$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/uNVqEJogHZSaPrKSieumrfhC8bk.roa File: uNVqEJogHZSaPrKSieumrfhC8bk.roa (raw, json) Hash identifier: dR9jkjn7FRhIqoQ74x6PlkHXiKpeC16K+bmQtEzwsc0= Subject key identifier: B8:D5:6A:10:9A:20:1D:94:9A:3E:B2:92:89:EB:A6:AD:F8:42:F1:B9 Certificate issuer: /CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Certificate serial: 0137 Authority key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/uNVqEJogHZSaPrKSieumrfhC8bk.roa Signing time: Fri 05 Sep 2025 04:07:06 +0000 ROA not before: Fri 05 Sep 2025 04:07:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 213607 IP address blocks: 165.101.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 23:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Validity Not Before: Sep 5 04:07:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B8D56A109A201D949A3EB29289EBA6ADF842F1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:b9:6d:fb:7e:c9:97:2e:f9:c3:8e:83:b2: 1a:70:88:6f:c2:d0:f6:87:04:4a:37:58:3d:93:b2: ad:18:f1:3e:5b:01:f2:86:34:7e:30:36:c1:c5:d2: 00:dc:59:46:1b:ba:87:a0:0f:b2:5b:55:0a:72:37: b4:76:62:89:cc:4e:3e:d4:25:70:cd:90:dc:11:e9: 5e:68:db:7f:e6:b8:f3:10:bc:76:73:6a:61:12:14: cd:db:d4:a6:b1:d5:1a:92:2d:dd:2a:81:25:88:c1: 95:e3:eb:75:75:62:26:ed:78:e3:88:87:7b:b2:c4: be:be:42:c3:0d:0a:24:8a:b5:ea:d1:b2:be:f8:ac: 60:a5:41:87:35:9a:e7:bd:14:e7:6f:a1:7a:d6:3b: c2:c2:d1:2d:c2:38:01:db:aa:58:ec:d6:f7:97:30: 86:b7:5f:29:7c:a2:2b:99:65:a7:36:10:aa:78:8b: e6:71:34:a4:c1:fb:db:0c:8a:71:a9:44:16:79:84: 06:84:f1:9e:0c:e2:dc:24:58:b5:ca:cd:db:50:ac: 08:05:f0:44:d3:be:6c:b0:6f:54:8b:d6:d8:b4:1a: 0e:f6:17:c4:a9:ae:02:af:46:ad:83:9c:e5:be:75: bf:36:3a:72:32:03:1d:5a:55:2c:06:8a:90:8e:3d: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D5:6A:10:9A:20:1D:94:9A:3E:B2:92:89:EB:A6:AD:F8:42:F1:B9 X509v3 Authority Key Identifier: keyid:7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/uNVqEJogHZSaPrKSieumrfhC8bk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.101.152.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:9d:7b:96:a6:57:2c:46:e3:0b:44:f4:5f:a3:7d:9f:d2:2d: d0:29:08:54:c6:4a:b1:fe:ee:62:1e:34:6e:0c:78:ec:3b:7e: ad:e4:7c:ed:fa:2c:68:ae:4c:44:6c:91:c4:95:e3:01:6f:8b: 41:e1:57:68:e8:63:65:10:57:0d:83:be:03:63:f0:40:40:d8: 8e:a7:7b:60:49:26:fe:a9:5c:79:ea:f7:e8:be:50:57:ac:1a: a3:09:11:d9:fe:5d:1f:e8:3a:c9:f4:63:74:0e:24:bf:f3:24: 1c:3b:4c:39:65:ac:8c:2e:a8:ae:68:82:6a:ed:5f:46:5e:86: 42:c1:9b:c2:62:59:ae:6f:c6:21:c6:7e:e4:e9:9b:b6:59:d3: cd:b3:cf:6f:55:b9:e7:aa:eb:9b:01:31:b8:8f:ff:8f:9b:45: 1a:eb:73:ad:dc:f0:a6:50:ca:16:b7:ba:13:40:6b:fc:be:1f: 9a:39:21:95:b8:a6:40:69:54:65:95:4d:d0:a3:a4:dc:fa:41: 6b:fd:bc:b9:aa:23:42:cc:dd:d0:65:67:bb:a6:3e:ad:53:b5: b5:7f:1e:75:3a:a7:75:e2:fe:45:55:5d:0c:92:68:13:45:d4: f0:55:fc:76:18:54:23:d0:f5:f5:49:6f:90:ff:71:25:4d:5c: 5c:60:b1:91 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICATcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VE ODMwOTY3MTAyN0I3RTZGQzlBRTI3QjlDNjhDOUM0RTI5QzU3NTAeFw0yNTA5MDUw NDA3MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI4RDU2QTEwOUEyMDFE OTQ5QTNFQjI5Mjg5RUJBNkFERjg0MkYxQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8kLlt+37Jly75w46DshpwiG/C0PaHBEo3WD2Tsq0Y8T5bAfKG NH4wNsHF0gDcWUYbuoegD7JbVQpyN7R2YonMTj7UJXDNkNwR6V5o23/muPMQvHZz amESFM3b1Kax1RqSLd0qgSWIwZXj63V1YibteOOIh3uyxL6+QsMNCiSKterRsr74 rGClQYc1mue9FOdvoXrWO8LC0S3COAHbqljs1veXMIa3Xyl8oiuZZac2EKp4i+Zx NKTB+9sMinGpRBZ5hAaE8Z4M4twkWLXKzdtQrAgF8ETTvmywb1SL1ti0Gg72F8Sp rgKvRq2DnOW+db82OnIyAx1aVSwGipCOPVnNAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUuNVqEJogHZSaPrKSieumrfhC8bkwHwYDVR0jBBgwFoAUftgwlnECe35vya4n ucaMnE4pxXUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNQkVT T04vZnRnd2xuRUNlMzV2eWE0bnVjYU1uRTRweFhVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9mdGd3bG5FQ2UzNXZ5YTRudWNhTW5FNHB4WFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1CRVNPTi91TlZxRUpvZ0haU2FQ cktTaWV1bXJmaEM4Ymsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQApWWYMA0GCSqGSIb3DQEBCwUAA4IBAQBcnXuWplcsRuMLRPRfo32f0i3QKQhU xkqx/u5iHjRuDHjsO36t5Hzt+ixorkxEbJHEleMBb4tB4Vdo6GNlEFcNg74DY/BA QNiOp3tgSSb+qVx56vfovlBXrBqjCRHZ/l0f6DrJ9GN0DiS/8yQcO0w5ZayMLqiu aIJq7V9GXoZCwZvCYlmub8Yhxn7k6Zu2WdPNs89vVbnnquubATG4j/+Pm0Ua63Ot 3PCmUMoWt7oTQGv8vh+aOSGVuKZAaVRllU3Qo6Tc+kFr/by5qiNCzN3QZWe7pj6t U7W1fx51Oqd14v5FVV0MkmgTRdTwVfx2GFQj0PX1SW+Q/3ElTVxcYLGR -----END CERTIFICATE-----Generated at Mon Sep 8 22:43:13 2025 by rpki-client