$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/L9dNMJevluzsS1CYQdorwdABmzg.roa File: L9dNMJevluzsS1CYQdorwdABmzg.roa (raw, json) Hash identifier: gWK5ezRCOaq8t7ScdOcmEWnDvZbdhZ1zkgueQ2sicOc= Subject key identifier: 2F:D7:4D:30:97:AF:96:EC:EC:4B:50:98:41:DA:2B:C1:D0:01:9B:38 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 025A Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/L9dNMJevluzsS1CYQdorwdABmzg.roa Signing time: Sat 12 Jul 2025 04:08:13 +0000 ROA not before: Sat 12 Jul 2025 04:08:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.249.0/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Jul 12 04:08:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2FD74D3097AF96ECEC4B509841DA2BC1D0019B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:56:6a:5c:9c:0b:13:8e:53:e8:fd:09:77: b1:02:1c:fe:49:9a:0e:d9:e3:6a:67:f6:0f:3a:07: 1b:5c:e8:3f:35:c0:b3:86:85:ca:46:3d:08:3e:3c: cb:73:ca:d6:11:78:08:c0:ea:b7:3a:33:ba:3b:42: 68:cd:b7:22:1c:40:b8:34:ea:88:7f:a9:dd:bd:9a: 0c:ce:f8:c8:20:f6:cd:c5:60:c6:21:36:e6:29:35: 4a:f3:8f:07:b4:e8:e3:fa:49:c1:2a:cb:5a:da:3c: a8:9d:8d:e1:f3:4f:00:97:21:b2:8c:6b:24:33:af: 98:f4:da:70:89:06:be:93:cc:c9:da:4a:d7:c2:22: df:07:ea:68:7c:18:ea:9e:f3:ba:b3:04:03:e1:16: 02:e1:d2:79:57:dd:84:e7:03:34:7b:d6:2d:98:18: 21:41:4e:11:aa:85:f5:e7:2f:0c:a0:94:a1:06:af: be:c7:76:af:cf:3e:2e:53:16:f3:55:98:6a:3e:fe: f9:9b:83:79:b2:f5:dc:9b:de:00:d2:5d:01:e3:d0: 87:28:74:89:c0:57:b8:25:c1:53:96:e8:b2:d7:94: 6f:4a:50:64:60:ca:6a:26:13:73:91:b6:5b:37:0a: 9a:68:6d:d5:d0:7b:dd:8f:3f:d3:06:21:f0:29:b6: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D7:4D:30:97:AF:96:EC:EC:4B:50:98:41:DA:2B:C1:D0:01:9B:38 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/L9dNMJevluzsS1CYQdorwdABmzg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.249.0/30 Signature Algorithm: sha256WithRSAEncryption 07:8a:b5:88:25:4e:24:63:9c:8a:28:9a:b6:33:d7:dc:f4:b3: c5:d0:4d:b4:04:d6:b2:e3:15:f2:d0:21:e0:62:eb:a7:08:15: fb:5c:78:fa:43:46:f4:fc:60:01:5f:d2:d6:70:9e:d3:7a:cf: ab:d9:71:99:a8:36:d3:89:67:b7:3d:0b:ba:32:b0:cc:f6:f3: 03:08:57:6e:a1:64:17:78:b1:17:95:a0:ef:53:49:77:f7:58: 20:9e:d4:24:d6:cc:f5:10:72:72:61:71:ec:19:82:3d:ac:9d: 7f:cb:60:2c:f9:31:e7:75:6c:a0:95:67:b4:2e:48:eb:5d:59: b2:95:f3:49:08:ea:07:ab:11:f0:8f:ce:bf:4f:88:2b:c8:33: 1b:2e:44:82:e0:bf:55:9b:a4:51:d8:e2:fc:b6:c5:4b:47:63: e0:3d:18:ee:7d:16:8b:64:82:c7:7b:e4:08:ca:52:d9:02:c0: bf:51:a5:78:a6:84:90:c0:17:1f:18:99:41:7c:b5:9a:12:a3: 32:9b:c7:a6:94:b0:9c:f4:eb:5f:b2:a3:a0:34:33:3c:85:07: c0:9c:aa:a0:af:90:7e:93:94:04:cc:96:0a:9f:79:83:61:b3: 36:56:ff:e9:c9:5a:71:70:7d:01:96:a7:71:7d:88:7c:aa:f6: af:f9:cb:6e -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA3MTIw NDA4MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGRDc0RDMwOTdBRjk2 RUNFQzRCNTA5ODQxREEyQkMxRDAwMTlCMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEJFZqXJwLE45T6P0Jd7ECHP5Jmg7Z42pn9g86Bxtc6D81wLOG hcpGPQg+PMtzytYReAjA6rc6M7o7QmjNtyIcQLg06oh/qd29mgzO+Mgg9s3FYMYh NuYpNUrzjwe06OP6ScEqy1raPKidjeHzTwCXIbKMayQzr5j02nCJBr6TzMnaStfC It8H6mh8GOqe87qzBAPhFgLh0nlX3YTnAzR71i2YGCFBThGqhfXnLwyglKEGr77H dq/PPi5TFvNVmGo+/vmbg3my9dyb3gDSXQHj0IcodInAV7glwVOW6LLXlG9KUGRg ymomE3ORtls3CppobdXQe92PP9MGIfAptlIhAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUL9dNMJevluzsS1CYQdorwdABmzgwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvTDlkTk1KZXZsdXpzUzFDWVFkb3J3 ZEFCbXpnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+QAw DQYJKoZIhvcNAQELBQADggEBAAeKtYglTiRjnIoomrYz19z0s8XQTbQE1rLjFfLQ IeBi66cIFftcePpDRvT8YAFf0tZwntN6z6vZcZmoNtOJZ7c9C7oysMz28wMIV26h ZBd4sReVoO9TSXf3WCCe1CTWzPUQcnJhcewZgj2snX/LYCz5Med1bKCVZ7QuSOtd WbKV80kI6gerEfCPzr9PiCvIMxsuRILgv1WbpFHY4vy2xUtHY+A9GO59Fotkgsd7 5AjKUtkCwL9RpXimhJDAFx8YmUF8tZoSozKbx6aUsJz061+yo6A0MzyFB8CcqqCv kH6TlATMlgqfeYNhszZW/+nJWnFwfQGWp3F9iHyq9q/5y24= -----END CERTIFICATE-----Generated at Wed Jul 23 02:38:53 2025 by rpki-client