$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/fPeygjZRj2TuISOpRGbNDKuwP30.roa File: fPeygjZRj2TuISOpRGbNDKuwP30.roa (raw, json) Hash identifier: Fo5im/eNre1zici4hl+r/XgU3Q5XL0Nr6wII8gflqZI= Subject key identifier: 7C:F7:B2:82:36:51:8F:64:EE:21:23:A9:44:66:CD:0C:AB:B0:3F:7D Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Certificate serial: 02C1 Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/fPeygjZRj2TuISOpRGbNDKuwP30.roa Signing time: Wed 22 Oct 2025 10:05:38 +0000 ROA not before: Wed 22 Oct 2025 10:05:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 202.148.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 12:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Validity Not Before: Oct 22 10:05:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7CF7B28236518F64EE2123A94466CD0CABB03F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:7f:23:69:3e:1f:30:60:14:89:00:e7:dc: aa:90:60:67:cb:f1:27:01:16:f2:b7:5c:b4:62:f4: d0:b4:71:5a:71:a8:c7:da:af:a0:6d:b7:ce:52:ac: ff:74:95:7a:a7:1f:c4:9b:a6:b3:97:19:c6:be:a3: 5d:87:37:dc:c3:f3:34:51:46:e9:e8:74:5f:4b:5e: c3:89:92:28:39:a1:fd:4d:28:34:21:11:5a:4f:a7: 3c:12:13:da:41:5c:c2:8c:70:48:09:fe:a8:30:b6: e3:62:6c:23:55:4e:7a:9f:1d:9e:e7:fe:b8:ce:1a: d6:df:eb:a7:0c:64:31:24:7e:bb:65:97:be:17:d4: 60:d1:00:7f:b6:ab:fa:5a:1c:8f:17:d0:1e:b5:8e: a1:0f:ed:7b:b3:be:44:da:cd:95:ce:d8:05:7e:6e: 51:c7:34:a3:c2:71:2a:ce:b4:eb:c6:9c:73:c1:6e: 24:a4:9c:42:d2:63:10:58:3f:5f:de:e9:8c:f0:67: 58:e7:f8:f0:df:9f:65:b8:74:44:38:b0:8c:63:69: a7:a8:9c:58:cd:5b:a8:d3:ce:46:f4:e5:d6:a3:8a: 2d:86:57:7a:a0:22:ef:45:78:f3:dc:ad:40:c6:05: 79:5a:b5:a4:53:d8:ef:c5:90:eb:97:94:4d:0c:37: ee:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F7:B2:82:36:51:8F:64:EE:21:23:A9:44:66:CD:0C:AB:B0:3F:7D X509v3 Authority Key Identifier: keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/fPeygjZRj2TuISOpRGbNDKuwP30.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.148.220.0/23 Signature Algorithm: sha256WithRSAEncryption 02:8f:e4:12:b7:ec:b8:05:20:08:7b:81:d8:88:09:27:cb:8c: 00:44:df:54:d5:0b:89:78:59:ab:68:3c:7b:14:6c:b9:de:7a: 6d:1e:4b:56:11:b6:e0:80:e0:ee:1d:30:99:6d:8c:b4:be:1c: a3:37:b9:ba:72:5b:0d:23:c1:e0:59:b7:9b:a9:f2:84:9f:0c: 4e:06:34:6b:f8:e2:ac:f4:2a:fc:3d:0d:fe:f9:2e:94:b5:b4: 0a:97:44:bd:58:3f:64:17:20:ab:75:e7:65:20:6b:fb:5e:60: 66:a1:4f:a7:e0:d1:79:48:a7:34:07:93:a0:d8:74:f9:07:9a: 4c:d7:8c:1c:2f:19:4c:8e:c0:48:32:1a:1e:30:d0:58:bb:1a: ab:25:7f:0c:52:b2:10:78:e6:a2:8a:50:23:d0:81:e1:65:56: 1d:1e:72:41:fb:14:22:ce:7f:2d:d3:af:18:27:75:e5:5c:74: 76:69:da:7f:cb:97:10:b0:da:f2:87:56:a2:52:b6:08:56:81: 12:aa:28:27:2a:a8:83:5d:32:ee:0d:f2:ab:a2:3e:7c:a1:f0: bd:3d:65:c0:44:23:16:93:05:71:e7:22:54:55:b9:48:02:dc: d3:e1:63:cd:79:e5:d6:a5:b9:b2:1f:ac:4d:36:0d:87:5e:3c: 32:24:4f:47 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI2 NEE0MUE3NDFFNUYwMEFFRDJCRDdFNEE3QTQyRjVCMUQ3NThENTAeFw0yNTEwMjIx MDA1MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDRjdCMjgyMzY1MThG NjRFRTIxMjNBOTQ0NjZDRDBDQUJCMDNGN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChpH8jaT4fMGAUiQDn3KqQYGfL8ScBFvK3XLRi9NC0cVpxqMfa r6Btt85SrP90lXqnH8SbprOXGca+o12HN9zD8zRRRunodF9LXsOJkig5of1NKDQh EVpPpzwSE9pBXMKMcEgJ/qgwtuNibCNVTnqfHZ7n/rjOGtbf66cMZDEkfrtll74X 1GDRAH+2q/paHI8X0B61jqEP7XuzvkTazZXO2AV+blHHNKPCcSrOtOvGnHPBbiSk nELSYxBYP1/e6YzwZ1jn+PDfn2W4dEQ4sIxjaaeonFjNW6jTzkb05dajii2GV3qg Iu9FePPcrUDGBXlataRT2O/FkOuXlE0MN+5fAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfPeygjZRj2TuISOpRGbNDKuwP30wHwYDVR0jBBgwFoAUAmSkGnQeXwCu0r1+ SnpC9bHXWNUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0RDTC1U Vy9BbVNrR25RZVh3Q3UwcjEtU25wQzliSFhXTlUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FtU2tHblFlWHdDdTByMS1TbnBDOWJIWFdOVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NEQ0wtVFcvZlBleWdqWlJqMlR1SVNP cFJHYk5ES3V3UDMwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AcqU3DANBgkqhkiG9w0BAQsFAAOCAQEAAo/kErfsuAUgCHuB2IgJJ8uMAETfVNUL iXhZq2g8exRsud56bR5LVhG24IDg7h0wmW2MtL4coze5unJbDSPB4Fm3m6nyhJ8M TgY0a/jirPQq/D0N/vkulLW0CpdEvVg/ZBcgq3XnZSBr+15gZqFPp+DReUinNAeT oNh0+QeaTNeMHC8ZTI7ASDIaHjDQWLsaqyV/DFKyEHjmoopQI9CB4WVWHR5yQfsU Is5/LdOvGCd15Vx0dmnaf8uXELDa8odWolK2CFaBEqooJyqog10y7g3yq6I+fKHw vT1lwEQjFpMFceciVFW5SALc0+FjzXnl1qW5sh+sTTYNh148MiRPRw== -----END CERTIFICATE-----Generated at Sat Oct 25 11:32:17 2025 by rpki-client