$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/CwW1CY_U2Ix8yppvj1ADQTXtG7Y.roa File: CwW1CY_U2Ix8yppvj1ADQTXtG7Y.roa (raw, json) Hash identifier: H+XJna3shh22vyGsY7m3rlsy0oaJdbjIwIDCU3i2cno= Subject key identifier: 0B:05:B5:09:8F:D4:D8:8C:7C:CA:9A:6F:8F:50:03:41:35:ED:1B:B6 Certificate issuer: /CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B Certificate serial: 0324 Authority key identifier: 45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/CwW1CY_U2Ix8yppvj1ADQTXtG7Y.roa Signing time: Fri 22 Aug 2025 08:42:11 +0000 ROA not before: Fri 22 Aug 2025 08:42:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 103.37.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B Validity Not Before: Aug 22 08:42:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0B05B5098FD4D88C7CCA9A6F8F50034135ED1BB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:e7:ff:4a:c4:74:f8:15:e2:f3:b9:30:26: 0d:17:3a:7a:26:c9:5a:77:97:c2:6f:5c:61:f1:0a: 67:af:20:76:25:a3:c2:27:44:2f:de:37:ed:e7:75: cb:42:f3:54:ca:8c:21:6c:ce:5d:27:94:96:a8:6e: 70:3f:de:00:f8:22:e9:8c:4e:ac:99:54:43:e2:e1: ec:6f:ae:fa:48:1b:bc:03:0f:9b:3f:53:4d:94:2e: 76:63:ce:75:0b:64:fe:2b:a4:d9:ed:5d:31:77:c6: 26:84:7a:bd:39:7c:87:b4:27:37:f0:3b:eb:95:7f: af:f4:61:57:0e:40:a3:1b:05:89:ca:b6:19:0b:e1: 99:f2:70:e5:cd:16:da:6d:e6:91:b5:ac:20:6e:0d: 4f:5c:32:c9:13:34:61:87:d0:23:fc:18:2a:2b:27: 99:ca:b0:ab:15:fa:83:36:95:a7:f1:f2:28:c2:44: 4f:7f:7b:51:d6:29:46:53:16:cf:ff:0a:4d:e6:0a: e6:33:2a:f4:7f:92:3f:aa:0b:19:fe:d0:ba:ea:c6: 5c:34:06:8b:c1:97:3f:d1:71:b8:c5:d2:80:7a:c2: 04:d1:ca:90:68:3b:d4:1d:8f:2b:42:95:d3:0b:45: c4:5e:43:2a:81:1f:40:51:01:fc:a3:37:b8:20:7a: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:05:B5:09:8F:D4:D8:8C:7C:CA:9A:6F:8F:50:03:41:35:ED:1B:B6 X509v3 Authority Key Identifier: keyid:45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/CwW1CY_U2Ix8yppvj1ADQTXtG7Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.37.5.0/24 Signature Algorithm: sha256WithRSAEncryption 56:57:39:ba:f7:ba:3d:75:a1:6f:83:00:39:7a:fa:dd:51:7d: 90:fb:7d:e6:f9:fb:e2:f4:93:34:45:2f:dc:1a:34:9d:e4:7a: 31:1a:87:41:45:21:73:03:19:69:70:cf:e9:4b:42:11:fc:10: 15:1b:9e:6e:aa:2a:e8:ca:d3:0d:9a:12:15:b3:14:4e:f5:45: 2f:d3:81:31:c1:42:a6:47:a4:d2:95:84:fa:f0:f6:27:f5:36: 07:3b:88:73:d1:52:ce:b8:7d:6e:45:cf:4b:17:d2:b5:cd:ea: b5:92:31:fa:05:f0:11:3c:15:f8:f0:4d:b3:88:16:bc:9a:69: e4:77:e6:5a:4f:92:e5:86:a2:bf:96:e2:6a:5d:90:72:da:75: 1f:dd:5e:ed:7e:a9:45:c5:bc:36:20:47:7b:76:f8:eb:8f:b0: da:47:7b:cc:11:89:3d:bf:65:94:d9:53:1c:70:e8:92:00:bf: 67:82:bc:1f:05:3a:42:74:57:62:9f:b7:c4:8b:f1:21:64:a8: 8a:30:43:0e:1d:56:db:ef:92:3d:d7:9e:ba:4e:ff:17:1c:86: b6:be:5f:94:a6:c8:c6:d7:e1:09:93:54:fb:41:58:27:14:b3: c5:62:97:79:d3:18:43:82:da:59:7d:54:9e:2e:0b:58:8c:6a: 9f:8a:a2:23 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDVG MzBCNEM1RUNFNkUxMkU2RDkwODg5RDc5NDBEOEUxODcxMDcyQjAeFw0yNTA4MjIw ODQyMTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBCMDVCNTA5OEZENEQ4 OEM3Q0NBOUE2RjhGNTAwMzQxMzVFRDFCQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJZuf/SsR0+BXi87kwJg0XOnomyVp3l8JvXGHxCmevIHYlo8In RC/eN+3ndctC81TKjCFszl0nlJaobnA/3gD4IumMTqyZVEPi4exvrvpIG7wDD5s/ U02ULnZjznULZP4rpNntXTF3xiaEer05fIe0JzfwO+uVf6/0YVcOQKMbBYnKthkL 4ZnycOXNFtpt5pG1rCBuDU9cMskTNGGH0CP8GCorJ5nKsKsV+oM2lafx8ijCRE9/ e1HWKUZTFs//Ck3mCuYzKvR/kj+qCxn+0Lrqxlw0BovBlz/RcbjF0oB6wgTRypBo O9QdjytCldMLRcReQyqBH0BRAfyjN7ggegYlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUCwW1CY/U2Ix8yppvj1ADQTXtG7YwHwYDVR0jBBgwFoAURfMLTF7ObhLm2QiJ 15QNjhhxByswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU01UUlRD SC9SZk1MVEY3T2JoTG0yUWlKMTVRTmpoaHhCeXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1JmTUxURjdPYmhMbTJRaUoxNVFOamhoeEJ5cy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NNVFJUQ0gvQ3dXMUNZX1UySXg4eXBw dmoxQURRVFh0RzdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGclBTANBgkqhkiG9w0BAQsFAAOCAQEAVlc5uve6PXWhb4MAOXr63VF9kPt95vn7 4vSTNEUv3Bo0neR6MRqHQUUhcwMZaXDP6UtCEfwQFRuebqoq6MrTDZoSFbMUTvVF L9OBMcFCpkek0pWE+vD2J/U2BzuIc9FSzrh9bkXPSxfStc3qtZIx+gXwETwV+PBN s4gWvJpp5HfmWk+S5Yaiv5bial2Qctp1H91e7X6pRcW8NiBHe3b464+w2kd7zBGJ Pb9llNlTHHDokgC/Z4K8HwU6QnRXYp+3xIvxIWSoijBDDh1W2++SPdeeuk7/FxyG tr5flKbIxtfhCZNU+0FYJxSzxWKXedMYQ4LaWX1Uni4LWIxqn4qiIw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:44:53 2025 by rpki-client