$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7qdl15sj0sbYXcnGa77nhQW8Cf8.roa File: 7qdl15sj0sbYXcnGa77nhQW8Cf8.roa (raw, json) Hash identifier: yKh8Bpg0YEVdyjQu47thW+ivTi5QFsB9QyI+e8uqlbQ= Subject key identifier: EE:A7:65:D7:9B:23:D2:C6:D8:5D:C9:C6:6B:BE:E7:85:05:BC:09:FF Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 12AE Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7qdl15sj0sbYXcnGa77nhQW8Cf8.roa Signing time: Fri 22 Aug 2025 08:59:18 +0000 ROA not before: Fri 22 Aug 2025 08:59:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131633 IP address blocks: 103.127.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4782 (0x12ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Aug 22 08:59:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EEA765D79B23D2C6D85DC9C66BBEE78505BC09FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:2b:5d:4f:9e:b9:36:59:62:1c:d4:36:71: d9:10:56:eb:4d:98:27:ee:a9:ea:2d:f7:21:27:f0: 10:72:9a:a4:04:6b:e8:f9:52:39:cf:7b:32:4d:a6: ec:df:2a:d0:89:e0:20:47:07:e8:eb:cb:24:5f:95: 3e:e5:8b:14:7e:f3:50:81:04:8b:86:e5:53:9a:b5: a1:85:91:93:e4:da:4d:41:f2:df:ca:a1:45:1b:e5: df:ac:32:49:a5:49:ad:a0:9e:52:a8:c1:ea:71:29: 39:73:95:52:54:9f:b8:92:9e:80:73:9a:fd:14:6c: 09:42:c7:aa:02:ae:cf:63:63:45:5e:ad:6f:5c:59: af:2c:d3:88:3b:26:9a:9d:a6:f9:6b:ef:17:4c:93: fd:14:52:59:2a:2b:f2:87:df:31:40:9b:86:7e:69: f4:0e:57:c4:63:4a:24:cb:34:ee:7c:32:b9:55:cf: 3f:f8:b1:09:b9:b5:b6:e4:1d:af:c5:6f:e3:a9:af: b4:c0:2d:a7:a3:22:fd:b9:9d:1d:d5:b1:ba:82:eb: d2:a8:76:85:41:8a:34:f5:9c:ba:bb:75:ef:a2:e0: f3:7b:91:5f:26:0a:d2:61:e4:8b:11:05:0a:65:46: 07:d0:d4:f1:9d:1a:19:71:fe:97:76:fb:c9:f0:6c: 7b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A7:65:D7:9B:23:D2:C6:D8:5D:C9:C6:6B:BE:E7:85:05:BC:09:FF X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7qdl15sj0sbYXcnGa77nhQW8Cf8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.236.0/22 Signature Algorithm: sha256WithRSAEncryption 39:5f:30:61:d7:08:0e:a2:82:09:a1:5f:b9:16:2c:2e:8f:d6: 6d:33:e8:65:cc:22:c6:5d:f4:48:f7:e1:c4:4c:4b:13:ae:de: ec:60:21:8f:ca:0f:23:d9:5e:b2:6b:1e:05:cc:75:40:6d:de: 66:dd:c8:32:81:3c:1e:0f:93:28:39:83:d1:e0:54:68:20:7e: 2c:52:61:f0:24:fa:28:d1:45:73:8b:40:36:cd:05:6c:79:04: d8:dc:0d:e6:ed:5c:08:fb:12:ac:4b:d9:f7:b0:b5:04:dc:9d: a4:5e:29:bb:b2:5f:6b:69:d7:5e:02:8f:3f:ab:f0:87:92:92: 0b:e2:4e:9b:b1:4d:5c:ed:52:3f:97:ec:bb:fe:8d:d6:4b:6e: f1:0a:aa:98:cf:25:38:ac:ac:66:b3:0d:b6:e7:4b:53:f6:3a: f2:6b:ec:a8:01:02:42:49:07:0e:59:12:09:29:1c:ee:5c:b5: 2c:49:1a:76:a1:39:61:40:11:7e:48:e0:44:db:e6:19:0b:cc: 3d:e5:53:75:38:dd:72:f0:4c:2c:fd:22:aa:9d:ce:42:cb:25: d1:d5:30:9b:41:5a:fd:86:db:0b:2d:92:09:ca:2e:18:9f:d1: a4:3c:05:69:eb:86:50:a8:3d:7c:38:e6:76:90:72:bb:4c:ef: f2:5d:85:09 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNTA4MjIw ODU5MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVFQTc2NUQ3OUIyM0Qy QzZEODVEQzlDNjZCQkVFNzg1MDVCQzA5RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9PytdT565NlliHNQ2cdkQVutNmCfuqeot9yEn8BBymqQEa+j5 UjnPezJNpuzfKtCJ4CBHB+jryyRflT7lixR+81CBBIuG5VOataGFkZPk2k1B8t/K oUUb5d+sMkmlSa2gnlKowepxKTlzlVJUn7iSnoBzmv0UbAlCx6oCrs9jY0VerW9c Wa8s04g7Jpqdpvlr7xdMk/0UUlkqK/KH3zFAm4Z+afQOV8RjSiTLNO58MrlVzz/4 sQm5tbbkHa/Fb+Opr7TALaejIv25nR3VsbqC69KodoVBijT1nLq7de+i4PN7kV8m CtJh5IsRBQplRgfQ1PGdGhlx/pd2+8nwbHs5AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU7qdl15sj0sbYXcnGa77nhQW8Cf8wHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy83cWRsMTVzajBzYllY Y25HYTc3bmhRVzhDZjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3/sMA0GCSqGSIb3DQEBCwUAA4IBAQA5XzBh1wgOooIJoV+5Fiwuj9ZtM+hl zCLGXfRI9+HETEsTrt7sYCGPyg8j2V6yax4FzHVAbd5m3cgygTweD5MoOYPR4FRo IH4sUmHwJPoo0UVzi0A2zQVseQTY3A3m7VwI+xKsS9n3sLUE3J2kXim7sl9radde Ao8/q/CHkpIL4k6bsU1c7VI/l+y7/o3WS27xCqqYzyU4rKxmsw2250tT9jrya+yo AQJCSQcOWRIJKRzuXLUsSRp2oTlhQBF+SOBE2+YZC8w95VN1ON1y8Ews/SKqnc5C yyXR1TCbQVr9htsLLZIJyi4Yn9GkPAVp64ZQqD18OOZ2kHK7TO/yXYUJ -----END CERTIFICATE-----Generated at Wed Oct 29 13:31:41 2025 by rpki-client