$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/MG5wPdJRdC7MVj4Zbjj5r-zzPsA.roa File: MG5wPdJRdC7MVj4Zbjj5r-zzPsA.roa (raw, json) Hash identifier: oGvwgoEKgK9g4aM/tlO8vSaVH2LIsoorQYL1VF1JGGY= Subject key identifier: 30:6E:70:3D:D2:51:74:2E:CC:56:3E:19:6E:38:F9:AF:EC:F3:3E:C0 Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0D95 Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/MG5wPdJRdC7MVj4Zbjj5r-zzPsA.roa Signing time: Wed 22 Oct 2025 06:12:23 +0000 ROA not before: Wed 22 Oct 2025 06:12:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131617 IP address blocks: 103.104.149.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3477 (0xd95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: Oct 22 06:12:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=306E703DD251742ECC563E196E38F9AFECF33EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:60:75:67:fc:56:3a:7c:20:67:a3:80:aa: 8e:cf:c3:d8:3c:54:52:32:01:b9:d2:6d:66:7c:e6: 77:99:b0:59:24:90:24:67:10:9a:65:df:a2:0e:13: 6a:0a:fc:c6:d7:54:b4:c5:93:a7:46:46:16:fb:ac: 15:b7:3e:60:fa:34:fa:3e:22:8b:c1:8c:9f:c2:5b: b3:9a:ce:f3:3f:62:bd:e4:cc:c0:a5:82:cc:80:19: 31:bc:b3:88:d3:86:ad:c6:6c:d7:4d:56:45:f1:36: e0:f8:5c:7c:30:ed:f6:02:7a:e3:fd:2f:33:9a:a8: 66:0b:b3:a1:ae:94:e6:bc:21:16:e2:63:26:6a:56: 86:21:d1:20:bb:28:08:1c:45:8f:75:40:36:e8:9d: 16:bc:8a:51:9a:70:4d:dd:77:3a:7b:e0:2a:0d:4d: 84:59:b8:43:a1:05:52:23:56:36:eb:90:3f:0a:30: fd:20:be:eb:57:57:6a:97:a5:15:1a:df:fd:af:89: 15:e2:99:9c:13:8f:31:c9:5b:1f:75:e1:30:25:cc: 10:88:90:ab:b3:9b:1c:ea:2d:5d:21:4c:d0:2f:a4: 19:0f:f4:a5:cb:65:86:09:cc:ed:46:6f:e9:e7:d7: 5a:b7:c2:a8:d1:22:db:00:94:94:1c:81:10:3a:79: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:70:3D:D2:51:74:2E:CC:56:3E:19:6E:38:F9:AF:EC:F3:3E:C0 X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/MG5wPdJRdC7MVj4Zbjj5r-zzPsA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.149.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:83:42:81:36:15:c0:a6:3e:4b:f8:bc:46:88:15:19:7a:83: df:cf:98:fb:3a:e0:73:8d:b0:d2:7c:d9:d3:67:f6:d1:10:14: 0d:71:9c:1a:99:ec:1c:5a:dc:df:15:9f:3a:c7:14:eb:b7:56: 9b:e7:29:ec:ed:d9:07:ee:f9:97:a5:fd:c3:4e:db:4c:8a:1a: 8a:4a:eb:ac:13:a3:ea:6e:e3:20:74:b2:04:8c:e2:84:80:18: c4:f1:f8:2e:74:6a:ab:20:92:bf:24:c2:dc:73:74:a4:28:a8: 25:9e:a8:6f:f7:f5:46:a3:7a:ad:51:3f:a6:8a:20:01:e5:b0: 94:0c:d3:e2:63:7a:d8:2f:a6:e6:0c:ac:4e:78:e7:a7:df:9c: 55:c2:d6:32:17:f5:58:11:fa:da:f3:ed:39:31:18:0e:4b:a4: 06:ff:0c:d7:7c:d5:f7:70:c6:3b:87:59:e7:a0:9c:75:89:bf: db:d7:2c:4f:b8:52:e5:b2:ea:ce:c5:a5:6d:33:4d:79:ac:ca: e3:b0:74:e9:1c:52:c8:01:8d:dc:24:95:c6:3f:62:02:b2:e7: 81:ab:bf:45:f8:3c:5d:42:5d:51:25:2c:dd:26:97:5b:ce:5d: 76:28:d5:dc:53:d9:9f:7a:4c:51:e8:ec:7e:7c:b3:e9:a5:69: 58:eb:42:bd -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNTEwMjIw NjEyMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMwNkU3MDNERDI1MTc0 MkVDQzU2M0UxOTZFMzhGOUFGRUNGMzNFQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3+2B1Z/xWOnwgZ6OAqo7Pw9g8VFIyAbnSbWZ85neZsFkkkCRn EJpl36IOE2oK/MbXVLTFk6dGRhb7rBW3PmD6NPo+IovBjJ/CW7OazvM/Yr3kzMCl gsyAGTG8s4jThq3GbNdNVkXxNuD4XHww7fYCeuP9LzOaqGYLs6GulOa8IRbiYyZq VoYh0SC7KAgcRY91QDbonRa8ilGacE3ddzp74CoNTYRZuEOhBVIjVjbrkD8KMP0g vutXV2qXpRUa3/2viRXimZwTjzHJWx914TAlzBCIkKuzmxzqLV0hTNAvpBkP9KXL ZYYJzO1Gb+nn11q3wqjRItsAlJQcgRA6eWOZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUMG5wPdJRdC7MVj4Zbjj5r+zzPsAwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC9NRzV3UGRKUmRDN01W ajRaYmpqNXItenpQc0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2iVMA0GCSqGSIb3DQEBCwUAA4IBAQBvg0KBNhXApj5L+LxGiBUZeoPfz5j7 OuBzjbDSfNnTZ/bREBQNcZwamewcWtzfFZ86xxTrt1ab5yns7dkH7vmXpf3DTttM ihqKSuusE6PqbuMgdLIEjOKEgBjE8fgudGqrIJK/JMLcc3SkKKglnqhv9/VGo3qt UT+miiAB5bCUDNPiY3rYL6bmDKxOeOen35xVwtYyF/VYEfra8+05MRgOS6QG/wzX fNX3cMY7h1nnoJx1ib/b1yxPuFLlsurOxaVtM015rMrjsHTpHFLIAY3cJJXGP2IC sueBq79F+DxdQl1RJSzdJpdbzl12KNXcU9mfekxR6Ox+fLPppWlY60K9 -----END CERTIFICATE-----Generated at Wed Nov 5 13:13:38 2025 by rpki-client