$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/XbOpkcBytiCZnFSLWZqB2s3o4sk.roa File: XbOpkcBytiCZnFSLWZqB2s3o4sk.roa (raw, json) Hash identifier: hEV+d5zs1xMP8DfW8aUe0oc5dB1NS0jaCuFt7Vu1ny0= Subject key identifier: 5D:B3:A9:91:C0:72:B6:20:99:9C:54:8B:59:9A:81:DA:CD:E8:E2:C9 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F16 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/XbOpkcBytiCZnFSLWZqB2s3o4sk.roa Signing time: Fri 22 Aug 2025 08:50:07 +0000 ROA not before: Fri 22 Aug 2025 08:50:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24168 IP address blocks: 121.50.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3862 (0xf16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5DB3A991C072B620999C548B599A81DACDE8E2C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:01:e9:c2:a8:db:b2:52:04:a0:1a:bb:c8:04: 12:cd:fe:31:b1:e8:74:f6:3e:c7:ec:81:6f:06:73: d0:5d:73:1e:a3:9f:75:ef:74:18:01:c5:5f:3c:2d: 3f:25:e6:09:3d:26:c8:88:b3:30:2b:3d:cb:6f:30: 04:e9:62:7c:22:a2:b1:99:12:1e:4c:69:0c:89:cb: 7b:73:09:50:39:90:be:b6:39:cd:16:95:7e:4c:69: 7a:6c:07:92:cc:32:a7:3c:86:f1:50:3a:cc:6b:cb: e2:96:de:94:24:8d:c6:0c:fa:a5:81:86:66:a0:8d: 69:be:86:b0:df:b5:fb:ee:a7:bb:fb:15:32:c5:86: 6b:a9:81:38:c5:4e:79:99:a8:f2:8b:b3:8b:99:19: f3:8c:42:8b:57:28:6b:e4:98:50:19:83:21:01:5f: 41:1c:d3:f0:68:20:30:2e:39:54:cb:52:ab:1e:84: 6a:90:76:84:bf:9a:d8:ab:fa:b6:0a:de:e8:22:f9: 15:f8:48:f0:38:e8:23:b0:24:31:97:58:f5:12:9b: b7:cd:ac:42:73:6b:eb:82:e8:48:21:6a:fe:22:be: 33:5b:e2:25:c3:02:90:6c:8d:79:7e:aa:38:30:b2: 42:35:c7:c9:38:a3:04:09:cb:04:4a:c5:89:2b:e2: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B3:A9:91:C0:72:B6:20:99:9C:54:8B:59:9A:81:DA:CD:E8:E2:C9 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/XbOpkcBytiCZnFSLWZqB2s3o4sk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.150.0/24 Signature Algorithm: sha256WithRSAEncryption c5:d7:78:2c:91:4c:8d:38:12:7e:33:55:e7:5d:ac:aa:3e:ab: 41:7b:bd:5e:44:78:d2:8f:54:3e:c8:01:db:4f:14:26:91:ee: 8b:91:88:c6:00:66:8c:76:c9:c1:da:b8:72:8c:82:50:91:7e: 85:37:be:f0:fb:f8:35:10:08:c5:1b:4a:b8:34:34:1f:13:72: ab:2e:e2:46:9e:6f:96:c6:12:af:3b:e4:db:72:7c:26:ff:46: a0:d0:c0:47:18:d5:ed:de:8f:ff:00:9c:39:e3:3c:46:8e:a1: ae:1d:7f:52:1b:64:11:82:d3:ee:8e:4d:f6:c9:65:22:e1:42: 5d:ba:b4:9e:5e:05:24:0f:36:8e:5c:76:3c:46:42:fd:37:4a: ea:9d:08:77:6e:db:53:e8:76:d2:94:8f:6d:c0:b0:76:f1:77: c2:7d:d8:65:5c:7c:45:0a:aa:bc:31:8a:7c:2c:13:40:97:e4: d1:c2:85:ee:8a:39:e8:d6:4f:ea:9c:01:26:64:b5:54:a3:a4: bc:8e:ae:e9:f1:80:1f:b4:63:2f:23:f4:c3:1d:62:c8:43:2c: 0a:20:90:b6:3f:c8:d0:0b:73:b7:de:0c:b9:98:da:e1:8c:5f: b7:5e:92:42:44:33:40:e0:64:ea:3d:bc:ea:69:4f:3a:f4:6e: a3:36:97:5a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVEQjNBOTkxQzA3MkI2 MjA5OTlDNTQ4QjU5OUE4MURBQ0RFOEUyQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcAenCqNuyUgSgGrvIBBLN/jGx6HT2PsfsgW8Gc9Bdcx6jn3Xv dBgBxV88LT8l5gk9JsiIszArPctvMATpYnwiorGZEh5MaQyJy3tzCVA5kL62Oc0W lX5MaXpsB5LMMqc8hvFQOsxry+KW3pQkjcYM+qWBhmagjWm+hrDftfvup7v7FTLF hmupgTjFTnmZqPKLs4uZGfOMQotXKGvkmFAZgyEBX0Ec0/BoIDAuOVTLUqsehGqQ doS/mtir+rYK3ugi+RX4SPA46COwJDGXWPUSm7fNrEJza+uC6Eghav4ivjNb4iXD ApBsjXl+qjgwskI1x8k4owQJywRKxYkr4lPdAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUXbOpkcBytiCZnFSLWZqB2s3o4skwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1hiT3BrY0J5dGlD Wm5GU0xXWnFCMnMzbzRzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpYwDQYJKoZIhvcNAQELBQADggEBAMXXeCyRTI04En4zVeddrKo+q0F7 vV5EeNKPVD7IAdtPFCaR7ouRiMYAZox2ycHauHKMglCRfoU3vvD7+DUQCMUbSrg0 NB8Tcqsu4kaeb5bGEq875NtyfCb/RqDQwEcY1e3ej/8AnDnjPEaOoa4df1IbZBGC 0+6OTfbJZSLhQl26tJ5eBSQPNo5cdjxGQv03SuqdCHdu21PodtKUj23AsHbxd8J9 2GVcfEUKqrwxinwsE0CX5NHChe6KOejWT+qcASZktVSjpLyOrunxgB+0Yy8j9MMd YshDLAogkLY/yNALc7feDLmY2uGMX7dekkJEM0DgZOo9vOppTzr0bqM2l1o= -----END CERTIFICATE-----Generated at Sun Aug 24 07:41:05 2025 by rpki-client