$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/qbgP7mcPHL0oLL_Umpbd4bFC0YA.roa File: qbgP7mcPHL0oLL_Umpbd4bFC0YA.roa (raw, json) Hash identifier: 04faVfikJqkGXv1iWh1C0xAoo1kMbc67uMBkRGe5/5o= Subject key identifier: A9:B8:0F:EE:67:0F:1C:BD:28:2C:BF:D4:9A:96:DD:E1:B1:42:D1:80 Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 12AF Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/qbgP7mcPHL0oLL_Umpbd4bFC0YA.roa Signing time: Fri 22 Aug 2025 08:59:19 +0000 ROA not before: Fri 22 Aug 2025 08:59:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152700 IP address blocks: 103.127.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4783 (0x12af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Aug 22 08:59:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A9B80FEE670F1CBD282CBFD49A96DDE1B142D180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:8b:e1:2c:07:51:e2:6f:04:ba:6e:d7:66: 62:ad:18:e8:cf:50:ac:60:51:f9:29:e9:17:2d:5b: dd:6f:45:e9:34:f3:03:d2:6b:c1:43:66:b2:8b:5c: 54:27:8e:62:03:b4:b7:34:50:cc:d6:f1:96:2b:53: 05:de:c5:c9:7b:44:ec:14:14:36:10:34:0e:42:94: f6:f1:2d:e3:9a:e3:a5:58:13:ea:53:7b:c1:c7:fd: 0a:3c:e4:3d:60:82:d1:32:3d:b7:02:87:4f:de:fd: 5c:9a:20:87:18:3b:3a:d0:16:de:02:2c:74:49:9e: f8:a2:86:43:f5:5b:42:0d:28:9a:60:9d:73:97:6b: c2:80:74:2d:7e:2a:4a:ea:c1:0c:a9:eb:ba:c9:82: ea:1d:c2:cc:1f:52:f0:2d:5c:d4:8e:47:24:2e:0a: c5:fb:22:0c:8f:d8:1c:0c:fe:41:f9:c3:c9:86:6a: f1:bf:cd:a3:c8:9d:ed:fe:a5:ac:91:63:6d:b9:e7: 25:ca:b5:92:b6:0d:bf:32:b5:e8:99:8d:61:d8:0b: 2e:ac:68:9f:20:08:dc:53:f4:58:b9:b4:cf:75:20: 7c:95:ef:7d:49:a1:ac:c0:3a:79:42:6c:c6:7c:3e: 7e:5c:b8:e8:6a:59:ff:da:df:c9:aa:3a:71:73:ba: ec:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:0F:EE:67:0F:1C:BD:28:2C:BF:D4:9A:96:DD:E1:B1:42:D1:80 X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/qbgP7mcPHL0oLL_Umpbd4bFC0YA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.238.0/24 Signature Algorithm: sha256WithRSAEncryption 19:b3:74:6f:8a:a6:ed:48:72:4c:a7:2f:fa:82:a3:14:9f:b3: c1:d5:d4:0e:a4:8f:09:3c:9d:bb:c1:be:c9:2c:eb:55:3b:c3: 45:0e:c2:6e:42:94:57:84:75:97:5c:70:fc:82:eb:a7:a9:2e: c1:ae:fb:a3:5f:49:dd:4a:47:27:6b:26:41:39:6a:48:d4:dc: 1e:e5:5d:23:50:16:08:0c:d6:6d:be:51:05:98:f8:f8:42:1a: b1:8b:bc:ae:66:94:dc:2d:90:42:e0:3e:33:db:5a:a7:03:e7: 39:23:c2:f2:5e:dc:46:33:5e:2d:21:fe:be:db:47:61:98:38: 2c:5b:44:57:de:da:fc:1f:70:cd:df:5a:4e:18:ae:2c:c1:0d: 96:9d:15:8d:1a:c5:35:8f:2e:06:90:93:98:9f:eb:dc:1d:9c: 6c:0c:19:f8:6e:da:a4:5b:56:ce:e4:8b:aa:c6:ca:1a:d3:98: a0:9f:e0:ce:76:a8:44:bb:bf:ad:26:ce:27:06:9c:13:65:aa: 5d:cd:e5:9d:6b:6b:28:65:5e:94:ab:45:c6:2b:c7:a5:bd:3f: 4c:e8:88:73:62:7e:a0:63:5b:14:4f:c7:0c:ae:c8:ec:81:27: 99:d2:5c:1c:41:4a:ef:17:0d:5f:d5:87:8a:5d:80:94:12:72: 9a:8b:12:d7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNTA4MjIw ODU5MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE5QjgwRkVFNjcwRjFD QkQyODJDQkZENDlBOTZEREUxQjE0MkQxODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBu4vhLAdR4m8Eum7XZmKtGOjPUKxgUfkp6RctW91vRek08wPS a8FDZrKLXFQnjmIDtLc0UMzW8ZYrUwXexcl7ROwUFDYQNA5ClPbxLeOa46VYE+pT e8HH/Qo85D1ggtEyPbcCh0/e/VyaIIcYOzrQFt4CLHRJnviihkP1W0INKJpgnXOX a8KAdC1+KkrqwQyp67rJguodwswfUvAtXNSORyQuCsX7IgyP2BwM/kH5w8mGavG/ zaPIne3+payRY2255yXKtZK2Db8yteiZjWHYCy6saJ8gCNxT9Fi5tM91IHyV731J oazAOnlCbMZ8Pn5cuOhqWf/a38mqOnFzuuztAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUqbgP7mcPHL0oLL/Umpbd4bFC0YAwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9xYmdQN21jUEhMMG9M TF9VbXBiZDRiRkMwWUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3/uMA0GCSqGSIb3DQEBCwUAA4IBAQAZs3RviqbtSHJMpy/6gqMUn7PB1dQO pI8JPJ27wb7JLOtVO8NFDsJuQpRXhHWXXHD8guunqS7BrvujX0ndSkcnayZBOWpI 1Nwe5V0jUBYIDNZtvlEFmPj4Qhqxi7yuZpTcLZBC4D4z21qnA+c5I8LyXtxGM14t If6+20dhmDgsW0RX3tr8H3DN31pOGK4swQ2WnRWNGsU1jy4GkJOYn+vcHZxsDBn4 btqkW1bO5Iuqxsoa05ign+DOdqhEu7+tJs4nBpwTZapdzeWda2soZV6Uq0XGK8el vT9M6IhzYn6gY1sUT8cMrsjsgSeZ0lwcQUrvFw1f1YeKXYCUEnKaixLX -----END CERTIFICATE-----Generated at Sun Aug 24 11:14:26 2025 by rpki-client