$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/FFWYje6zFfx0gLwEf8tGJJg-j_o.roa File: FFWYje6zFfx0gLwEf8tGJJg-j_o.roa (raw, json) Hash identifier: Vp4RrYIH9y6yw/UFcwHQc6vV6S7vKsuFoPA//EVmAHo= Subject key identifier: 14:55:98:8D:EE:B3:15:FC:74:80:BC:04:7F:CB:46:24:98:3E:8F:FA Certificate issuer: /CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2 Certificate serial: 0253 Authority key identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/FFWYje6zFfx0gLwEf8tGJJg-j_o.roa Signing time: Fri 22 Aug 2025 09:00:49 +0000 ROA not before: Fri 22 Aug 2025 09:00:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 103.127.218.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2 Validity Not Before: Aug 22 09:00:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1455988DEEB315FC7480BC047FCB4624983E8FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:7a:35:f2:47:9f:97:6d:ff:96:2a:32:88: c8:6b:f8:4d:bb:13:93:fd:65:61:6b:9f:40:96:72: 7a:cd:33:29:38:11:7a:b6:1f:29:97:1d:27:ec:78: 0d:77:bc:f2:c8:80:84:e4:65:96:e1:b0:78:df:4f: 2c:74:74:d0:87:e6:e3:88:1a:e4:15:5e:c8:b9:10: 9e:b7:60:b3:43:91:fd:2b:61:d2:d3:26:a8:aa:1d: 3a:d5:9d:0b:90:94:df:12:88:78:bb:d9:22:15:eb: 8e:17:c2:0d:d2:df:e5:3b:91:53:68:1d:8f:28:22: 40:3d:b1:cf:36:22:c7:e8:df:47:e8:97:d0:66:34: f7:96:cd:b0:11:04:a8:97:8b:aa:46:14:7c:ba:9f: 79:e7:7f:8b:39:af:cb:9e:fb:64:cc:2b:b4:ed:03: b4:91:f2:23:f6:56:5c:b6:1b:67:31:52:8c:b7:92: 75:e5:ba:f4:82:44:24:f3:75:b0:2c:84:94:07:69: 6e:6f:e7:07:07:f9:b7:d7:e8:ea:74:13:19:57:b1: 6c:27:f6:64:cf:1d:a1:11:ac:ce:3f:6e:b8:86:ba: f0:eb:10:aa:d8:a8:c6:16:78:11:85:a7:fa:8f:03: 7f:7f:e4:6d:61:8f:f2:14:df:d2:1e:e6:7b:96:5e: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:55:98:8D:EE:B3:15:FC:74:80:BC:04:7F:CB:46:24:98:3E:8F:FA X509v3 Authority Key Identifier: keyid:A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/FFWYje6zFfx0gLwEf8tGJJg-j_o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.218.0/23 Signature Algorithm: sha256WithRSAEncryption e6:8d:6f:a5:75:aa:4f:b5:3e:95:f2:9a:2b:8a:34:d3:63:e9: d1:f4:6b:23:db:99:f3:55:46:29:0a:6e:aa:9e:0a:65:fa:09: e8:e7:f1:e4:6d:4d:07:41:bd:df:19:b3:08:9c:94:82:6f:70: 54:89:b3:20:5d:6c:a1:6a:a0:8c:94:14:3a:50:1e:2a:ce:f5: ee:79:57:49:a3:84:e4:c3:74:b1:63:63:c8:e3:f1:a9:29:9c: 2c:fd:1f:e6:4e:15:f8:a9:b7:1a:38:c9:bb:96:37:ad:4f:18: c5:39:9c:ef:6a:0e:29:a2:f0:0a:73:6b:5b:28:0e:6b:6c:c8: 84:48:19:52:74:8b:c1:33:9a:27:61:63:8d:5f:d3:e3:15:af: 47:b6:be:69:2e:d2:96:b9:7b:b7:3a:89:2b:b2:95:cc:f3:d0: 61:9f:86:73:12:8d:af:41:9d:cc:9b:59:76:44:4c:b3:2b:45: 3b:51:5f:91:53:be:a6:88:c6:05:52:83:07:38:9a:d8:ee:f1: 40:98:50:67:8b:76:76:73:6b:51:dd:58:24:68:be:fc:a3:16: e7:71:8c:9e:5e:de:1a:77:17:27:76:4e:ac:5a:be:85:f0:8f: 2c:13:41:c9:f3:5d:10:7b:48:da:36:6c:61:ea:09:a3:7a:61: d3:1f:52:7b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM5 RTRGQzA1NzA0OUUwNTYwRTYxRDM5NjlEMTNBNUUyRjExQUNEMjAeFw0yNTA4MjIw OTAwNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE0NTU5ODhERUVCMzE1 RkM3NDgwQkMwNDdGQ0I0NjI0OTgzRThGRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzH3o18kefl23/lioyiMhr+E27E5P9ZWFrn0CWcnrNMyk4EXq2 HymXHSfseA13vPLIgITkZZbhsHjfTyx0dNCH5uOIGuQVXsi5EJ63YLNDkf0rYdLT JqiqHTrVnQuQlN8SiHi72SIV644Xwg3S3+U7kVNoHY8oIkA9sc82Isfo30fol9Bm NPeWzbARBKiXi6pGFHy6n3nnf4s5r8ue+2TMK7TtA7SR8iP2Vly2G2cxUoy3knXl uvSCRCTzdbAshJQHaW5v5wcH+bfX6Op0ExlXsWwn9mTPHaERrM4/briGuvDrEKrY qMYWeBGFp/qPA39/5G1hj/IU39Ie5nuWXlKjAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUFFWYje6zFfx0gLwEf8tGJJg+j/owHwYDVR0jBBgwFoAUo55PwFcEngVg5h05 adE6Xi8RrNIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURX QUxLL281NVB3RmNFbmdWZzVoMDVhZEU2WGk4UnJOSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvbzU1UHdGY0VuZ1ZnNWgwNWFkRTZYaThSck5JLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURXQUxLL0ZGV1lqZTZ6RmZ4 MGdMd0VmOHRHSkpnLWpfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnf9owDQYJKoZIhvcNAQELBQADggEBAOaNb6V1qk+1PpXymiuKNNNj6dH0 ayPbmfNVRikKbqqeCmX6Cejn8eRtTQdBvd8ZswiclIJvcFSJsyBdbKFqoIyUFDpQ HirO9e55V0mjhOTDdLFjY8jj8akpnCz9H+ZOFfiptxo4ybuWN61PGMU5nO9qDimi 8Apza1soDmtsyIRIGVJ0i8EzmidhY41f0+MVr0e2vmku0pa5e7c6iSuylczz0GGf hnMSja9BncybWXZETLMrRTtRX5FTvqaIxgVSgwc4mtju8UCYUGeLdnZza1HdWCRo vvyjFudxjJ5e3hp3Fyd2TqxavoXwjywTQcnzXRB7SNo2bGHqCaN6YdMfUns= -----END CERTIFICATE-----Generated at Sun Oct 26 03:41:24 2025 by rpki-client