$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa File: ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa (raw, json) Hash identifier: LKn7uI6AgBpHG4K40L0bjJxIVTlLba08ez5ruWOAl7Q= Subject key identifier: 65:5C:C1:05:88:37:3A:C5:DC:E9:A2:B4:68:58:DD:C4:DE:C4:B9:41 Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Certificate serial: 109A Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa Signing time: Fri 22 Aug 2025 08:44:18 +0000 ROA not before: Fri 22 Aug 2025 08:44:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 103.134.80.0/22 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4250 (0x109a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Validity Not Before: Aug 22 08:44:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=655CC10588373AC5DCE9A2B46858DDC4DEC4B941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:e2:8f:95:f1:f5:90:43:35:df:ed:ca:00: bb:69:c7:07:ea:40:ca:af:ec:14:34:13:aa:e5:54: ad:1d:15:9d:97:7b:37:1b:6d:43:84:8b:fd:e4:84: ce:14:20:21:20:ab:d4:5f:f7:d6:bb:53:25:2a:a9: f5:cb:af:f3:b5:0e:91:ea:b8:dd:71:3b:4b:65:66: 5c:c0:91:67:d5:64:17:ca:34:0c:a4:47:00:96:b2: de:6a:99:a9:96:4f:9a:95:62:8c:56:0e:39:5a:9b: 85:9e:4f:57:d6:7a:69:a3:5f:95:11:74:a9:f5:73: f8:bd:af:68:77:20:6c:c5:6b:01:00:aa:8d:a0:ce: c5:b1:ec:6c:31:fc:3a:d9:9e:2d:93:05:8d:e7:be: 30:05:3c:ac:6d:df:d7:b9:e1:f0:66:45:82:e1:3f: ce:d0:09:f8:bd:b1:cd:72:d7:6c:eb:ce:ec:b3:4b: dc:c1:83:ae:5c:48:e8:66:27:05:86:32:cf:56:c6: 67:5b:69:0a:5f:f7:ea:38:84:2d:3c:d2:db:54:09: fc:3b:f1:d6:14:d9:b3:dd:37:1b:47:ae:24:34:4a: 30:25:3c:6d:61:cf:76:3e:47:71:4c:4a:b7:f0:77: b1:02:e7:1e:e9:00:0a:6d:8c:f8:25:41:bb:6a:b8: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5C:C1:05:88:37:3A:C5:DC:E9:A2:B4:68:58:DD:C4:DE:C4:B9:41 X509v3 Authority Key Identifier: keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.134.80.0/22 Signature Algorithm: sha256WithRSAEncryption 47:10:65:f2:ff:3c:ad:4d:ca:5d:30:5b:87:e0:5b:58:b7:59: ae:90:1c:96:16:7a:74:fe:5a:d7:c3:29:d4:12:79:51:f9:4e: 2c:d5:af:dc:bc:8e:86:4b:0a:76:e5:16:02:42:ef:f3:91:a4: 26:07:e4:75:ee:e6:1a:4f:b1:e4:dd:6a:60:09:99:ce:be:26: 01:56:4d:e1:0c:b2:8b:ce:ee:e3:1e:24:44:96:3e:40:c0:b2: 44:2d:7a:71:d6:12:22:5f:76:b1:e8:ff:ff:3b:bc:ad:76:54: b4:41:d6:b6:54:d4:f6:97:47:f6:1d:fe:01:4f:ea:20:24:9d: d1:c9:dd:04:6a:5b:1e:46:a6:fd:0a:7b:e5:d9:9b:f5:ab:b0: 84:f8:7e:82:fd:2c:ca:c2:0e:cd:06:df:bc:53:7f:33:4b:19: 60:a6:c6:08:41:cd:ea:02:a5:3f:e9:28:50:6b:7e:96:75:ed: 99:9b:17:b9:aa:34:ac:56:08:4f:6e:ca:b7:60:a2:98:4f:e8: 50:82:c4:35:6b:57:66:b9:ee:43:06:59:9d:8b:eb:b0:7d:83: 5c:ad:f6:fa:24:73:fc:48:f0:5d:0c:c8:bc:8d:6b:0d:35:46: 54:49:c0:1c:49:9d:5f:6b:ad:d7:65:17:e7:43:56:48:52:f5: e9:23:53:3c -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICEJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2 MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yNTA4MjIw ODQ0MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1NUNDMTA1ODgzNzNB QzVEQ0U5QTJCNDY4NThEREM0REVDNEI5NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClWOKPlfH1kEM13+3KALtpxwfqQMqv7BQ0E6rlVK0dFZ2Xezcb bUOEi/3khM4UICEgq9Rf99a7UyUqqfXLr/O1DpHquN1xO0tlZlzAkWfVZBfKNAyk RwCWst5qmamWT5qVYoxWDjlam4WeT1fWemmjX5URdKn1c/i9r2h3IGzFawEAqo2g zsWx7Gwx/DrZni2TBY3nvjAFPKxt39e54fBmRYLhP87QCfi9sc1y12zrzuyzS9zB g65cSOhmJwWGMs9WxmdbaQpf9+o4hC080ttUCfw78dYU2bPdNxtHriQ0SjAlPG1h z3Y+R3FMSrfwd7EC5x7pAAptjPglQbtquKizAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUZVzBBYg3OsXc6aK0aFjdxN7EuUEwHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vWlZ6QkJZZzNP c1hjNmFLMGFGamR4TjdFdVVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmeGUDANBgkqhkiG9w0BAQsFAAOCAQEARxBl8v88rU3KXTBbh+BbWLdZ rpAclhZ6dP5a18Mp1BJ5UflOLNWv3LyOhksKduUWAkLv85GkJgfkde7mGk+x5N1q YAmZzr4mAVZN4Qyyi87u4x4kRJY+QMCyRC16cdYSIl92sej//zu8rXZUtEHWtlTU 9pdH9h3+AU/qICSd0cndBGpbHkam/Qp75dmb9auwhPh+gv0sysIOzQbfvFN/M0sZ YKbGCEHN6gKlP+koUGt+lnXtmZsXuao0rFYIT27Kt2CimE/oUILENWtXZrnuQwZZ nYvrsH2DXK32+iRz/EjwXQzIvI1rDTVGVEnAHEmdX2ut12UX50NWSFL16SNTPA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:30 2025 by rpki-client