$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7cgFlrB-I3x7rwNyurRUPLuSXFc.roa File: 7cgFlrB-I3x7rwNyurRUPLuSXFc.roa (raw, json) Hash identifier: 0WJpk0ysqUb+JUMnm0nuvedrbVPtH6mJtLLnf2PjEoY= Subject key identifier: ED:C8:05:96:B0:7E:23:7C:7B:AF:03:72:BA:B4:54:3C:BB:92:5C:57 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1468 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7cgFlrB-I3x7rwNyurRUPLuSXFc.roa Signing time: Fri 22 Aug 2025 08:51:29 +0000 ROA not before: Fri 22 Aug 2025 08:51:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9311 IP address blocks: 150.242.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5224 (0x1468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EDC80596B07E237C7BAF0372BAB4543CBB925C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:15:7c:ca:f3:73:2a:41:ad:e7:56:12:7d: f7:70:9c:62:10:79:9e:f5:22:bf:fa:e0:66:65:c0: 9a:79:01:42:1e:1f:d2:99:95:23:04:1f:92:03:9a: 7b:56:b1:f6:12:23:be:10:ea:80:d9:1e:ab:8d:95: b1:cd:53:ce:88:2b:a2:95:1b:53:e9:66:80:59:26: 32:46:71:ac:d0:da:ac:0c:ff:e8:93:6c:05:de:3a: 88:61:33:12:82:ff:7c:64:69:83:03:9f:d3:2e:f9: 55:f8:c4:cc:64:ac:74:17:c0:c3:5d:01:73:9d:6a: 6e:05:1d:9d:f2:71:36:64:e1:29:90:35:94:19:6d: d6:50:5f:46:94:96:40:b5:99:8b:cf:2e:e4:c0:d6: 58:00:f0:e1:46:c9:18:85:e4:f6:aa:a2:a5:b1:38: 8c:cd:8c:9b:a1:b0:74:05:e1:5c:5d:b6:aa:16:ff: 68:7c:bc:e4:44:2f:52:68:4c:fb:5c:c4:82:57:37: d0:4d:1a:50:1a:3e:ad:68:20:6b:60:fb:ad:40:2f: 7c:67:88:62:af:f0:b2:a4:63:de:5d:86:de:1c:15: 4a:7b:0c:65:7d:63:79:95:84:28:6b:c0:b7:b0:31: 69:e2:b0:df:89:d0:96:1c:84:64:8f:68:ea:8a:27: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C8:05:96:B0:7E:23:7C:7B:AF:03:72:BA:B4:54:3C:BB:92:5C:57 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7cgFlrB-I3x7rwNyurRUPLuSXFc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.242.100.0/22 Signature Algorithm: sha256WithRSAEncryption 08:25:e0:cc:49:88:45:a3:67:24:76:99:1b:c1:aa:19:b3:d6: 9c:63:79:95:b7:ae:81:d2:d0:ce:0e:96:3a:75:5f:6e:54:b2: 8a:95:03:70:a4:19:51:24:7c:32:e5:07:1d:5e:2b:8d:56:65: ee:aa:07:1a:64:b8:cc:fc:77:20:c1:e0:a2:a4:fa:1f:6d:af: 0f:43:e5:ff:49:09:87:2f:31:a8:be:78:29:74:81:74:1b:fd: 79:72:c1:48:fe:4a:7e:89:88:4a:2e:df:85:55:31:51:d7:09: bd:6d:34:a2:9b:cb:b1:49:7a:44:24:b6:72:cd:5c:10:8f:83: 27:24:8f:3e:4f:19:2e:53:42:57:b9:16:b1:e6:70:d1:5e:b1: f0:a9:d2:4f:f7:9b:51:09:6e:59:c0:ee:f4:57:5f:f8:aa:85: 6b:d3:0e:fa:6a:17:ab:82:1b:19:46:dd:39:80:5e:b0:a6:fc: b8:50:9f:b7:9c:60:a0:86:70:3c:84:39:19:c3:56:35:e5:bc: ab:d8:0e:84:47:70:03:70:87:fa:bb:30:4a:50:20:66:4f:9b: 63:87:c5:ea:0e:f5:7f:b4:51:be:1d:3a:cb:21:b0:e1:af:f5: 78:93:41:2f:bd:f5:a5:45:ad:2a:c7:ba:15:78:86:54:e9:04: 99:c2:35:36 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVEQzgwNTk2QjA3RTIz N0M3QkFGMDM3MkJBQjQ1NDNDQkI5MjVDNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwFhV8yvNzKkGt51YSffdwnGIQeZ71Ir/64GZlwJp5AUIeH9KZ lSMEH5IDmntWsfYSI74Q6oDZHquNlbHNU86IK6KVG1PpZoBZJjJGcazQ2qwM/+iT bAXeOohhMxKC/3xkaYMDn9Mu+VX4xMxkrHQXwMNdAXOdam4FHZ3ycTZk4SmQNZQZ bdZQX0aUlkC1mYvPLuTA1lgA8OFGyRiF5PaqoqWxOIzNjJuhsHQF4VxdtqoW/2h8 vOREL1JoTPtcxIJXN9BNGlAaPq1oIGtg+61AL3xniGKv8LKkY95dht4cFUp7DGV9 Y3mVhChrwLewMWnisN+J0JYchGSPaOqKJ9JhAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU7cgFlrB+I3x7rwNyurRUPLuSXFcwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy83Y2dGbHJCLUkzeDdyd055dXJS VVBMdVNYRmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClvJk MA0GCSqGSIb3DQEBCwUAA4IBAQAIJeDMSYhFo2ckdpkbwaoZs9acY3mVt66B0tDO DpY6dV9uVLKKlQNwpBlRJHwy5QcdXiuNVmXuqgcaZLjM/HcgweCipPofba8PQ+X/ SQmHLzGovngpdIF0G/15csFI/kp+iYhKLt+FVTFR1wm9bTSim8uxSXpEJLZyzVwQ j4MnJI8+TxkuU0JXuRax5nDRXrHwqdJP95tRCW5ZwO70V1/4qoVr0w76aherghsZ Rt05gF6wpvy4UJ+3nGCghnA8hDkZw1Y15byr2A6ER3ADcIf6uzBKUCBmT5tjh8Xq DvV/tFG+HTrLIbDhr/V4k0EvvfWlRa0qx7oVeIZU6QSZwjU2 -----END CERTIFICATE-----Generated at Sat Sep 6 07:07:29 2025 by rpki-client