$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/0ruNZaf4zP4R60zwGIPYNQUCKLs.roa File: 0ruNZaf4zP4R60zwGIPYNQUCKLs.roa (raw, json) Hash identifier: CSjhRcxRo85TneH5M3WRHZ4s5BSrGfAxBHImRFUGCyo= Subject key identifier: D2:BB:8D:65:A7:F8:CC:FE:11:EB:4C:F0:18:83:D8:35:05:02:28:BB Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Certificate serial: 02F9 Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/0ruNZaf4zP4R60zwGIPYNQUCKLs.roa Signing time: Fri 22 Aug 2025 08:51:10 +0000 ROA not before: Fri 22 Aug 2025 08:51:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9915 IP address blocks: 103.67.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Validity Not Before: Aug 22 08:51:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D2BB8D65A7F8CCFE11EB4CF01883D835050228BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:49:ac:cb:25:3b:c5:75:9d:15:04:f5:30: 26:bb:6d:a5:71:99:6d:4b:95:6f:e7:52:4e:8f:ca: f2:42:b0:3c:11:71:72:23:bc:a4:c7:94:b7:a0:40: 5d:8a:14:83:b1:54:7b:4a:5c:ad:37:2a:e6:33:3a: 15:94:3d:fe:e8:96:84:ad:f9:41:a4:5e:53:17:b1: 67:dc:1c:7b:8a:bd:73:6f:0b:62:a8:bf:9f:e6:5f: ab:d3:27:fa:37:b8:51:72:e9:25:a7:12:86:94:4c: f2:ac:a0:bd:5d:0b:e2:cb:84:da:ec:ad:ea:c8:5b: 17:df:4a:a3:29:32:e7:5e:ac:7f:7f:93:31:8f:bf: f1:87:84:91:21:fb:2a:e2:6f:c7:6c:10:e8:be:24: 80:c3:c5:9f:a9:42:70:9b:e5:1a:5b:ba:78:0f:dd: 43:59:7c:54:ed:16:f6:ea:2f:dc:45:a5:de:7b:85: 89:7b:57:b4:4f:6a:d9:7d:e3:2a:fc:8e:cc:a7:90: 67:25:f9:d4:46:7b:b3:16:f3:b9:a4:e8:62:a9:0a: d9:9e:dc:ab:b4:3e:27:24:18:a7:de:49:28:43:30: 5e:cd:63:03:1e:b9:7c:f2:ca:9d:78:8a:86:de:ca: 63:25:c8:7a:39:7c:b3:c3:d2:e5:51:2c:bb:a9:c0: 03:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:8D:65:A7:F8:CC:FE:11:EB:4C:F0:18:83:D8:35:05:02:28:BB X509v3 Authority Key Identifier: keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/0ruNZaf4zP4R60zwGIPYNQUCKLs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.161.0/24 Signature Algorithm: sha256WithRSAEncryption ab:b3:f9:80:df:d1:78:22:c7:5e:b7:17:a1:67:5b:cd:45:49: d5:2b:ed:8b:a8:11:b0:11:d0:a6:97:67:09:48:94:81:92:89: 64:cf:2b:11:76:31:1a:75:f2:0a:aa:6a:14:ff:17:47:4b:33: ca:4c:50:a1:cf:ed:72:22:89:3f:e8:f6:c5:50:1e:80:50:67: c8:53:90:2a:00:80:19:e9:9e:74:31:04:44:16:62:75:65:d7: b7:4b:50:7f:6a:ab:ed:54:2f:0d:67:95:aa:72:47:e3:03:14: 3f:3f:df:08:75:5b:64:21:64:13:87:1a:ed:c4:6b:da:c2:39: ec:00:0e:d5:23:3d:0b:ad:e8:fe:eb:65:2f:81:02:7d:db:07: bc:d8:dd:44:7c:a3:8d:bd:cb:25:7f:c1:94:30:9f:36:65:9b: 76:74:5b:dd:b1:6a:54:7d:11:f4:64:0b:33:70:11:9d:9c:e4: e4:ee:6f:01:a3:00:e8:3b:c8:d1:c0:cd:0f:ae:33:86:92:4d: 54:c7:5a:f2:17:d0:b2:9f:db:6e:49:f1:f0:38:2a:e1:6f:e1: 04:46:3c:cd:ee:e3:4b:54:0d:6f:b6:8c:1e:e6:27:51:69:77: 0a:53:5d:f8:13:bf:14:0d:fb:da:e7:b3:a2:b8:bf:e7:55:19: 85:4d:e9:d0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ4 NkYxRDUxMUQyQzIyRUM5NTk5NEIxMjNCM0EyNDk2MkMxRTMyNzAeFw0yNTA4MjIw ODUxMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQyQkI4RDY1QTdGOEND RkUxMUVCNENGMDE4ODNEODM1MDUwMjI4QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOSUmsyyU7xXWdFQT1MCa7baVxmW1LlW/nUk6PyvJCsDwRcXIj vKTHlLegQF2KFIOxVHtKXK03KuYzOhWUPf7oloSt+UGkXlMXsWfcHHuKvXNvC2Ko v5/mX6vTJ/o3uFFy6SWnEoaUTPKsoL1dC+LLhNrsrerIWxffSqMpMuderH9/kzGP v/GHhJEh+yrib8dsEOi+JIDDxZ+pQnCb5RpbungP3UNZfFTtFvbqL9xFpd57hYl7 V7RPatl94yr8jsynkGcl+dRGe7MW87mk6GKpCtme3Ku0PickGKfeSShDMF7NYwMe uXzyyp14iobeymMlyHo5fLPD0uVRLLupwAMzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU0ruNZaf4zP4R60zwGIPYNQUCKLswHwYDVR0jBBgwFoAUBIbx1RHSwi7JWZSx I7OiSWLB4ycwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9O L0JJYngxUkhTd2k3SldaU3hJN09pU1dMQjR5Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQklieDFSSFN3aTdKV1pTeEk3T2lTV0xCNHljLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9OLzBydU5aYWY0elA0UjYwendH SVBZTlFVQ0tMcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn Q6EwDQYJKoZIhvcNAQELBQADggEBAKuz+YDf0Xgix163F6FnW81FSdUr7YuoEbAR 0KaXZwlIlIGSiWTPKxF2MRp18gqqahT/F0dLM8pMUKHP7XIiiT/o9sVQHoBQZ8hT kCoAgBnpnnQxBEQWYnVl17dLUH9qq+1ULw1nlapyR+MDFD8/3wh1W2QhZBOHGu3E a9rCOewADtUjPQut6P7rZS+BAn3bB7zY3UR8o429yyV/wZQwnzZlm3Z0W92xalR9 EfRkCzNwEZ2c5OTubwGjAOg7yNHAzQ+uM4aSTVTHWvIX0LKf225J8fA4KuFv4QRG PM3u40tUDW+2jB7mJ1FpdwpTXfgTvxQN+9rns6K4v+dVGYVN6dA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:41:41 2025 by rpki-client