$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/K1M7WUi8gCT1PnYAM2KhTFks2Ec.roa File: K1M7WUi8gCT1PnYAM2KhTFks2Ec.roa (raw, json) Hash identifier: xx6HEFnBs3eG9zljRpShMxuoK8BMean4OljSKKmM5KY= Subject key identifier: 2B:53:3B:59:48:BC:80:24:F5:3E:76:00:33:62:A1:4C:59:2C:D8:47 Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Certificate serial: 09D8 Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/K1M7WUi8gCT1PnYAM2KhTFks2Ec.roa Signing time: Fri 22 Aug 2025 08:50:44 +0000 ROA not before: Fri 22 Aug 2025 08:50:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 211.76.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Validity Not Before: Aug 22 08:50:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B533B5948BC8024F53E76003362A14C592CD847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:4a:63:91:cd:a8:25:53:71:24:17:5d:0e: 98:00:35:fd:85:c1:08:a5:11:98:cb:87:89:d7:f9: 62:5c:dc:b6:2b:12:1a:fb:8b:72:58:5d:2a:66:ab: 03:6d:45:3e:14:cb:b5:4d:3d:bd:bb:1f:4a:d6:be: d3:7c:31:b8:d4:d4:5f:2b:30:88:88:d3:24:aa:38: 5d:5e:d4:46:d2:10:20:65:cc:6d:9f:e5:d9:c7:38: 87:26:e6:de:bf:75:c9:01:12:1c:07:1d:2f:23:d6: e1:9a:5d:37:76:db:21:c6:32:cd:e8:ac:7c:b0:ab: 07:ec:29:35:b4:da:b6:39:7e:37:21:e7:09:3a:c8: 26:2a:5f:a1:3f:b6:57:d0:4e:82:4a:70:bd:fb:e9: fe:db:9a:6f:12:60:72:be:f2:3d:e5:c9:1e:39:f5: f3:1a:bb:8a:52:a7:23:65:d5:ac:6e:da:32:0e:8c: c3:c9:ea:81:27:78:1c:26:82:ec:07:5e:cf:6b:b0: a0:49:97:8d:2a:3b:92:8e:f5:53:a3:f5:f6:6d:57: 39:2e:7f:9f:45:00:a6:90:6c:22:4e:7b:b5:56:c8: 63:b6:c4:e0:5d:fa:ec:af:18:2f:ec:69:44:4a:b1: 67:fa:69:3c:a9:f5:a4:90:8e:d9:ff:5b:bd:1a:c7: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:53:3B:59:48:BC:80:24:F5:3E:76:00:33:62:A1:4C:59:2C:D8:47 X509v3 Authority Key Identifier: keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/K1M7WUi8gCT1PnYAM2KhTFks2Ec.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.182.0/24 Signature Algorithm: sha256WithRSAEncryption 97:78:dd:1d:77:63:d0:7c:e1:48:6b:2b:7e:7f:cd:b1:cf:f8: ff:28:ca:c0:12:ec:18:be:63:5a:e5:26:f6:e5:b2:10:70:b8: 24:37:e2:3e:ce:68:76:91:ec:e4:c1:4c:99:e7:2c:03:18:e1: 11:d8:f0:d3:58:43:25:8e:51:8c:9d:04:e5:7f:2c:cb:b7:49: 60:f9:fd:fc:c1:83:62:de:03:a7:4a:06:0b:fd:fb:cf:26:82: 6d:60:7b:48:d3:4c:f7:6a:e0:db:d6:2a:64:47:48:6a:6a:ad: 9c:e6:49:28:97:1e:52:6d:a8:07:35:a6:79:12:1f:3d:6e:fd: 10:9b:bf:bb:c8:d4:2f:8d:67:c4:cb:0a:e2:06:6c:33:47:fc: f3:01:8a:10:be:69:97:0a:a6:06:fe:40:f5:ba:d9:6f:d3:c7: 0c:01:ad:cc:87:fc:1b:69:98:1b:28:fb:42:a6:5d:36:95:17: 7c:82:2a:1e:a9:25:9b:a2:e4:6c:cd:ef:cc:04:b2:36:4b:81: 3f:f5:5c:58:1f:13:8c:c5:67:98:28:13:e1:89:02:06:0b:7f: 8a:2d:a1:ad:d1:d6:03:ef:4f:6a:4a:48:e3:49:b8:ab:29:b4: ca:6f:f3:71:e8:32:5a:45:ea:1e:75:5f:56:a0:db:12:f5:6a: ab:35:5e:5b -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FE NTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRBQzAeFw0yNTA4MjIw ODUwNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCNTMzQjU5NDhCQzgw MjRGNTNFNzYwMDMzNjJBMTRDNTkyQ0Q4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD5Epjkc2oJVNxJBddDpgANf2FwQilEZjLh4nX+WJc3LYrEhr7 i3JYXSpmqwNtRT4Uy7VNPb27H0rWvtN8MbjU1F8rMIiI0ySqOF1e1EbSECBlzG2f 5dnHOIcm5t6/dckBEhwHHS8j1uGaXTd22yHGMs3orHywqwfsKTW02rY5fjch5wk6 yCYqX6E/tlfQToJKcL376f7bmm8SYHK+8j3lyR459fMau4pSpyNl1axu2jIOjMPJ 6oEneBwmguwHXs9rsKBJl40qO5KO9VOj9fZtVzkuf59FAKaQbCJOe7VWyGO2xOBd +uyvGC/saURKsWf6aTyp9aSQjtn/W70ax6EZAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUK1M7WUi8gCT1PnYAM2KhTFks2EcwHwYDVR0jBBgwFoAUytUnAiyM0HVo7J/I Khzg3eWyxKwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNU V0FSRS95dFVuQWl5TTBIVm83Sl9JS2h6ZzNlV3l4S3cuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RXQkVTVFdBUkUvSzFNN1dVaThn Q1QxUG5ZQU0yS2hURmtzMkVjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANNMtjANBgkqhkiG9w0BAQsFAAOCAQEAl3jdHXdj0HzhSGsrfn/Nsc/4 /yjKwBLsGL5jWuUm9uWyEHC4JDfiPs5odpHs5MFMmecsAxjhEdjw01hDJY5RjJ0E 5X8sy7dJYPn9/MGDYt4Dp0oGC/37zyaCbWB7SNNM92rg29YqZEdIamqtnOZJKJce Um2oBzWmeRIfPW79EJu/u8jUL41nxMsK4gZsM0f88wGKEL5plwqmBv5A9brZb9PH DAGtzIf8G2mYGyj7QqZdNpUXfIIqHqklm6LkbM3vzASyNkuBP/VcWB8TjMVnmCgT 4YkCBgt/ii2hrdHWA+9PakpI40m4qym0ym/zcegyWkXqHnVfVqDbEvVqqzVeWw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:32 2025 by rpki-client