$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/rnapuLBZV172Hb6Tg1fnjuIbZB4.roa File: rnapuLBZV172Hb6Tg1fnjuIbZB4.roa (raw, json) Hash identifier: gh9QurcBP4yxQG3dBfzB2Yu3r+vHJksLn4LCHiS3Hkg= Subject key identifier: AE:76:A9:B8:B0:59:57:5E:F6:1D:BE:93:83:57:E7:8E:E2:1B:64:1E Certificate issuer: /CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Certificate serial: 0B05 Authority key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/rnapuLBZV172Hb6Tg1fnjuIbZB4.roa Signing time: Fri 22 Aug 2025 08:44:10 +0000 ROA not before: Fri 22 Aug 2025 08:44:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 48024 IP address blocks: 103.126.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Validity Not Before: Aug 22 08:44:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AE76A9B8B059575EF61DBE938357E78EE21B641E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:87:40:9e:20:d3:c1:5c:96:fb:66:8b:27: 1f:b9:6b:32:f4:0a:3a:f2:68:aa:a4:02:5a:ff:21: 6d:e4:f5:90:a2:e9:5f:30:2d:38:ff:78:d3:8a:dd: ef:29:62:9e:f2:87:9c:94:dc:2f:9e:b1:30:ff:66: ab:64:60:a3:e8:6f:34:ac:f0:0e:e2:5a:c5:e1:68: 23:b1:74:bc:02:60:71:51:61:60:b8:4e:67:99:eb: 6c:b6:84:52:51:ef:5c:87:d5:ae:ac:fe:c6:e0:c7: d1:7f:dc:b0:b4:69:58:79:13:84:13:87:ba:ae:d2: 8f:3e:d3:b7:84:ec:9a:65:77:66:3a:8d:e8:9a:c3: d3:d2:b3:4b:5c:a5:1c:40:c4:f7:a1:9f:0e:73:56: 27:89:03:31:f1:26:99:59:96:a1:44:93:17:a1:f0: 6b:c9:9d:f3:4f:3b:31:0a:ea:56:5d:2b:9b:5f:c9: b2:bc:24:1d:cf:e4:f5:88:4e:a6:52:d3:e6:87:80: 40:7d:6e:50:6e:d4:92:78:e3:9a:72:21:76:52:5b: b1:0d:98:33:51:14:59:dd:39:ec:8f:f8:fa:6d:e8: 52:0c:09:70:3f:67:2d:e8:a1:0e:8f:95:a0:3a:2b: 93:e9:50:e3:5b:a8:9f:5c:d2:19:ad:02:2e:b4:f2: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:76:A9:B8:B0:59:57:5E:F6:1D:BE:93:83:57:E7:8E:E2:1B:64:1E X509v3 Authority Key Identifier: keyid:0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/rnapuLBZV172Hb6Tg1fnjuIbZB4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.126.88.0/24 Signature Algorithm: sha256WithRSAEncryption 68:8b:a9:23:43:03:35:65:cd:d6:84:18:f1:0d:c5:63:77:67: de:e8:67:1a:ce:67:c7:3a:06:dc:aa:76:84:4c:cd:10:6a:01: 95:35:53:48:4e:c3:d9:a3:67:10:43:82:2c:d8:97:30:69:e3: cf:fe:cd:a3:cb:87:75:e6:38:07:70:aa:fb:fd:2d:7a:b0:0d: 52:bd:aa:b2:5c:50:9f:0c:b5:a9:63:4c:fe:6e:59:f3:91:9d: de:e4:ea:52:70:eb:41:65:42:14:1a:ed:d1:5f:86:70:5e:32: 87:1e:20:14:10:2a:9b:67:eb:90:ea:3e:74:a0:b8:68:b7:e4: a8:e2:15:28:13:1f:17:bd:00:6c:61:65:f3:9f:54:40:58:6a: 01:eb:99:e0:4d:d7:9f:80:b5:7a:93:fc:d8:4b:fc:bf:a6:01: 20:91:b9:b3:20:d0:4b:a3:22:c4:36:62:59:4a:cd:d0:8b:b4: c0:cd:1f:16:2b:53:b5:5b:26:5b:71:4d:a9:a9:00:24:4a:58: d9:c0:8b:ae:35:b1:8d:75:22:a9:22:8e:20:a6:49:19:aa:c3: 75:63:94:ae:5c:39:7a:3a:44:3d:61:d7:11:81:82:63:4b:b2: 04:80:8c:7f:84:b1:f6:a9:ff:69:a0:a6:31:65:bd:bf:8c:da: 74:b2:b2:bd -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEJE QTI1QzYzMEY4RkY0NkUzMDdCMTk0Q0QyQUFEMUU2RDA2MzMxRDAeFw0yNTA4MjIw ODQ0MTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFFNzZBOUI4QjA1OTU3 NUVGNjFEQkU5MzgzNTdFNzhFRTIxQjY0MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOcodAniDTwVyW+2aLJx+5azL0CjryaKqkAlr/IW3k9ZCi6V8w LTj/eNOK3e8pYp7yh5yU3C+esTD/ZqtkYKPobzSs8A7iWsXhaCOxdLwCYHFRYWC4 TmeZ62y2hFJR71yH1a6s/sbgx9F/3LC0aVh5E4QTh7qu0o8+07eE7Jpld2Y6jeia w9PSs0tcpRxAxPehnw5zVieJAzHxJplZlqFEkxeh8GvJnfNPOzEK6lZdK5tfybK8 JB3P5PWITqZS0+aHgEB9blBu1JJ445pyIXZSW7ENmDNRFFndOeyP+Ppt6FIMCXA/ Zy3ooQ6PlaA6K5PpUONbqJ9c0hmtAi608kgvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUrnapuLBZV172Hb6Tg1fnjuIbZB4wHwYDVR0jBBgwFoAUC9olxjD4/0bjB7GU zSqtHm0GMx0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hBTkdG VS9DOW9seGpENF8wYmpCN0dVelNxdEhtMEdNeDAuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0M5b2x4akQ0XzBiakI3R1V6U3F0SG0wR014MC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NIQU5HRlUvcm5hcHVMQlpWMTcySGI2 VGcxZm5qdUliWkI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd+WDANBgkqhkiG9w0BAQsFAAOCAQEAaIupI0MDNWXN1oQY8Q3FY3dn3uhnGs5n xzoG3Kp2hEzNEGoBlTVTSE7D2aNnEEOCLNiXMGnjz/7No8uHdeY4B3Cq+/0terAN Ur2qslxQnwy1qWNM/m5Z85Gd3uTqUnDrQWVCFBrt0V+GcF4yhx4gFBAqm2frkOo+ dKC4aLfkqOIVKBMfF70AbGFl859UQFhqAeuZ4E3Xn4C1epP82Ev8v6YBIJG5syDQ S6MixDZiWUrN0Iu0wM0fFitTtVsmW3FNqakAJEpY2cCLrjWxjXUiqSKOIKZJGarD dWOUrlw5ejpEPWHXEYGCY0uyBICMf4Sx9qn/aaCmMWW9v4zadLKyvQ== -----END CERTIFICATE-----Generated at Wed Oct 29 08:14:10 2025 by rpki-client