$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/XHr65MDL8v3DfZuOM2F2-23qRz0.roa File: XHr65MDL8v3DfZuOM2F2-23qRz0.roa (raw, json) Hash identifier: FGc66pcx8u20vrZGKkPvCCoCAmsjilm1+u0h4jv8+cw= Subject key identifier: 5C:7A:FA:E4:C0:CB:F2:FD:C3:7D:9B:8E:33:61:76:FB:6D:EA:47:3D Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F0B Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/XHr65MDL8v3DfZuOM2F2-23qRz0.roa Signing time: Fri 22 Aug 2025 08:50:05 +0000 ROA not before: Fri 22 Aug 2025 08:50:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18424 IP address blocks: 103.30.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3851 (0xf0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C7AFAE4C0CBF2FDC37D9B8E336176FB6DEA473D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:77:30:42:ae:8b:f4:c3:64:2c:b6:cb:c0: d2:30:1a:40:e3:f5:ab:f3:b5:ae:fb:68:5c:87:36: e6:88:c1:30:bc:4b:e7:46:14:39:cd:a0:ed:92:1a: cd:5a:29:1e:4d:06:17:62:00:9f:6a:9a:d4:18:d8: 2a:2b:e6:07:4a:93:82:f6:27:b3:c5:36:47:f8:07: 0d:b0:e5:94:06:26:d8:02:a1:b1:85:11:55:55:0c: 5e:c4:06:86:07:88:ff:38:42:91:7f:d5:d1:c5:da: f3:fb:e3:ec:e4:88:04:c8:99:12:01:de:65:49:3c: f8:2c:8e:24:ea:c2:3a:90:6a:4a:22:6a:6a:ab:5e: a6:92:f8:e3:9c:a9:34:81:36:fd:b0:79:65:f5:f1: 4b:28:46:d1:a4:e8:12:9b:b0:af:49:0c:b7:93:a6: db:cb:c1:38:8b:55:b5:83:05:45:a7:77:c6:a4:64: 6b:86:6c:20:ba:42:d1:0e:ee:84:ea:99:8b:18:37: d6:12:db:a5:ca:30:4c:6d:d2:dd:c5:11:3d:4f:23: f7:39:94:e3:b3:62:59:bc:63:f3:48:cf:ac:29:59: 44:dc:23:ae:62:1b:48:b3:04:b8:1f:55:d7:3d:7a: 0c:ef:12:ae:13:30:b6:43:8b:7b:16:95:5e:66:3b: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7A:FA:E4:C0:CB:F2:FD:C3:7D:9B:8E:33:61:76:FB:6D:EA:47:3D X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/XHr65MDL8v3DfZuOM2F2-23qRz0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.30.46.0/23 Signature Algorithm: sha256WithRSAEncryption aa:ba:72:5f:9c:b1:01:14:c4:32:62:bd:55:89:26:65:4d:e5: f1:e7:42:65:69:dc:cd:4a:9f:54:03:ee:8e:50:5d:45:00:0a: 01:68:86:89:e7:2f:1a:df:64:a9:e0:22:4c:3b:3a:5b:a9:9f: b6:73:f3:02:8f:e0:15:af:6d:bc:7d:81:88:fc:58:81:d1:c8: 04:3e:69:1e:88:ad:c9:97:ad:a7:c2:be:62:3c:22:71:d0:eb: 98:1c:33:22:35:16:87:22:6b:e3:57:dd:c8:cb:bf:4b:27:82: 12:86:cb:f4:b0:c2:8c:09:47:e0:02:31:a7:39:16:8d:d9:ed: eb:ec:70:e7:4b:b6:a7:40:2f:dc:5c:f1:1f:99:8e:f9:93:83: e5:1a:09:16:a7:1f:30:57:4e:bc:27:38:99:ae:3c:b1:5c:e6: cf:e8:46:5a:1b:e9:f9:49:ba:35:f6:5a:57:39:30:92:cc:d5: 0f:b2:6e:3e:0f:0b:97:7f:20:b1:cd:68:7f:a3:45:7e:f2:73: d6:17:82:75:ad:b4:17:f8:53:3e:67:16:92:71:96:08:9f:29: bb:d1:70:95:e0:1b:77:bf:a9:33:28:c9:a4:90:00:51:be:e4: 46:67:b9:14:5d:d0:43:8b:79:78:0b:b0:6a:9c:18:31:7c:ce: 0b:62:43:4b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDwswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDN0FGQUU0QzBDQkYy RkRDMzdEOUI4RTMzNjE3NkZCNkRFQTQ3M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkuXcwQq6L9MNkLLbLwNIwGkDj9avzta77aFyHNuaIwTC8S+dG FDnNoO2SGs1aKR5NBhdiAJ9qmtQY2Cor5gdKk4L2J7PFNkf4Bw2w5ZQGJtgCobGF EVVVDF7EBoYHiP84QpF/1dHF2vP74+zkiATImRIB3mVJPPgsjiTqwjqQakoiamqr XqaS+OOcqTSBNv2weWX18UsoRtGk6BKbsK9JDLeTptvLwTiLVbWDBUWnd8akZGuG bCC6QtEO7oTqmYsYN9YS26XKMExt0t3FET1PI/c5lOOzYlm8Y/NIz6wpWUTcI65i G0izBLgfVdc9egzvEq4TMLZDi3sWlV5mO7dnAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUXHr65MDL8v3DfZuOM2F2+23qRz0wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1hIcjY1TURMOHYz RGZadU9NMkYyLTIzcVJ6MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnHi4wDQYJKoZIhvcNAQELBQADggEBAKq6cl+csQEUxDJivVWJJmVN5fHn QmVp3M1Kn1QD7o5QXUUACgFohonnLxrfZKngIkw7Olupn7Zz8wKP4BWvbbx9gYj8 WIHRyAQ+aR6IrcmXrafCvmI8InHQ65gcMyI1Focia+NX3cjLv0snghKGy/SwwowJ R+ACMac5Fo3Z7evscOdLtqdAL9xc8R+ZjvmTg+UaCRanHzBXTrwnOJmuPLFc5s/o Rlob6flJujX2Wlc5MJLM1Q+ybj4PC5d/ILHNaH+jRX7yc9YXgnWttBf4Uz5nFpJx lgifKbvRcJXgG3e/qTMoyaSQAFG+5EZnuRRd0EOLeXgLsGqcGDF8zgtiQ0s= -----END CERTIFICATE-----Generated at Sun Aug 24 09:40:27 2025 by rpki-client