$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/ALxxmI-MtTvV7so9NokBSyZ9pNc.roa File: ALxxmI-MtTvV7so9NokBSyZ9pNc.roa (raw, json) Hash identifier: bfyUeHCmQJ48LfOm63XlAVSRh9tG9IAeNiGx7Io5itQ= Subject key identifier: 00:BC:71:98:8F:8C:B5:3B:D5:EE:CA:3D:36:89:01:4B:26:7D:A4:D7 Certificate issuer: /CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3 Certificate serial: 04E3 Authority key identifier: EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/ALxxmI-MtTvV7so9NokBSyZ9pNc.roa Signing time: Fri 22 Aug 2025 08:57:48 +0000 ROA not before: Fri 22 Aug 2025 08:57:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.161.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3 Validity Not Before: Aug 22 08:57:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=00BC71988F8CB53BD5EECA3D3689014B267DA4D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:8f:48:57:fd:d8:8a:88:43:6c:52:b5:bb: 2e:0b:b3:0a:2e:3c:72:41:e0:ab:46:c2:76:dd:73: f8:5e:55:d0:67:2a:61:9c:55:d6:07:c6:04:16:4c: f9:19:38:55:37:db:da:18:30:d5:f0:60:cd:ee:39: e6:13:85:79:d2:37:97:5c:fc:da:af:c9:ad:72:41: 60:2d:a9:85:af:03:9d:3c:f7:0a:9e:9d:e3:e8:72: 49:04:0d:1d:82:de:3a:c2:2b:f1:97:11:88:5d:1c: 54:ed:26:44:d5:20:6a:a0:75:cb:b9:fe:41:04:d0: b2:3a:33:9c:d4:8e:97:d6:09:74:b2:e7:64:6c:33: e1:44:92:cf:1f:db:eb:be:de:88:c3:9f:7a:cd:0f: 5d:83:b1:21:cd:14:86:c6:c5:4c:45:fa:ea:7d:d7: a7:b3:dc:db:2f:9a:f2:07:68:bd:f1:3a:19:97:1b: 60:74:2b:f4:85:97:74:0b:53:ca:10:28:5b:be:de: 1f:42:50:1a:c6:2c:bf:18:1e:0f:db:c4:85:75:56: 3b:9b:ed:b0:df:22:58:05:62:cc:74:59:87:86:19: f0:a9:2e:28:c0:49:b8:78:07:17:01:f1:c9:43:72: 8b:a9:e5:5e:6a:13:e7:31:24:4c:b0:bc:12:37:87: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BC:71:98:8F:8C:B5:3B:D5:EE:CA:3D:36:89:01:4B:26:7D:A4:D7 X509v3 Authority Key Identifier: keyid:EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/ALxxmI-MtTvV7so9NokBSyZ9pNc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.161.6.0/23 Signature Algorithm: sha256WithRSAEncryption 59:1f:7d:a6:8f:9f:f5:61:30:a4:a0:fc:e2:0c:04:e2:30:13: 5c:a4:c8:da:a8:fa:fe:ab:9f:83:67:0b:67:c1:80:82:0d:1a: e3:d5:15:20:7c:22:59:aa:ea:f4:be:70:95:bf:71:76:7a:3e: e6:4d:3a:b5:dd:c4:e3:d5:6b:d7:f0:e6:d1:e0:70:5d:21:46: 02:0f:50:c8:49:ac:d7:68:1a:46:e9:08:16:20:8d:a2:14:a4: fa:c6:fe:be:ed:cf:e7:41:c4:f3:a5:60:e6:55:8c:59:3b:ca: e2:fc:64:4b:9a:8a:4a:66:4b:a5:59:cd:b4:c2:80:be:f7:3a: b9:84:46:32:66:91:f1:cf:7c:09:2e:1b:d4:f9:01:4e:74:3b: 11:4f:dd:7b:8b:c4:c2:58:96:69:c9:26:71:13:98:72:12:38: 1d:6b:65:2f:99:79:94:55:93:45:c1:4f:9b:5e:69:66:8a:d2: 82:cc:3a:af:53:c4:9d:a3:20:cf:bf:fa:f4:8e:83:2f:f7:0a: 57:72:b9:e2:f3:19:b6:6e:f0:0e:b8:3c:cc:8b:d3:6a:7f:2b: 04:a2:58:ee:a7:bc:6b:4a:7a:6e:40:07:e1:00:3e:d3:2c:88: 19:4b:7f:8c:07:34:98:fd:c6:74:eb:1f:43:c3:f8:ef:49:d8: 1d:37:c5:1f -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI3 RjRBOEI3QjIxMERCOTIwOEVENTgwMzU3MDQ1RTU5NzFERTBEMzAeFw0yNTA4MjIw ODU3NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwQkM3MTk4OEY4Q0I1 M0JENUVFQ0EzRDM2ODkwMTRCMjY3REE0RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/oo9IV/3YiohDbFK1uy4LswouPHJB4KtGwnbdc/heVdBnKmGc VdYHxgQWTPkZOFU329oYMNXwYM3uOeYThXnSN5dc/Nqvya1yQWAtqYWvA5089wqe nePockkEDR2C3jrCK/GXEYhdHFTtJkTVIGqgdcu5/kEE0LI6M5zUjpfWCXSy52Rs M+FEks8f2+u+3ojDn3rND12DsSHNFIbGxUxF+up916ez3NsvmvIHaL3xOhmXG2B0 K/SFl3QLU8oQKFu+3h9CUBrGLL8YHg/bxIV1Vjub7bDfIlgFYsx0WYeGGfCpLijA Sbh4BxcB8clDcoup5V5qE+cxJEywvBI3h/PBAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUALxxmI+MtTvV7so9NokBSyZ9pNcwHwYDVR0jBBgwFoAU639Ki3shDbkgjtWA NXBF5Zcd4NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTFdB VENILzYzOUtpM3NoRGJrZ2p0V0FOWEJGNVpjZDROTS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvNjM5S2kzc2hEYmtnanRXQU5YQkY1WmNkNE5NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTFdBVENIL0FMeHhtSS1NdFR2 VjdzbzlOb2tCU3laOXBOYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnoQYwDQYJKoZIhvcNAQELBQADggEBAFkffaaPn/VhMKSg/OIMBOIwE1yk yNqo+v6rn4NnC2fBgIINGuPVFSB8Ilmq6vS+cJW/cXZ6PuZNOrXdxOPVa9fw5tHg cF0hRgIPUMhJrNdoGkbpCBYgjaIUpPrG/r7tz+dBxPOlYOZVjFk7yuL8ZEuaikpm S6VZzbTCgL73OrmERjJmkfHPfAkuG9T5AU50OxFP3XuLxMJYlmnJJnETmHISOB1r ZS+ZeZRVk0XBT5teaWaK0oLMOq9TxJ2jIM+/+vSOgy/3CldyueLzGbZu8A64PMyL 02p/KwSiWO6nvGtKem5AB+EAPtMsiBlLf4wHNJj9xnTrH0PD+O9J2B03xR8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:38 2025 by rpki-client