$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/CrW6Cd6ZxDNO9TmgVs_LE9z9Yio.roa File: CrW6Cd6ZxDNO9TmgVs_LE9z9Yio.roa (raw, json) Hash identifier: WcHBhdw1aDCQHZvC1UpSrLR7f7Vmp/ID9Izo49GB2Iw= Subject key identifier: 0A:B5:BA:09:DE:99:C4:33:4E:F5:39:A0:56:CF:CB:13:DC:FD:62:2A Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Certificate serial: 0994 Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/CrW6Cd6ZxDNO9TmgVs_LE9z9Yio.roa Signing time: Fri 22 Aug 2025 08:51:49 +0000 ROA not before: Fri 22 Aug 2025 08:51:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131677 IP address blocks: 103.149.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Validity Not Before: Aug 22 08:51:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0AB5BA09DE99C4334EF539A056CFCB13DCFD622A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:cf:43:da:e0:38:14:49:fb:1e:34:73:ea: c6:5c:9d:ed:76:9e:01:c6:c3:de:9d:95:74:31:03: 22:5b:e3:b2:7c:ee:9b:6b:97:2a:a2:a7:31:02:b5: 46:fe:40:a8:e2:5c:4a:ac:04:c8:d2:7e:ee:ff:37: e2:d5:c0:10:2c:18:ee:db:6a:4d:4c:a4:b4:83:ce: 29:2d:44:e9:53:36:1f:38:84:0f:7d:0d:89:7b:6b: 96:93:5e:03:3f:53:2d:5f:bb:f6:a7:74:17:a2:32: 48:07:0f:b6:2d:5e:34:a8:78:83:95:87:04:08:50: e9:6b:e9:d9:55:29:89:23:44:10:12:15:d7:0b:f6: 7b:67:5f:a2:a7:1f:3d:77:11:0a:fa:87:b9:10:79: 1b:ba:24:b6:0b:1c:fa:85:c4:3a:e5:76:d5:ce:02: 5a:59:98:c3:a0:6d:8c:23:8d:58:4e:fe:a5:7b:f6: ed:61:2d:6c:6c:32:06:cc:c6:82:0d:c9:0d:15:95: e3:8c:73:9f:fd:09:a1:ac:60:fc:cc:43:09:2e:21: e5:8b:6f:c0:6f:c1:af:05:b7:d3:98:09:f7:56:e3: 27:c9:59:37:18:d1:c1:4c:21:3c:f3:33:8c:5e:b5: 51:b8:a0:1f:c0:49:ba:fa:8a:75:5b:83:69:96:9f: 21:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B5:BA:09:DE:99:C4:33:4E:F5:39:A0:56:CF:CB:13:DC:FD:62:2A X509v3 Authority Key Identifier: keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/CrW6Cd6ZxDNO9TmgVs_LE9z9Yio.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.149.64.0/23 Signature Algorithm: sha256WithRSAEncryption 92:9e:d1:42:e0:5f:1e:d5:02:80:fb:15:1e:42:1d:7f:fd:7f: c8:cd:0b:7e:47:a9:ff:0e:3b:4f:17:bf:1b:0c:e0:a4:ab:5e: f3:d8:80:d2:76:84:68:46:78:e6:2f:89:71:37:ad:ab:da:e2: 8e:a0:fa:81:29:da:a5:37:ed:1a:e6:37:c4:c6:f5:89:ea:e0: 0f:29:ce:9f:f4:7a:ac:cd:31:e6:2f:82:26:19:c0:f4:ba:33: 51:24:2f:1f:85:d3:25:29:02:6c:03:4b:c0:cb:92:ec:4d:94: 45:32:fa:aa:61:87:81:05:e5:92:63:cc:21:7c:d0:b1:55:29: 9a:89:1a:44:48:57:0c:57:63:39:7b:bd:de:b1:b0:2e:be:00: 18:73:b7:b0:8b:15:54:6f:01:33:f4:15:f5:66:84:bc:4a:a6: 7a:77:7e:b2:68:8f:0f:6c:07:bf:ce:df:37:c9:33:3a:b8:b3: 6e:2d:8e:46:31:ef:02:57:84:ae:ee:41:c8:cb:7d:65:24:ed: b0:d1:b2:15:6d:b4:61:86:30:bc:87:cc:13:ab:f5:5b:fb:f4: ac:80:56:02:13:55:0c:23:d9:5b:4f:6b:99:37:7e:ce:54:dc: 16:10:b1:34:df:78:0e:80:1e:2f:e7:4a:ba:8e:52:7d:6a:74: 4b:b6:64:91 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yNTA4MjIw ODUxNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBBQjVCQTA5REU5OUM0 MzM0RUY1MzlBMDU2Q0ZDQjEzRENGRDYyMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfR89D2uA4FEn7HjRz6sZcne12ngHGw96dlXQxAyJb47J87ptr lyqipzECtUb+QKjiXEqsBMjSfu7/N+LVwBAsGO7bak1MpLSDziktROlTNh84hA99 DYl7a5aTXgM/Uy1fu/andBeiMkgHD7YtXjSoeIOVhwQIUOlr6dlVKYkjRBASFdcL 9ntnX6KnHz13EQr6h7kQeRu6JLYLHPqFxDrldtXOAlpZmMOgbYwjjVhO/qV79u1h LWxsMgbMxoINyQ0VleOMc5/9CaGsYPzMQwkuIeWLb8Bvwa8Ft9OYCfdW4yfJWTcY 0cFMITzzM4xetVG4oB/ASbr6inVbg2mWnyFTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUCrW6Cd6ZxDNO9TmgVs/LE9z9YiowHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw 5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvQ3JXNkNkNlp4RE5POVRt Z1ZzX0xFOXo5WWlvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWeVQDANBgkqhkiG9w0BAQsFAAOCAQEAkp7RQuBfHtUCgPsVHkIdf/1/yM0Lfkep /w47Txe/GwzgpKte89iA0naEaEZ45i+JcTetq9rijqD6gSnapTftGuY3xMb1ierg DynOn/R6rM0x5i+CJhnA9LozUSQvH4XTJSkCbANLwMuS7E2URTL6qmGHgQXlkmPM IXzQsVUpmokaREhXDFdjOXu93rGwLr4AGHO3sIsVVG8BM/QV9WaEvEqmend+smiP D2wHv87fN8kzOrizbi2ORjHvAleEru5ByMt9ZSTtsNGyFW20YYYwvIfME6v1W/v0 rIBWAhNVDCPZW09rmTd+zlTcFhCxNN94DoAeL+dKuo5SfWp0S7ZkkQ== -----END CERTIFICATE-----Generated at Sun Aug 24 16:15:27 2025 by rpki-client