$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa File: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (raw, json) Hash identifier: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA= Subject key identifier: B4:BB:BE:23:DA:2A:D5:14:52:27:4B:EF:A0:B8:65:B1:18:91:C0:BB Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Certificate serial: 03 Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa Signing time: Mon 18 Aug 2025 03:17:37 +0000 ROA not before: Mon 18 Aug 2025 03:17:37 +0000 ROA not after: Fri 31 Jul 2026 15:30:22 +0000 asID: 134823 IP address blocks: 203.18.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 Aug 2025 05:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Validity Not Before: Aug 18 03:17:37 2025 GMT Not After : Jul 31 15:30:22 2026 GMT Subject: CN=B4BBBE23DA2AD51452274BEFA0B865B11891C0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:58:5f:50:34:ae:cb:41:a3:99:75:15:4e: b2:44:86:68:2a:63:a0:9b:94:45:55:70:1e:67:a4: 4c:1b:4c:9e:85:28:61:4f:f2:1a:5b:f1:d4:cd:ff: 05:7d:f6:02:0a:48:76:ca:28:f7:bc:69:85:de:6c: 4d:e4:e4:2a:9b:d9:83:c5:28:40:54:20:02:05:98: 71:e5:93:05:43:4d:56:17:8c:7a:85:50:ee:93:9f: 58:85:82:64:f9:6a:00:03:7d:36:4a:af:d0:ef:6d: 98:45:e2:03:79:1a:cc:d2:10:b5:63:af:63:54:97: 8f:7b:9f:97:69:ae:4e:3d:35:c4:fc:ad:29:41:d4: 96:e0:9e:8e:89:45:4c:2a:d0:80:f6:cf:c6:5c:6c: 79:89:af:8d:1f:d5:bb:1b:37:e7:67:d8:a9:57:ee: 0a:58:f1:c6:6c:a4:7a:f4:08:26:89:4d:88:b8:f5: 47:d0:d4:b0:96:e5:b5:4f:80:e8:94:09:a7:4a:bc: 6b:36:a7:5e:69:a7:fd:aa:25:1b:fe:9f:14:f8:37: 57:f3:e2:37:82:59:44:49:6d:a9:98:5b:46:f4:bf: d5:49:0e:04:04:9d:0e:22:88:a5:bc:9f:50:df:49: 70:a9:07:c5:6a:7d:80:a2:a0:e7:bb:30:f3:fe:f0: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:BE:23:DA:2A:D5:14:52:27:4B:EF:A0:B8:65:B1:18:91:C0:BB X509v3 Authority Key Identifier: keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.18.156.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:45:7f:19:ea:71:42:a8:a6:e6:52:e8:d0:14:93:f9:1a:31: c4:62:99:5d:4e:b3:c1:6d:0d:5a:cb:49:60:73:04:b5:df:1a: 34:a9:4e:28:bf:32:45:54:f9:82:45:61:1b:10:f4:e6:ba:11: 84:d4:a7:5b:06:60:7b:df:f9:09:15:17:c3:e7:c9:ca:6b:56: 25:04:e3:6b:d3:a9:c5:fe:d1:c3:bf:a5:7a:79:62:dc:ca:92: 3a:fe:b3:23:9b:50:2c:fe:d9:e5:0f:de:65:83:d8:4b:fe:d7: 55:5c:7a:b5:ca:a0:cc:39:53:52:66:d2:92:bc:03:f4:ee:a1: cc:ab:c2:90:3c:e3:df:63:23:62:39:20:84:6f:1d:f2:60:ca: 46:2a:d7:69:42:c2:c7:be:65:0e:f3:a5:e9:eb:ef:5f:40:33: 9c:5a:9b:75:c0:c9:c2:82:7b:17:f4:3f:f4:12:c4:51:04:fb: cc:aa:93:9e:6f:a7:fd:ba:4e:d7:ea:2d:96:b0:ae:4b:0e:0b: 6d:12:9d:b4:26:e7:d2:40:cf:15:06:7b:0a:8a:fe:45:cf:18: 76:be:0e:e0:74:7d:32:b3:58:22:18:85:7b:c1:89:d6:8a:3a: 22:b3:44:ce:f2:54:a8:17:b8:86:8f:fb:bd:d7:ee:c3:d1:7c: 52:84:db:12 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMDIw RUFGNkQyNEI3NEVFQTU0QTg0NEY3MDIzNERDQTI1NUE2QkMxMB4XDTI1MDgxODAz MTczN1oXDTI2MDczMTE1MzAyMlowMzExMC8GA1UEAxMoQjRCQkJFMjNEQTJBRDUx NDUyMjc0QkVGQTBCODY1QjExODkxQzBCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6uWF9QNK7LQaOZdRVOskSGaCpjoJuURVVwHmekTBtMnoUoYU/y Glvx1M3/BX32AgpIdsoo97xphd5sTeTkKpvZg8UoQFQgAgWYceWTBUNNVheMeoVQ 7pOfWIWCZPlqAAN9Nkqv0O9tmEXiA3kazNIQtWOvY1SXj3ufl2muTj01xPytKUHU luCejolFTCrQgPbPxlxseYmvjR/Vuxs352fYqVfuCljxxmykevQIJolNiLj1R9DU sJbltU+A6JQJp0q8azanXmmn/aolG/6fFPg3V/PiN4JZREltqZhbRvS/1UkOBASd DiKIpbyfUN9JcKkHxWp9gKKg57sw8/7wAzkCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBS0u74j2irVFFInS++guGWxGJHAuzAfBgNVHSMEGDAWgBTwIOr20kt07qVKhE9w I03KJVprwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QUFRFQ0gv OENEcTl0SkxkTzZsU29SUGNDTk55aVZhYThFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS84Q0RxOXRKTGRPNmxTb1JQY0NOTnlpVmFhOEUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QUFRFQ0gvdEx1LUk5b3ExUlJTSjB2dm9M aGxzUmlSd0xzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcsS nDANBgkqhkiG9w0BAQsFAAOCAQEAG0V/GepxQqim5lLo0BST+RoxxGKZXU6zwW0N WstJYHMEtd8aNKlOKL8yRVT5gkVhGxD05roRhNSnWwZge9/5CRUXw+fJymtWJQTj a9Opxf7Rw7+lenli3MqSOv6zI5tQLP7Z5Q/eZYPYS/7XVVx6tcqgzDlTUmbSkrwD 9O6hzKvCkDzj32MjYjkghG8d8mDKRirXaULCx75lDvOl6evvX0AznFqbdcDJwoJ7 F/Q/9BLEUQT7zKqTnm+n/bpO1+otlrCuSw4LbRKdtCbn0kDPFQZ7Cor+Rc8Ydr4O 4HR9MrNYIhiFe8GJ1oo6IrNEzvJUqBe4ho/7vdfuw9F8UoTbEg== -----END CERTIFICATE-----Generated at Thu Aug 21 03:59:46 2025 by rpki-client