$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/AtYV2TsNrWPEkeCu7wi4br3UPQs.roa File: AtYV2TsNrWPEkeCu7wi4br3UPQs.roa (raw, json) Hash identifier: 8jLEgR86ZlyZcf/UiQOx04kgpd4HcGegRqvUhYusyeM= Subject key identifier: 02:D6:15:D9:3B:0D:AD:63:C4:91:E0:AE:EF:08:B8:6E:BD:D4:3D:0B Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Certificate serial: 0D61 Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/AtYV2TsNrWPEkeCu7wi4br3UPQs.roa Signing time: Fri 22 Aug 2025 08:57:00 +0000 ROA not before: Fri 22 Aug 2025 08:57:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7483 IP address blocks: 103.42.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3425 (0xd61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Validity Not Before: Aug 22 08:57:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=02D615D93B0DAD63C491E0AEEF08B86EBDD43D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:50:eb:d4:d9:a9:c6:4c:a9:ab:df:fd:fe: 69:1c:c1:ae:a5:d8:ca:ba:7a:e5:4e:71:c5:1c:ed: 69:49:68:ac:26:de:c5:8a:1a:62:34:c2:fc:06:79: 88:f2:99:26:2e:d1:82:9d:95:3f:9c:ea:81:6c:26: 82:ce:bd:2d:d3:f0:09:df:87:77:06:08:5d:17:0a: 52:0e:40:4b:38:e4:f3:a4:d7:3f:66:88:a8:cb:a8: 39:9a:2a:8c:cd:9e:f3:48:98:75:a0:5d:0d:58:d2: 5d:3a:91:2f:30:38:c1:58:64:74:a1:62:07:8a:c0: 9b:34:ce:3a:ee:5a:0d:1a:1c:91:55:4c:a8:98:cd: 1b:c3:24:9a:5e:a9:a8:ac:68:b9:c0:68:40:7e:b2: e8:e5:2f:25:52:d1:cb:39:84:e8:3b:fa:52:dd:ab: 46:6b:b2:11:3a:50:f3:62:90:3e:d9:e8:51:57:11: 8d:a2:95:b6:ee:0c:72:a0:cd:69:4b:11:29:34:55: 8d:ee:34:61:d6:c2:72:1e:1a:8d:cf:cf:66:f4:65: 84:4c:4a:9d:33:0b:02:c9:85:80:78:4c:98:19:54: 5d:9f:bf:3e:ba:05:32:4d:fe:65:33:6d:22:f1:50: 34:c6:59:cf:3f:31:e3:55:58:82:be:20:16:21:a2: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D6:15:D9:3B:0D:AD:63:C4:91:E0:AE:EF:08:B8:6E:BD:D4:3D:0B X509v3 Authority Key Identifier: keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/AtYV2TsNrWPEkeCu7wi4br3UPQs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.42.144.0/22 Signature Algorithm: sha256WithRSAEncryption 29:cd:4a:a6:db:9e:ac:a2:e8:cf:f8:ef:69:d3:7d:0d:cd:95: e9:f4:87:19:f4:c7:7e:ca:d6:e7:86:50:7c:39:78:ce:e2:0f: 72:c9:a6:03:ff:77:58:fd:21:fc:a2:99:1e:bb:ec:90:2d:05: 63:bb:bf:63:51:47:66:92:1a:1c:91:6a:b5:43:9f:96:d2:36: 31:db:da:cf:f4:bc:ef:eb:f3:e3:19:98:8f:79:73:e7:16:0a: d5:9b:60:24:e1:60:5e:d3:56:8b:de:1e:a1:e9:1b:97:2d:f5: d6:19:51:6e:90:4a:f4:d0:7c:ce:1c:b1:2d:ab:b2:94:c5:3b: aa:7a:c3:b9:f5:e7:10:50:cf:cb:23:38:c3:c7:b9:94:72:88: e1:5e:51:55:23:38:a0:1d:0d:ba:ee:94:a2:36:6a:16:a6:b3: 2e:95:85:a2:40:ba:b3:8a:15:08:e3:89:8c:c5:23:60:5c:19: 2c:0f:bc:eb:19:04:d7:e0:99:79:da:ed:36:15:c0:ea:0e:5b: bb:e1:7a:70:bb:bc:6a:b2:b1:c0:f7:c8:60:fc:13:80:5b:09: ca:e8:fe:85:6a:6f:63:da:c5:79:d6:92:cc:cc:f8:4d:bf:54: ca:df:33:e6:b6:14:7c:8c:11:8d:29:88:51:14:ae:d2:9f:b6: 6b:3d:ab:39 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yNTA4MjIw ODU3MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAyRDYxNUQ5M0IwREFE NjNDNDkxRTBBRUVGMDhCODZFQkRENDNEMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2K1Dr1Nmpxkypq9/9/mkcwa6l2Mq6euVOccUc7WlJaKwm3sWK GmI0wvwGeYjymSYu0YKdlT+c6oFsJoLOvS3T8Anfh3cGCF0XClIOQEs45POk1z9m iKjLqDmaKozNnvNImHWgXQ1Y0l06kS8wOMFYZHShYgeKwJs0zjruWg0aHJFVTKiY zRvDJJpeqaisaLnAaEB+sujlLyVS0cs5hOg7+lLdq0ZrshE6UPNikD7Z6FFXEY2i lbbuDHKgzWlLESk0VY3uNGHWwnIeGo3Pz2b0ZYRMSp0zCwLJhYB4TJgZVF2fvz66 BTJN/mUzbSLxUDTGWc8/MeNVWIK+IBYhooshAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUAtYV2TsNrWPEkeCu7wi4br3UPQswHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL +wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9BdFlWMlRzTnJXUEVr ZUN1N3dpNGJyM1VQUXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZyqQMA0GCSqGSIb3DQEBCwUAA4IBAQApzUqm256soujP+O9p030NzZXp9IcZ 9Md+ytbnhlB8OXjO4g9yyaYD/3dY/SH8opkeu+yQLQVju79jUUdmkhockWq1Q5+W 0jYx29rP9Lzv6/PjGZiPeXPnFgrVm2Ak4WBe01aL3h6h6RuXLfXWGVFukEr00HzO HLEtq7KUxTuqesO59ecQUM/LIzjDx7mUcojhXlFVIzigHQ267pSiNmoWprMulYWi QLqzihUI44mMxSNgXBksD7zrGQTX4Jl52u02FcDqDlu74Xpwu7xqsrHA98hg/BOA WwnK6P6Fam9j2sV51pLMzPhNv1TK3zPmthR8jBGNKYhRFK7Sn7ZrPas5 -----END CERTIFICATE-----Generated at Tue Oct 21 02:12:42 2025 by rpki-client