$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/q2sIbhYUMgmfQs69b-LWfTbGg7s.roa File: q2sIbhYUMgmfQs69b-LWfTbGg7s.roa (raw, json) Hash identifier: 3N27XI/JQhAQmWac8O+mde16jugx9YS/OC77kymIUGg= Subject key identifier: AB:6B:08:6E:16:14:32:09:9F:42:CE:BD:6F:E2:D6:7D:36:C6:83:BB Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F1D Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/q2sIbhYUMgmfQs69b-LWfTbGg7s.roa Signing time: Fri 22 Aug 2025 08:50:08 +0000 ROA not before: Fri 22 Aug 2025 08:50:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18424 IP address blocks: 103.30.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3869 (0xf1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AB6B086E161432099F42CEBD6FE2D67D36C683BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:ab:63:2a:44:5c:ec:69:a6:bd:d5:f2:32: 94:b0:b7:9d:6c:33:41:56:06:f2:d8:b8:23:e4:b6: 0d:cf:76:11:c0:0a:63:ce:fb:b2:81:a6:2d:5f:94: 8f:df:1d:3a:0d:d4:0b:49:4d:e8:73:7b:95:97:b9: 7f:4f:51:34:d5:bd:d9:7e:fb:58:da:0f:98:08:7b: b6:76:56:22:02:10:0f:ba:79:af:8f:6e:5e:c9:80: 85:4b:9b:8e:e0:81:f5:65:52:60:82:6f:9a:70:32: 64:b5:f2:04:e1:71:97:12:1e:73:a9:7a:59:dd:2d: ed:92:84:ce:bf:2f:ba:e1:36:d6:58:83:f3:68:3d: 37:e8:b5:15:f4:35:45:88:71:99:8e:98:a1:6a:94: 5a:d8:49:60:0c:07:5b:a3:f5:48:db:d2:3f:e1:3f: dd:60:d1:34:e8:a3:3b:43:c9:b2:f4:76:01:c4:e2: fe:75:24:89:c9:77:f0:44:f5:8d:e0:99:3e:4c:fd: d4:0d:45:c0:5f:ee:62:b7:e7:9c:9d:f0:5b:ff:3d: 2c:f5:5a:e9:99:9f:0e:b0:4f:a6:4b:04:60:f4:ee: 11:95:38:37:b3:9d:f1:ae:4c:43:da:05:ff:dc:4e: 2d:d0:75:aa:67:11:8e:fd:ef:9b:e2:b3:07:26:c1: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6B:08:6E:16:14:32:09:9F:42:CE:BD:6F:E2:D6:7D:36:C6:83:BB X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/q2sIbhYUMgmfQs69b-LWfTbGg7s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.30.47.0/24 Signature Algorithm: sha256WithRSAEncryption c7:26:b8:da:d3:8f:f4:41:88:f2:7d:53:5a:c5:bb:6e:71:8c: a2:dc:90:84:f8:d6:cd:06:54:4b:84:d3:03:66:1b:30:81:cd: 2b:1e:df:a3:a6:fe:58:07:6d:9e:53:f8:1e:9d:23:b4:2d:1d: df:df:e9:ff:cc:53:f0:6c:bd:0c:a8:dd:16:6e:1a:94:f0:1a: dd:55:c2:8e:c3:11:48:ed:83:9f:5a:c8:3c:cb:8c:a4:2c:50: 19:76:2b:87:42:b3:e6:ab:84:02:93:1d:e3:f1:d6:88:4e:41: fb:79:7d:cd:25:a8:f2:5f:ac:72:5b:3b:90:82:1a:f0:3b:26: 7c:12:75:a8:f1:c2:e5:00:23:9b:a7:1f:3e:ce:ba:95:5f:19: 61:55:d7:07:fc:0b:72:ea:00:e2:34:0a:e9:cd:15:c4:e9:f9: 1c:28:89:13:ca:08:04:52:5a:a6:c0:08:62:2c:78:be:3c:70: 9d:8d:3d:eb:85:e2:35:cf:30:cf:d1:d1:47:97:20:71:cb:00: 72:0a:64:34:8c:20:92:85:cd:5f:32:f6:fb:75:c8:1d:ae:81: b7:16:ca:dd:5c:d8:be:f1:8e:71:bd:81:18:8d:af:12:fb:79: 64:25:73:ac:b3:9b:bd:3b:e7:c1:23:fd:76:5f:21:f3:de:75: ad:ea:e3:e5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCNkIwODZFMTYxNDMy MDk5RjQyQ0VCRDZGRTJENjdEMzZDNjgzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC726tjKkRc7GmmvdXyMpSwt51sM0FWBvLYuCPktg3PdhHACmPO +7KBpi1flI/fHToN1AtJTehze5WXuX9PUTTVvdl++1jaD5gIe7Z2ViICEA+6ea+P bl7JgIVLm47ggfVlUmCCb5pwMmS18gThcZcSHnOpelndLe2ShM6/L7rhNtZYg/No PTfotRX0NUWIcZmOmKFqlFrYSWAMB1uj9Ujb0j/hP91g0TTooztDybL0dgHE4v51 JInJd/BE9Y3gmT5M/dQNRcBf7mK355yd8Fv/PSz1WumZnw6wT6ZLBGD07hGVODez nfGuTEPaBf/cTi3QdapnEY7975viswcmwevHAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUq2sIbhYUMgmfQs69b+LWfTbGg7swHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL3Eyc0liaFlVTWdt ZlFzNjliLUxXZlRiR2c3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnHi8wDQYJKoZIhvcNAQELBQADggEBAMcmuNrTj/RBiPJ9U1rFu25xjKLc kIT41s0GVEuE0wNmGzCBzSse36Om/lgHbZ5T+B6dI7QtHd/f6f/MU/BsvQyo3RZu GpTwGt1Vwo7DEUjtg59ayDzLjKQsUBl2K4dCs+arhAKTHePx1ohOQft5fc0lqPJf rHJbO5CCGvA7JnwSdajxwuUAI5unHz7OupVfGWFV1wf8C3LqAOI0CunNFcTp+Rwo iRPKCARSWqbACGIseL48cJ2NPeuF4jXPMM/R0UeXIHHLAHIKZDSMIJKFzV8y9vt1 yB2ugbcWyt1c2L7xjnG9gRiNrxL7eWQlc6yzm70758Ej/XZfIfPeda3q4+U= -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:53 2025 by rpki-client