$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/1LLBf9UAW-NlNuAEhBmjRs3Vgxk.roa File: 1LLBf9UAW-NlNuAEhBmjRs3Vgxk.roa (raw, json) Hash identifier: jHD0vaF14PEf0kAoMdyzx7WSL90IBsEpdg+ccVo4aBk= Subject key identifier: D4:B2:C1:7F:D5:00:5B:E3:65:36:E0:04:84:19:A3:46:CD:D5:83:19 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F15 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/1LLBf9UAW-NlNuAEhBmjRs3Vgxk.roa Signing time: Fri 22 Aug 2025 08:50:07 +0000 ROA not before: Fri 22 Aug 2025 08:50:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18424 IP address blocks: 121.50.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3861 (0xf15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D4B2C17FD5005BE36536E0048419A346CDD58319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:09:78:58:4b:fa:52:f3:da:7e:62:22:79: b7:87:ed:4f:d8:a2:5f:e6:35:66:14:11:a2:c5:19: e4:2c:bc:e2:fa:03:38:a5:50:b9:78:a6:46:50:43: c0:ba:f2:a7:42:cc:8e:34:98:d7:e0:62:63:06:f5: 66:6d:78:bb:77:a6:33:b3:5a:b6:c1:99:13:d9:e1: 72:e3:73:ba:b9:56:16:8c:ac:61:43:52:1d:6d:95: 3a:cd:51:98:05:68:f3:05:96:d2:b5:44:ae:e0:33: 9f:e7:d9:15:f2:41:00:bf:43:a5:19:42:a3:49:73: dc:e0:53:bb:39:db:17:e7:ac:57:cd:ed:de:0a:65: 8a:84:b5:d5:fb:c2:48:b0:b2:3f:41:84:5b:34:4b: 92:70:a2:ec:df:26:7d:87:9e:13:2a:bc:a2:cf:cd: e1:7f:7b:e8:1a:b0:3d:19:89:b8:bd:03:6a:56:85: 7b:43:f3:d3:49:6e:83:68:eb:33:2e:1a:19:94:6f: cf:9f:eb:5b:59:35:de:9f:c0:7c:2b:19:f4:5d:28: d1:a6:37:ab:5d:23:0f:c9:9b:ba:32:18:3f:de:01: 23:67:76:f9:c0:4e:83:9c:84:6b:f8:cd:bb:f5:15: ab:ab:0c:ca:48:6e:cd:02:f6:82:68:08:c4:2b:3f: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:C1:7F:D5:00:5B:E3:65:36:E0:04:84:19:A3:46:CD:D5:83:19 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/1LLBf9UAW-NlNuAEhBmjRs3Vgxk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.148.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:b3:ea:d5:76:27:e3:2b:46:78:ba:64:65:73:2c:72:72:9a: 4a:34:f5:a3:ad:11:44:3b:2a:f0:6e:0f:8b:b0:0f:b8:e0:aa: 81:38:16:a1:22:9c:e9:55:71:c9:2d:66:94:4e:b6:4a:52:44: 59:1f:89:1d:02:af:c5:94:33:dc:ad:6a:01:77:9d:6b:eb:18: 5a:2c:b7:f5:4c:2f:b9:15:fd:8c:8a:45:63:17:69:32:f5:ed: a8:c8:08:9e:43:5d:79:c4:1f:93:83:40:71:c2:bf:9b:c3:c6: f2:78:44:a0:61:19:74:df:42:8b:0d:06:99:12:bb:98:2f:a0: 05:83:dc:ec:c7:e9:7f:5f:32:48:9a:e6:91:65:77:54:3a:30: 88:13:1c:f2:e3:e6:15:81:e0:9e:68:c5:57:31:5d:2f:0e:ab: bb:47:7f:a2:92:42:d2:94:fa:06:98:39:83:0f:40:03:da:05: 46:60:90:9a:af:a3:0a:8c:07:17:a1:33:95:dc:68:b8:a8:2e: eb:36:5e:76:2a:a3:1f:74:fe:aa:d8:ed:b7:08:8c:f8:32:56: 28:c5:76:a2:0c:84:34:42:ed:3d:56:cf:30:23:1d:e0:1a:7c: 75:86:59:5a:8e:a2:4d:f1:6a:f8:6f:7b:de:d4:b4:10:b4:23: d0:0f:eb:a4 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ0QjJDMTdGRDUwMDVC RTM2NTM2RTAwNDg0MTlBMzQ2Q0RENTgzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIjwl4WEv6UvPafmIiebeH7U/Yol/mNWYUEaLFGeQsvOL6Azil ULl4pkZQQ8C68qdCzI40mNfgYmMG9WZteLt3pjOzWrbBmRPZ4XLjc7q5VhaMrGFD Uh1tlTrNUZgFaPMFltK1RK7gM5/n2RXyQQC/Q6UZQqNJc9zgU7s52xfnrFfN7d4K ZYqEtdX7wkiwsj9BhFs0S5JwouzfJn2HnhMqvKLPzeF/e+gasD0Zibi9A2pWhXtD 89NJboNo6zMuGhmUb8+f61tZNd6fwHwrGfRdKNGmN6tdIw/Jm7oyGD/eASNndvnA ToOchGv4zbv1FaurDMpIbs0C9oJoCMQrP3pVAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU1LLBf9UAW+NlNuAEhBmjRs3VgxkwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOLzFMTEJmOVVBVy1O bE51QUVoQm1qUnMzVmd4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpQwDQYJKoZIhvcNAQELBQADggEBAB+z6tV2J+MrRni6ZGVzLHJymko0 9aOtEUQ7KvBuD4uwD7jgqoE4FqEinOlVccktZpROtkpSRFkfiR0Cr8WUM9ytagF3 nWvrGFost/VML7kV/YyKRWMXaTL17ajICJ5DXXnEH5ODQHHCv5vDxvJ4RKBhGXTf QosNBpkSu5gvoAWD3OzH6X9fMkia5pFld1Q6MIgTHPLj5hWB4J5oxVcxXS8Oq7tH f6KSQtKU+gaYOYMPQAPaBUZgkJqvowqMBxehM5XcaLioLus2XnYqox90/qrY7bcI jPgyVijFdqIMhDRC7T1WzzAjHeAafHWGWVqOok3xavhve97UtBC0I9AP66Q= -----END CERTIFICATE-----Generated at Wed Nov 5 08:04:01 2025 by rpki-client