$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/1zTbbsFyQxh0RQaSCoLTvvYauI0.roa File: 1zTbbsFyQxh0RQaSCoLTvvYauI0.roa (raw, json) Hash identifier: zHdaqPo+Ee3joFgC7eyJwFP2QnDQUHyQyF+3aILPEsg= Subject key identifier: D7:34:DB:6E:C1:72:43:18:74:45:06:92:0A:82:D3:BE:F6:1A:B8:8D Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Certificate serial: 0DE6 Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/1zTbbsFyQxh0RQaSCoLTvvYauI0.roa Signing time: Mon 02 Mar 2026 05:35:57 +0000 ROA not before: Mon 02 Mar 2026 05:35:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131629 IP address blocks: 103.119.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3558 (0xde6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Validity Not Before: Mar 2 05:35:57 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D734DB6EC1724318744506920A82D3BEF61AB88D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:e8:2e:c9:bf:23:f8:55:48:a1:a6:50:b2: 71:77:09:4d:fe:97:81:d8:93:c7:cc:53:a9:46:85: 6d:b4:85:5c:ec:db:38:3d:94:46:90:8b:ae:c5:d5: b4:ef:85:25:d9:57:11:49:8a:80:96:c7:d3:53:dc: b0:61:21:46:32:8a:2c:22:e0:7c:68:52:81:7a:50: 14:4f:55:65:db:4c:b2:fc:1a:95:30:a5:db:7d:28: bd:aa:b9:64:cf:8f:58:4a:3e:53:4b:4c:94:33:cb: 35:0f:48:06:0e:1c:bc:4c:f1:fc:90:20:7b:f6:08: aa:9f:a8:fc:38:ba:0f:0d:cc:6d:ee:62:c8:de:1e: de:61:a6:70:8f:e1:54:b2:71:78:b1:3d:20:a0:83: 70:86:17:51:97:7e:f1:cc:4b:91:9c:fa:06:5e:95: d5:0f:e8:b4:cd:76:2b:a7:58:9a:08:09:a4:b6:35: 81:21:b7:44:66:39:b6:82:e8:17:7d:03:ac:b3:d9: a7:91:c0:95:e4:05:b2:80:b4:3c:5f:49:be:06:1f: 4f:14:d6:2d:77:3c:63:40:bb:6e:4f:72:fc:db:20: 46:06:04:90:a2:fa:f3:0b:85:c3:0c:91:3a:6d:97: 05:f1:29:22:80:27:ca:c5:3e:c1:31:38:fe:4f:a6: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:34:DB:6E:C1:72:43:18:74:45:06:92:0A:82:D3:BE:F6:1A:B8:8D X509v3 Authority Key Identifier: keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/1zTbbsFyQxh0RQaSCoLTvvYauI0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.214.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:cb:dc:db:5a:a8:51:fa:bf:df:5f:e4:09:36:f1:d3:b1:54: a0:cf:3d:d3:ea:d1:44:7a:70:f1:4c:40:9a:dd:2b:5b:b2:71: f2:3e:a9:f5:c0:a3:49:1e:46:d5:ee:b6:7e:35:ae:a5:06:83: 8c:fd:9b:db:4a:3c:eb:3f:e2:85:42:65:c9:53:6e:8b:a2:c8: df:5a:24:8c:b2:51:2b:0e:1b:37:45:33:f1:65:a5:5e:ad:e3: f7:01:01:ec:91:f2:fe:90:d3:65:ff:f3:87:8d:e6:6a:53:84: 1a:bb:7f:a2:6f:8b:db:0b:24:ed:ef:ff:88:05:f0:89:9a:02: c4:d4:24:bc:f2:ea:df:2a:3b:64:de:b2:1f:7d:21:85:7b:4b: e9:b9:02:7c:2d:a8:20:6d:f6:e1:38:a0:6e:f6:49:7a:d4:03: 5a:5e:6e:84:d0:4d:35:ce:17:4a:89:0b:19:8c:5c:44:76:71: 49:4c:38:0b:bf:c6:17:87:03:e8:58:7c:49:5d:9c:a8:9b:1c: 1a:c8:94:52:bb:11:de:26:7f:0e:60:14:23:51:f1:7a:45:cc: ed:f7:1d:ed:3f:c0:72:a0:3c:50:fe:eb:8a:64:89:4c:f3:ec: e2:43:eb:68:f3:d8:34:96:4d:14:a9:c4:2a:5c:6f:f3:79:34: 2d:21:df:ad -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yNjAzMDIw NTM1NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ3MzREQjZFQzE3MjQz MTg3NDQ1MDY5MjBBODJEM0JFRjYxQUI4OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCupuguyb8j+FVIoaZQsnF3CU3+l4HYk8fMU6lGhW20hVzs2zg9 lEaQi67F1bTvhSXZVxFJioCWx9NT3LBhIUYyiiwi4HxoUoF6UBRPVWXbTLL8GpUw pdt9KL2quWTPj1hKPlNLTJQzyzUPSAYOHLxM8fyQIHv2CKqfqPw4ug8NzG3uYsje Ht5hpnCP4VSycXixPSCgg3CGF1GXfvHMS5Gc+gZeldUP6LTNdiunWJoICaS2NYEh t0RmObaC6Bd9A6yz2aeRwJXkBbKAtDxfSb4GH08U1i13PGNAu25PcvzbIEYGBJCi +vMLhcMMkTptlwXxKSKAJ8rFPsExOP5PpjkpAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1zTbbsFyQxh0RQaSCoLTvvYauI0wHwYDVR0jBBgwFoAUXNEK1bakd108UE1m EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvMXpUYmJzRnlReGgwUlFh U0NvTFR2dllhdUkwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd31jANBgkqhkiG9w0BAQsFAAOCAQEAXsvc21qoUfq/31/kCTbx07FUoM890+rR RHpw8UxAmt0rW7Jx8j6p9cCjSR5G1e62fjWupQaDjP2b20o86z/ihUJlyVNui6LI 31okjLJRKw4bN0Uz8WWlXq3j9wEB7JHy/pDTZf/zh43malOEGrt/om+L2wsk7e// iAXwiZoCxNQkvPLq3yo7ZN6yH30hhXtL6bkCfC2oIG324TigbvZJetQDWl5uhNBN Nc4XSokLGYxcRHZxSUw4C7/GF4cD6Fh8SV2cqJscGsiUUrsR3iZ/DmAUI1HxekXM 7fcd7T/AcqA8UP7rimSJTPPs4kPraPPYNJZNFKnEKlxv83k0LSHfrQ== -----END CERTIFICATE-----Generated at Tue Mar 3 00:23:17 2026 by rpki-client