$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IozvRIQ0oUAy94VE2WDzOmuHdXA.roa File: IozvRIQ0oUAy94VE2WDzOmuHdXA.roa (raw, json) Hash identifier: AcdViFLt37+Br7/76uafXKUe9wPLsdm3Un0KfdPZSwo= Subject key identifier: 22:8C:EF:44:84:34:A1:40:32:F7:85:44:D9:60:F3:3A:6B:87:75:70 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F08 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IozvRIQ0oUAy94VE2WDzOmuHdXA.roa Signing time: Fri 22 Aug 2025 08:50:04 +0000 ROA not before: Fri 22 Aug 2025 08:50:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24168 IP address blocks: 103.30.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3848 (0xf08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=228CEF448434A14032F78544D960F33A6B877570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:ba:6d:2d:e8:5c:4e:55:de:b4:f6:27:61: 2e:c0:5d:c5:02:39:f3:25:8a:eb:02:28:8e:b5:78: 75:e1:da:86:43:c1:e7:a0:6a:12:60:7d:88:94:cf: 38:f5:3e:8e:8a:05:6a:cc:b1:83:0c:b2:05:4e:cf: 1f:3a:3d:c2:85:e0:a8:ef:2b:9c:fe:6b:5b:fe:65: 46:ff:e3:ab:55:9b:26:d1:c9:19:7a:1d:a7:15:e8: 1c:9e:ed:56:37:44:36:9e:af:cf:f4:43:d7:dd:d8: aa:0a:ee:b8:a4:c5:3d:ba:24:3a:81:2d:96:0a:54: 16:09:b2:33:81:09:5b:8e:6b:d5:60:39:e2:95:51: 04:3d:11:1a:9d:b5:97:f2:9a:ed:37:4c:9c:30:c2: bf:21:6d:4a:3a:3a:a6:2b:db:ff:21:68:b8:38:d2: 32:fa:e0:98:0f:a4:f1:a5:18:ba:d5:9e:71:90:e2: 9c:40:b7:18:98:74:9a:04:aa:7f:c9:be:56:57:71: f2:9e:ea:35:4b:f3:b1:12:b1:5e:28:dc:5b:8f:68: 13:a9:9e:0e:f1:40:fb:e9:d5:e4:4a:df:5d:a8:b1: 6e:92:2e:09:4d:b9:7a:ff:55:5b:f7:a9:49:97:f2: 94:e9:d6:39:2a:f5:67:9b:5a:90:8d:fd:9b:2c:55: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:EF:44:84:34:A1:40:32:F7:85:44:D9:60:F3:3A:6B:87:75:70 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IozvRIQ0oUAy94VE2WDzOmuHdXA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.30.47.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:78:07:34:2c:2b:27:ed:4b:3e:8d:88:4b:0f:8d:fd:13:55: b6:dd:e9:28:73:a1:82:c5:18:27:57:5c:7d:23:e5:5f:9d:97: fd:a9:82:5f:61:3b:76:2a:39:c5:36:54:11:50:4c:4f:12:8b: 28:20:a6:36:ef:4f:6d:28:3c:72:5b:c8:aa:70:30:1c:ec:fa: ff:dd:47:e2:0c:f3:d9:0b:79:76:de:11:55:14:63:99:cf:69: 8d:a8:af:49:7c:12:2c:1e:92:71:45:83:3c:d9:a2:81:a2:a6: 22:d1:e7:5d:5d:d5:04:e9:e7:e4:1e:c5:b8:c4:91:9c:8c:25: fa:b7:6c:ad:4c:5b:0d:7c:c3:2e:59:2e:42:a2:74:56:fe:dc: 66:61:7e:2e:f6:d7:90:f6:06:51:7f:b9:90:9c:47:ea:ee:06: 21:3a:54:c1:cf:4a:4b:c4:a2:4c:49:54:d9:26:4c:7a:3b:0f: d7:3e:c9:0a:a3:b0:0c:6f:17:9e:63:70:c6:5d:2c:a4:4a:1f: 2b:bd:8a:b3:e6:18:30:34:8d:ca:d7:67:52:32:0a:dd:82:c4: d1:bb:d2:3b:50:2f:e0:74:39:ec:ea:b9:9b:3d:9b:4b:00:4e: 3f:47:ec:04:6f:3e:34:55:65:4f:da:07:54:59:98:6e:fc:19: 30:5c:df:86 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyOENFRjQ0ODQzNEEx NDAzMkY3ODU0NEQ5NjBGMzNBNkI4Nzc1NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGf7ptLehcTlXetPYnYS7AXcUCOfMliusCKI61eHXh2oZDweeg ahJgfYiUzzj1Po6KBWrMsYMMsgVOzx86PcKF4KjvK5z+a1v+ZUb/46tVmybRyRl6 HacV6Bye7VY3RDaer8/0Q9fd2KoK7rikxT26JDqBLZYKVBYJsjOBCVuOa9VgOeKV UQQ9ERqdtZfymu03TJwwwr8hbUo6OqYr2/8haLg40jL64JgPpPGlGLrVnnGQ4pxA txiYdJoEqn/JvlZXcfKe6jVL87ESsV4o3FuPaBOpng7xQPvp1eRK312osW6SLglN uXr/VVv3qUmX8pTp1jkq9WebWpCN/ZssVaiVAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUIozvRIQ0oUAy94VE2WDzOmuHdXAwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL0lvenZSSVEwb1VB eTk0VkUyV0R6T211SGRYQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnHi8wDQYJKoZIhvcNAQELBQADggEBAB94BzQsKyftSz6NiEsPjf0TVbbd 6ShzoYLFGCdXXH0j5V+dl/2pgl9hO3YqOcU2VBFQTE8SiyggpjbvT20oPHJbyKpw MBzs+v/dR+IM89kLeXbeEVUUY5nPaY2or0l8EiweknFFgzzZooGipiLR511d1QTp 5+QexbjEkZyMJfq3bK1MWw18wy5ZLkKidFb+3GZhfi7215D2BlF/uZCcR+ruBiE6 VMHPSkvEokxJVNkmTHo7D9c+yQqjsAxvF55jcMZdLKRKHyu9irPmGDA0jcrXZ1Iy Ct2CxNG70jtQL+B0OezquZs9m0sATj9H7ARvPjRVZU/aB1RZmG78GTBc34Y= -----END CERTIFICATE-----Generated at Sun Aug 24 11:43:41 2025 by rpki-client