$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/3Y-X7MISaEfvUh7XyStlBSKyPU8.roa File: 3Y-X7MISaEfvUh7XyStlBSKyPU8.roa (raw, json) Hash identifier: oh2d53+8cLgrCJx0uYblY55cW86uWmf37eEcYwpYPoo= Subject key identifier: DD:8F:97:EC:C2:12:68:47:EF:52:1E:D7:C9:2B:65:05:22:B2:3D:4F Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Certificate serial: 0DE2 Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/3Y-X7MISaEfvUh7XyStlBSKyPU8.roa Signing time: Thu 26 Feb 2026 08:23:40 +0000 ROA not before: Thu 26 Feb 2026 08:23:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131629 IP address blocks: 103.119.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 21:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Validity Not Before: Feb 26 08:23:40 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DD8F97ECC2126847EF521ED7C92B650522B23D4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:62:b0:5e:fa:d3:55:15:9a:9c:44:35:95: 91:80:c3:9d:d8:ec:e3:4c:0b:dd:d2:ae:4f:5f:de: e4:4d:ee:0c:8d:de:2c:de:b8:42:e0:1b:25:d2:96: 13:d7:cb:93:0a:9f:33:98:6f:35:c5:68:7a:53:b2: 22:05:3d:95:56:cd:fd:6e:a4:39:e6:8a:de:60:b5: 7d:97:de:1d:3d:19:99:1c:70:f4:1f:d0:66:9a:3f: 74:60:4e:94:1c:ea:0d:1a:3d:57:7d:a5:da:5d:cc: 4a:c3:28:21:a1:dc:e9:db:ca:e3:ce:f8:ce:33:15: 73:bf:6c:6a:38:2d:1d:3d:ac:0c:10:48:0e:1d:8f: 58:c0:94:29:14:90:16:74:a5:e0:f8:c6:50:af:72: 2d:64:fa:cf:3a:1f:88:2e:b3:ea:71:44:ba:13:d7: 19:45:1a:15:79:dc:ba:e1:b0:69:ad:70:1d:3c:62: cd:67:a2:29:20:65:84:dd:1b:79:10:ea:70:3f:cc: b3:b1:f0:b2:90:b4:35:1d:10:2c:c0:47:fe:90:50: c0:cb:36:04:8b:eb:d1:49:be:09:c8:ac:39:0c:a2: 84:39:e2:7c:89:6f:78:70:ce:f8:f4:9f:29:72:06: 2e:3c:36:af:16:48:a1:e8:d4:43:bf:f0:c9:8e:6f: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8F:97:EC:C2:12:68:47:EF:52:1E:D7:C9:2B:65:05:22:B2:3D:4F X509v3 Authority Key Identifier: keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/3Y-X7MISaEfvUh7XyStlBSKyPU8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.213.0/24 Signature Algorithm: sha256WithRSAEncryption 10:46:17:f6:2a:a7:9d:2a:f4:82:e2:d3:99:d5:69:41:41:a6: 18:fd:f6:c2:a0:56:6f:19:0c:e7:bd:c9:a6:23:5d:d8:df:0a: 1c:ba:f3:bc:3c:e7:f0:ce:00:cc:65:ed:fb:bf:56:17:1d:3b: 39:fa:a3:08:36:8b:e4:97:a1:ee:cf:60:94:f7:61:56:05:50: 19:e8:c5:02:62:dd:31:8c:96:8b:94:a1:ac:da:7d:20:32:1c: 8b:35:9a:61:70:af:60:8f:41:0b:96:a6:df:35:e5:43:9f:c8: 58:c7:f4:36:f0:eb:a3:07:92:c1:40:0b:26:f2:34:c7:6d:98: 38:6e:28:16:0e:ef:c7:8a:be:10:9d:bf:08:5a:3f:1a:36:ea: 90:7e:86:63:d0:85:7b:48:c2:e5:b3:02:e4:c7:43:17:c6:36: 4b:85:ce:b5:b6:5c:08:c2:54:51:c2:18:fa:d9:8f:db:83:b2: aa:a3:25:82:58:64:47:1c:4a:60:da:85:be:29:b4:fe:eb:51: 9d:6e:eb:ec:de:5c:a1:55:b9:df:d5:15:5e:6f:4f:8e:1f:de: 6f:76:ad:b9:58:78:8c:94:71:0f:1d:35:b3:8d:ff:da:e3:f0: 09:64:57:42:1e:18:0d:04:2a:2b:ef:a0:b7:59:d6:6f:df:d1: 82:d6:5a:e3 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yNjAyMjYw ODIzNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEREOEY5N0VDQzIxMjY4 NDdFRjUyMUVEN0M5MkI2NTA1MjJCMjNENEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAFmKwXvrTVRWanEQ1lZGAw53Y7ONMC93Srk9f3uRN7gyN3ize uELgGyXSlhPXy5MKnzOYbzXFaHpTsiIFPZVWzf1upDnmit5gtX2X3h09GZkccPQf 0GaaP3RgTpQc6g0aPVd9pdpdzErDKCGh3OnbyuPO+M4zFXO/bGo4LR09rAwQSA4d j1jAlCkUkBZ0peD4xlCvci1k+s86H4gus+pxRLoT1xlFGhV53LrhsGmtcB08Ys1n oikgZYTdG3kQ6nA/zLOx8LKQtDUdECzAR/6QUMDLNgSL69FJvgnIrDkMooQ54nyJ b3hwzvj0nylyBi48Nq8WSKHo1EO/8MmOb9M/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU3Y+X7MISaEfvUh7XyStlBSKyPU8wHwYDVR0jBBgwFoAUXNEK1bakd108UE1m EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvM1ktWDdNSVNhRWZ2VWg3 WHlTdGxCU0t5UFU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd31TANBgkqhkiG9w0BAQsFAAOCAQEAEEYX9iqnnSr0guLTmdVpQUGmGP32wqBW bxkM573JpiNd2N8KHLrzvDzn8M4AzGXt+79WFx07OfqjCDaL5Jeh7s9glPdhVgVQ GejFAmLdMYyWi5ShrNp9IDIcizWaYXCvYI9BC5am3zXlQ5/IWMf0NvDroweSwUAL JvI0x22YOG4oFg7vx4q+EJ2/CFo/GjbqkH6GY9CFe0jC5bMC5MdDF8Y2S4XOtbZc CMJUUcIY+tmP24OyqqMlglhkRxxKYNqFvim0/utRnW7r7N5coVW539UVXm9Pjh/e b3atuVh4jJRxDx01s43/2uPwCWRXQh4YDQQqK++gt1nWb9/RgtZa4w== -----END CERTIFICATE-----Generated at Mon Mar 2 21:04:46 2026 by rpki-client