$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYVC/GPdiDC0ykWhXzpSavmSgV2P1zfk.roa File: GPdiDC0ykWhXzpSavmSgV2P1zfk.roa (raw, json) Hash identifier: yBGYevIZpL6AfPmuYYyRk7Zqakd19i4JH/uq1mGkgLc= Subject key identifier: 18:F7:62:0C:2D:32:91:68:57:CE:94:9A:BE:64:A0:57:63:F5:CD:F9 Certificate issuer: /CN=7448D66FF329D2945C52EA01A567578B50026717 Certificate serial: 03C0 Authority key identifier: 74:48:D6:6F:F3:29:D2:94:5C:52:EA:01:A5:67:57:8B:50:02:67:17 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/GPdiDC0ykWhXzpSavmSgV2P1zfk.roa Signing time: Fri 22 Aug 2025 08:57:44 +0000 ROA not before: Fri 22 Aug 2025 08:57:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7483 IP address blocks: 103.183.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7448D66FF329D2945C52EA01A567578B50026717 Validity Not Before: Aug 22 08:57:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=18F7620C2D32916857CE949ABE64A05763F5CDF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:69:07:1e:f6:b6:58:6b:79:89:9e:54:e7: 7b:0d:2a:dc:04:a4:ce:3e:c9:68:95:30:34:be:b1: 6e:a3:9c:8e:94:f9:f4:41:6e:9d:b3:30:db:17:d2: 1b:64:86:b5:ca:2d:fa:03:d6:5b:9c:06:f3:21:7d: f6:d2:7f:f2:f0:5f:fc:12:be:fd:f9:81:c9:3b:4a: bb:e3:cc:2f:23:4f:58:e2:91:97:2a:86:a2:96:9f: d6:c4:10:6a:cd:80:7a:28:a4:95:61:ae:f2:98:dc: 8b:8c:69:5f:09:ca:33:de:a9:c6:49:93:81:84:45: 04:22:82:48:27:67:aa:38:a0:eb:19:7f:fb:17:63: 4a:f8:21:ad:d1:62:86:ad:2f:2b:b6:30:02:c6:5b: a1:ab:5c:8c:05:ae:c9:eb:40:9e:50:5a:c1:73:ba: 8b:b5:f0:c9:7c:7c:8c:c1:80:eb:af:4e:ee:78:3b: f4:e7:0f:e1:84:ff:a5:f5:14:00:bb:c5:d9:bd:05: 2b:6c:ff:ec:97:0b:99:53:70:df:b4:d4:75:e7:99: ed:bd:77:2f:fa:2b:83:22:12:08:f8:77:24:56:91: f3:70:b7:45:36:50:9a:0c:a4:33:8c:1f:4e:9f:a6: 2c:c5:f2:88:f3:a8:0b:06:15:0d:d3:eb:67:49:5d: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F7:62:0C:2D:32:91:68:57:CE:94:9A:BE:64:A0:57:63:F5:CD:F9 X509v3 Authority Key Identifier: keyid:74:48:D6:6F:F3:29:D2:94:5C:52:EA:01:A5:67:57:8B:50:02:67:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/GPdiDC0ykWhXzpSavmSgV2P1zfk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.183.198.0/23 Signature Algorithm: sha256WithRSAEncryption 60:dc:5e:88:1f:da:ef:b5:9b:3d:d1:09:16:5b:6b:78:10:3d: 58:b9:ae:09:d3:99:1d:2f:56:c1:1d:39:5b:e3:62:27:ad:a9: e4:65:78:89:4d:2d:85:b5:ef:94:f2:18:ab:27:2b:81:8c:af: 14:18:fa:d3:00:77:7e:bb:d1:88:c9:55:31:10:fd:d4:ea:15: fc:d9:b9:fa:48:ba:ea:9f:3d:79:33:02:0a:04:a8:8a:9c:6d: 9d:36:e6:7b:19:71:5f:e3:2a:b3:48:af:ba:b0:a6:a0:18:bb: c2:f4:87:a6:d6:84:0e:b4:aa:47:2a:96:67:13:9e:7e:3d:7e: b6:5e:3a:d9:88:e3:22:c5:9a:43:b5:ed:09:22:8f:61:57:fe: 87:c4:69:2a:ae:4c:91:01:59:ef:b1:1b:b1:c8:21:c0:b1:e5: 4d:b9:b7:9d:37:3b:05:d5:5c:d5:b6:04:df:a9:8f:3c:78:84: 57:20:f9:dc:c1:7a:51:b7:48:21:cb:f2:ed:cd:a4:4e:76:49: 50:20:fd:27:85:c4:97:b5:7d:02:de:d8:4b:18:62:ed:73:dc: ad:51:9b:56:1e:30:67:b4:94:1f:8c:94:d9:37:ce:03:0a:73: 23:63:69:2c:d5:47:a6:e7:4c:48:f7:62:b5:ec:2a:29:b5:c4: 1e:a3:fc:86 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzQ0 OEQ2NkZGMzI5RDI5NDVDNTJFQTAxQTU2NzU3OEI1MDAyNjcxNzAeFw0yNTA4MjIw ODU3NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4Rjc2MjBDMkQzMjkx Njg1N0NFOTQ5QUJFNjRBMDU3NjNGNUNERjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKsGkHHva2WGt5iZ5U53sNKtwEpM4+yWiVMDS+sW6jnI6U+fRB bp2zMNsX0htkhrXKLfoD1lucBvMhffbSf/LwX/wSvv35gck7SrvjzC8jT1jikZcq hqKWn9bEEGrNgHoopJVhrvKY3IuMaV8JyjPeqcZJk4GERQQigkgnZ6o4oOsZf/sX Y0r4Ia3RYoatLyu2MALGW6GrXIwFrsnrQJ5QWsFzuou18Ml8fIzBgOuvTu54O/Tn D+GE/6X1FAC7xdm9BSts/+yXC5lTcN+01HXnme29dy/6K4MiEgj4dyRWkfNwt0U2 UJoMpDOMH06fpizF8ojzqAsGFQ3T62dJXYWHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUGPdiDC0ykWhXzpSavmSgV2P1zfkwHwYDVR0jBBgwFoAUdEjWb/Mp0pRcUuoB pWdXi1ACZxcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lWQy9k RWpXYl9NcDBwUmNVdW9CcFdkWGkxQUNaeGMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2RFaldiX01wMHBSY1V1b0JwV2RYaTFBQ1p4Yy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1NZVkMvR1BkaURDMHlrV2hYenBTYXZtU2dW MlAxemZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe3xjAN BgkqhkiG9w0BAQsFAAOCAQEAYNxeiB/a77WbPdEJFltreBA9WLmuCdOZHS9WwR05 W+NiJ62p5GV4iU0thbXvlPIYqycrgYyvFBj60wB3frvRiMlVMRD91OoV/Nm5+ki6 6p89eTMCCgSoipxtnTbmexlxX+Mqs0ivurCmoBi7wvSHptaEDrSqRyqWZxOefj1+ tl462YjjIsWaQ7XtCSKPYVf+h8RpKq5MkQFZ77EbscghwLHlTbm3nTc7BdVc1bYE 36mPPHiEVyD53MF6UbdIIcvy7c2kTnZJUCD9J4XEl7V9At7YSxhi7XPcrVGbVh4w Z7SUH4yU2TfOAwpzI2NpLNVHpudMSPditewqKbXEHqP8hg== -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:18 2025 by rpki-client