$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/XXI6G1BQapxbCgbYMBn59bbU3DA.roa File: XXI6G1BQapxbCgbYMBn59bbU3DA.roa (raw, json) Hash identifier: gCoENJgqF52ev2sOgRnBJisRBl8qtfUjh/eamfDNjbE= Subject key identifier: 5D:72:3A:1B:50:50:6A:9C:5B:0A:06:D8:30:19:F9:F5:B6:D4:DC:30 Certificate issuer: /CN=625D845D7953519D719EBDCC92C17632177022CF Certificate serial: 0143 Authority key identifier: 62:5D:84:5D:79:53:51:9D:71:9E:BD:CC:92:C1:76:32:17:70:22:CF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/XXI6G1BQapxbCgbYMBn59bbU3DA.roa Signing time: Mon 26 May 2025 04:06:55 +0000 ROA not before: Mon 26 May 2025 04:06:55 +0000 ROA not after: Fri 09 Jan 2026 15:30:37 +0000 asID: 13335 IP address blocks: 161.248.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D845D7953519D719EBDCC92C17632177022CF Validity Not Before: May 26 04:06:55 2025 GMT Not After : Jan 9 15:30:37 2026 GMT Subject: CN=5D723A1B50506A9C5B0A06D83019F9F5B6D4DC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:3d:c1:18:d4:e7:0f:2d:48:3a:dd:f9:a0: 65:ec:45:bb:de:97:5b:c0:05:86:0d:e2:2e:02:cc: 0b:a7:c8:76:d2:3b:ad:6a:8e:1c:74:6e:04:93:62: f6:ed:0e:03:42:9f:df:e9:ad:31:b3:07:83:2b:58: 7e:7f:83:52:2a:60:c6:4f:01:52:eb:4c:87:ff:8f: 27:39:2a:de:c9:cf:c4:8a:17:9e:a1:d6:53:30:28: 31:17:65:4d:6e:4f:40:c9:dc:76:c2:8f:67:42:38: 69:ae:38:d6:4c:c6:fe:ae:86:c2:fe:02:d3:3c:6e: 96:54:64:26:e2:c2:b9:80:7e:0c:44:51:f3:5d:fe: 3f:58:3a:14:0e:05:3f:00:1e:3f:34:7e:9a:15:e7: e6:45:53:0c:89:8f:48:6e:d0:7f:bd:2c:27:c9:b5: 18:00:0b:0f:d5:52:92:f5:ac:ac:06:b5:96:ff:4c: e0:70:92:6a:67:08:5d:36:d6:a0:60:41:fb:84:41: c0:6d:2e:bc:5c:4a:d8:d8:2f:90:3d:e2:b9:73:06: 9d:b3:90:a2:b1:c4:9b:64:4b:95:19:9e:c7:c9:e3: d6:7e:cf:05:ae:e1:bb:ad:65:5f:e7:c7:4c:54:24: 06:cf:c9:6f:67:06:20:7a:2b:7a:96:b8:31:59:5e: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:72:3A:1B:50:50:6A:9C:5B:0A:06:D8:30:19:F9:F5:B6:D4:DC:30 X509v3 Authority Key Identifier: keyid:62:5D:84:5D:79:53:51:9D:71:9E:BD:CC:92:C1:76:32:17:70:22:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINEPAYTW/XXI6G1BQapxbCgbYMBn59bbU3DA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.134.0/23 Signature Algorithm: sha256WithRSAEncryption e3:9b:42:ed:aa:db:da:df:39:16:66:4d:42:62:d9:2f:10:35: 4c:bc:87:2c:80:81:fb:6d:7f:87:c7:91:1e:79:7f:41:17:1a: df:10:d6:b3:aa:ce:4c:1a:f7:10:f9:25:85:c7:a1:f3:ab:9b: 12:2c:38:9d:d4:c5:f8:b5:95:a4:25:ae:67:01:54:43:6a:3b: 8a:08:5b:20:16:3b:d0:a8:a2:30:bc:74:d3:e2:71:9e:13:c5: 58:2c:21:98:00:e5:81:fe:77:21:99:1d:3b:ca:81:96:00:ba: b3:0d:18:26:45:61:03:f7:a3:2a:4c:07:b6:45:21:e4:8c:a0: cd:12:d5:f9:18:5a:56:76:e4:f0:1a:da:c3:06:ca:88:23:4b: 39:36:55:69:1b:b7:61:66:bf:66:42:d2:be:94:28:4f:42:dd: 6f:55:71:cc:7d:2c:6e:2a:99:05:3c:b9:60:e2:30:be:8c:10: 5f:d4:36:56:d5:ad:9e:d1:cd:f3:d0:55:1e:94:fb:b1:92:eb: 2e:0e:26:48:f1:28:c4:bb:e9:11:e3:ec:b0:92:30:65:70:2c: a0:cd:6a:b1:b8:e5:6c:05:47:a8:40:fd:4d:23:5d:a9:58:dc: 05:6a:39:3d:07:92:48:80:cb:4c:53:e6:43:70:cf:cd:57:8b: 5e:c1:3d:65 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjI1 RDg0NUQ3OTUzNTE5RDcxOUVCRENDOTJDMTc2MzIxNzcwMjJDRjAeFw0yNTA1MjYw NDA2NTVaFw0yNjAxMDkxNTMwMzdaMDMxMTAvBgNVBAMTKDVENzIzQTFCNTA1MDZB OUM1QjBBMDZEODMwMTlGOUY1QjZENERDMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtDz3BGNTnDy1IOt35oGXsRbvel1vABYYN4i4CzAunyHbSO61q jhx0bgSTYvbtDgNCn9/prTGzB4MrWH5/g1IqYMZPAVLrTIf/jyc5Kt7Jz8SKF56h 1lMwKDEXZU1uT0DJ3HbCj2dCOGmuONZMxv6uhsL+AtM8bpZUZCbiwrmAfgxEUfNd /j9YOhQOBT8AHj80fpoV5+ZFUwyJj0hu0H+9LCfJtRgACw/VUpL1rKwGtZb/TOBw kmpnCF021qBgQfuEQcBtLrxcStjYL5A94rlzBp2zkKKxxJtkS5UZnsfJ49Z+zwWu 4butZV/nx0xUJAbPyW9nBiB6K3qWuDFZXrZNAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUXXI6G1BQapxbCgbYMBn59bbU3DAwHwYDVR0jBBgwFoAUYl2EXXlTUZ1xnr3M ksF2MhdwIs8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElORVBB WVRXL1lsMkVYWGxUVVoxeG5yM01rc0YyTWhkd0lzOC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvWWwyRVhYbFRVWjF4bnIzTWtzRjJNaGR3SXM4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElORVBBWVRXL1hYSTZHMUJRYXB4 YkNnYllNQm41OWJiVTNEQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGh+IYwDQYJKoZIhvcNAQELBQADggEBAOObQu2q29rfORZmTUJi2S8QNUy8 hyyAgfttf4fHkR55f0EXGt8Q1rOqzkwa9xD5JYXHofOrmxIsOJ3Uxfi1laQlrmcB VENqO4oIWyAWO9CoojC8dNPicZ4TxVgsIZgA5YH+dyGZHTvKgZYAurMNGCZFYQP3 oypMB7ZFIeSMoM0S1fkYWlZ25PAa2sMGyogjSzk2VWkbt2Fmv2ZC0r6UKE9C3W9V ccx9LG4qmQU8uWDiML6MEF/UNlbVrZ7RzfPQVR6U+7GS6y4OJkjxKMS76RHj7LCS MGVwLKDNarG45WwFR6hA/U0jXalY3AVqOT0HkkiAy0xT5kNwz81Xi17BPWU= -----END CERTIFICATE-----Generated at Thu Jun 5 20:25:58 2025 by rpki-client