$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/X3HNfKzSMnHzrMlZzSxNw5i3Wx0.roa File: X3HNfKzSMnHzrMlZzSxNw5i3Wx0.roa (raw, json) Hash identifier: Zlx/dMqQvfHPqN4LG5ukZTObxfPt9FJV4MPGyU+fvYM= Subject key identifier: 5F:71:CD:7C:AC:D2:32:71:F3:AC:C9:59:CD:2C:4D:C3:98:B7:5B:1D Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F1A Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/X3HNfKzSMnHzrMlZzSxNw5i3Wx0.roa Signing time: Fri 22 Aug 2025 08:50:08 +0000 ROA not before: Fri 22 Aug 2025 08:50:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18424 IP address blocks: 103.30.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3866 (0xf1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F71CD7CACD23271F3ACC959CD2C4DC398B75B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:33:36:95:7e:0a:77:b9:82:52:30:b6:6f: f5:7d:89:cd:45:13:91:f2:41:20:45:ed:cb:9d:bb: 80:36:d8:25:10:dd:4c:a5:04:17:95:58:86:8f:19: b2:a9:8c:8d:2e:4f:21:1a:ff:63:bf:27:6f:80:ae: bc:a9:3e:27:fc:27:97:84:bb:7a:b2:ff:17:56:b2: 13:c1:d5:c5:6f:5a:20:78:6f:84:c6:8c:aa:f5:06: 86:5c:21:3e:5b:e1:ba:66:09:cc:07:9a:79:20:15: 87:2a:96:a0:2c:b4:8e:e4:99:35:1d:7e:7a:ed:a8: 87:47:ce:82:12:ce:e2:72:61:7e:b5:bb:84:22:13: 5a:07:29:92:6c:cc:0f:74:9f:cf:3f:7f:b8:21:7d: e3:cd:d9:d8:9f:20:0e:9a:6b:da:be:1f:07:a1:c0: 15:44:a5:a8:b8:e8:df:fc:da:db:f0:9c:28:4f:fa: a9:72:9d:9d:ea:88:58:95:bf:f0:78:19:e0:1f:4f: 17:12:7b:42:06:8d:ed:18:64:af:a4:94:f8:36:2d: 7d:3a:06:a9:a3:5d:b2:77:60:ba:90:be:a4:6f:1b: 1d:fa:ca:e3:91:d8:e5:3b:d8:20:1a:aa:df:2a:aa: 68:74:74:c3:23:db:6e:b5:18:43:d0:ab:df:41:b4: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:CD:7C:AC:D2:32:71:F3:AC:C9:59:CD:2C:4D:C3:98:B7:5B:1D X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/X3HNfKzSMnHzrMlZzSxNw5i3Wx0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.30.44.0/22 Signature Algorithm: sha256WithRSAEncryption 31:93:56:ed:e8:96:2d:e7:5d:d3:3e:d2:7e:9e:9e:bb:a9:9c: 9e:8f:60:f1:70:cd:1b:72:e6:77:90:9d:3e:56:00:26:74:e1: bf:bc:ec:0f:ba:0f:1c:2a:b9:28:00:22:9a:48:f0:4f:c2:e2: 55:67:6f:76:90:ab:0b:bf:57:44:81:3a:34:c2:44:aa:2e:6b: 4f:f5:dd:f5:61:e6:20:08:8f:2e:36:89:4a:8d:f4:a3:28:66: 5a:a3:17:91:b2:89:7a:5a:56:2c:ab:b9:e3:60:32:87:4d:40: 50:0f:78:ca:a1:9d:68:47:7c:8a:58:71:62:2f:56:7f:79:e6: ff:46:d1:00:50:c9:1f:67:fe:f6:6e:cc:94:4f:c1:b7:ef:85: 3e:5b:e2:8a:72:3c:3d:e1:99:6a:8a:fe:b2:e1:5b:9f:f8:7f: 55:a5:47:4d:72:5c:66:32:ef:c7:3c:9b:4f:02:e8:c6:92:ed: 53:c0:a2:2d:12:6d:29:a6:f9:84:5d:d5:a5:b1:15:31:ae:04: 66:05:88:57:8d:54:23:79:d2:54:a0:c8:4d:08:b7:a7:49:e6: 52:83:4a:65:a1:db:1d:f6:6a:c6:1d:79:1d:52:f6:4a:98:e2: 13:96:aa:44:55:93:ed:29:f9:61:ae:0d:ed:e8:ee:d7:67:79: 97:40:70:1d -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGNzFDRDdDQUNEMjMy NzFGM0FDQzk1OUNEMkM0REMzOThCNzVCMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNSDM2lX4Kd7mCUjC2b/V9ic1FE5HyQSBF7cudu4A22CUQ3Uyl BBeVWIaPGbKpjI0uTyEa/2O/J2+ArrypPif8J5eEu3qy/xdWshPB1cVvWiB4b4TG jKr1BoZcIT5b4bpmCcwHmnkgFYcqlqAstI7kmTUdfnrtqIdHzoISzuJyYX61u4Qi E1oHKZJszA90n88/f7ghfePN2difIA6aa9q+HwehwBVEpai46N/82tvwnChP+qly nZ3qiFiVv/B4GeAfTxcSe0IGje0YZK+klPg2LX06BqmjXbJ3YLqQvqRvGx36yuOR 2OU72CAaqt8qqmh0dMMj2261GEPQq99BtEt5AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUX3HNfKzSMnHzrMlZzSxNw5i3Wx0wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1gzSE5mS3pTTW5I enJNbFp6U3hOdzVpM1d4MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnHiwwDQYJKoZIhvcNAQELBQADggEBADGTVu3oli3nXdM+0n6enrupnJ6P YPFwzRty5neQnT5WACZ04b+87A+6DxwquSgAIppI8E/C4lVnb3aQqwu/V0SBOjTC RKoua0/13fVh5iAIjy42iUqN9KMoZlqjF5GyiXpaViyrueNgModNQFAPeMqhnWhH fIpYcWIvVn955v9G0QBQyR9n/vZuzJRPwbfvhT5b4opyPD3hmWqK/rLhW5/4f1Wl R01yXGYy78c8m08C6MaS7VPAoi0SbSmm+YRd1aWxFTGuBGYFiFeNVCN50lSgyE0I t6dJ5lKDSmWh2x32asYdeR1S9kqY4hOWqkRVk+0p+WGuDe3o7tdneZdAcB0= -----END CERTIFICATE-----Generated at Sun Aug 24 11:43:50 2025 by rpki-client