0c:d8:85:a9:12:74:db:a9:fe:8a:3e:ac:59: 41:ac:89:01:e5:ad:2a:5f:3f:ad:f2:f3:81:e4:f0:c4:ed:97: 77:4b:8f:90:25:c9:41:81:46:b8:46:31:08:49:61:51:40:17: 9f:4b:cc:14:6c:cb:b4:89:e4:be:44:21:34:25:65:7a:30:a0: 4f:be:96:40:58:a4:93:74:f1:80:c9:0b:4a:0f:a4:67:14:85: 95:b0:a4:fc:a2:6d:43:b1:a7:4e:1c:5a:f8:54:df:08:9d:d2: 1a:52:54:a3:5d:bf:e7:69:74:cf:3f:60:d9:8c:eb:e8:16:f5: 00:e8:84:00:8e:76:ad:3e:67:e5:1c:07:bc:b8:00:1d:e7:b5: 6d:cc:83:02:82:c9:41:e1:e0:54:50:f9:96:72:ac:a8:98:ed: 86:a8:92:ac:42:22:1e:b0:86:bb:41:49:16:af:eb:4a:a9:38: a8:4b:48:b9:0e:bf:2c:e2:45:c6:ca:4c:29:48:4b:58:03:33: bc:ac:f9:18 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA2Mjkx MTAzMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxMUZCQTZGMEYwQjE3 ODFERjhCOTFGNEFBNzNENjMxNDVBRTNGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/3RnGsgUaT45qKCrpuSFjIWazB+KQPbL5QKGt3/8v2jW833F3 iugLV1LurnSXCzwJJSsvOjuVcVEEJmvu8VOGBrxFFstBwqcVJ0KoKADqUg43UTf+ +l874Q8GWWzwXFsWBu4vGoRNltzaCZCWXxP1w26fS30e++j5HHD6wgHM5KoTaYZ7 Pb/D0Ib5+fp8GTgYk0lTxkunI7CJ+eNWd1U9jDN1VY62d96t8Q7i3S6FBj3Ffz9c l394/jQ/mSNXrPfEHg4ZUJV4WyrIcVCMrcdIvskzBwRg0Ift1nBNFGZjPzgGQofI JSJbDneaE0yP4p8VLiueStqTdLda78ZtStQDAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUsR+6bw8LF4Hfi5H0qnPWMUWuPx8wHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvc1ItNmJ3OExGNEhmaTVIMHFuUFdN VVd1UHg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+Bww DQYJKoZIhvcNAQELBQADggEBAHwvZviHYoO7orr9GN5Bk3ch0IsDYxcWUPuQug7+ qt7tdz3uUKLyF9vMLAyjd4LWeN9HlRLwHQgVZOskDNiFqRJ026n+ij6sWUGsiQHl rSpfP63y84Hk8MTtl3dLj5AlyUGBRrhGMQhJYVFAF59LzBRsy7SJ5L5EITQlZXow oE++lkBYpJN08YDJC0oPpGcUhZWwpPyibUOxp04cWvhU3wid0hpSVKNdv+dpdM8/ YNmM6+gW9QDohACOdq0+Z+UcB7y4AB3ntW3MgwKCyUHh4FRQ+ZZyrKiY7YaokqxC Ih6whrtBSRav60qpOKhLSLkOvyziRcbKTClIS1gDM7ys+Rg= -----END CERTIFICATE-----Generated at Sat Jul 5 12:32:09 2025 by rpki-client