$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RENREN/QeBD1z935EMwXoEZzhJVctYS0bY.roa File: QeBD1z935EMwXoEZzhJVctYS0bY.roa (raw, json) Hash identifier: h4d361KjjeYviw0xsGqSwMe6gUz3ZwxEXa7K6eLk99o= Subject key identifier: 41:E0:43:D7:3F:77:E4:43:30:5E:81:19:CE:12:55:72:D6:12:D1:B6 Certificate issuer: /CN=DB27F7B21D588E1F393973F41C56CA41F8099334 Certificate serial: 025E Authority key identifier: DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/QeBD1z935EMwXoEZzhJVctYS0bY.roa Signing time: Fri 22 Aug 2025 09:00:45 +0000 ROA not before: Fri 22 Aug 2025 09:00:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 103.69.48.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB27F7B21D588E1F393973F41C56CA41F8099334 Validity Not Before: Aug 22 09:00:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=41E043D73F77E443305E8119CE125572D612D1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6e:df:17:8b:68:7e:7a:c3:91:10:85:77:a0: 73:34:2c:e6:00:6f:4f:16:a5:6b:91:05:2e:ea:c5: 47:41:e8:34:95:74:08:5c:0a:e9:83:b9:07:54:f3: 65:29:c2:7c:ef:28:9b:92:ea:29:07:da:a4:ef:85: f0:43:df:c9:dd:e6:7e:81:56:4e:4f:4e:ac:28:72: 97:d3:74:7d:fb:42:41:31:1e:e7:51:45:82:72:68: 46:1a:ac:99:9b:0c:4a:14:fa:c5:f0:f8:ea:4c:6b: 08:cb:04:29:25:54:35:22:8a:81:f9:20:b2:73:ac: 72:05:df:ee:29:c9:3c:2c:3a:db:e8:8c:92:8d:c1: c5:05:90:d3:30:2b:41:60:d1:29:d6:f2:9e:53:4e: f0:5d:67:86:3f:3e:ea:12:50:72:2d:a4:de:4d:d1: 1b:88:23:0d:c1:22:0d:7c:eb:47:19:1f:3e:81:24: fc:85:14:ea:06:c1:7b:23:df:eb:91:84:48:73:77: c9:77:e6:9d:db:9c:e1:3e:29:4a:5d:9b:2f:e5:9d: d9:92:d9:eb:8a:12:e9:9b:14:b4:73:fd:8b:47:38: 81:f0:b5:01:dd:30:ee:56:05:43:f7:9b:9b:12:c5: 4d:d8:78:df:e2:fc:7f:84:d9:53:db:bc:7e:84:58: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:43:D7:3F:77:E4:43:30:5E:81:19:CE:12:55:72:D6:12:D1:B6 X509v3 Authority Key Identifier: keyid:DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/QeBD1z935EMwXoEZzhJVctYS0bY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.69.48.0/23 Signature Algorithm: sha256WithRSAEncryption 13:e9:2e:76:f9:8d:6e:9b:db:b9:6a:bc:d7:78:c0:ff:e9:8a: 31:dd:dc:4e:9d:7f:53:32:1d:fd:02:45:3e:cf:76:86:52:86: fa:83:f6:d1:ea:ca:08:23:b5:0a:a5:8e:a0:59:42:ef:45:a3: 81:61:74:ff:d3:58:b2:6b:0b:f6:57:fd:aa:97:3b:dc:24:68: da:5d:fd:10:63:45:f2:27:ab:b5:ea:57:4a:1a:75:14:14:3e: f1:70:d0:a8:14:cc:53:73:5a:90:33:43:d0:9d:99:cf:19:72: 3a:c5:b8:af:ee:f9:d6:c5:52:38:68:e3:21:3a:e5:c8:7d:44: 43:16:17:3a:89:f8:69:55:86:49:dd:08:c2:51:e0:3d:b2:4c: f5:db:a7:ca:e5:b1:92:3e:a1:2a:5d:44:3a:a3:f3:5e:97:82: 8f:ac:4b:b3:1d:ba:f4:3d:1d:2c:38:dd:8d:fb:0e:70:50:b1: 8f:98:93:30:53:49:7e:60:da:b8:b9:17:d2:85:37:ec:76:5d: b4:df:5d:0d:c4:64:b0:84:64:fd:0f:37:9b:23:2f:47:a5:3d: ad:f6:05:f0:57:33:e7:ba:ef:56:8b:aa:7d:46:fe:a7:fc:8a: da:5e:1a:da:e4:e9:de:1a:eb:c4:58:3e:c0:4a:9d:ce:39:90: 23:60:69:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREIy N0Y3QjIxRDU4OEUxRjM5Mzk3M0Y0MUM1NkNBNDFGODA5OTMzNDAeFw0yNTA4MjIw OTAwNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxRTA0M0Q3M0Y3N0U0 NDMzMDVFODExOUNFMTI1NTcyRDYxMkQxQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDebt8Xi2h+esOREIV3oHM0LOYAb08WpWuRBS7qxUdB6DSVdAhc CumDuQdU82UpwnzvKJuS6ikH2qTvhfBD38nd5n6BVk5PTqwocpfTdH37QkExHudR RYJyaEYarJmbDEoU+sXw+OpMawjLBCklVDUiioH5ILJzrHIF3+4pyTwsOtvojJKN wcUFkNMwK0Fg0SnW8p5TTvBdZ4Y/PuoSUHItpN5N0RuIIw3BIg1860cZHz6BJPyF FOoGwXsj3+uRhEhzd8l35p3bnOE+KUpdmy/lndmS2euKEumbFLRz/YtHOIHwtQHd MO5WBUP3m5sSxU3YeN/i/H+E2VPbvH6EWPetAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUQeBD1z935EMwXoEZzhJVctYS0bYwHwYDVR0jBBgwFoAU2yf3sh1Yjh85OXP0 HFbKQfgJkzQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVOUkVO LzJ5ZjNzaDFZamg4NU9YUDBIRmJLUWZnSmt6US5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvMnlmM3NoMVlqaDg1T1hQMEhGYktRZmdKa3pRLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVOUkVOL1FlQkQxejkzNUVNd1hvRVp6 aEpWY3RZUzBiWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn RTAwDQYJKoZIhvcNAQELBQADggEBABPpLnb5jW6b27lqvNd4wP/pijHd3E6df1My Hf0CRT7PdoZShvqD9tHqyggjtQqljqBZQu9Fo4FhdP/TWLJrC/ZX/aqXO9wkaNpd /RBjRfInq7XqV0oadRQUPvFw0KgUzFNzWpAzQ9Cdmc8ZcjrFuK/u+dbFUjho4yE6 5ch9REMWFzqJ+GlVhkndCMJR4D2yTPXbp8rlsZI+oSpdRDqj816Xgo+sS7MduvQ9 HSw43Y37DnBQsY+YkzBTSX5g2ri5F9KFN+x2XbTfXQ3EZLCEZP0PN5sjL0elPa32 BfBXM+e671aLqn1G/qf8itpeGtrk6d4a68RYPsBKnc45kCNgaZw= -----END CERTIFICATE-----Generated at Sun Aug 24 11:45:01 2025 by rpki-client