$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/cuG7oZP8T6Ux1QOOxy7rReO03WE.roa File: cuG7oZP8T6Ux1QOOxy7rReO03WE.roa (raw, json) Hash identifier: 6O0kAE8tsAz31kqIlNu5Z5fWznHZiyhny8U2Ch3QHIU= Subject key identifier: 72:E1:BB:A1:93:FC:4F:A5:31:D5:03:8E:C7:2E:EB:45:E3:B4:DD:61 Certificate issuer: /CN=1C7073A6066C765842FDF07169E43518A0BB0235 Certificate serial: 022D Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/cuG7oZP8T6Ux1QOOxy7rReO03WE.roa Signing time: Fri 22 Aug 2025 09:01:19 +0000 ROA not before: Fri 22 Aug 2025 09:01:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150755 IP address blocks: 203.175.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235 Validity Not Before: Aug 22 09:01:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=72E1BBA193FC4FA531D5038EC72EEB45E3B4DD61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:9e:f6:87:97:42:86:2d:b8:bf:0b:db:0b: 47:05:f0:e8:88:76:1b:99:4d:27:a9:5a:e2:c5:7b: f8:58:89:29:a3:c5:05:37:fa:f8:73:67:fc:0a:94: 17:20:8f:44:6c:9e:c4:36:7b:65:0c:c9:57:53:1a: 1e:c0:97:4c:15:d2:1a:15:4d:12:64:54:55:11:b1: 7b:5f:28:82:38:9a:ca:59:d5:aa:28:35:94:59:ea: 1f:59:e1:85:1d:e3:b8:a8:12:eb:46:31:24:6f:e1: 79:1e:65:b8:12:f4:07:a1:0a:7a:78:95:86:16:8e: f9:7a:d2:83:57:d1:85:72:1a:28:29:ef:24:38:31: 69:d3:fd:2f:74:c1:d2:ba:6e:f0:c8:37:57:83:2d: 87:f4:9e:d2:bf:51:ff:61:4e:9d:25:63:45:b1:83: 8e:9d:db:9d:07:30:da:1f:a0:a0:2c:51:72:89:3f: ec:a6:59:c5:c0:29:e4:52:97:ff:f8:0b:5d:f3:00: 1a:2f:70:58:9c:e3:c3:22:04:b2:43:a3:49:6f:5d: 03:01:c1:ef:10:da:21:d6:43:bd:d8:4c:5f:2c:2d: 87:68:c2:1d:6c:d5:41:0c:f0:8f:17:11:6b:65:ad: 68:25:d4:9f:09:3d:47:c8:1c:56:90:64:b3:63:ae: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:BB:A1:93:FC:4F:A5:31:D5:03:8E:C7:2E:EB:45:E3:B4:DD:61 X509v3 Authority Key Identifier: keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/cuG7oZP8T6Ux1QOOxy7rReO03WE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.175.104.0/23 Signature Algorithm: sha256WithRSAEncryption df:74:c8:a6:3b:4a:6d:74:80:9b:88:f2:5e:b2:ad:6c:2e:b0: b8:72:12:6e:56:7c:8b:92:7e:f8:09:16:df:f6:8a:25:04:d4: 9a:6c:c2:ac:24:df:50:1a:82:79:b0:49:41:48:3e:63:af:34: ef:b0:75:e9:c5:59:65:a5:45:be:95:56:0b:07:56:3e:33:cf: df:47:fa:c8:74:48:ff:b6:b2:eb:2d:28:c9:42:3f:c1:cc:ee: 60:06:3f:30:47:fe:68:aa:b1:fe:42:04:b7:56:64:07:a3:1f: f3:dd:39:49:f5:9c:41:8a:5c:90:7c:d6:2b:28:57:22:20:a1: 56:f2:97:49:29:14:9d:e7:49:97:6f:46:3c:94:b3:63:b8:d2: d5:7b:05:5c:fc:5f:9c:56:37:2e:ec:8b:5c:d5:1b:57:8b:58: df:f3:d8:fb:da:2b:e7:e2:30:2b:c8:c0:7f:0c:d2:40:6c:3e: da:7d:22:7e:c3:32:05:26:48:1a:3a:f7:fb:24:3e:81:06:c3: 88:ea:9a:33:7b:10:2e:69:43:2b:dd:0f:f2:c4:7d:3f:31:b7: 9b:04:7f:d3:1e:b3:87:72:98:2f:05:2a:0a:2b:ce:0d:7e:3d: 6a:45:88:65:a7:77:c9:e2:04:ca:ed:9f:c9:97:c5:72:a7:36: 23:99:de:69 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUM3 MDczQTYwNjZDNzY1ODQyRkRGMDcxNjlFNDM1MThBMEJCMDIzNTAeFw0yNTA4MjIw OTAxMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcyRTFCQkExOTNGQzRG QTUzMUQ1MDM4RUM3MkVFQjQ1RTNCNERENjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBJZ72h5dChi24vwvbC0cF8OiIdhuZTSepWuLFe/hYiSmjxQU3 +vhzZ/wKlBcgj0RsnsQ2e2UMyVdTGh7Al0wV0hoVTRJkVFURsXtfKII4mspZ1aoo NZRZ6h9Z4YUd47ioEutGMSRv4XkeZbgS9AehCnp4lYYWjvl60oNX0YVyGigp7yQ4 MWnT/S90wdK6bvDIN1eDLYf0ntK/Uf9hTp0lY0Wxg46d250HMNofoKAsUXKJP+ym WcXAKeRSl//4C13zABovcFic48MiBLJDo0lvXQMBwe8Q2iHWQ73YTF8sLYdowh1s 1UEM8I8XEWtlrWgl1J8JPUfIHFaQZLNjruVDAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUcuG7oZP8T6Ux1QOOxy7rReO03WEwHwYDVR0jBBgwFoAUHHBzpgZsdlhC/fBx aeQ1GKC7AjUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlVOTElO RS9ISEJ6cGdac2RsaENfZkJ4YWVRMUdLQzdBalUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0hIQnpwZ1pzZGxoQ19mQnhhZVExR0tDN0FqVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05VTkxJTkUvY3VHN29aUDhUNlV4MVFP T3h5N3JSZU8wM1dFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AcuvaDANBgkqhkiG9w0BAQsFAAOCAQEA33TIpjtKbXSAm4jyXrKtbC6wuHISblZ8 i5J++AkW3/aKJQTUmmzCrCTfUBqCebBJQUg+Y68077B16cVZZaVFvpVWCwdWPjPP 30f6yHRI/7ay6y0oyUI/wczuYAY/MEf+aKqx/kIEt1ZkB6Mf8905SfWcQYpckHzW KyhXIiChVvKXSSkUnedJl29GPJSzY7jS1XsFXPxfnFY3LuyLXNUbV4tY3/PY+9or 5+IwK8jAfwzSQGw+2n0ifsMyBSZIGjr3+yQ+gQbDiOqaM3sQLmlDK90P8sR9PzG3 mwR/0x6zh3KYLwUqCivODX49akWIZad3yeIEyu2fyZfFcqc2I5neaQ== -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:24 2025 by rpki-client