$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/0lNmgdKNyQzK1YWH2IiTtkVBJpw.roa File: 0lNmgdKNyQzK1YWH2IiTtkVBJpw.roa (raw, json) Hash identifier: EFFixv4NWVFVAKKEs5tkYmFVD8maspWaD14gCZKFpVM= Subject key identifier: D2:53:66:81:D2:8D:C9:0C:CA:D5:85:87:D8:88:93:B6:45:41:26:9C Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0D93 Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/0lNmgdKNyQzK1YWH2IiTtkVBJpw.roa Signing time: Wed 22 Oct 2025 06:10:05 +0000 ROA not before: Wed 22 Oct 2025 06:10:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131617 IP address blocks: 103.104.148.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: Oct 22 06:10:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D2536681D28DC90CCAD58587D88893B64541269C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:1a:75:35:d4:f8:95:9a:99:57:4b:68:1a: d5:c9:18:d9:01:91:4f:f6:eb:4b:12:5a:93:96:70: 52:a6:23:25:d9:6f:c2:21:5e:ad:61:25:57:21:9b: 98:3e:10:3b:bc:c9:ed:44:0c:bb:b6:99:a2:a8:90: 70:4b:0c:1f:2d:9f:78:da:3d:a6:c5:35:50:c1:4f: f9:8c:59:38:85:93:26:fe:ce:5d:26:67:e6:4c:06: 21:29:67:0b:bd:ac:82:82:ee:ca:d2:9e:c3:3d:de: e2:b4:a5:6e:af:17:c2:c5:9a:6d:88:45:be:4c:65: 27:32:91:41:e7:48:b2:1e:3d:5b:15:23:57:93:77: 11:35:ae:f7:20:a4:00:fd:5a:c8:18:68:77:41:bf: ae:e1:01:dd:b0:18:56:33:b7:02:2c:c5:94:96:41: 88:53:6e:60:2a:c8:db:58:a4:8e:86:4b:b7:03:57: b9:1e:4d:c1:9f:b1:ad:93:b3:32:e2:9b:e4:90:14: 8c:e5:5d:a7:14:5f:41:f3:26:7c:a3:a1:4a:e6:82: c4:01:25:4c:4f:43:a8:23:29:05:28:71:8b:06:24: 78:aa:a2:76:7e:8f:1b:27:5b:76:f8:8c:30:66:1d: d4:90:5a:94:0e:0d:96:f6:87:4b:72:7d:52:19:a0: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:53:66:81:D2:8D:C9:0C:CA:D5:85:87:D8:88:93:B6:45:41:26:9C X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/0lNmgdKNyQzK1YWH2IiTtkVBJpw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.148.0/24 Signature Algorithm: sha256WithRSAEncryption d5:d9:b7:15:54:ce:dd:5f:1c:63:d4:02:75:5d:db:9c:a2:c2: 8a:de:66:1d:ba:77:f5:57:af:c9:79:a6:d3:4d:8f:3b:06:73: ec:15:b0:00:32:e6:00:24:57:4e:98:df:0a:84:cb:17:ba:eb: c7:8f:93:12:8d:39:71:af:76:dc:0b:54:fa:5d:77:c2:2d:41: 21:d0:52:2a:fb:f2:a7:01:5d:96:45:02:b3:6d:95:35:7f:ed: 9a:c6:2b:48:a6:15:44:7d:ee:1f:65:c2:f5:8f:cf:89:07:aa: 1e:17:de:3d:e8:1c:d3:63:8f:e4:d2:29:8d:af:c9:b0:14:64: 2b:8a:83:07:33:b7:91:5d:64:26:e2:2e:ba:30:63:d2:71:b8: d2:1b:d7:eb:05:89:db:0b:81:8d:56:7a:55:00:f6:20:4f:d2: 08:dc:c0:84:fe:bd:57:0b:3b:90:6a:74:a4:5f:41:ad:9b:47: 1b:5c:36:db:e4:ed:6d:bd:07:be:da:a2:21:ad:d4:26:fe:38: 12:70:1b:e4:41:5f:00:b3:1a:b0:ad:59:a3:54:04:80:de:6d: 81:50:96:df:1b:b5:30:22:7f:80:54:ed:85:54:70:a6:5e:e5: 30:86:fe:5a:c9:7f:49:18:4d:f1:46:98:49:5a:30:cc:36:51: 96:9c:ac:22 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNTEwMjIw NjEwMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQyNTM2NjgxRDI4REM5 MENDQUQ1ODU4N0Q4ODg5M0I2NDU0MTI2OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXPRp1NdT4lZqZV0toGtXJGNkBkU/260sSWpOWcFKmIyXZb8Ih Xq1hJVchm5g+EDu8ye1EDLu2maKokHBLDB8tn3jaPabFNVDBT/mMWTiFkyb+zl0m Z+ZMBiEpZwu9rIKC7srSnsM93uK0pW6vF8LFmm2IRb5MZScykUHnSLIePVsVI1eT dxE1rvcgpAD9WsgYaHdBv67hAd2wGFYztwIsxZSWQYhTbmAqyNtYpI6GS7cDV7ke TcGfsa2TszLim+SQFIzlXacUX0HzJnyjoUrmgsQBJUxPQ6gjKQUocYsGJHiqonZ+ jxsnW3b4jDBmHdSQWpQODZb2h0tyfVIZoAxlAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU0lNmgdKNyQzK1YWH2IiTtkVBJpwwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC8wbE5tZ2RLTnlReksx WVdIMklpVHRrVkJKcHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2iUMA0GCSqGSIb3DQEBCwUAA4IBAQDV2bcVVM7dXxxj1AJ1XducosKK3mYd unf1V6/JeabTTY87BnPsFbAAMuYAJFdOmN8KhMsXuuvHj5MSjTlxr3bcC1T6XXfC LUEh0FIq+/KnAV2WRQKzbZU1f+2axitIphVEfe4fZcL1j8+JB6oeF9496BzTY4/k 0imNr8mwFGQrioMHM7eRXWQm4i66MGPScbjSG9frBYnbC4GNVnpVAPYgT9II3MCE /r1XCzuQanSkX0Gtm0cbXDbb5O1tvQe+2qIhrdQm/jgScBvkQV8AsxqwrVmjVASA 3m2BUJbfG7UwIn+AVO2FVHCmXuUwhv5ayX9JGE3xRphJWjDMNlGWnKwi -----END CERTIFICATE-----Generated at Wed Nov 5 08:23:13 2025 by rpki-client