$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/r4PzT7ASpmLHrknhZEUh4YSdF9I.roa File: r4PzT7ASpmLHrknhZEUh4YSdF9I.roa (raw, json) Hash identifier: R6bEyBSNFmM0ENOoHazha06keRWpYLg6BZHMX7PlEdE= Subject key identifier: AF:83:F3:4F:B0:12:A6:62:C7:AE:49:E1:64:45:21:E1:84:9D:17:D2 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02E7 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/r4PzT7ASpmLHrknhZEUh4YSdF9I.roa Signing time: Thu 09 Oct 2025 06:10:39 +0000 ROA not before: Thu 09 Oct 2025 06:10:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.248.80/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Oct 9 06:10:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AF83F34FB012A662C7AE49E1644521E1849D17D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:e0:e9:38:94:4b:7d:6b:d9:4e:77:cc:df: b3:c3:0c:dd:3a:ba:35:90:f4:9a:ec:94:47:72:5b: a8:43:52:5e:c6:cc:5d:7f:f3:63:32:6d:7b:e8:ac: 93:23:8d:1c:cc:57:9d:68:ae:c4:70:ee:2e:66:cf: 4f:35:c6:ad:ee:83:cc:44:1e:ab:71:23:65:ad:ed: 65:4c:ba:a5:ff:7c:bc:fc:3c:dd:60:44:62:2a:4c: e4:8d:06:8e:a2:b4:37:48:59:b0:c0:de:48:d3:60: c0:dd:86:f2:69:44:1a:13:c6:43:a3:ad:25:54:4a: ac:05:f2:67:3a:b9:89:26:17:4e:b7:d0:f6:ac:41: 29:9b:ea:ff:ce:e7:11:17:fc:b0:d4:78:2c:ec:74: 74:e1:be:71:9b:8e:de:ba:b0:89:20:30:5d:19:b2: 7f:06:d4:84:e0:09:55:fa:7a:68:b9:0b:c6:38:e2: 64:3a:53:81:21:9a:6c:2f:07:4d:c0:77:f3:ad:da: 54:a5:23:b4:c0:2b:1d:2c:c2:c7:94:f7:7b:bf:4f: fe:b1:ac:08:d0:b2:96:e3:15:78:0d:e3:34:e8:be: 4c:e7:f7:27:c7:67:79:9f:c2:1a:c0:18:98:52:b1: b3:47:02:83:9a:d5:69:b0:78:cd:55:fd:ba:19:0f: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:83:F3:4F:B0:12:A6:62:C7:AE:49:E1:64:45:21:E1:84:9D:17:D2 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/r4PzT7ASpmLHrknhZEUh4YSdF9I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.80/28 Signature Algorithm: sha256WithRSAEncryption 35:2f:db:e3:76:a1:53:17:3d:cb:ba:b8:41:d0:59:25:c6:8c: 1a:b1:ca:2a:8e:bc:21:a7:58:6f:1e:c8:20:7d:fd:b9:16:37: a7:1c:3b:da:eb:3b:e9:41:e6:21:32:f6:9f:f5:c5:42:42:78: d4:53:0b:01:f2:77:ca:ea:7f:84:c4:e9:1b:a4:c9:34:13:17: ec:fc:1c:52:ee:b1:da:34:ba:b2:eb:97:ad:7e:65:cd:cc:f3: 05:e3:7f:db:76:8f:60:5b:8f:f8:25:87:9e:05:82:7b:74:c5: 53:b2:da:a7:1c:71:d8:fe:2c:1c:e9:c3:b2:5d:7f:d1:57:3b: 5f:5c:f8:73:49:85:01:17:72:51:91:8d:7f:cd:90:0f:bf:5d: 33:0e:64:87:e4:f0:02:d8:95:27:b5:2e:b3:17:bf:1b:ea:ad: 0c:c1:c9:b8:ee:bc:51:d4:78:61:95:4d:d6:29:1b:fd:fe:ca: 91:21:41:90:24:59:a7:50:e6:20:cd:8e:42:7d:c6:bf:93:97: 30:9a:9c:4f:a5:75:9f:ac:fd:42:ca:24:5c:c3:3d:3a:f8:c1: b6:38:c8:2b:c1:0a:03:d9:6c:bb:7a:6e:34:cb:66:3b:fc:c9: ba:94:c8:59:04:43:38:cb:81:f1:df:4f:8f:3f:83:81:67:b2: 82:cf:2e:d1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTEwMDkw NjEwMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGODNGMzRGQjAxMkE2 NjJDN0FFNDlFMTY0NDUyMUUxODQ5RDE3RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZbuDpOJRLfWvZTnfM37PDDN06ujWQ9JrslEdyW6hDUl7GzF1/ 82MybXvorJMjjRzMV51orsRw7i5mz081xq3ug8xEHqtxI2Wt7WVMuqX/fLz8PN1g RGIqTOSNBo6itDdIWbDA3kjTYMDdhvJpRBoTxkOjrSVUSqwF8mc6uYkmF0630Pas QSmb6v/O5xEX/LDUeCzsdHThvnGbjt66sIkgMF0Zsn8G1ITgCVX6emi5C8Y44mQ6 U4EhmmwvB03Ad/Ot2lSlI7TAKx0swseU93u/T/6xrAjQspbjFXgN4zTovkzn9yfH Z3mfwhrAGJhSsbNHAoOa1WmweM1V/boZD1LXAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUr4PzT7ASpmLHrknhZEUh4YSdF9IwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvcjRQelQ3QVNwbUxIcmtuaFpFVWg0 WVNkRjlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBJ0U+FAw DQYJKoZIhvcNAQELBQADggEBADUv2+N2oVMXPcu6uEHQWSXGjBqxyiqOvCGnWG8e yCB9/bkWN6ccO9rrO+lB5iEy9p/1xUJCeNRTCwHyd8rqf4TE6RukyTQTF+z8HFLu sdo0urLrl61+Zc3M8wXjf9t2j2Bbj/glh54Fgnt0xVOy2qcccdj+LBzpw7Jdf9FX O19c+HNJhQEXclGRjX/NkA+/XTMOZIfk8ALYlSe1LrMXvxvqrQzBybjuvFHUeGGV TdYpG/3+ypEhQZAkWadQ5iDNjkJ9xr+TlzCanE+ldZ+s/ULKJFzDPTr4wbY4yCvB CgPZbLt6bjTLZjv8ybqUyFkEQzjLgfHfT48/g4FnsoLPLtE= -----END CERTIFICATE-----Generated at Thu Nov 6 00:20:43 2025 by rpki-client