$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/cepGkbbLnP5AQlRrcT86cPh3cCg.roa File: cepGkbbLnP5AQlRrcT86cPh3cCg.roa (raw, json) Hash identifier: lKLPoxszT9ViCxoqUTezFpup+Oo8RZSxLcNJCMIYTQw= Subject key identifier: 71:EA:46:91:B6:CB:9C:FE:40:42:54:6B:71:3F:3A:70:F8:77:70:28 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 0260 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/cepGkbbLnP5AQlRrcT86cPh3cCg.roa Signing time: Sat 12 Jul 2025 04:09:32 +0000 ROA not before: Sat 12 Jul 2025 04:09:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.249.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Jul 12 04:09:32 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=71EA4691B6CB9CFE4042546B713F3A70F8777028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:6f:ca:59:25:c0:9b:a6:ba:8a:37:c3:c2: 33:31:9c:b0:eb:97:36:6a:c2:29:2a:6e:55:38:e6: 6f:fe:ed:ae:70:e5:50:57:20:6a:32:e8:02:b9:b7: 14:db:7b:5e:60:8e:e2:36:fd:2a:15:22:1a:cf:c3: 2e:12:4a:11:1e:3d:de:b8:f1:53:53:1f:16:33:08: 40:8b:9e:12:92:c6:19:e6:9b:45:b1:83:c3:52:77: 70:ad:2a:a1:15:4e:72:36:61:a9:40:c4:2d:ac:80: 85:f9:9a:82:f9:ce:6f:c6:15:75:17:8a:43:d6:27: 6c:0d:88:7d:59:3a:69:8a:aa:f8:7e:f4:c9:71:53: ed:a2:62:7c:d6:2a:94:53:2d:15:e4:79:93:1b:ba: 49:21:80:9b:65:9e:fe:38:fc:82:39:c7:35:6b:50: 07:62:56:fc:fe:22:54:0d:53:86:e7:d3:ef:ce:85: 25:1b:38:8c:73:ed:ec:fa:2f:bc:77:94:5b:a9:df: 26:11:2b:3c:09:51:e9:2c:0d:d5:d7:cd:61:16:27: 5f:17:4d:1a:a7:3f:0f:53:01:a9:d8:d8:0a:25:c1: 2f:b2:d7:9f:a0:c3:11:34:4b:e9:a2:72:a7:03:fe: d9:d9:c8:42:e4:bb:ba:4d:ba:b7:0d:a6:6a:ee:38: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EA:46:91:B6:CB:9C:FE:40:42:54:6B:71:3F:3A:70:F8:77:70:28 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/cepGkbbLnP5AQlRrcT86cPh3cCg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.249.0/27 Signature Algorithm: sha256WithRSAEncryption 40:af:e4:73:1b:c6:ea:62:fc:35:f2:90:fb:ae:e2:8b:21:3b: 20:86:b1:99:82:9a:e1:73:ce:b7:2c:02:0e:25:39:5c:44:63: 1d:cf:fb:06:31:cf:d8:16:f2:31:16:30:ee:8e:8a:a5:bd:b0: 16:fa:58:28:f0:96:16:f7:28:97:8b:35:f6:e5:23:b5:29:30: f2:ba:12:a6:59:d6:ad:99:5c:6f:72:21:7e:04:b8:b6:82:98: 7d:dc:55:92:30:84:98:b3:46:7d:28:9f:a5:bd:2c:66:fe:f3: ba:09:1d:4d:df:6a:71:8e:9b:9e:f7:ce:e8:99:5d:b5:3b:0b: c4:5b:50:ad:b1:86:a5:35:c7:49:b0:65:1a:29:ea:ba:92:8e: f3:25:2b:da:4f:24:e8:83:e3:6a:ea:c9:f0:fb:cf:f8:5f:04: 06:b8:28:9e:72:ba:49:ec:0e:58:21:7e:99:95:3a:52:70:0c: c4:82:ac:98:0c:61:ff:22:da:08:fb:eb:96:2b:5f:c0:62:0b: c3:55:b8:18:08:4a:69:24:af:e7:b6:f7:51:3b:8d:7a:d9:13: fa:c5:0a:2b:7b:ee:d1:49:a2:f9:7b:b8:08:f5:69:e6:7c:b8: 67:f3:64:c1:eb:6b:d2:41:f3:4d:27:06:46:e1:23:b1:c0:36: f5:1a:86:f9 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA3MTIw NDA5MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxRUE0NjkxQjZDQjlD RkU0MDQyNTQ2QjcxM0YzQTcwRjg3NzcwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkQ2/KWSXAm6a6ijfDwjMxnLDrlzZqwikqblU45m/+7a5w5VBX IGoy6AK5txTbe15gjuI2/SoVIhrPwy4SShEePd648VNTHxYzCECLnhKSxhnmm0Wx g8NSd3CtKqEVTnI2YalAxC2sgIX5moL5zm/GFXUXikPWJ2wNiH1ZOmmKqvh+9Mlx U+2iYnzWKpRTLRXkeZMbukkhgJtlnv44/II5xzVrUAdiVvz+IlQNU4bn0+/OhSUb OIxz7ez6L7x3lFup3yYRKzwJUeksDdXXzWEWJ18XTRqnPw9TAanY2AolwS+y15+g wxE0S+micqcD/tnZyELku7pNurcNpmruOK4LAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUcepGkbbLnP5AQlRrcT86cPh3cCgwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvY2VwR2tiYkxuUDVBUWxScmNUODZj UGgzY0NnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBZ0U+QAw DQYJKoZIhvcNAQELBQADggEBAECv5HMbxupi/DXykPuu4oshOyCGsZmCmuFzzrcs Ag4lOVxEYx3P+wYxz9gW8jEWMO6OiqW9sBb6WCjwlhb3KJeLNfblI7UpMPK6EqZZ 1q2ZXG9yIX4EuLaCmH3cVZIwhJizRn0on6W9LGb+87oJHU3fanGOm573zuiZXbU7 C8RbUK2xhqU1x0mwZRop6rqSjvMlK9pPJOiD42rqyfD7z/hfBAa4KJ5yuknsDlgh fpmVOlJwDMSCrJgMYf8i2gj765YrX8BiC8NVuBgISmkkr+e291E7jXrZE/rFCit7 7tFJovl7uAj1aeZ8uGfzZMHra9JB800nBkbhI7HANvUahvk= -----END CERTIFICATE-----Generated at Tue Jul 22 20:39:31 2025 by rpki-client