$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FUYU/y-oacVpBDQFqidbXVI-NR-26Gdg.roa File: y-oacVpBDQFqidbXVI-NR-26Gdg.roa (raw, json) Hash identifier: gskJqvd2XDLpcECC32Ww1AilH6xmVPpz965WapnRvOg= Subject key identifier: CB:EA:1A:71:5A:41:0D:01:6A:89:D6:D7:54:8F:8D:47:ED:BA:19:D8 Certificate issuer: /CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Certificate serial: 01DC Authority key identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/y-oacVpBDQFqidbXVI-NR-26Gdg.roa Signing time: Fri 22 Aug 2025 09:01:21 +0000 ROA not before: Fri 22 Aug 2025 09:01:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150771 IP address blocks: 157.20.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Validity Not Before: Aug 22 09:01:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CBEA1A715A410D016A89D6D7548F8D47EDBA19D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:7d:10:c8:a8:74:de:f7:9a:e8:c2:2e:41: bb:a7:2d:a0:84:b4:9f:b6:0f:4e:ef:05:d6:84:a2: d5:0b:4f:0b:23:a9:0e:dc:18:89:69:c7:9b:75:2e: 13:f0:fb:6f:5f:78:ba:52:81:ca:f9:11:79:5a:90: ca:1c:46:59:98:0e:a6:6f:6f:13:d3:62:dc:b1:75: 0a:2a:04:fc:dd:8e:a1:20:d2:ff:5d:31:a4:ab:9a: 6b:37:a1:cd:aa:07:f6:17:c6:0a:0a:d9:26:b9:fa: 27:b0:94:04:b1:99:05:53:f5:7b:a8:10:f9:5b:60: 1f:11:03:9d:8b:87:ff:bb:1e:5a:a1:fe:07:1b:eb: b3:d3:3b:97:36:70:c9:0b:a9:4b:52:db:f4:93:ca: c0:2c:cf:98:bb:82:a4:94:80:a2:df:c6:f9:25:d8: 0f:e9:c1:5f:56:f8:00:9f:52:82:26:42:6d:f1:b4: 67:82:50:c4:65:22:b9:09:a2:0d:5f:75:e4:1e:90: 4d:6a:9f:66:bf:b9:5f:81:a7:5c:40:69:3b:b3:68: df:ba:f0:90:7b:f2:88:aa:96:b4:1d:82:47:1b:be: c1:6c:14:05:af:2d:9d:cb:c6:62:aa:9c:eb:17:66: 4b:d5:52:0d:b6:55:e9:3e:9c:f7:04:74:07:34:4f: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EA:1A:71:5A:41:0D:01:6A:89:D6:D7:54:8F:8D:47:ED:BA:19:D8 X509v3 Authority Key Identifier: keyid:DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/y-oacVpBDQFqidbXVI-NR-26Gdg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.68.0/23 Signature Algorithm: sha256WithRSAEncryption 39:c2:50:45:ca:02:ca:60:c7:8a:fe:6b:a5:93:5d:33:3f:f3: 58:9d:a4:3a:a1:8b:e8:23:32:54:04:89:43:a6:f6:b3:69:d8: 2e:95:4b:cd:78:34:73:e1:f8:8d:14:06:54:a5:7f:c7:8b:b6: ed:74:02:5f:69:b0:b7:b6:7d:cd:87:b5:7c:e7:7e:df:77:f3: 1e:30:ed:1d:c0:22:51:c8:c9:8f:33:0b:ac:2d:dd:8e:b6:b5: 16:8a:a4:ae:2a:ee:4d:a9:d3:7b:e7:85:a3:33:9a:07:45:36: 8a:37:09:62:9d:6d:55:ae:4a:f7:46:98:f1:3a:03:4b:33:45: 28:b5:e1:8e:36:4f:c3:9d:6b:2b:68:68:b4:02:e6:62:50:40: 6e:39:dc:1f:df:9c:f8:ba:78:99:16:7e:a3:ac:10:6c:c5:b1: 0f:0a:64:3b:9f:ab:4f:30:bd:a4:63:39:08:eb:f2:0e:96:64: 28:76:c2:2c:ef:11:4c:4d:48:c4:ca:5b:f7:32:ca:92:9e:ca: 12:e8:b1:d5:3e:21:55:08:47:bd:19:e0:a8:c8:cb:0c:56:cd: d5:a5:ea:5f:2d:57:6a:9b:73:c6:9d:c0:ef:15:e5:c2:8b:55: 4f:ef:a7:c3:19:02:53:b8:ff:10:08:df:71:45:b1:fa:e7:4f: 87:34:d3:e7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREU4 NzJCQUQyNjJEMThGMEE2NzQ5RTAyNzJEOTc1MjYxRDk0OUVDMzAeFw0yNTA4MjIw OTAxMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENCRUExQTcxNUE0MTBE MDE2QTg5RDZENzU0OEY4RDQ3RURCQTE5RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgUn0QyKh03vea6MIuQbunLaCEtJ+2D07vBdaEotULTwsjqQ7c GIlpx5t1LhPw+29feLpSgcr5EXlakMocRlmYDqZvbxPTYtyxdQoqBPzdjqEg0v9d MaSrmms3oc2qB/YXxgoK2Sa5+iewlASxmQVT9XuoEPlbYB8RA52Lh/+7Hlqh/gcb 67PTO5c2cMkLqUtS2/STysAsz5i7gqSUgKLfxvkl2A/pwV9W+ACfUoImQm3xtGeC UMRlIrkJog1fdeQekE1qn2a/uV+Bp1xAaTuzaN+68JB78oiqlrQdgkcbvsFsFAWv LZ3LxmKqnOsXZkvVUg22Vek+nPcEdAc0T2FrAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUy+oacVpBDQFqidbXVI+NR+26GdgwHwYDVR0jBBgwFoAU3ocrrSYtGPCmdJ4C ctl1Jh2UnsMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRlVZVS8z b2NyclNZdEdQQ21kSjRDY3RsMUpoMlVuc00uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzNvY3JyU1l0R1BDbWRKNENjdGwxSmgyVW5zTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0ZVWVUveS1vYWNWcEJEUUZxaWRiWFZJLU5S LTI2R2RnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0URDAN BgkqhkiG9w0BAQsFAAOCAQEAOcJQRcoCymDHiv5rpZNdMz/zWJ2kOqGL6CMyVASJ Q6b2s2nYLpVLzXg0c+H4jRQGVKV/x4u27XQCX2mwt7Z9zYe1fOd+33fzHjDtHcAi UcjJjzMLrC3djra1FoqkriruTanTe+eFozOaB0U2ijcJYp1tVa5K90aY8ToDSzNF KLXhjjZPw51rK2hotALmYlBAbjncH9+c+Lp4mRZ+o6wQbMWxDwpkO5+rTzC9pGM5 COvyDpZkKHbCLO8RTE1IxMpb9zLKkp7KEuix1T4hVQhHvRngqMjLDFbN1aXqXy1X aptzxp3A7xXlwotVT++nwxkCU7j/EAjfcUWx+udPhzTT5w== -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:05 2025 by rpki-client