$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIRUN/UKiAu9DBouIS6MzSfFnTOhCKjk8.roa File: UKiAu9DBouIS6MzSfFnTOhCKjk8.roa (raw, json) Hash identifier: HUOCS7o68Oz0egV5TPUT3GtLtUMosl436IdLe3HoVt8= Subject key identifier: 50:A8:80:BB:D0:C1:A2:E2:12:E8:CC:D2:7C:59:D3:3A:10:8A:8E:4F Certificate issuer: /CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Certificate serial: 01CC Authority key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/UKiAu9DBouIS6MzSfFnTOhCKjk8.roa Signing time: Fri 22 Aug 2025 08:49:56 +0000 ROA not before: Fri 22 Aug 2025 08:49:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150766 IP address blocks: 157.66.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Validity Not Before: Aug 22 08:49:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=50A880BBD0C1A2E212E8CCD27C59D33A108A8E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:80:a5:d2:14:08:a7:79:05:37:64:46:ff: fb:b5:fe:bf:02:a0:62:91:4e:97:64:98:e1:db:f8: c9:50:89:c6:37:6c:c9:01:c9:11:57:da:cc:a8:fa: d5:56:36:51:7a:bb:4c:ba:87:64:a6:8f:da:6d:40: d7:f6:71:d6:ff:7b:7b:7f:4b:74:d6:ea:75:84:b8: c1:f9:3e:33:4b:d0:17:05:ec:50:d4:80:ba:2a:dc: b2:8b:c1:be:7c:a6:95:45:b1:8e:82:7a:b8:7d:ad: 6a:d7:f5:01:63:0a:65:8c:c1:b4:91:4a:32:99:32: a5:a9:7e:a1:10:33:72:1b:94:c0:66:e0:01:71:d7: 47:44:9a:18:f3:5e:e5:cc:ed:c3:06:6b:05:f0:c0: 3a:70:7d:c3:20:08:36:df:03:c4:15:2b:7c:1e:6e: c5:a1:29:07:50:53:99:db:77:9e:0e:1d:0d:13:b0: 8d:50:eb:de:d6:db:62:2e:eb:9b:68:8c:05:ba:30: 1b:68:d3:d4:73:2d:b3:0a:a1:0a:64:31:70:31:c3: 00:63:8b:a0:a5:ab:ec:e8:47:06:0e:33:da:c6:b8: 56:cc:26:10:56:41:68:85:62:01:5f:22:25:cf:04: 1b:7a:89:20:38:ea:1a:99:ea:18:ae:a7:da:2c:a4: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A8:80:BB:D0:C1:A2:E2:12:E8:CC:D2:7C:59:D3:3A:10:8A:8E:4F X509v3 Authority Key Identifier: keyid:D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/UKiAu9DBouIS6MzSfFnTOhCKjk8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.166.0/24 Signature Algorithm: sha256WithRSAEncryption 17:d2:f4:ad:54:39:0b:24:73:d3:d7:84:5e:c9:e2:57:e0:ae: 16:e9:88:51:af:87:55:38:05:36:11:4d:6f:54:5e:8b:22:d0: 52:be:15:ca:cb:1c:ea:54:f9:5d:34:56:38:a0:df:7e:80:b2: 63:56:5e:1c:91:cd:9b:a6:54:58:a5:c2:10:ce:37:eb:f8:4d: f2:c4:7c:08:df:6e:ac:f3:e8:d1:07:83:7c:4b:f4:89:34:04: ce:62:ce:5c:3b:93:74:6a:54:a8:f0:8e:da:e8:93:b7:81:a1: 3c:16:31:dc:bf:5a:68:46:1d:81:e3:e3:ac:a0:97:67:03:9b: 05:93:8f:a2:79:1c:17:08:b1:34:21:5f:f1:db:70:5b:e3:f8: a2:7c:fa:81:cb:11:e5:04:e2:69:ca:1d:4d:a0:eb:b2:4e:96: 38:50:46:2f:b0:64:ea:c5:a9:ff:c9:f8:19:b8:42:cb:fd:91: 83:51:99:2e:ec:cf:c2:16:4d:9e:55:16:59:32:af:46:3e:03: fb:d0:92:5d:9c:d0:11:ac:83:f0:8c:b5:64:ef:c4:95:cd:eb: 47:c7:ba:ca:57:39:a1:9e:89:21:2e:36:a1:ab:66:3a:b7:c1: d1:c7:9c:6e:47:38:79:b1:8a:f4:ad:8f:37:b6:ab:99:2c:be: 57:1e:78:9b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDk2 NkI1NTkwOTMyNDE4MEE4OEE0NUUxRjY4M0NGNEQyRUQ5QkNBNTAeFw0yNTA4MjIw ODQ5NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUwQTg4MEJCRDBDMUEy RTIxMkU4Q0NEMjdDNTlEMzNBMTA4QThFNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNPICl0hQIp3kFN2RG//u1/r8CoGKRTpdkmOHb+MlQicY3bMkB yRFX2syo+tVWNlF6u0y6h2Smj9ptQNf2cdb/e3t/S3TW6nWEuMH5PjNL0BcF7FDU gLoq3LKLwb58ppVFsY6Cerh9rWrX9QFjCmWMwbSRSjKZMqWpfqEQM3IblMBm4AFx 10dEmhjzXuXM7cMGawXwwDpwfcMgCDbfA8QVK3websWhKQdQU5nbd54OHQ0TsI1Q 697W22Iu65tojAW6MBto09RzLbMKoQpkMXAxwwBji6Clq+zoRwYOM9rGuFbMJhBW QWiFYgFfIiXPBBt6iSA46hqZ6hiup9ospOMLAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUUKiAu9DBouIS6MzSfFnTOhCKjk8wHwYDVR0jBBgwFoAU2Wa1WQkyQYCoikXh 9oPPTS7ZvKUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElSVU4v MldhMVdRa3lRWUNvaWtYaDlvUFBUUzdadktVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8yV2ExV1FreVFZQ29pa1hoOW9QUFRTN1p2S1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSVJVTi9VS2lBdTlEQm91SVM2TXpTZkZu VE9oQ0tqazgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnUKm MA0GCSqGSIb3DQEBCwUAA4IBAQAX0vStVDkLJHPT14ReyeJX4K4W6YhRr4dVOAU2 EU1vVF6LItBSvhXKyxzqVPldNFY4oN9+gLJjVl4ckc2bplRYpcIQzjfr+E3yxHwI 326s8+jRB4N8S/SJNATOYs5cO5N0alSo8I7a6JO3gaE8FjHcv1poRh2B4+OsoJdn A5sFk4+ieRwXCLE0IV/x23Bb4/iifPqByxHlBOJpyh1NoOuyTpY4UEYvsGTqxan/ yfgZuELL/ZGDUZku7M/CFk2eVRZZMq9GPgP70JJdnNARrIPwjLVk78SVzetHx7rK VzmhnokhLjahq2Y6t8HRx5xuRzh5sYr0rY83tquZLL5XHnib -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:06 2025 by rpki-client