$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/clX9KixAC_krPCEdX26EUi6YLcw.roa File: clX9KixAC_krPCEdX26EUi6YLcw.roa (raw, json) Hash identifier: Qd9ORSsp+T3+9cnLecNJ245PB5SLZv2mPRClOci6E1c= Subject key identifier: 72:55:FD:2A:2C:40:0B:F9:2B:3C:21:1D:5F:6E:84:52:2E:98:2D:CC Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0DB4 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/clX9KixAC_krPCEdX26EUi6YLcw.roa Signing time: Sat 02 Aug 2025 16:58:06 +0000 ROA not before: Sat 02 Aug 2025 16:58:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 14618 IP address blocks: 103.123.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Aug 2 16:58:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7255FD2A2C400BF92B3C211D5F6E84522E982DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c4:9f:ac:0c:aa:de:32:12:ce:a5:f1:34:dd: f7:7e:4f:4b:c2:ea:74:c6:8b:1c:cc:cf:bf:cb:8c: c9:f6:39:61:a6:8c:24:c4:66:d3:2e:76:cc:32:d0: fc:31:79:53:31:55:9e:f0:11:bb:63:cf:76:2d:f7: d6:ad:3f:ad:11:a2:54:90:a7:17:b0:f0:3a:ab:ab: ff:63:52:81:5b:37:ce:c6:05:70:62:37:9c:53:f3: a1:18:01:01:d9:25:ab:13:49:3c:97:7b:01:3e:d0: 51:49:fc:08:54:50:27:93:84:04:52:b8:fc:78:8b: be:37:59:b6:91:08:f0:10:46:b7:84:e0:a5:36:65: 13:ef:df:fa:a5:bd:9d:15:15:46:1a:a3:69:9d:af: ad:61:a7:62:97:dc:52:e5:aa:ac:dc:53:be:37:0c: 73:12:3b:64:fc:8d:c8:77:3a:74:2a:bf:aa:5c:3a: 6a:9d:da:de:32:8b:39:03:49:41:6d:9e:cb:1b:0e: e2:96:da:1f:f3:54:1a:07:da:f8:55:71:11:04:cd: ce:21:60:69:e1:c3:5f:f5:6d:4a:7c:66:b4:1d:be: d7:2f:7c:ea:bb:b2:ad:2d:2e:80:c7:2a:55:5d:4b: cd:b0:f6:b0:b8:66:e2:f1:4a:39:fd:9d:22:85:7c: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:55:FD:2A:2C:40:0B:F9:2B:3C:21:1D:5F:6E:84:52:2E:98:2D:CC X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/clX9KixAC_krPCEdX26EUi6YLcw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.130.0/24 Signature Algorithm: sha256WithRSAEncryption 96:d1:d0:89:d3:a9:02:82:95:e8:49:5b:6c:08:5c:eb:cf:7f: 75:9d:3e:e7:e0:18:bb:6f:bc:a6:27:de:04:08:87:1d:79:e7: 8f:27:7c:95:36:96:9b:97:bc:1c:f7:c9:f3:08:92:65:19:73: 67:f1:d2:80:2f:41:a3:10:5f:2b:b8:54:5c:04:6c:a2:de:08: 1d:ed:a8:c1:23:ca:de:4b:4d:40:b3:ae:e4:3a:1a:e1:ab:d7: d3:62:ec:13:bb:7b:cc:c7:98:79:7e:ec:e3:21:11:4e:ba:99: 6c:ba:45:7e:90:52:fb:5a:42:7d:10:62:16:a1:52:34:81:08: 2e:8d:14:0a:3c:49:2a:38:5e:45:dc:95:4b:05:7b:a7:37:f1: ed:b8:f4:b9:ad:93:69:6f:e6:e8:af:49:41:4f:f4:fd:33:ac: e3:9c:fe:5a:a0:b6:2d:29:5f:bf:56:05:b1:2c:b5:82:49:b2: 5f:7c:31:0e:a9:dc:0f:ef:0a:94:74:65:ed:95:e3:ce:1d:fa: 88:2f:1c:06:1b:1d:90:e7:67:2b:e8:9c:8e:10:26:b6:b8:fe: 9f:88:63:3e:80:cc:78:d5:e8:22:7c:e5:21:2a:05:3e:45:7b: fc:89:ec:bd:9c:aa:a3:f0:2e:67:71:a3:b1:b8:d7:b5:65:c1: b3:b0:89:94 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yNTA4MDIx NjU4MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyNTVGRDJBMkM0MDBC RjkyQjNDMjExRDVGNkU4NDUyMkU5ODJEQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhxJ+sDKreMhLOpfE03fd+T0vC6nTGixzMz7/LjMn2OWGmjCTE ZtMudswy0PwxeVMxVZ7wEbtjz3Yt99atP60RolSQpxew8Dqrq/9jUoFbN87GBXBi N5xT86EYAQHZJasTSTyXewE+0FFJ/AhUUCeThARSuPx4i743WbaRCPAQRreE4KU2 ZRPv3/qlvZ0VFUYao2mdr61hp2KX3FLlqqzcU743DHMSO2T8jch3OnQqv6pcOmqd 2t4yizkDSUFtnssbDuKW2h/zVBoH2vhVcREEzc4hYGnhw1/1bUp8ZrQdvtcvfOq7 sq0tLoDHKlVdS82w9rC4ZuLxSjn9nSKFfP3tAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUclX9KixAC/krPCEdX26EUi6YLcwwHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vY2xYOUtpeEFDX2tyUENF ZFgyNkVVaTZZTGN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd7gjANBgkqhkiG9w0BAQsFAAOCAQEAltHQidOpAoKV6ElbbAhc689/dZ0+5+AY u2+8pifeBAiHHXnnjyd8lTaWm5e8HPfJ8wiSZRlzZ/HSgC9BoxBfK7hUXARsot4I He2owSPK3ktNQLOu5Doa4avX02LsE7t7zMeYeX7s4yERTrqZbLpFfpBS+1pCfRBi FqFSNIEILo0UCjxJKjheRdyVSwV7pzfx7bj0ua2TaW/m6K9JQU/0/TOs45z+WqC2 LSlfv1YFsSy1gkmyX3wxDqncD+8KlHRl7ZXjzh36iC8cBhsdkOdnK+icjhAmtrj+ n4hjPoDMeNXoInzlISoFPkV7/InsvZyqo/AuZ3GjsbjXtWXBs7CJlA== -----END CERTIFICATE-----Generated at Mon Aug 11 02:09:16 2025 by rpki-client