$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/M2NIM/cPrFd_qcBuau2NiU5K-alEQfojs.roa File: cPrFd_qcBuau2NiU5K-alEQfojs.roa (raw, json) Hash identifier: kYyReTI3Fpr8otZZvN3/BvrayKF5JdfFuhqe79F+4o4= Subject key identifier: 70:FA:C5:77:FA:9C:06:E6:AE:D8:D8:94:E4:AF:9A:94:44:1F:A2:3B Certificate issuer: /CN=07D3E73EC5EB3D704863889E221845B7695D409C Certificate serial: 01B8 Authority key identifier: 07:D3:E7:3E:C5:EB:3D:70:48:63:88:9E:22:18:45:B7:69:5D:40:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/cPrFd_qcBuau2NiU5K-alEQfojs.roa Signing time: Wed 25 Jun 2025 06:14:45 +0000 ROA not before: Wed 25 Jun 2025 06:14:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 141001 IP address blocks: 157.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/B9PnPsXrPXBIY4ieIhhFt2ldQJw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/B9PnPsXrPXBIY4ieIhhFt2ldQJw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 14:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07D3E73EC5EB3D704863889E221845B7695D409C Validity Not Before: Jun 25 06:14:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=70FAC577FA9C06E6AED8D894E4AF9A94441FA23B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:8b:d4:d7:1a:cb:e7:ce:7f:36:06:93:d1: fd:e8:87:70:bc:7f:87:e4:7a:b2:b1:96:a4:fb:d2: 77:94:d3:a9:64:3d:20:ba:5b:11:60:e2:60:a6:65: 5d:07:5c:12:77:a3:c6:0b:15:b2:fb:00:7c:3d:ee: c5:cb:f1:c6:7e:8c:f9:6c:e4:47:3e:08:60:02:b2: cd:17:98:05:29:cb:ab:65:50:61:d3:fd:5d:02:d7: 8f:0e:0c:c0:82:d2:7d:75:ef:7c:9f:43:2f:71:6a: 17:30:97:69:e8:34:ed:27:3c:8c:50:f5:5f:29:9f: 50:23:34:b5:a3:5a:98:ca:d9:15:93:5f:96:84:ed: bd:72:a9:8f:1f:2e:df:6d:ac:f4:7f:2b:a0:e6:df: 6d:84:c3:24:1e:32:f2:2a:cf:cb:fa:d6:0d:f8:f8: 54:1e:85:8a:a2:f9:bb:b9:77:7a:92:a1:31:e1:37: 85:fb:86:de:1a:af:48:ff:9c:e5:b7:9f:7c:33:cf: 6c:13:c8:c7:82:ba:2e:e6:4b:d4:b1:94:f3:99:37: 2f:2e:5a:21:a0:4f:82:d7:b1:61:9e:8c:b3:5f:b2: 47:25:11:2d:08:f4:79:f9:74:75:dc:66:81:0e:35: 7f:a0:6c:b5:c1:08:4e:0d:27:7f:2e:e3:6f:05:38: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FA:C5:77:FA:9C:06:E6:AE:D8:D8:94:E4:AF:9A:94:44:1F:A2:3B X509v3 Authority Key Identifier: keyid:07:D3:E7:3E:C5:EB:3D:70:48:63:88:9E:22:18:45:B7:69:5D:40:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/B9PnPsXrPXBIY4ieIhhFt2ldQJw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M2NIM/cPrFd_qcBuau2NiU5K-alEQfojs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.135.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:04:85:2d:93:03:dd:90:a3:0d:ed:ae:4a:d7:16:f2:30:f7: 53:fe:23:a7:a2:ce:8b:fa:d9:97:35:cf:0d:e7:dd:35:cb:e3: 1d:43:37:90:21:0c:1b:2e:00:30:70:00:42:87:d6:36:1c:d9: 6d:4b:a6:0f:fb:1a:41:5b:69:f1:f6:ac:2b:20:25:e2:b4:eb: fb:ce:bd:a5:96:b9:76:a9:3d:0d:3e:07:b4:9a:1b:95:bf:ae: 19:c6:a6:e1:80:d2:d1:be:c5:1b:34:23:e7:2f:09:53:ef:63: 8f:3b:8d:0e:1d:4c:f6:53:dc:25:31:1c:1b:29:24:60:ea:7d: 7b:d0:9e:ee:d3:78:03:e9:2f:35:3f:91:9f:37:a0:eb:f4:23: ca:19:20:32:06:10:20:86:92:cf:8b:20:dc:58:8b:57:f8:d9: b2:99:29:c7:e0:af:a2:72:e1:2c:78:fd:b5:25:2b:95:94:f7: a9:db:40:2a:25:58:33:6b:75:50:d8:8d:aa:69:c8:b3:5a:6c: 2f:39:1b:5a:6f:ed:29:b9:18:76:25:ee:91:30:34:20:c9:29: 31:d6:6f:5b:39:b6:6d:60:ad:f9:dc:e6:79:45:78:08:fd:ab: 97:b9:c6:e4:39:03:e4:b6:c2:12:c1:fd:cf:b9:f8:a2:44:7c: f9:b0:c9:32 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdE M0U3M0VDNUVCM0Q3MDQ4NjM4ODlFMjIxODQ1Qjc2OTVENDA5QzAeFw0yNTA2MjUw NjE0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwRkFDNTc3RkE5QzA2 RTZBRUQ4RDg5NEU0QUY5QTk0NDQxRkEyM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSZYvU1xrL585/NgaT0f3oh3C8f4fkerKxlqT70neU06lkPSC6 WxFg4mCmZV0HXBJ3o8YLFbL7AHw97sXL8cZ+jPls5Ec+CGACss0XmAUpy6tlUGHT /V0C148ODMCC0n1173yfQy9xahcwl2noNO0nPIxQ9V8pn1AjNLWjWpjK2RWTX5aE 7b1yqY8fLt9trPR/K6Dm322EwyQeMvIqz8v61g34+FQehYqi+bu5d3qSoTHhN4X7 ht4ar0j/nOW3n3wzz2wTyMeCui7mS9SxlPOZNy8uWiGgT4LXsWGejLNfskclES0I 9Hn5dHXcZoEONX+gbLXBCE4NJ38u428FOHPtAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUcPrFd/qcBuau2NiU5K+alEQfojswHwYDVR0jBBgwFoAUB9PnPsXrPXBIY4ie IhhFt2ldQJwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTTJOSU0v QjlQblBzWHJQWEJJWTRpZUloaEZ0MmxkUUp3LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9COVBuUHNYclBYQklZNGllSWhoRnQybGRRSncuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NMk5JTS9jUHJGZF9xY0J1YXUyTmlVNUst YWxFUWZvanMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSH MA0GCSqGSIb3DQEBCwUAA4IBAQALBIUtkwPdkKMN7a5K1xbyMPdT/iOnos6L+tmX Nc8N5901y+MdQzeQIQwbLgAwcABCh9Y2HNltS6YP+xpBW2nx9qwrICXitOv7zr2l lrl2qT0NPge0mhuVv64ZxqbhgNLRvsUbNCPnLwlT72OPO40OHUz2U9wlMRwbKSRg 6n170J7u03gD6S81P5GfN6Dr9CPKGSAyBhAghpLPiyDcWItX+NmymSnH4K+icuEs eP21JSuVlPep20AqJVgza3VQ2I2qacizWmwvORtab+0puRh2Je6RMDQgySkx1m9b ObZtYK353OZ5RXgI/auXucbkOQPktsISwf3PufiiRHz5sMky -----END CERTIFICATE-----Generated at Fri Jul 4 14:11:36 2025 by rpki-client