$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/fdlX36shTirN--jW-5xAfjTblYI.roa File: fdlX36shTirN--jW-5xAfjTblYI.roa (raw, json) Hash identifier: jON0trfi5V35NQ75qEIezkuDEJ8ffW4+Q8bvpjLn8JQ= Subject key identifier: 7D:D9:57:DF:AB:21:4E:2A:CD:FB:E8:D6:FB:9C:40:7E:34:DB:95:82 Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Certificate serial: 03F1 Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/fdlX36shTirN--jW-5xAfjTblYI.roa Signing time: Fri 22 Aug 2025 08:49:42 +0000 ROA not before: Fri 22 Aug 2025 08:49:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38047 IP address blocks: 103.183.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 07:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Validity Not Before: Aug 22 08:49:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7DD957DFAB214E2ACDFBE8D6FB9C407E34DB9582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:c1:c5:d4:aa:c8:53:d0:28:c4:1e:ab:1a: 9f:ac:3d:85:9b:2b:34:3b:c7:4f:c7:8b:07:11:8f: df:d5:d6:9e:51:a2:76:75:df:bb:b1:b7:aa:eb:fd: bf:89:46:ac:39:d8:9e:f8:52:4c:76:f7:c2:99:60: 8f:7d:26:c4:b1:d5:71:9e:0e:b4:fe:ce:cd:1f:4f: 41:d9:be:18:4c:25:8d:28:07:15:a9:f0:ff:be:6d: b8:e6:b4:8a:1f:f1:d2:4b:38:f3:c0:8d:8a:7c:78: 5c:30:58:9f:82:ad:80:ad:56:ce:c8:4a:d9:d6:0a: 73:62:56:b8:dc:85:3d:15:40:96:88:66:39:61:bb: 28:8b:0f:13:44:80:70:cb:fa:74:44:f8:dc:86:d4: 56:b0:83:32:a3:b9:c5:bf:63:f8:ac:df:52:4b:c8: 84:7e:83:11:68:a7:70:95:77:07:4b:19:a0:51:a6: a7:51:73:da:03:dc:25:fa:69:51:dc:a2:54:65:56: 0f:4a:fd:99:2a:64:af:6c:ec:69:b0:60:55:cf:69: 66:e8:ef:ac:07:1f:f5:f2:06:d8:a5:12:61:47:ce: 39:99:ac:aa:a5:cd:a3:04:f0:ef:19:03:a3:e5:c5: 54:e5:73:ef:53:94:0d:9f:74:f8:42:21:53:bf:8f: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D9:57:DF:AB:21:4E:2A:CD:FB:E8:D6:FB:9C:40:7E:34:DB:95:82 X509v3 Authority Key Identifier: keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/fdlX36shTirN--jW-5xAfjTblYI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.183.79.0/24 Signature Algorithm: sha256WithRSAEncryption 82:3f:d2:b4:87:1c:a5:dd:24:90:ac:18:f4:31:5f:66:6c:0e: f1:fe:97:68:98:0f:95:42:94:c2:e2:62:c8:88:59:d5:b4:2c: 16:be:d5:2f:9f:f8:d4:6c:3b:9c:70:f6:d1:39:19:d3:18:08: 95:ca:f3:0e:c0:8e:68:90:ad:32:34:9a:ab:b0:a8:6c:b4:fb: d9:4b:fe:a8:70:5f:21:07:60:41:02:8b:e1:52:58:13:c1:00: 4c:2b:19:04:c8:77:60:df:22:0d:54:5c:c1:97:42:df:09:5f: 45:16:2e:01:c5:71:10:22:49:92:23:26:c6:76:56:af:4e:23: fc:32:a8:22:6d:36:c4:a8:0b:76:4e:e3:06:0e:09:06:85:97: d9:6d:b1:4a:98:ad:30:2a:91:00:55:7f:58:f6:da:7b:fd:84: 86:72:fe:7d:a9:85:96:09:92:8a:f2:84:18:60:e6:1c:ac:8c: 30:fe:f7:ef:c5:85:ff:79:9c:d2:85:06:7a:2b:6a:86:0e:7d: 63:3f:6c:7d:fb:94:16:60:51:b6:bf:3b:77:c7:1e:cd:12:60: 62:4b:9e:2c:92:29:85:07:2d:df:34:55:20:6b:c9:e2:16:36: da:db:eb:6d:90:70:a8:95:db:e8:29:5e:a5:3c:ed:fb:df:0c: db:e9:ec:28 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD ODQzOUZFMTlEOTlCMDM4MjcwMjA4Qzk0QjY2Q0EyMzFGRkVENTAeFw0yNTA4MjIw ODQ5NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdERDk1N0RGQUIyMTRF MkFDREZCRThENkZCOUM0MDdFMzREQjk1ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1usHF1KrIU9AoxB6rGp+sPYWbKzQ7x0/HiwcRj9/V1p5RonZ1 37uxt6rr/b+JRqw52J74Ukx298KZYI99JsSx1XGeDrT+zs0fT0HZvhhMJY0oBxWp 8P++bbjmtIof8dJLOPPAjYp8eFwwWJ+CrYCtVs7IStnWCnNiVrjchT0VQJaIZjlh uyiLDxNEgHDL+nRE+NyG1FawgzKjucW/Y/is31JLyIR+gxFop3CVdwdLGaBRpqdR c9oD3CX6aVHcolRlVg9K/ZkqZK9s7GmwYFXPaWbo76wHH/XyBtilEmFHzjmZrKql zaME8O8ZA6PlxVTlc+9TlA2fdPhCIVO/j9HNAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUfdlX36shTirN++jW+5xAfjTblYIwHwYDVR0jBBgwFoAUq8hDn+GdmbA4JwII yUtmyiMf/tUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU RUwvcThoRG4tR2RtYkE0SndJSXlVdG15aU1mX3RVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9xOGhEbi1HZG1iQTRKd0lJeVV0bXlpTWZfdFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElOQVRFTC9mZGxYMzZzaFRpck4t LWpXLTV4QWZqVGJsWUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7dPMA0GCSqGSIb3DQEBCwUAA4IBAQCCP9K0hxyl3SSQrBj0MV9mbA7x/pdo mA+VQpTC4mLIiFnVtCwWvtUvn/jUbDuccPbRORnTGAiVyvMOwI5okK0yNJqrsKhs tPvZS/6ocF8hB2BBAovhUlgTwQBMKxkEyHdg3yINVFzBl0LfCV9FFi4BxXEQIkmS IybGdlavTiP8MqgibTbEqAt2TuMGDgkGhZfZbbFKmK0wKpEAVX9Y9tp7/YSGcv59 qYWWCZKK8oQYYOYcrIww/vfvxYX/eZzShQZ6K2qGDn1jP2x9+5QWYFG2vzt3xx7N EmBiS54skimFBy3fNFUga8niFjba2+ttkHColdvoKV6lPO373wzb6ewo -----END CERTIFICATE-----Generated at Tue Oct 28 04:47:41 2025 by rpki-client