$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/a40U36dZNEVZ7HIwaG9dDbyQQWI.roa File: a40U36dZNEVZ7HIwaG9dDbyQQWI.roa (raw, json) Hash identifier: pUXlZwm63RbXq8IvtNOJOlpO0zfB/CBhBX2LGayX904= Subject key identifier: 6B:8D:14:DF:A7:59:34:45:59:EC:72:30:68:6F:5D:0D:BC:90:41:62 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F09 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/a40U36dZNEVZ7HIwaG9dDbyQQWI.roa Signing time: Fri 22 Aug 2025 08:50:04 +0000 ROA not before: Fri 22 Aug 2025 08:50:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24168 IP address blocks: 103.30.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3849 (0xf09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6B8D14DFA759344559EC7230686F5D0DBC904162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:a8:51:ba:6f:19:bd:3b:3c:d6:1a:69:7a: 28:aa:a0:88:ff:b4:b9:b9:9f:64:f2:a2:8b:82:cd: 62:4e:60:db:02:ee:f4:9b:63:69:68:77:48:4b:dc: 60:ab:75:ce:90:10:75:03:80:a0:ab:b0:c7:88:6c: 22:d4:a7:57:30:8e:bd:65:56:09:a1:30:12:ba:f5: 4b:18:44:26:79:1d:ab:f0:ef:e9:34:54:35:2b:4a: cb:12:9a:9f:e4:d7:ff:17:50:0e:4c:74:68:60:59: 41:c7:27:8c:d9:9c:e5:86:6b:37:9e:56:04:c4:50: 7d:88:bf:10:fe:e9:73:ca:35:48:0c:cd:0c:1f:d6: 69:05:89:65:09:15:aa:88:03:80:01:7b:53:07:be: 2d:3e:3b:f3:88:66:97:7a:34:65:84:5f:5f:7b:7c: ec:39:c9:e3:2a:8b:59:76:d1:eb:2c:cf:9b:0a:94: 6d:99:27:0f:99:54:83:a4:bc:2e:4e:4f:78:b5:f6: 4e:46:1f:7e:08:b1:9b:5d:70:6a:38:75:a2:31:5a: b3:42:af:1e:4a:9f:28:88:ed:c1:2b:bc:20:46:13: 7a:d3:76:ab:ec:53:00:56:9c:dd:6a:ca:f8:13:93: 13:d1:b7:ce:62:18:98:04:ae:10:14:eb:ab:2c:bf: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:14:DF:A7:59:34:45:59:EC:72:30:68:6F:5D:0D:BC:90:41:62 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/a40U36dZNEVZ7HIwaG9dDbyQQWI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.30.44.0/24 Signature Algorithm: sha256WithRSAEncryption 31:da:eb:00:b8:ca:9a:06:9b:50:1a:0e:db:8c:00:ba:55:f9: 1f:8c:21:aa:1f:40:2b:f3:b9:40:18:83:fe:d9:13:63:5d:58: 37:87:72:ac:d6:33:8a:21:6d:79:86:b9:20:49:c5:4a:96:f4: 67:67:f4:c0:01:54:16:74:51:57:fb:89:a2:4e:a6:c8:c0:71: 5b:1d:06:71:d0:d1:42:4a:a5:a0:c0:3b:12:9f:95:d6:16:2f: 3a:f5:0a:6c:c6:3d:f1:d3:bf:87:11:bf:9e:91:53:f0:8d:db: dd:f7:6e:57:32:7a:d0:f4:26:8a:e3:72:cb:83:8d:41:82:cd: 48:ea:92:95:4e:23:ed:ad:7e:75:36:e4:a1:09:24:19:82:b3: 89:07:ac:5a:36:b4:5a:28:5b:b1:34:07:c6:93:7a:9a:23:85: 89:7b:f0:d9:fd:4b:94:37:a5:23:5c:ac:8d:47:9c:21:04:5e: 06:3a:d3:14:42:ca:db:e6:74:b7:b9:04:96:f0:13:16:2f:4b: a8:b2:a8:7a:bb:67:5c:51:3b:43:3d:f7:cd:21:b1:57:78:5b: 17:f5:24:82:bf:35:98:c4:1c:5f:db:21:7a:ea:52:28:dd:14: d6:e0:3c:a8:bc:5a:83:b1:ad:31:df:99:b9:42:17:37:e8:84: cc:62:62:5f -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZCOEQxNERGQTc1OTM0 NDU1OUVDNzIzMDY4NkY1RDBEQkM5MDQxNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxOqhRum8ZvTs81hppeiiqoIj/tLm5n2TyoouCzWJOYNsC7vSb Y2lod0hL3GCrdc6QEHUDgKCrsMeIbCLUp1cwjr1lVgmhMBK69UsYRCZ5Havw7+k0 VDUrSssSmp/k1/8XUA5MdGhgWUHHJ4zZnOWGazeeVgTEUH2IvxD+6XPKNUgMzQwf 1mkFiWUJFaqIA4ABe1MHvi0+O/OIZpd6NGWEX197fOw5yeMqi1l20essz5sKlG2Z Jw+ZVIOkvC5OT3i19k5GH34IsZtdcGo4daIxWrNCrx5KnyiI7cErvCBGE3rTdqvs UwBWnN1qyvgTkxPRt85iGJgErhAU66ssvyQJAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUa40U36dZNEVZ7HIwaG9dDbyQQWIwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2E0MFUzNmRaTkVW WjdISXdhRzlkRGJ5UVFXSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnHiwwDQYJKoZIhvcNAQELBQADggEBADHa6wC4ypoGm1AaDtuMALpV+R+M IaofQCvzuUAYg/7ZE2NdWDeHcqzWM4ohbXmGuSBJxUqW9Gdn9MABVBZ0UVf7iaJO psjAcVsdBnHQ0UJKpaDAOxKfldYWLzr1CmzGPfHTv4cRv56RU/CN2933blcyetD0 JorjcsuDjUGCzUjqkpVOI+2tfnU25KEJJBmCs4kHrFo2tFooW7E0B8aTepojhYl7 8Nn9S5Q3pSNcrI1HnCEEXgY60xRCytvmdLe5BJbwExYvS6iyqHq7Z1xRO0M9980h sVd4Wxf1JIK/NZjEHF/bIXrqUijdFNbgPKi8WoOxrTHfmblCFzfohMxiYl8= -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:51 2025 by rpki-client