$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/vWJk29iB88xS9BUi1LyTLWPdIQs.roa File: vWJk29iB88xS9BUi1LyTLWPdIQs.roa (raw, json) Hash identifier: VE7jz9xYZQZ2FqTkgYDwsHaZa3BFAE8IUdBwf8s9QzQ= Subject key identifier: BD:62:64:DB:D8:81:F3:CC:52:F4:15:22:D4:BC:93:2D:63:DD:21:0B Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Certificate serial: 09A8 Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/vWJk29iB88xS9BUi1LyTLWPdIQs.roa Signing time: Thu 19 Jun 2025 07:21:11 +0000 ROA not before: Thu 19 Jun 2025 07:21:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 211.76.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Validity Not Before: Jun 19 07:21:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BD6264DBD881F3CC52F41522D4BC932D63DD210B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:06:7a:a0:b3:b5:84:4e:c4:de:5b:c0:8d: 9f:36:f9:1a:48:f1:04:7f:bf:85:e1:22:9c:3d:55: 77:f1:2a:a0:ef:11:f4:23:c9:a2:e3:db:54:67:e0: b9:2a:13:60:86:a8:7d:24:dd:52:69:be:6e:a5:64: e2:1a:0a:1e:fe:74:06:71:58:8d:9d:64:cd:cd:a7: 65:6d:23:4d:70:e5:02:27:a0:a2:e7:d0:b4:5c:df: b4:c0:0c:0a:54:d2:a7:9f:b1:b8:33:29:75:27:72: 83:12:30:9a:4b:36:01:65:da:c7:b7:34:f4:d3:31: 8f:74:08:6d:0c:9f:ae:19:de:91:ac:46:68:cb:14: 79:5d:81:b1:c0:0f:cd:75:5d:81:91:2a:1a:08:f8: 04:49:da:d0:a0:aa:25:50:fb:54:5b:69:cc:f0:15: 38:bb:60:fa:db:cc:72:c5:ac:46:eb:e4:a8:1b:16: 8a:f2:24:1e:7e:27:5a:bc:86:4d:80:c4:f0:7f:ca: 97:5c:b3:ee:d5:47:46:45:50:84:71:2b:9c:be:5e: 4f:bd:73:40:b9:9b:9a:55:0f:df:fe:48:8c:a7:f6: b8:d1:f2:cb:ab:fe:09:6a:a4:9c:9a:16:b6:ec:81: 27:be:3f:2c:c4:d1:74:1b:91:67:ad:a2:b2:47:d4: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:62:64:DB:D8:81:F3:CC:52:F4:15:22:D4:BC:93:2D:63:DD:21:0B X509v3 Authority Key Identifier: keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/vWJk29iB88xS9BUi1LyTLWPdIQs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.182.0/24 Signature Algorithm: sha256WithRSAEncryption 37:cc:7c:cb:83:c8:18:dd:ae:26:16:12:12:21:d9:87:2f:dd: 31:4c:2e:73:f3:47:78:90:f2:99:f7:7a:ad:7c:4f:26:b8:27: 49:c8:3d:84:fb:73:59:9e:1e:bf:65:15:75:ac:73:48:83:16: a2:d8:ca:73:11:1a:7e:5c:46:f1:92:1e:95:28:02:fe:a9:27: f5:4a:f9:08:25:94:64:64:cd:95:6d:11:d5:be:32:09:7e:b9: 7b:ca:9f:64:e9:3f:4b:06:63:47:46:86:e4:94:b0:bf:3d:37: 9f:52:88:1b:ce:d9:96:4e:90:6d:db:6a:b1:b5:09:63:98:0a: e4:1e:11:22:9b:34:4a:6d:67:f5:b2:9f:0e:68:70:90:dc:dc: c7:e3:1c:5e:e8:a9:a6:e1:d4:55:0c:03:8e:a2:b7:88:99:34: 96:1b:06:bc:e0:4a:36:b0:c2:c7:92:74:22:1c:66:4f:02:91: d5:11:b9:47:1c:40:08:7f:40:a9:8f:58:5e:d3:0f:a9:3d:53: cb:fb:31:0a:23:35:56:63:08:b9:13:33:9a:67:b1:4f:a5:95: 1a:ce:19:e1:69:33:ef:cb:20:3e:bc:06:23:f5:60:98:41:27: 04:16:30:94:52:36:76:76:19:82:5f:20:c8:0f:b7:d3:3f:d5: 46:47:a4:5a -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FE NTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRBQzAeFw0yNTA2MTkw NzIxMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJENjI2NERCRDg4MUYz Q0M1MkY0MTUyMkQ0QkM5MzJENjNERDIxMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrRQZ6oLO1hE7E3lvAjZ82+RpI8QR/v4XhIpw9VXfxKqDvEfQj yaLj21Rn4LkqE2CGqH0k3VJpvm6lZOIaCh7+dAZxWI2dZM3Np2VtI01w5QInoKLn 0LRc37TADApU0qefsbgzKXUncoMSMJpLNgFl2se3NPTTMY90CG0Mn64Z3pGsRmjL FHldgbHAD811XYGRKhoI+ARJ2tCgqiVQ+1RbaczwFTi7YPrbzHLFrEbr5KgbFory JB5+J1q8hk2AxPB/ypdcs+7VR0ZFUIRxK5y+Xk+9c0C5m5pVD9/+SIyn9rjR8sur /glqpJyaFrbsgSe+PyzE0XQbkWetorJH1PmjAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUvWJk29iB88xS9BUi1LyTLWPdIQswHwYDVR0jBBgwFoAUytUnAiyM0HVo7J/I Khzg3eWyxKwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNU V0FSRS95dFVuQWl5TTBIVm83Sl9JS2h6ZzNlV3l4S3cuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RXQkVTVFdBUkUvdldKazI5aUI4 OHhTOUJVaTFMeVRMV1BkSVFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANNMtjANBgkqhkiG9w0BAQsFAAOCAQEAN8x8y4PIGN2uJhYSEiHZhy/d MUwuc/NHeJDymfd6rXxPJrgnScg9hPtzWZ4ev2UVdaxzSIMWotjKcxEaflxG8ZIe lSgC/qkn9Ur5CCWUZGTNlW0R1b4yCX65e8qfZOk/SwZjR0aG5JSwvz03n1KIG87Z lk6QbdtqsbUJY5gK5B4RIps0Sm1n9bKfDmhwkNzcx+McXuippuHUVQwDjqK3iJk0 lhsGvOBKNrDCx5J0IhxmTwKR1RG5RxxACH9AqY9YXtMPqT1Ty/sxCiM1VmMIuRMz mmexT6WVGs4Z4Wkz78sgPrwGI/VgmEEnBBYwlFI2dnYZgl8gyA+30z/VRkekWg== -----END CERTIFICATE-----Generated at Wed Jun 25 03:57:08 2025 by rpki-client