$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/XwbQs2miMjsDDGygx4znQM4SLGY.roa File: XwbQs2miMjsDDGygx4znQM4SLGY.roa (raw, json) Hash identifier: VeDX7VJDyysZ6SeysIa0G1MmLCz4cl5uSijmbSoYibY= Subject key identifier: 5F:06:D0:B3:69:A2:32:3B:03:0C:6C:A0:C7:8C:E7:40:CE:12:2C:66 Certificate issuer: /CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC Certificate serial: 0502 Authority key identifier: 1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/XwbQs2miMjsDDGygx4znQM4SLGY.roa Signing time: Fri 22 Aug 2025 09:03:24 +0000 ROA not before: Fri 22 Aug 2025 09:03:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38856 IP address blocks: 103.159.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC Validity Not Before: Aug 22 09:03:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F06D0B369A2323B030C6CA0C78CE740CE122C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:0a:a5:89:0a:29:59:45:4b:cf:45:61:0b: 6d:6a:17:7e:4a:02:90:61:82:7e:78:1c:8b:c6:07: 1a:c2:64:15:02:e9:d5:6f:90:5f:20:92:13:42:01: 80:a3:91:87:90:fa:24:ca:3f:b6:15:87:ee:ea:e5: 43:cb:3d:9d:38:05:c8:06:41:45:e7:7d:12:8c:79: 38:85:e6:fe:47:40:bf:68:07:29:ad:57:61:6c:9f: 10:e2:ac:e1:9c:eb:70:9a:34:af:b7:b1:16:2a:fd: 76:40:a2:20:5b:1a:78:a9:1a:c3:d0:cb:41:f7:f9: 77:3d:c4:76:37:95:13:b0:70:c0:2c:38:81:ce:ed: 48:7b:48:8e:ff:7a:2b:d0:1d:b3:93:37:f3:b7:fd: 1f:de:f6:e6:6d:23:11:57:47:ac:39:d2:b1:76:cb: e8:54:f8:dc:bb:81:dd:cb:00:e6:04:75:3c:5d:3d: 4d:82:9b:8d:76:5f:8c:75:7f:ab:e0:66:7d:f1:5c: a5:78:c4:d4:3a:6c:e7:84:f7:b1:04:ef:e0:65:ec: 6e:2e:ef:8e:d2:c1:2c:db:b2:e5:34:1f:37:ce:f0: 0e:61:bf:02:33:05:fc:e5:2d:17:c7:f3:d9:a4:5f: d9:7c:c0:80:23:da:8a:05:93:fd:52:58:31:eb:e4: b8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:06:D0:B3:69:A2:32:3B:03:0C:6C:A0:C7:8C:E7:40:CE:12:2C:66 X509v3 Authority Key Identifier: keyid:1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/XwbQs2miMjsDDGygx4znQM4SLGY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.118.0/23 Signature Algorithm: sha256WithRSAEncryption 55:f9:30:75:7a:37:1f:46:68:c8:dd:1a:2c:82:e7:96:24:c8: af:19:d6:d5:e6:1d:60:05:4b:5f:0b:dd:26:c6:91:27:33:f3: 83:ed:0b:73:f8:52:a8:9c:68:4d:1b:5a:36:db:39:ce:bb:08: 8f:54:eb:89:ae:63:88:07:f3:e1:7e:1e:83:ff:c9:78:9c:a5: 3c:78:46:f1:ef:bf:28:94:8c:73:86:8d:04:f6:1f:b8:2a:4f: 56:69:f2:d4:69:a7:9e:c5:af:5b:5a:35:b2:4a:53:af:18:ec: 20:5a:cd:65:71:91:4d:d4:a0:ac:11:e3:73:50:d8:3a:d9:c0: 79:57:90:a2:02:22:73:61:c4:a8:05:b2:30:33:ae:72:aa:db: 82:6e:30:0a:8a:04:81:67:d9:e2:16:00:45:22:cb:48:e3:ed: 30:c0:fc:36:29:02:07:d3:2f:24:f3:ab:e4:33:e6:cc:64:f5: fd:f8:a4:cc:f8:50:79:b1:0c:d5:b8:27:d4:6f:bb:46:a7:96: 60:0b:34:4f:0b:06:e8:2a:82:58:48:e7:3b:1b:62:fc:cd:bf: bb:36:39:a4:83:d7:9c:a2:f5:2e:c2:2a:24:d5:30:c1:c0:84: f6:2c:00:34:e7:c2:70:ea:5d:99:91:64:d6:97:81:ae:be:4b: c0:b3:13:e6 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUU3 OUM2QzAzM0JCOUQ0NjlFMENFODE2NDUzOERGMzlFOUYxQzNCQzAeFw0yNTA4MjIw OTAzMjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGMDZEMEIzNjlBMjMy M0IwMzBDNkNBMEM3OENFNzQwQ0UxMjJDNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUKwqliQopWUVLz0VhC21qF35KApBhgn54HIvGBxrCZBUC6dVv kF8gkhNCAYCjkYeQ+iTKP7YVh+7q5UPLPZ04BcgGQUXnfRKMeTiF5v5HQL9oBymt V2FsnxDirOGc63CaNK+3sRYq/XZAoiBbGnipGsPQy0H3+Xc9xHY3lROwcMAsOIHO 7Uh7SI7/eivQHbOTN/O3/R/e9uZtIxFXR6w50rF2y+hU+Ny7gd3LAOYEdTxdPU2C m412X4x1f6vgZn3xXKV4xNQ6bOeE97EE7+Bl7G4u747SwSzbsuU0HzfO8A5hvwIz BfzlLRfH89mkX9l8wIAj2ooFk/1SWDHr5LhJAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUXwbQs2miMjsDDGygx4znQM4SLGYwHwYDVR0jBBgwFoAUHnnGwDO7nUaeDOgW RTjfOenxw7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FMS1ND TE9VRC9Ibm5Hd0RPN25VYWVET2dXUlRqZk9lbnh3N3cuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0hubkd3RE83blVhZURPZ1dSVGpmT2VueHc3dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1dBTEtTQ0xPVUQvWHdiUXMybWlN anNEREd5Z3g0em5RTTRTTEdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWefdjANBgkqhkiG9w0BAQsFAAOCAQEAVfkwdXo3H0ZoyN0aLILnliTI rxnW1eYdYAVLXwvdJsaRJzPzg+0Lc/hSqJxoTRtaNts5zrsIj1Tria5jiAfz4X4e g//JeJylPHhG8e+/KJSMc4aNBPYfuCpPVmny1GmnnsWvW1o1skpTrxjsIFrNZXGR TdSgrBHjc1DYOtnAeVeQogIic2HEqAWyMDOucqrbgm4wCooEgWfZ4hYARSLLSOPt MMD8NikCB9MvJPOr5DPmzGT1/fikzPhQebEM1bgn1G+7RqeWYAs0TwsG6CqCWEjn Oxti/M2/uzY5pIPXnKL1LsIqJNUwwcCE9iwANOfCcOpdmZFk1peBrr5LwLMT5g== -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:21 2025 by rpki-client