$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/IBm0JFXogBTaB6yNxLdI5fshAUE.roa File: IBm0JFXogBTaB6yNxLdI5fshAUE.roa (raw, json) Hash identifier: YKWxZX3G5MPnujjFH28q4L8JCfSursUSAbyuE7xlzLY= Subject key identifier: 20:19:B4:24:55:E8:80:14:DA:07:AC:8D:C4:B7:48:E5:FB:21:01:41 Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Certificate serial: 0D60 Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/IBm0JFXogBTaB6yNxLdI5fshAUE.roa Signing time: Fri 22 Aug 2025 08:51:38 +0000 ROA not before: Fri 22 Aug 2025 08:51:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131634 IP address blocks: 103.117.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3424 (0xd60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Validity Not Before: Aug 22 08:51:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2019B42455E88014DA07AC8DC4B748E5FB210141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:6f:2a:28:65:22:27:c2:d8:6a:0f:85:96: ce:ab:5e:2f:6a:85:1b:77:c1:16:b8:47:b4:d7:6d: 0f:17:28:0e:62:e5:27:27:b1:a3:51:3f:b0:9a:08: 45:00:46:1c:db:d3:b7:d6:0f:55:e6:87:a1:2f:76: 09:1c:b6:10:93:f8:13:cb:f5:c5:f4:21:23:2a:ae: fe:6e:02:47:3d:76:a6:b5:50:ec:dc:6a:1d:33:33: 5d:d4:8d:40:91:d2:8d:06:d0:fa:27:01:09:74:00: c7:9d:de:4e:fd:b9:16:ab:52:cb:f4:b9:8b:19:0b: 1e:0c:eb:a3:fd:36:08:d8:9b:54:47:d7:5d:bc:18: 68:23:2f:82:38:9a:f3:55:d5:5a:40:0b:79:1e:99: 86:26:56:bd:72:61:43:82:43:32:2b:88:64:ad:93: f8:20:5d:19:99:9f:16:60:3c:9c:45:d6:3a:aa:2e: 30:4f:00:7f:42:d9:15:6b:71:b8:a6:dd:39:d1:af: 06:6e:14:2b:dd:2a:c8:6b:47:03:14:f5:48:4e:b5: 02:7d:ce:a1:5c:bf:04:3d:21:b7:bb:9f:87:8e:d9: 5b:92:3b:56:ff:27:e9:2c:63:fa:02:30:f2:af:b1: 54:f6:05:8d:e4:2f:7c:b0:bb:47:ef:6c:e0:68:52: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:19:B4:24:55:E8:80:14:DA:07:AC:8D:C4:B7:48:E5:FB:21:01:41 X509v3 Authority Key Identifier: keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/IBm0JFXogBTaB6yNxLdI5fshAUE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.117.4.0/22 Signature Algorithm: sha256WithRSAEncryption a3:b7:be:0b:90:56:c7:97:ef:3d:43:fe:e8:26:f4:26:69:e9: 05:57:8e:b1:84:9f:3f:d7:6a:12:32:87:a8:ee:81:33:f3:2c: 4a:3f:fc:19:ce:b8:c7:48:bb:94:83:be:11:4f:7a:be:ff:b2: 6c:ce:0c:89:7f:41:09:2f:bf:f9:3a:09:18:00:9d:1b:e1:77: 70:fd:5f:13:64:bc:75:b7:e6:9f:7e:92:ea:b8:65:11:6c:68: 41:5e:b2:24:82:18:4f:5c:6b:7e:c6:0d:e9:f8:c2:9d:3f:f5: a5:dd:d7:b6:8f:82:a4:65:3f:80:67:66:36:40:44:1c:42:f8: b5:00:6d:a5:c9:3c:4a:36:88:39:d7:53:48:8c:67:9e:e7:c0: a7:9c:97:14:8b:6e:b5:bf:a9:18:97:02:2c:82:c4:de:f8:cf: 6a:f7:69:95:98:93:d8:de:58:d9:c1:ff:90:37:7f:fb:bc:9a: 3c:75:19:b8:fe:d2:96:58:89:ce:a9:a9:27:1e:8f:2a:ba:6c: f2:57:84:44:c2:d4:4e:74:a3:83:cb:9a:ff:ec:e1:be:ac:77: 96:c8:39:b4:b2:df:34:9b:e4:a3:85:14:2c:fc:8e:33:18:bb: a7:41:97:6d:1b:4b:49:25:41:14:b7:1c:b8:5a:36:c9:8d:c2: b7:ba:2f:69 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkY4 QzkyREZDNzhDQkZFOEM1RUZENkJBNUEzN0ExNjI4MjIxRkZFMjAeFw0yNTA4MjIw ODUxMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwMTlCNDI0NTVFODgw MTREQTA3QUM4REM0Qjc0OEU1RkIyMTAxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9u28qKGUiJ8LYag+Fls6rXi9qhRt3wRa4R7TXbQ8XKA5i5Scn saNRP7CaCEUARhzb07fWD1Xmh6EvdgkcthCT+BPL9cX0ISMqrv5uAkc9dqa1UOzc ah0zM13UjUCR0o0G0PonAQl0AMed3k79uRarUsv0uYsZCx4M66P9NgjYm1RH1128 GGgjL4I4mvNV1VpAC3kemYYmVr1yYUOCQzIriGStk/ggXRmZnxZgPJxF1jqqLjBP AH9C2RVrcbim3TnRrwZuFCvdKshrRwMU9UhOtQJ9zqFcvwQ9Ibe7n4eO2VuSO1b/ J+ksY/oCMPKvsVT2BY3kL3ywu0fvbOBoUq3pAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUIBm0JFXogBTaB6yNxLdI5fshAUEwHwYDVR0jBBgwFoAUb4yS38eMv+jF79a6 WjehYoIh/+IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1BFVFcv YjR5UzM4ZU12LWpGNzlhNldqZWhZb0loXy1JLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9iNHlTMzhlTXYtakY3OWE2V2plaFlvSWhfLUkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TUEVUVy9JQm0wSkZYb2dCVGFCNnlOeExk STVmc2hBVUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3UE MA0GCSqGSIb3DQEBCwUAA4IBAQCjt74LkFbHl+89Q/7oJvQmaekFV46xhJ8/12oS Moeo7oEz8yxKP/wZzrjHSLuUg74RT3q+/7JszgyJf0EJL7/5OgkYAJ0b4Xdw/V8T ZLx1t+affpLquGURbGhBXrIkghhPXGt+xg3p+MKdP/Wl3de2j4KkZT+AZ2Y2QEQc Qvi1AG2lyTxKNog511NIjGee58CnnJcUi261v6kYlwIsgsTe+M9q92mVmJPY3ljZ wf+QN3/7vJo8dRm4/tKWWInOqaknHo8qumzyV4REwtROdKODy5r/7OG+rHeWyDm0 st80m+SjhRQs/I4zGLunQZdtG0tJJUEUtxy4WjbJjcK3ui9p -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:11 2025 by rpki-client