$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/YpjaZC5LJccyTWPtUV5W8y7mQGY.roa File: YpjaZC5LJccyTWPtUV5W8y7mQGY.roa (raw, json) Hash identifier: eUalxOIeDjSTxJCisxHcY9I9f8YtwI2myu3jsK0kajc= Subject key identifier: 62:98:DA:64:2E:4B:25:C7:32:4D:63:ED:51:5E:56:F3:2E:E6:40:66 Certificate issuer: /CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Certificate serial: 0139 Authority key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/YpjaZC5LJccyTWPtUV5W8y7mQGY.roa Signing time: Fri 05 Sep 2025 06:58:45 +0000 ROA not before: Fri 05 Sep 2025 06:58:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38854 IP address blocks: 165.101.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Validity Not Before: Sep 5 06:58:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6298DA642E4B25C7324D63ED515E56F32EE64066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:fe:5b:43:96:12:2d:a4:ae:b7:88:0b:5e: cf:a4:7c:5c:dd:21:4c:af:c6:7d:58:aa:5b:67:61: 37:f9:0d:65:2f:00:c5:38:9c:a2:cd:39:e6:5a:d4: 3e:bf:fc:d4:9d:84:68:8c:59:17:b7:60:fa:6f:d7: b0:b4:13:13:ad:04:82:e0:a0:02:08:e5:b0:b3:d5: cb:b2:b6:50:6a:b3:ee:97:68:ac:ca:36:ef:42:02: b1:de:70:e1:dd:fb:ec:82:df:c3:ce:8f:19:24:32: ed:34:f5:ba:90:29:5f:7b:37:57:ac:ad:6a:1c:18: b9:d5:c2:eb:cf:e0:3b:b3:c2:f1:08:cf:e2:e7:58: 7e:f0:14:16:5b:a4:2e:fb:c0:de:0e:f8:8e:83:b8: a2:33:33:93:46:de:e5:ce:a8:e0:7b:76:94:27:fb: 70:61:d0:98:f8:94:5e:49:02:9c:6b:e0:e4:e1:26: 54:df:1e:f1:fe:73:d7:50:4c:df:1b:73:bd:04:70: d4:f2:a9:49:c2:82:44:19:97:37:ce:3d:8f:e1:d9: 19:f8:b0:c4:04:06:9c:49:5b:1c:b3:3e:a2:40:82: dd:1f:ff:9e:76:e2:91:c4:57:dd:32:88:02:d1:90: e0:3d:a5:d5:bb:13:21:b8:3f:dc:10:ab:3a:3f:eb: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:98:DA:64:2E:4B:25:C7:32:4D:63:ED:51:5E:56:F3:2E:E6:40:66 X509v3 Authority Key Identifier: keyid:7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/YpjaZC5LJccyTWPtUV5W8y7mQGY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.152.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d8:0c:14:0e:ee:69:f9:9d:17:01:af:f1:05:1c:b0:36:c3: a2:bd:47:e5:b1:f2:b9:5a:d4:33:71:55:c2:49:76:dd:cc:8b: ce:04:a2:cd:38:a9:a7:41:9d:99:9e:b1:5d:1f:dd:bd:5f:3c: fa:c2:b3:b8:3c:5c:a1:f2:1c:bd:99:8b:91:19:4e:fe:98:30: 68:c2:99:84:d2:9e:ec:14:6f:d3:05:eb:a4:77:3c:f7:df:1a: af:24:79:02:d4:08:ac:fd:17:0a:3d:0e:c4:97:5e:67:85:7a: ad:4d:2e:57:dd:93:8a:79:a7:f2:94:65:52:a4:1a:da:79:47: b9:d3:23:ae:db:81:4c:2f:6b:f4:e4:62:ff:64:52:e3:71:cb: 51:08:91:fd:ea:8f:0c:07:cd:fd:10:28:d8:f8:b1:f1:f2:4e: cf:52:1f:a8:db:cc:37:cd:25:66:84:c1:fd:b3:27:14:fc:36: 1a:95:9f:35:d4:b3:10:8f:26:0b:20:94:5b:8f:de:5c:88:fd: ff:e8:18:4b:d6:71:4b:78:96:ea:61:3f:f1:73:2b:b1:85:73: 81:9f:ed:85:79:0e:01:5d:b4:df:d1:73:a1:a3:c6:27:d8:e9: 7e:94:ee:0d:13:b8:9a:73:18:c3:03:fb:d7:be:c5:b6:54:fd: 3b:d2:67:16 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICATkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VE ODMwOTY3MTAyN0I3RTZGQzlBRTI3QjlDNjhDOUM0RTI5QzU3NTAeFw0yNTA5MDUw NjU4NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYyOThEQTY0MkU0QjI1 QzczMjRENjNFRDUxNUU1NkYzMkVFNjQwNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuvv5bQ5YSLaSut4gLXs+kfFzdIUyvxn1YqltnYTf5DWUvAMU4 nKLNOeZa1D6//NSdhGiMWRe3YPpv17C0ExOtBILgoAII5bCz1cuytlBqs+6XaKzK Nu9CArHecOHd++yC38POjxkkMu009bqQKV97N1esrWocGLnVwuvP4DuzwvEIz+Ln WH7wFBZbpC77wN4O+I6DuKIzM5NG3uXOqOB7dpQn+3Bh0Jj4lF5JApxr4OThJlTf HvH+c9dQTN8bc70EcNTyqUnCgkQZlzfOPY/h2Rn4sMQEBpxJWxyzPqJAgt0f/552 4pHEV90yiALRkOA9pdW7EyG4P9wQqzo/65R3AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUYpjaZC5LJccyTWPtUV5W8y7mQGYwHwYDVR0jBBgwFoAUftgwlnECe35vya4n ucaMnE4pxXUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNQkVT T04vZnRnd2xuRUNlMzV2eWE0bnVjYU1uRTRweFhVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9mdGd3bG5FQ2UzNXZ5YTRudWNhTW5FNHB4WFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1CRVNPTi9ZcGphWkM1TEpjY3lU V1B0VVY1Vzh5N21RR1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQApWWYMA0GCSqGSIb3DQEBCwUAA4IBAQAK2AwUDu5p+Z0XAa/xBRywNsOivUfl sfK5WtQzcVXCSXbdzIvOBKLNOKmnQZ2ZnrFdH929Xzz6wrO4PFyh8hy9mYuRGU7+ mDBowpmE0p7sFG/TBeukdzz33xqvJHkC1Ais/RcKPQ7El15nhXqtTS5X3ZOKeafy lGVSpBraeUe50yOu24FML2v05GL/ZFLjcctRCJH96o8MB839ECjY+LHx8k7PUh+o 28w3zSVmhMH9sycU/DYalZ811LMQjyYLIJRbj95ciP3/6BhL1nFLeJbqYT/xcyux hXOBn+2FeQ4BXbTf0XOho8Yn2Ol+lO4NE7iacxjDA/vXvsW2VP070mcW -----END CERTIFICATE-----Generated at Tue Sep 9 02:41:53 2025 by rpki-client