$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/BNhu6MEgKxWQoajY2d0y2UwJY9s.roa File: BNhu6MEgKxWQoajY2d0y2UwJY9s.roa (raw, json) Hash identifier: 2TAzM3n4QzdyxXntx+NEV9NlPgNNEhg8Av1rHy3WxZg= Subject key identifier: 04:D8:6E:E8:C1:20:2B:15:90:A1:A8:D8:D9:DD:32:D9:4C:09:63:DB Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02F3 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/BNhu6MEgKxWQoajY2d0y2UwJY9s.roa Signing time: Thu 09 Oct 2025 06:13:55 +0000 ROA not before: Thu 09 Oct 2025 06:13:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.248.144/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Oct 9 06:13:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=04D86EE8C1202B1590A1A8D8D9DD32D94C0963DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:af:21:f7:89:ba:c0:06:ef:24:e0:61:e1:b0: 26:e4:7e:21:85:37:68:62:f7:08:36:c7:12:43:0f: 3b:cf:b8:13:c6:ae:ee:fa:a7:fd:e0:34:f2:f7:57: 32:f2:24:23:76:4a:c5:b4:7e:8d:c5:f0:b4:a6:8e: 18:14:f5:ee:ba:53:5c:ec:1c:e3:02:98:02:5f:69: 78:7b:60:19:51:31:72:42:3a:48:60:8f:71:b2:aa: 0e:1c:09:13:c3:a9:0d:47:88:02:94:6f:a6:7f:fd: e3:b9:55:4d:7a:af:7d:0b:af:a3:41:9c:4f:1f:b2: 50:6a:c3:31:c2:25:02:2f:3f:c9:85:84:0d:27:a7: 50:22:82:24:18:c5:a6:bc:73:aa:23:86:cb:1d:c4: e5:0c:81:a5:1c:12:4b:57:2f:56:8c:d1:61:73:2d: 1c:5a:0c:a1:38:4a:2e:e5:13:41:79:8f:e1:dc:ae: fa:46:3d:90:aa:95:30:89:35:90:58:b0:ab:68:8a: ef:ee:a6:a0:f3:43:81:4d:fb:39:a9:bf:c3:b5:83: 82:88:e4:ef:39:91:c9:8d:58:a0:44:cb:8a:5e:04: 5f:b0:05:91:4d:7c:30:42:72:67:e7:8b:39:85:e7: 67:7e:c5:7f:22:77:dd:fe:9e:46:b1:ef:68:d2:97: 48:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D8:6E:E8:C1:20:2B:15:90:A1:A8:D8:D9:DD:32:D9:4C:09:63:DB X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/BNhu6MEgKxWQoajY2d0y2UwJY9s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.144/28 Signature Algorithm: sha256WithRSAEncryption 29:b0:3a:04:d4:32:50:60:7d:11:48:7e:06:91:13:e4:30:9b: dd:6d:5a:a5:b2:38:57:b9:ae:f1:b9:b0:e8:06:58:a7:c7:8a: 7f:75:a4:2e:15:87:dc:f2:63:57:38:96:9d:0c:c5:a5:58:37: 12:26:22:d7:0f:1b:13:e7:42:5f:b8:11:2f:95:21:f6:05:84: 76:1f:ac:60:aa:47:6e:ed:79:39:3d:03:83:fe:d3:8e:7e:61: 51:2f:02:a5:d9:d6:d1:73:59:ed:82:05:57:b9:7f:cc:bc:54: eb:eb:a3:27:e9:a3:1a:ec:ee:ff:91:8f:b6:f8:f2:ef:24:6a: 2d:e8:f2:9b:a3:67:af:c6:8a:6b:28:d9:53:6f:80:4f:c0:67: 20:42:01:2e:af:ac:32:4b:e5:a2:30:76:af:8c:4c:67:c6:19: 32:90:5b:38:f9:d2:55:07:4e:a8:89:75:24:87:79:c4:22:fc: c6:26:4b:41:c2:de:eb:f7:97:96:a8:1b:b8:51:4b:c0:fa:c9: a1:57:c8:46:0d:e5:d9:1f:66:d0:3b:38:a6:2b:0c:9a:a6:ff: be:b8:b1:35:82:17:a0:e3:ae:dc:c0:97:ac:f6:04:05:18:21: 03:19:8b:5d:ee:ed:21:93:52:22:d4:62:68:1c:28:92:ef:76: 9d:36:5f:31 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTEwMDkw NjEzNTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA0RDg2RUU4QzEyMDJC MTU5MEExQThEOEQ5REQzMkQ5NEMwOTYzREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzryH3ibrABu8k4GHhsCbkfiGFN2hi9wg2xxJDDzvPuBPGru76 p/3gNPL3VzLyJCN2SsW0fo3F8LSmjhgU9e66U1zsHOMCmAJfaXh7YBlRMXJCOkhg j3Gyqg4cCRPDqQ1HiAKUb6Z//eO5VU16r30Lr6NBnE8fslBqwzHCJQIvP8mFhA0n p1AigiQYxaa8c6ojhssdxOUMgaUcEktXL1aM0WFzLRxaDKE4Si7lE0F5j+HcrvpG PZCqlTCJNZBYsKtoiu/upqDzQ4FN+zmpv8O1g4KI5O85kcmNWKBEy4peBF+wBZFN fDBCcmfnizmF52d+xX8id93+nkax72jSl0gXAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUBNhu6MEgKxWQoajY2d0y2UwJY9swHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvQk5odTZNRWdLeFdRb2FqWTJkMHky VXdKWTlzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBJ0U+JAw DQYJKoZIhvcNAQELBQADggEBACmwOgTUMlBgfRFIfgaRE+Qwm91tWqWyOFe5rvG5 sOgGWKfHin91pC4Vh9zyY1c4lp0MxaVYNxImItcPGxPnQl+4ES+VIfYFhHYfrGCq R27teTk9A4P+045+YVEvAqXZ1tFzWe2CBVe5f8y8VOvroyfpoxrs7v+Rj7b48u8k ai3o8pujZ6/Gimso2VNvgE/AZyBCAS6vrDJL5aIwdq+MTGfGGTKQWzj50lUHTqiJ dSSHecQi/MYmS0HC3uv3l5aoG7hRS8D6yaFXyEYN5dkfZtA7OKYrDJqm/764sTWC F6DjrtzAl6z2BAUYIQMZi13u7SGTUiLUYmgcKJLvdp02XzE= -----END CERTIFICATE-----Generated at Wed Nov 5 19:59:29 2025 by rpki-client