$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Th9RXu10cRYb4b9CBSyXnExnBdo.roa File: Th9RXu10cRYb4b9CBSyXnExnBdo.roa (raw, json) Hash identifier: pEIUuhHMYcMSopcdOj03TOPFSL7mF9qf6JVmbuHXnj8= Subject key identifier: 4E:1F:51:5E:ED:74:71:16:1B:E1:BF:42:05:2C:97:9C:4C:67:05:DA Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Certificate serial: 0D60 Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Th9RXu10cRYb4b9CBSyXnExnBdo.roa Signing time: Fri 22 Aug 2025 08:56:53 +0000 ROA not before: Fri 22 Aug 2025 08:56:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 139637 IP address blocks: 103.119.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Validity Not Before: Aug 22 08:56:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4E1F515EED7471161BE1BF42052C979C4C6705DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:70:91:e1:49:65:d4:2e:85:95:0b:45:64: 34:7a:51:1c:3b:0d:2c:44:5e:ef:fd:2c:85:df:74: 21:b5:df:90:66:86:f1:3b:fd:cf:42:58:d7:39:4c: 67:ed:ef:82:a9:68:d6:c7:2c:1d:b8:d1:02:6d:8c: 57:66:68:35:d3:de:22:75:4f:62:13:f1:b6:3a:d5: ac:6d:04:90:7b:99:6b:c0:5d:1a:20:95:2f:6c:de: 3e:6a:15:87:d5:a7:78:95:59:c1:e3:e5:0c:1f:74: 86:06:d8:bc:4b:23:cd:cc:b4:8d:90:40:d3:cd:32: 62:eb:ff:a0:09:3f:bc:27:49:39:5c:4a:f7:3e:c8: 85:a7:d1:11:09:59:bc:87:95:5d:16:17:8b:1f:0e: d0:04:cd:03:c7:6f:2d:ed:8c:5c:4f:d3:46:a3:2f: 16:fc:8d:b9:f9:c7:e4:fe:34:ea:37:ee:0d:03:8e: 87:95:05:74:e8:2b:7d:2e:c6:29:75:3b:c3:92:a2: 24:8f:56:2d:d2:07:16:f9:e6:c4:80:64:9d:07:99: bd:54:fd:af:37:88:ec:c8:c8:1e:eb:e1:0d:b0:12: 78:6b:d1:e0:b7:30:f4:a2:d3:57:a9:7f:df:b4:c7: d9:4b:fe:89:7e:60:ec:d0:44:d0:e2:90:3c:d5:8d: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1F:51:5E:ED:74:71:16:1B:E1:BF:42:05:2C:97:9C:4C:67:05:DA X509v3 Authority Key Identifier: keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/Th9RXu10cRYb4b9CBSyXnExnBdo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.214.0/24 Signature Algorithm: sha256WithRSAEncryption 07:4c:e5:bc:5f:53:ff:c8:57:26:3e:76:84:4b:bc:9e:fd:09: e6:82:60:bb:c1:ae:02:9b:5a:d9:d5:64:65:fe:3c:3f:5c:9b: af:0a:29:89:27:6a:72:6e:c3:44:74:6c:5e:ac:3d:7c:b1:8c: f3:b2:a7:3b:53:67:b6:fa:22:8a:f2:9f:ae:45:67:19:c6:08: 27:8b:10:8b:72:e6:98:cd:1c:d3:96:df:93:f9:b5:1e:1a:de: 88:c3:3e:6b:e1:56:8e:17:21:d4:45:49:59:f7:9e:27:aa:2e: 7a:d9:38:56:78:d1:46:03:bc:67:f0:ed:2b:35:0a:93:b7:65: 7c:17:75:e5:3d:40:25:f9:30:e8:dd:8b:d2:2d:c0:14:fa:5b: e2:2b:87:71:3c:aa:e1:fb:64:f4:b7:1b:aa:83:33:41:16:84: a5:b0:99:7e:39:06:44:e8:42:cf:34:e7:11:8f:2d:89:fc:f2: 55:b8:7a:9b:ec:b9:47:90:02:f8:b9:fe:c4:2a:01:4b:8e:6d: 27:55:6d:2e:2f:7c:1b:03:9a:a1:7d:b3:38:6c:c7:83:08:02: 1c:64:4d:90:4d:de:65:d4:6b:c0:0f:d0:13:46:49:6e:f5:62: d3:a7:dc:35:d6:98:a1:bb:5d:c1:79:78:c4:84:4e:74:9a:78: 0c:69:39:66 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yNTA4MjIw ODU2NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRFMUY1MTVFRUQ3NDcx MTYxQkUxQkY0MjA1MkM5NzlDNEM2NzA1REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3MHCR4Ull1C6FlQtFZDR6URw7DSxEXu/9LIXfdCG135BmhvE7 /c9CWNc5TGft74KpaNbHLB240QJtjFdmaDXT3iJ1T2IT8bY61axtBJB7mWvAXRog lS9s3j5qFYfVp3iVWcHj5QwfdIYG2LxLI83MtI2QQNPNMmLr/6AJP7wnSTlcSvc+ yIWn0REJWbyHlV0WF4sfDtAEzQPHby3tjFxP00ajLxb8jbn5x+T+NOo37g0DjoeV BXToK30uxil1O8OSoiSPVi3SBxb55sSAZJ0Hmb1U/a83iOzIyB7r4Q2wEnhr0eC3 MPSi01epf9+0x9lL/ol+YOzQRNDikDzVjQ9FAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUTh9RXu10cRYb4b9CBSyXnExnBdowHwYDVR0jBBgwFoAUXNEK1bakd108UE1m EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvVGg5Ulh1MTBjUlliNGI5 Q0JTeVhuRXhuQmRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd31jANBgkqhkiG9w0BAQsFAAOCAQEAB0zlvF9T/8hXJj52hEu8nv0J5oJgu8Gu Apta2dVkZf48P1ybrwopiSdqcm7DRHRsXqw9fLGM87KnO1NntvoiivKfrkVnGcYI J4sQi3LmmM0c05bfk/m1HhreiMM+a+FWjhch1EVJWfeeJ6ouetk4VnjRRgO8Z/Dt KzUKk7dlfBd15T1AJfkw6N2L0i3AFPpb4iuHcTyq4ftk9LcbqoMzQRaEpbCZfjkG ROhCzzTnEY8tifzyVbh6m+y5R5AC+Ln+xCoBS45tJ1VtLi98GwOaoX2zOGzHgwgC HGRNkE3eZdRrwA/QE0ZJbvVi06fcNdaYobtdwXl4xIROdJp4DGk5Zg== -----END CERTIFICATE-----Generated at Sun Oct 26 03:12:21 2025 by rpki-client