$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/TeAmuCQOVIus3KCmeylABMfK400.roa File: TeAmuCQOVIus3KCmeylABMfK400.roa (raw, json) Hash identifier: VWp/dpmoWJ3G11SL13TKhC7kaE/D+oEN1p+a5BTE5Z8= Subject key identifier: 4D:E0:26:B8:24:0E:54:8B:AC:DC:A0:A6:7B:29:40:04:C7:CA:E3:4D Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Certificate serial: 0274 Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/TeAmuCQOVIus3KCmeylABMfK400.roa Signing time: Fri 22 Aug 2025 09:01:13 +0000 ROA not before: Fri 22 Aug 2025 09:01:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 103.236.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Validity Not Before: Aug 22 09:01:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4DE026B8240E548BACDCA0A67B294004C7CAE34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:08:d6:af:8f:36:64:74:34:bc:82:92:36: d1:78:c1:ee:23:c7:a2:94:02:d9:d7:b3:32:63:d8: 94:17:98:7a:01:c0:df:9f:4a:c9:3e:f9:57:77:ac: 1f:85:1f:ee:e3:48:88:f7:87:e5:f2:b8:fb:e7:db: b1:a3:21:0d:2e:e2:5b:53:98:59:85:a7:10:43:1c: ab:cb:16:a5:87:36:af:9b:1c:23:7f:7f:ac:22:43: 16:2a:84:0a:46:04:b4:24:b9:a8:e0:e7:74:eb:b8: de:e2:7f:ce:c0:1c:c3:c7:33:4f:0b:5a:0d:a9:a6: d8:9e:01:f0:2d:ba:a1:97:1a:67:d0:31:50:5d:82: 08:8c:7f:c0:04:d5:7f:f4:ff:0d:db:92:06:d2:1f: 59:eb:26:a5:05:8c:f9:2e:b1:d0:40:28:97:75:2e: c7:67:18:26:df:41:fa:36:8a:e6:43:04:3e:8d:a2: 4f:b7:20:27:ca:13:0e:bd:49:c0:68:ec:28:91:a4: f2:38:98:fa:10:05:a6:9d:cf:97:58:4e:0e:ca:0b: 66:d3:a8:9b:98:31:31:f0:2c:68:20:1b:e7:33:3e: 48:3b:50:7a:e0:0d:72:28:a4:21:85:b2:f4:44:a8: 00:d1:6a:0b:09:03:fa:d7:cb:c2:1f:fe:05:73:64: 6e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E0:26:B8:24:0E:54:8B:AC:DC:A0:A6:7B:29:40:04:C7:CA:E3:4D X509v3 Authority Key Identifier: keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/TeAmuCQOVIus3KCmeylABMfK400.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.226.0/23 Signature Algorithm: sha256WithRSAEncryption a4:d2:08:ae:a3:fe:f3:bf:43:26:25:71:ec:b6:0e:db:e0:62: 28:8c:da:b0:92:9c:6a:ea:41:81:52:20:66:de:cc:35:a4:5a: d8:34:12:57:fd:7d:48:71:42:c7:a6:e9:96:7b:f9:1a:ce:3f: 18:b8:e8:eb:41:0b:16:0b:7b:04:0d:03:21:5f:e4:68:43:a0: e9:52:df:60:12:3d:db:59:61:4c:19:41:46:58:49:aa:5c:47: e1:3a:30:3b:35:68:2b:4a:7c:eb:eb:4f:e1:46:41:fb:7a:e4: f2:9c:2e:ac:0a:90:7c:21:ff:99:7a:6c:9f:4e:a5:44:22:03: 58:12:ca:fb:55:f8:82:b5:14:ea:f7:b2:d2:c0:ea:3b:bb:66: 3f:16:d4:5f:6a:2b:4f:bc:56:67:31:30:a9:91:9f:85:f2:67: 58:8a:df:57:01:cc:94:1d:1d:c0:19:be:05:21:16:ce:93:c2: 6a:3b:fe:04:f1:04:10:50:7b:f0:9f:04:85:9b:de:50:ea:0d: 7e:51:58:96:fd:b9:81:88:3b:37:05:fb:7a:05:12:d7:9b:76: b5:54:69:48:54:0f:98:ba:41:48:9c:71:a1:78:88:26:84:b2: 1b:08:de:8b:41:b7:a5:7f:b0:3e:06:db:8e:a6:38:78:9b:79: ad:8d:17:90 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjI3 RDY3NUZGNUUyQzhCQTkwRjRCNjU1QjEwOEI2OTI1REFGMTU5NTAeFw0yNTA4MjIw OTAxMTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRERTAyNkI4MjQwRTU0 OEJBQ0RDQTBBNjdCMjk0MDA0QzdDQUUzNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9wjWr482ZHQ0vIKSNtF4we4jx6KUAtnXszJj2JQXmHoBwN+f Ssk++Vd3rB+FH+7jSIj3h+XyuPvn27GjIQ0u4ltTmFmFpxBDHKvLFqWHNq+bHCN/ f6wiQxYqhApGBLQkuajg53TruN7if87AHMPHM08LWg2pptieAfAtuqGXGmfQMVBd ggiMf8AE1X/0/w3bkgbSH1nrJqUFjPkusdBAKJd1LsdnGCbfQfo2iuZDBD6Nok+3 ICfKEw69ScBo7CiRpPI4mPoQBaadz5dYTg7KC2bTqJuYMTHwLGggG+czPkg7UHrg DXIopCGFsvREqADRagsJA/rXy8If/gVzZG6jAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUTeAmuCQOVIus3KCmeylABMfK400wHwYDVR0jBBgwFoAUYn1nX/XiyLqQ9LZV sQi2kl2vFZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL1lu MW5YX1hpeUxxUTlMWlZzUWkya2wydkZaVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev WW4xblhfWGl5THFROUxaVnNRaTJrbDJ2RlpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL1RlQW11Q1FPVkl1czNLQ21leWxBQk1m SzQwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7OIwDQYJ KoZIhvcNAQELBQADggEBAKTSCK6j/vO/QyYlcey2DtvgYiiM2rCSnGrqQYFSIGbe zDWkWtg0Elf9fUhxQsem6ZZ7+RrOPxi46OtBCxYLewQNAyFf5GhDoOlS32ASPdtZ YUwZQUZYSapcR+E6MDs1aCtKfOvrT+FGQft65PKcLqwKkHwh/5l6bJ9OpUQiA1gS yvtV+IK1FOr3stLA6ju7Zj8W1F9qK0+8VmcxMKmRn4XyZ1iK31cBzJQdHcAZvgUh Fs6Twmo7/gTxBBBQe/CfBIWb3lDqDX5RWJb9uYGIOzcF+3oFEtebdrVUaUhUD5i6 QUiccaF4iCaEshsI3otBt6V/sD4G246mOHibea2NF5A= -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:53 2025 by rpki-client