$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/fSzpRGkt_28xlOq9pXZCaTkPoMs.roa File: fSzpRGkt_28xlOq9pXZCaTkPoMs.roa (raw, json) Hash identifier: kJKqHPD3+0GiXuvxVaNZXIedlya0IpQj3d2MLlRjl5I= Subject key identifier: 7D:2C:E9:44:69:2D:FF:6F:31:94:EA:BD:A5:76:42:69:39:0F:A0:CB Certificate issuer: /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7 Certificate serial: 07A4 Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/fSzpRGkt_28xlOq9pXZCaTkPoMs.roa Signing time: Fri 22 Aug 2025 08:55:17 +0000 ROA not before: Fri 22 Aug 2025 08:55:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 103.152.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7 Validity Not Before: Aug 22 08:55:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7D2CE944692DFF6F3194EABDA5764269390FA0CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:07:a1:e7:18:79:c3:f5:f1:63:d5:f5:40: 9b:5b:ab:49:86:3c:cf:0e:ea:80:ef:09:6f:35:6a: eb:71:ae:75:9c:da:89:76:75:c5:ea:9b:37:91:1c: 33:ca:39:48:e8:78:1f:63:08:ac:15:d1:d9:83:71: ca:94:36:af:ff:89:32:db:15:4e:8d:90:4d:49:3d: da:63:65:76:5b:d2:56:6f:63:d9:b8:f0:7e:15:72: 5f:c1:ba:59:81:c1:c6:0a:12:07:8a:8a:dc:06:d6: 45:a8:6a:c3:7e:22:3c:c3:69:f4:f9:fa:2e:49:c4: 75:5c:48:04:b0:c1:32:57:6c:14:19:9a:31:7a:2e: 7a:d0:5e:99:0c:3e:e8:a8:dc:ad:91:2b:98:e9:34: 44:d7:e5:3e:32:3b:58:82:c5:ee:47:08:54:24:81: f6:59:85:a0:6e:a6:f7:b0:41:f1:ed:a7:a2:58:34: 96:ed:f4:a7:7e:b9:42:03:59:ab:11:a3:71:49:a0: 78:14:58:50:ab:65:1a:47:6e:e1:e9:c9:b6:c1:44: f0:32:cf:bf:e0:3d:3e:2a:65:e4:c0:2a:10:e1:55: 9b:99:0a:7a:58:f2:14:dc:bc:03:25:c2:e1:66:a9: e2:ed:f8:2c:35:05:71:51:54:e9:d6:85:de:0b:35: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2C:E9:44:69:2D:FF:6F:31:94:EA:BD:A5:76:42:69:39:0F:A0:CB X509v3 Authority Key Identifier: keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/fSzpRGkt_28xlOq9pXZCaTkPoMs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.150.0/24 Signature Algorithm: sha256WithRSAEncryption 30:92:28:63:c4:98:3b:ab:84:98:ea:40:24:0d:86:a0:7f:4f: 44:ed:92:4c:dd:e0:9c:0c:0c:39:66:af:9b:47:0c:4c:56:a8: 7c:15:ee:c1:46:0b:de:ee:bf:9a:da:fb:02:5b:ad:4d:d9:b6: f0:09:f1:b3:6b:45:3a:94:a6:5d:e6:7a:00:b4:3f:e1:f9:bf: 35:20:8f:5c:95:2e:99:86:e4:2d:65:c5:9f:14:69:bf:64:1d: 09:00:c3:22:51:fc:a3:ff:1f:2e:c0:1d:c3:03:ec:e6:37:25: 52:ca:2c:85:8d:70:55:dd:ef:0f:89:e0:90:c4:c0:25:a3:b5: 5b:60:d0:7d:ef:89:80:bf:5b:8e:53:2a:02:4b:4d:5a:17:bb: f3:5d:2f:5a:22:9e:b6:51:12:c2:bb:ed:e0:bb:d2:77:b1:97: d5:89:26:25:92:aa:39:26:19:34:95:a4:4d:16:2e:60:f8:39: f3:ef:97:6b:c7:fc:56:09:06:31:cc:0b:74:f9:d2:c8:26:10: 70:ad:25:dd:e6:76:a8:0f:99:eb:40:d8:ce:fc:34:42:b4:40: bb:4d:80:38:cc:74:76:cf:b9:36:29:3b:1d:fe:6a:b1:29:98: 1c:03:2c:51:ad:6f:6f:91:9c:51:72:c8:2d:a2:86:4c:86:08: 07:0d:3c:2a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjI4 MzlCRjdBNkM2QjE3RTdDRkNCMzczNEEzNkMwRTk4QzM3QTFCNzAeFw0yNTA4MjIw ODU1MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdEMkNFOTQ0NjkyREZG NkYzMTk0RUFCREE1NzY0MjY5MzkwRkEwQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPFweh5xh5w/XxY9X1QJtbq0mGPM8O6oDvCW81autxrnWc2ol2 dcXqmzeRHDPKOUjoeB9jCKwV0dmDccqUNq//iTLbFU6NkE1JPdpjZXZb0lZvY9m4 8H4Vcl/BulmBwcYKEgeKitwG1kWoasN+IjzDafT5+i5JxHVcSASwwTJXbBQZmjF6 LnrQXpkMPuio3K2RK5jpNETX5T4yO1iCxe5HCFQkgfZZhaBupvewQfHtp6JYNJbt 9Kd+uUIDWasRo3FJoHgUWFCrZRpHbuHpybbBRPAyz7/gPT4qZeTAKhDhVZuZCnpY 8hTcvAMlwuFmqeLt+Cw1BXFRVOnWhd4LNaLlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfSzpRGkt/28xlOq9pXZCaTkPoMswHwYDVR0jBBgwFoAUsoOb96bGsX58/LNz SjbA6Yw3obcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1VNQVRS QS9zb09iOTZiR3NYNThfTE56U2piQTZZdzNvYmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3NvT2I5NmJHc1g1OF9MTnpTamJBNll3M29iYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NVTUFUUkEvZlN6cFJHa3RfMjh4bE9x OXBYWkNhVGtQb01zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeYljANBgkqhkiG9w0BAQsFAAOCAQEAMJIoY8SYO6uEmOpAJA2GoH9PRO2STN3g nAwMOWavm0cMTFaofBXuwUYL3u6/mtr7AlutTdm28Anxs2tFOpSmXeZ6ALQ/4fm/ NSCPXJUumYbkLWXFnxRpv2QdCQDDIlH8o/8fLsAdwwPs5jclUsoshY1wVd3vD4ng kMTAJaO1W2DQfe+JgL9bjlMqAktNWhe7810vWiKetlESwrvt4LvSd7GX1YkmJZKq OSYZNJWkTRYuYPg58++Xa8f8VgkGMcwLdPnSyCYQcK0l3eZ2qA+Z60DYzvw0QrRA u02AOMx0ds+5Nik7Hf5qsSmYHAMsUa1vb5GcUXLILaKGTIYIBw08Kg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:40:23 2025 by rpki-client