$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/J205OFlkWJ1yTjPdbM0q_XmJvEQ.roa File: J205OFlkWJ1yTjPdbM0q_XmJvEQ.roa (raw, json) Hash identifier: owHMDRL458pMl+GM/273uxdZfM6EbZRe8zdp3XcBr1s= Subject key identifier: 27:6D:39:38:59:64:58:9D:72:4E:33:DD:6C:CD:2A:FD:79:89:BC:44 Certificate issuer: /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Certificate serial: 12A1 Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/J205OFlkWJ1yTjPdbM0q_XmJvEQ.roa Signing time: Fri 22 Aug 2025 08:57:42 +0000 ROA not before: Fri 22 Aug 2025 08:57:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131634 IP address blocks: 103.127.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4769 (0x12a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Validity Not Before: Aug 22 08:57:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=276D39385964589D724E33DD6CCD2AFD7989BC44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:34:f1:53:1a:36:98:07:31:34:8b:b0:c6: cb:75:56:de:9c:ee:bc:26:7c:da:89:32:12:19:ff: 47:7d:10:51:c4:5e:0a:db:94:22:ca:86:12:39:5e: 39:92:fd:3e:1e:e5:7f:a5:17:57:1b:91:a2:3b:be: 8e:7e:40:e4:ac:44:95:e0:73:c4:38:fc:7a:1d:b0: 8f:49:15:d0:7e:4b:fc:c2:d2:49:a9:a5:11:c7:12: 82:6b:b8:5a:92:31:4a:e3:90:c8:dd:d3:f1:36:cf: b6:5c:a6:ce:10:e7:9e:b9:92:fd:95:5a:a5:03:e1: d9:8b:b3:60:18:eb:f1:04:4b:3b:e9:2a:0b:63:ea: 0f:1e:be:bc:48:f8:17:8b:8c:2f:4e:df:13:60:2d: d9:80:03:70:c1:34:f1:eb:f8:bd:ab:e2:4f:07:f3: d4:d1:a5:bc:c0:75:55:dd:46:3d:7d:e0:0c:06:85: 87:24:f8:98:1a:b2:7e:a7:23:9f:61:5c:9a:b3:c4: a7:d9:05:10:f5:c2:4d:99:ed:ed:4e:f1:5f:1c:dd: 3e:90:d5:a2:04:98:e5:0d:10:b7:7c:ed:70:fe:cf: c1:e9:51:84:85:b1:1d:bd:5a:6c:ab:56:9b:ba:55: ec:58:c8:bc:18:67:6b:4d:3a:c2:12:e4:86:55:b5: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6D:39:38:59:64:58:9D:72:4E:33:DD:6C:CD:2A:FD:79:89:BC:44 X509v3 Authority Key Identifier: keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/J205OFlkWJ1yTjPdbM0q_XmJvEQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.228.0/22 Signature Algorithm: sha256WithRSAEncryption a2:98:ef:19:c3:0c:e9:09:cd:10:bb:6d:a7:a9:69:6d:19:38: 27:68:94:d3:14:d4:82:f2:72:d1:f6:c7:2a:19:98:9e:cf:1b: e6:50:3c:42:2a:05:74:6d:cd:d5:4d:97:21:37:47:31:a9:73: c9:26:b6:9b:7e:59:26:61:6e:25:dc:ac:18:45:f5:cd:f8:b7: 55:24:ce:16:1d:f4:be:2d:58:4f:42:78:74:1b:06:9a:6b:11: 40:c5:7c:93:49:c9:25:8c:55:a0:7a:8c:48:7b:22:95:e1:69: 93:39:31:ae:cf:62:6e:6f:72:4b:31:54:5b:bd:3b:7c:13:cf: 4f:dc:81:44:94:89:57:fd:6a:ae:47:96:1a:42:7d:4b:d2:26: 31:c1:f1:ae:2a:ad:b1:65:de:cc:31:d4:4b:77:33:ef:83:f9: 32:d6:5b:dd:7a:2e:63:16:a6:5a:e4:ed:4a:f7:f6:9a:7c:da: 53:cb:4e:6b:c3:f5:c4:27:76:70:c2:cc:f6:e3:21:9f:c5:cc: 2a:70:14:d4:38:8d:7e:d3:02:43:09:47:a1:27:28:02:13:67: 0d:ba:63:b4:cb:17:1d:a5:1f:07:61:72:28:dd:ce:cf:5f:a1: 0f:d3:f7:f4:ba:6d:2f:34:de:71:38:3a:7a:e5:94:da:21:97: 26:2f:0a:39 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICEqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA1 RTY2Q0ZBNkY4QzBEQUFCRkIxQUY2RkEzMjE4NDI2MDQ0RjE1ODAeFw0yNTA4MjIw ODU3NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3NkQzOTM4NTk2NDU4 OUQ3MjRFMzNERDZDQ0QyQUZENzk4OUJDNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx2zTxUxo2mAcxNIuwxst1Vt6c7rwmfNqJMhIZ/0d9EFHEXgrb lCLKhhI5XjmS/T4e5X+lF1cbkaI7vo5+QOSsRJXgc8Q4/HodsI9JFdB+S/zC0kmp pRHHEoJruFqSMUrjkMjd0/E2z7Zcps4Q5565kv2VWqUD4dmLs2AY6/EESzvpKgtj 6g8evrxI+BeLjC9O3xNgLdmAA3DBNPHr+L2r4k8H89TRpbzAdVXdRj194AwGhYck +Jgasn6nI59hXJqzxKfZBRD1wk2Z7e1O8V8c3T6Q1aIEmOUNELd87XD+z8HpUYSF sR29WmyrVpu6VexYyLwYZ2tNOsIS5IZVtTl1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJ205OFlkWJ1yTjPdbM0q/XmJvEQwHwYDVR0jBBgwFoAUoF5mz6b4wNqr+xr2 +jIYQmBE8VgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRX L29GNW16NmI0d05xci14cjItaklZUW1CRThWZy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0Y1bXo2YjR3TnFyLXhyMi1qSVlRbUJFOFZnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRXL0oyMDVPRmxrV0oxeVRqUGRi TTBxX1htSnZFUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn f+QwDQYJKoZIhvcNAQELBQADggEBAKKY7xnDDOkJzRC7baepaW0ZOCdolNMU1ILy ctH2xyoZmJ7PG+ZQPEIqBXRtzdVNlyE3RzGpc8kmtpt+WSZhbiXcrBhF9c34t1Uk zhYd9L4tWE9CeHQbBpprEUDFfJNJySWMVaB6jEh7IpXhaZM5Ma7PYm5vcksxVFu9 O3wTz0/cgUSUiVf9aq5HlhpCfUvSJjHB8a4qrbFl3swx1Et3M++D+TLWW916LmMW plrk7Ur39pp82lPLTmvD9cQndnDCzPbjIZ/FzCpwFNQ4jX7TAkMJR6EnKAITZw26 Y7TLFx2lHwdhcijdzs9foQ/T9/S6bS803nE4OnrllNohlyYvCjk= -----END CERTIFICATE-----Generated at Sun Aug 24 14:06:54 2025 by rpki-client