$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/sf8inXxwjMQ2S-BAwJgH4wHxzIo.roa File: sf8inXxwjMQ2S-BAwJgH4wHxzIo.roa (raw, json) Hash identifier: tiSwac7s7pEmzRcmOUJiwHisQWjGi7T8ExdWUHXItxE= Subject key identifier: B1:FF:22:9D:7C:70:8C:C4:36:4B:E0:40:C0:98:07:E3:01:F1:CC:8A Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Certificate serial: 09D9 Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/sf8inXxwjMQ2S-BAwJgH4wHxzIo.roa Signing time: Fri 22 Aug 2025 08:50:44 +0000 ROA not before: Fri 22 Aug 2025 08:50:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 103.150.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Validity Not Before: Aug 22 08:50:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B1FF229D7C708CC4364BE040C09807E301F1CC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:3e:0e:34:c4:6b:ba:15:82:a4:8c:97:6d: 8b:af:4b:4c:5c:de:03:63:d1:4e:27:93:99:7e:50: ae:35:1e:d5:cf:5f:20:d8:e8:49:0d:fb:2f:af:3d: 41:29:3b:03:b3:df:13:6b:47:66:3c:de:f1:1f:02: 49:d2:81:15:22:29:6a:c2:6b:1f:38:4d:b5:f4:37: 59:15:3a:30:1b:28:9a:59:3c:1b:0c:65:fb:ab:ea: c8:c7:15:7d:ed:7b:ed:e6:b4:f1:f6:e0:55:8e:79: b9:f3:cc:6d:f5:40:db:1d:8a:5d:0c:ed:db:d1:a1: 32:89:01:b6:1e:66:eb:ad:30:2d:8b:c0:e4:b4:47: e9:73:f4:e0:83:a0:e8:9a:ea:a2:92:74:8f:57:51: 57:56:5d:9e:fa:4f:16:04:f7:e5:0c:fb:c1:1b:3d: 38:56:5a:40:bf:51:06:05:40:ab:d3:eb:a5:0c:7e: 47:08:43:60:99:fc:33:7d:39:97:e4:5e:8f:a6:66: f1:3f:0c:4c:82:87:e4:55:37:3f:c1:30:24:0e:3a: bb:8a:ea:4d:8a:46:13:e0:62:38:9c:4f:ad:a6:2e: 1c:f3:d8:2c:8f:5b:06:69:93:5f:09:2f:10:a4:4b: 30:08:91:79:bf:48:61:c5:fb:06:de:50:99:2a:b0: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:22:9D:7C:70:8C:C4:36:4B:E0:40:C0:98:07:E3:01:F1:CC:8A X509v3 Authority Key Identifier: keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/sf8inXxwjMQ2S-BAwJgH4wHxzIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.150.36.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:65:0d:19:a7:49:b1:b1:0b:b5:2a:e4:87:f3:1d:9a:46:f4: 92:76:4f:8b:45:68:dc:b6:a6:b1:39:15:c7:c7:0b:b9:7f:66: db:17:8e:38:cf:1d:18:b3:88:c3:8b:fc:07:a0:9e:1d:1e:e5: c5:bf:ca:2b:45:45:32:18:58:0d:51:a9:30:30:b9:a1:4b:fa: 8e:50:c4:c6:62:b0:84:2f:1f:48:2c:ea:22:44:26:6e:89:2b: 20:13:91:4c:a4:87:53:c2:56:13:51:3c:b2:7c:34:e5:fa:27: dc:79:97:39:8c:83:08:1d:51:5f:bf:f9:21:fa:2e:bb:ec:58: 35:32:2e:20:18:1f:b1:45:3c:7f:57:b3:ae:32:c0:fe:db:da: a7:2d:02:ab:e7:4a:65:83:04:18:b9:da:e7:c6:71:64:c1:c7: 83:cc:6f:37:48:f4:32:1d:a7:d8:3f:6e:f1:db:de:d1:2b:d6: 2b:ed:e7:5a:a0:81:88:0d:34:7f:8d:7e:c5:44:f1:54:26:b0: 9c:50:3c:78:cc:4b:d4:8d:22:77:86:21:92:8e:84:4e:4b:c5: 1c:17:91:5e:fa:54:64:29:5a:fa:87:f9:ca:f1:b6:be:03:06: 26:1c:d4:87:74:f6:82:b6:79:39:02:6a:89:bb:16:3a:c8:66: c4:57:38:45 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FE NTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRBQzAeFw0yNTA4MjIw ODUwNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIxRkYyMjlEN0M3MDhD QzQzNjRCRTA0MEMwOTgwN0UzMDFGMUNDOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8gT4ONMRruhWCpIyXbYuvS0xc3gNj0U4nk5l+UK41HtXPXyDY 6EkN+y+vPUEpOwOz3xNrR2Y83vEfAknSgRUiKWrCax84TbX0N1kVOjAbKJpZPBsM Zfur6sjHFX3te+3mtPH24FWOebnzzG31QNsdil0M7dvRoTKJAbYeZuutMC2LwOS0 R+lz9OCDoOia6qKSdI9XUVdWXZ76TxYE9+UM+8EbPThWWkC/UQYFQKvT66UMfkcI Q2CZ/DN9OZfkXo+mZvE/DEyCh+RVNz/BMCQOOruK6k2KRhPgYjicT62mLhzz2CyP WwZpk18JLxCkSzAIkXm/SGHF+wbeUJkqsKZnAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUsf8inXxwjMQ2S+BAwJgH4wHxzIowHwYDVR0jBBgwFoAUytUnAiyM0HVo7J/I Khzg3eWyxKwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNU V0FSRS95dFVuQWl5TTBIVm83Sl9JS2h6ZzNlV3l4S3cuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RXQkVTVFdBUkUvc2Y4aW5YeHdq TVEyUy1CQXdKZ0g0d0h4eklvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGeWJDANBgkqhkiG9w0BAQsFAAOCAQEAW2UNGadJsbELtSrkh/Mdmkb0 knZPi0Vo3LamsTkVx8cLuX9m2xeOOM8dGLOIw4v8B6CeHR7lxb/KK0VFMhhYDVGp MDC5oUv6jlDExmKwhC8fSCzqIkQmbokrIBORTKSHU8JWE1E8snw05fon3HmXOYyD CB1RX7/5Ifouu+xYNTIuIBgfsUU8f1ezrjLA/tvapy0Cq+dKZYMEGLna58ZxZMHH g8xvN0j0Mh2n2D9u8dve0SvWK+3nWqCBiA00f41+xUTxVCawnFA8eMxL1I0id4Yh ko6ETkvFHBeRXvpUZCla+of5yvG2vgMGJhzUh3T2grZ5OQJqibsWOshmxFc4RQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:29 2025 by rpki-client