$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/fD1zx9t55PmHGRx5zhA5PGgaBFs.roa File: fD1zx9t55PmHGRx5zhA5PGgaBFs.roa (raw, json) Hash identifier: hKosy1Ej5b0vIDhLJUIEjLRpZwXjMkEFJ7NdYELy4M4= Subject key identifier: 7C:3D:73:C7:DB:79:E4:F9:87:19:1C:79:CE:10:39:3C:68:1A:04:5B Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Certificate serial: 0FB5 Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/fD1zx9t55PmHGRx5zhA5PGgaBFs.roa Signing time: Fri 22 Aug 2025 08:51:12 +0000 ROA not before: Fri 22 Aug 2025 08:51:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.135.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4021 (0xfb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Validity Not Before: Aug 22 08:51:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7C3D73C7DB79E4F987191C79CE10393C681A045B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:0a:df:7c:e7:2b:2c:49:f3:11:8d:9b:13: d2:be:be:35:f8:03:3c:aa:f6:a4:46:08:90:5f:6c: c4:1d:d8:3b:68:d2:ee:d9:bf:59:2e:99:03:2f:53: 07:14:03:80:4f:6b:60:ae:21:ac:7e:bb:9c:d1:b3: f7:22:bc:d4:d5:97:e5:8c:83:50:4d:3c:58:cf:88: 75:67:25:6e:ec:65:a0:ca:f1:90:6c:ac:df:ee:2a: 41:02:20:1c:ae:eb:3f:50:85:3c:1b:e2:a3:07:69: 5a:00:80:62:be:4c:6f:7e:8a:f5:6d:4d:20:d0:4b: a6:ba:e6:74:62:08:b9:db:ef:11:f8:07:44:08:80: fb:e1:8c:29:c4:e5:86:72:0d:01:9a:07:cf:d8:3e: ab:f3:10:e6:34:7b:da:99:44:05:25:99:0c:93:4b: 93:2b:79:2f:36:0a:81:e3:f7:39:ba:73:a9:42:b8: f8:9b:0d:d2:d7:22:3f:06:6e:d4:6f:44:5e:a5:6b: e4:6b:77:62:c2:c0:cd:9b:f8:79:e9:a3:f8:01:19: 4f:b6:13:05:27:cd:9c:06:61:16:bb:91:6f:81:8f: ff:48:3f:66:f9:54:be:b0:c3:c3:f5:3d:c5:9b:3f: e8:7d:c7:b7:6b:0c:5b:d3:67:64:de:bd:58:9a:c1: a1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3D:73:C7:DB:79:E4:F9:87:19:1C:79:CE:10:39:3C:68:1A:04:5B X509v3 Authority Key Identifier: keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/fD1zx9t55PmHGRx5zhA5PGgaBFs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.116.0/24 Signature Algorithm: sha256WithRSAEncryption 76:99:bd:1b:28:54:8d:84:e0:1e:27:ce:96:26:f6:8b:18:cf: 5e:11:01:15:3c:c4:9e:3e:28:ce:87:1a:60:63:98:5d:4d:06: 3c:c0:6b:00:ef:eb:17:f1:f1:0f:33:ae:ac:f4:03:ae:e4:ac: ef:a9:0b:8a:1e:a7:2e:c5:37:a1:f6:45:57:05:09:a0:18:7d: ad:b6:7b:a5:4f:61:54:88:ad:e0:05:7e:4b:aa:04:ee:0d:45: 73:0d:54:53:14:42:4d:8e:74:f5:20:47:ce:8a:98:f1:72:32: bc:c1:50:bc:10:18:a5:c5:17:6e:4d:ba:16:42:91:8b:44:f3: 3d:35:2d:01:9c:48:65:ee:d9:dd:ec:7f:08:48:27:02:66:70: 39:fc:4a:f4:4c:6a:fe:a3:d1:d3:d4:37:20:90:a8:ae:d8:5f: 2f:0a:16:7e:bd:4c:3b:7c:90:5a:6a:25:05:8c:ec:a2:e8:64: cf:28:ea:ec:66:86:65:ad:ed:39:1d:35:4b:a4:66:3f:96:e8: 50:35:f4:4b:93:01:24:04:93:d7:d4:fa:d5:05:ad:f3:5c:74: 28:34:d3:d7:39:72:52:4c:fd:fe:73:70:c2:93:a2:0f:81:64: c1:22:59:60:aa:6d:22:3b:2b:fb:e3:5b:41:96:c8:05:14:d0: 6d:2a:64:10 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTJG QjczOTUyNUI3NDJBMjhBNzQzMzE1QzZDODhFNzY2QTdFMERDMzAeFw0yNTA4MjIw ODUxMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDM0Q3M0M3REI3OUU0 Rjk4NzE5MUM3OUNFMTAzOTNDNjgxQTA0NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJZQrffOcrLEnzEY2bE9K+vjX4Azyq9qRGCJBfbMQd2Dto0u7Z v1kumQMvUwcUA4BPa2CuIax+u5zRs/civNTVl+WMg1BNPFjPiHVnJW7sZaDK8ZBs rN/uKkECIByu6z9QhTwb4qMHaVoAgGK+TG9+ivVtTSDQS6a65nRiCLnb7xH4B0QI gPvhjCnE5YZyDQGaB8/YPqvzEOY0e9qZRAUlmQyTS5MreS82CoHj9zm6c6lCuPib DdLXIj8GbtRvRF6la+Rrd2LCwM2b+Hnpo/gBGU+2EwUnzZwGYRa7kW+Bj/9IP2b5 VL6ww8P1PcWbP+h9x7drDFvTZ2TevViawaGfAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUfD1zx9t55PmHGRx5zhA5PGgaBFswHwYDVR0jBBgwFoAUovtzlSW3QqKKdDMV xsiOdmp+DcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNM T1VEL292dHpsU1czUXFLS2RETVZ4c2lPZG1wLURjTS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0Evb3Z0emxTVzNRcUtLZERNVnhzaU9kbXAtRGNNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNMT1VEL2ZEMXp4OXQ1NVBt SEdSeDV6aEE1UEdnYUJGcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnh3QwDQYJKoZIhvcNAQELBQADggEBAHaZvRsoVI2E4B4nzpYm9osYz14R ARU8xJ4+KM6HGmBjmF1NBjzAawDv6xfx8Q8zrqz0A67krO+pC4oepy7FN6H2RVcF CaAYfa22e6VPYVSIreAFfkuqBO4NRXMNVFMUQk2OdPUgR86KmPFyMrzBULwQGKXF F25NuhZCkYtE8z01LQGcSGXu2d3sfwhIJwJmcDn8SvRMav6j0dPUNyCQqK7YXy8K Fn69TDt8kFpqJQWM7KLoZM8o6uxmhmWt7TkdNUukZj+W6FA19EuTASQEk9fU+tUF rfNcdCg009c5clJM/f5zcMKTog+BZMEiWWCqbSI7K/vjW0GWyAUU0G0qZBA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:38 2025 by rpki-client