$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/omWRiv2Gjisn3BVIJtTaANX3ws0.roa File: omWRiv2Gjisn3BVIJtTaANX3ws0.roa (raw, json) Hash identifier: j1Y9xYKC1MfKu476TBxz5Csc97AgZ8hNxzkedBq00Lk= Subject key identifier: A2:65:91:8A:FD:86:8E:2B:27:DC:15:48:26:D4:DA:00:D5:F7:C2:CD Certificate issuer: /CN=1D4D78F56750C7598953366D459A12B658B7FF38 Certificate serial: 043C Authority key identifier: 1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/omWRiv2Gjisn3BVIJtTaANX3ws0.roa Signing time: Fri 22 Aug 2025 08:58:59 +0000 ROA not before: Fri 22 Aug 2025 08:58:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 103.158.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 02:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4D78F56750C7598953366D459A12B658B7FF38 Validity Not Before: Aug 22 08:58:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A265918AFD868E2B27DC154826D4DA00D5F7C2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:f0:43:3f:b2:9c:01:26:63:ab:3e:3a:94: 21:b4:15:9a:42:94:08:f7:27:c7:bd:19:78:1d:1c: 98:87:8c:35:ff:24:55:58:5a:f7:40:b1:e0:37:b1: 93:49:c7:b7:8b:6a:cd:3c:56:5a:99:9c:c3:fa:5f: bb:7d:e2:82:65:d9:0e:ac:b6:42:29:26:b8:66:d4: be:ec:b0:48:f6:3d:c9:d6:53:64:8c:f1:2b:58:9e: 3e:08:35:55:b3:fe:1e:5d:94:07:49:c8:68:ec:6a: 0a:b0:5b:39:38:8c:4f:7e:c3:c3:af:50:ee:3f:3a: b0:9b:1b:2c:42:49:7b:26:25:37:e1:ad:be:cf:e9: 64:b4:2f:b4:66:6f:81:f7:c0:a1:3f:a5:c8:49:14: 57:62:8a:7f:a9:35:b9:9e:1f:cb:cd:4a:8b:61:dc: 0f:6c:2f:77:1a:fd:95:f0:6b:3e:1c:ce:28:42:ce: 19:7b:01:d5:f5:3a:c6:75:89:24:31:48:5d:4d:29: a0:18:5b:85:0a:ff:a1:75:7f:13:3a:1e:ba:90:68: 29:e2:25:8e:ec:74:68:87:63:5c:f1:b4:99:be:72: 1d:ad:48:15:b3:c9:32:a0:94:5c:71:01:0a:12:69: 5e:d1:70:e8:d9:7a:5f:ec:78:5f:5d:db:88:a7:79: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:65:91:8A:FD:86:8E:2B:27:DC:15:48:26:D4:DA:00:D5:F7:C2:CD X509v3 Authority Key Identifier: keyid:1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/omWRiv2Gjisn3BVIJtTaANX3ws0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.158.186.0/24 Signature Algorithm: sha256WithRSAEncryption 28:34:f3:58:b5:23:00:08:1c:a5:6f:9f:45:d5:52:8d:78:8c: 03:97:ab:66:39:91:2e:c4:42:7c:e2:d9:1f:f3:b3:ee:0e:50: a8:7f:31:32:64:f4:c3:ab:6f:e5:ad:e9:d2:59:4f:02:c3:6e: f7:6b:37:5d:bb:fd:a0:35:3b:e4:78:aa:e7:d2:11:45:f9:95: 17:6c:34:f6:85:ba:c9:5b:6b:b3:22:2c:9e:8b:30:1d:e7:c4: e1:a8:63:c0:28:2b:d7:84:9b:97:22:ac:dc:c2:8f:b6:1d:6d: 54:14:9b:41:04:ef:7e:f7:a9:5c:42:2a:0f:3a:0f:c3:cb:f2: d8:a3:37:f8:59:37:0f:32:4f:d9:34:54:4e:39:03:1c:a7:ca: 35:86:55:db:9e:f5:c2:cd:dc:5e:76:2b:59:39:1e:f7:7e:e7: 34:2d:e6:47:e4:3c:35:ab:f1:43:01:a4:41:41:f0:42:ed:b8: 08:68:b5:92:2c:8f:0d:b0:15:94:8f:ec:c8:ee:6c:60:64:2f: a5:8e:eb:0c:7a:38:c3:6c:20:19:63:fd:aa:34:1e:20:e7:a8: 77:68:8e:f2:d9:cb:4d:b0:5c:34:da:20:14:69:60:2f:85:22: cc:0b:89:62:3c:56:17:a4:42:ea:8d:72:f1:d5:81:5e:55:12: 24:87:06:37 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ0 RDc4RjU2NzUwQzc1OTg5NTMzNjZENDU5QTEyQjY1OEI3RkYzODAeFw0yNTA4MjIw ODU4NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEyNjU5MThBRkQ4NjhF MkIyN0RDMTU0ODI2RDREQTAwRDVGN0MyQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu7fBDP7KcASZjqz46lCG0FZpClAj3J8e9GXgdHJiHjDX/JFVY WvdAseA3sZNJx7eLas08VlqZnMP6X7t94oJl2Q6stkIpJrhm1L7ssEj2PcnWU2SM 8StYnj4INVWz/h5dlAdJyGjsagqwWzk4jE9+w8OvUO4/OrCbGyxCSXsmJTfhrb7P 6WS0L7Rmb4H3wKE/pchJFFdiin+pNbmeH8vNSoth3A9sL3ca/ZXwaz4czihCzhl7 AdX1OsZ1iSQxSF1NKaAYW4UK/6F1fxM6HrqQaCniJY7sdGiHY1zxtJm+ch2tSBWz yTKglFxxAQoSaV7RcOjZel/seF9d24ineTLVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUomWRiv2Gjisn3BVIJtTaANX3ws0wHwYDVR0jBBgwFoAUHU149WdQx1mJUzZt RZoStli3/zgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkVCVUxB WC9IVTE0OVdkUXgxbUpVelp0UlpvU3RsaTNfemcuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0hVMTQ5V2RReDFtSlV6WnRSWm9TdGxpM196Zy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05FQlVMQVgvb21XUml2MkdqaXNuM0JW SUp0VGFBTlgzd3MwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeeujANBgkqhkiG9w0BAQsFAAOCAQEAKDTzWLUjAAgcpW+fRdVSjXiMA5erZjmR LsRCfOLZH/Oz7g5QqH8xMmT0w6tv5a3p0llPAsNu92s3Xbv9oDU75Hiq59IRRfmV F2w09oW6yVtrsyIsnoswHefE4ahjwCgr14SblyKs3MKPth1tVBSbQQTvfvepXEIq DzoPw8vy2KM3+Fk3DzJP2TRUTjkDHKfKNYZV2571ws3cXnYrWTke937nNC3mR+Q8 NavxQwGkQUHwQu24CGi1kiyPDbAVlI/syO5sYGQvpY7rDHo4w2wgGWP9qjQeIOeo d2iO8tnLTbBcNNogFGlgL4UizAuJYjxWF6RC6o1y8dWBXlUSJIcGNw== -----END CERTIFICATE-----Generated at Mon Nov 3 23:14:31 2025 by rpki-client