$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/lwwKrnNAaqHR7lvx7cx1PR_b61c.roa File: lwwKrnNAaqHR7lvx7cx1PR_b61c.roa (raw, json) Hash identifier: RiwkxXA/Z2ekq52aIFRerzgJ/lbZ25Qw6MAPGZUOxgE= Subject key identifier: 97:0C:0A:AE:73:40:6A:A1:D1:EE:5B:F1:ED:CC:75:3D:1F:DB:EB:57 Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0DC6 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/lwwKrnNAaqHR7lvx7cx1PR_b61c.roa Signing time: Fri 22 Aug 2025 09:03:14 +0000 ROA not before: Fri 22 Aug 2025 09:03:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 138145 IP address blocks: 103.135.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3526 (0xdc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Aug 22 09:03:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=970C0AAE73406AA1D1EE5BF1EDCC753D1FDBEB57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:56:92:4a:dc:8e:92:7a:2b:65:96:c7:c8: a2:4e:a3:92:e0:21:8f:0f:c9:28:a4:44:f4:84:cf: 60:d1:8d:8a:24:3b:51:7d:1d:d7:5e:33:ab:1e:a4: 8b:02:eb:76:09:b7:9a:3e:db:ec:b8:ee:54:6c:81: 2c:cf:1a:ac:c3:33:70:a1:1d:ee:d6:ac:8b:2f:37: 03:76:44:05:62:94:eb:4b:42:11:fb:67:2a:71:e6: be:be:13:8e:d0:11:93:59:24:85:af:2f:b4:62:e4: 3a:f2:24:33:85:5f:7a:f6:45:38:af:30:c7:38:bf: 5e:36:af:60:2c:ed:15:9e:d0:fd:da:79:46:08:a6: 0b:4e:01:6c:c9:2a:06:b2:6a:d9:e0:35:be:3b:4f: 17:59:7c:ea:ad:eb:0b:02:53:6c:5d:ce:8a:7a:8f: 25:fd:a4:42:c5:42:b8:0c:0b:2f:52:8d:07:fc:51: a3:01:c7:58:ed:1c:fc:0a:d6:30:a8:40:1b:6c:9a: 07:08:49:fd:c0:59:77:f8:a5:5a:48:9a:35:6c:d8: 12:6d:e8:83:4d:22:69:95:bd:f4:b1:6c:d9:0e:74: f1:d4:9d:8a:83:f0:55:b8:e2:f4:91:5f:bb:02:16: 67:fa:b4:d8:82:a3:e7:ff:c6:34:7c:d9:7d:94:46: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0C:0A:AE:73:40:6A:A1:D1:EE:5B:F1:ED:CC:75:3D:1F:DB:EB:57 X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/lwwKrnNAaqHR7lvx7cx1PR_b61c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.16.0/24 Signature Algorithm: sha256WithRSAEncryption cb:15:8f:b3:21:cd:35:d7:1b:2b:12:8e:d2:b4:7a:f2:05:18: 8e:25:33:fd:e2:2e:8e:36:b5:12:f5:25:c7:96:a2:a8:2a:e1: a3:18:03:4d:0d:6f:00:9c:4b:30:76:e3:a2:b5:f7:ac:f7:e4: fa:56:c7:d1:57:e0:d5:39:8d:5b:c2:d2:8b:d1:89:c4:bb:eb: 58:9e:72:d1:c0:30:9d:fc:43:41:da:0f:48:78:71:5b:7d:cb: 10:72:6f:ef:01:86:f7:5b:6c:c9:a3:bf:f3:f9:ac:1b:3d:03: 69:e9:7d:44:57:f4:f8:e9:66:80:cc:e4:8d:a6:79:4b:69:46: 17:f0:c5:9f:af:05:68:09:aa:a8:8a:5d:f2:a5:02:9a:32:86: 82:6a:b7:5e:47:c9:66:b5:b8:54:76:f9:36:96:c6:82:47:8e: 42:8a:76:38:b4:a0:14:62:5b:12:94:5a:21:56:cf:8a:e9:95: 08:c4:2b:32:de:13:4d:6f:18:be:a8:42:d9:c1:54:48:cc:d5: e4:eb:37:19:92:f2:c9:70:05:d5:50:79:03:13:40:4f:aa:2e: 43:f3:92:0a:8b:16:86:63:9a:27:d0:85:ba:b4:92:a5:97:70: 63:23:1d:89:d8:d1:dc:4a:ca:5e:92:9f:d6:d8:bc:9c:dd:91: 4f:f5:8e:12 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yNTA4MjIw OTAzMTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3MEMwQUFFNzM0MDZB QTFEMUVFNUJGMUVEQ0M3NTNEMUZEQkVCNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB+VaSStyOknorZZbHyKJOo5LgIY8PySikRPSEz2DRjYokO1F9 HddeM6sepIsC63YJt5o+2+y47lRsgSzPGqzDM3ChHe7WrIsvNwN2RAVilOtLQhH7 Zypx5r6+E47QEZNZJIWvL7Ri5DryJDOFX3r2RTivMMc4v142r2As7RWe0P3aeUYI pgtOAWzJKgayatngNb47TxdZfOqt6wsCU2xdzop6jyX9pELFQrgMCy9SjQf8UaMB x1jtHPwK1jCoQBtsmgcISf3AWXf4pVpImjVs2BJt6INNImmVvfSxbNkOdPHUnYqD 8FW44vSRX7sCFmf6tNiCo+f/xjR82X2URjCzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUlwwKrnNAaqHR7lvx7cx1PR/b61cwHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vbHd3S3JuTkFhcUhSN2x2 eDdjeDFQUl9iNjFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeHEDANBgkqhkiG9w0BAQsFAAOCAQEAyxWPsyHNNdcbKxKO0rR68gUYjiUz/eIu jja1EvUlx5aiqCrhoxgDTQ1vAJxLMHbjorX3rPfk+lbH0Vfg1TmNW8LSi9GJxLvr WJ5y0cAwnfxDQdoPSHhxW33LEHJv7wGG91tsyaO/8/msGz0Dael9RFf0+OlmgMzk jaZ5S2lGF/DFn68FaAmqqIpd8qUCmjKGgmq3XkfJZrW4VHb5NpbGgkeOQop2OLSg FGJbEpRaIVbPiumVCMQrMt4TTW8YvqhC2cFUSMzV5Os3GZLyyXAF1VB5AxNAT6ou Q/OSCosWhmOaJ9CFurSSpZdwYyMdidjR3ErKXpKf1ti8nN2RT/WOEg== -----END CERTIFICATE-----Generated at Wed Nov 5 23:31:14 2025 by rpki-client