$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9yCmki4HiqFca7KjJW4tzp0PKEI.roa File: 9yCmki4HiqFca7KjJW4tzp0PKEI.roa (raw, json) Hash identifier: 36DJ7l2hqcdBaCgraUNPodAf5a167ogreg24rd03WM4= Subject key identifier: F7:20:A6:92:2E:07:8A:A1:5C:6B:B2:A3:25:6E:2D:CE:9D:0F:28:42 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1545 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9yCmki4HiqFca7KjJW4tzp0PKEI.roa Signing time: Fri 10 Apr 2026 09:39:44 +0000 ROA not before: Fri 10 Apr 2026 09:39:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 210.85.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5445 (0x1545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Apr 10 09:39:44 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F720A6922E078AA15C6BB2A3256E2DCE9D0F2842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:b0:2e:2c:b1:75:94:c7:dc:07:25:12:6f: a8:59:63:89:f7:cc:bd:4c:79:59:e3:82:7e:d2:6b: 2b:8a:7d:6a:c9:bb:53:01:74:d9:3a:27:ab:a6:c7: 01:b1:12:39:05:20:c8:78:eb:85:ee:01:a4:1e:13: 0f:1d:78:7a:9e:67:2c:bc:2c:76:53:da:01:2e:5d: b8:c3:f4:80:4f:8c:ef:20:79:58:96:7d:bb:79:c4: 9e:cf:57:67:b8:a4:60:ff:c2:ec:ca:7f:62:41:63: 18:57:91:29:55:f6:18:e9:a4:04:bd:35:02:2e:f1: 85:a5:e4:79:c5:41:3d:4a:1b:c8:9c:13:a1:8f:4e: b3:64:f6:a5:d0:79:ea:f7:22:83:32:0d:b4:8b:f8: 58:15:fe:64:03:15:65:e9:ef:61:7c:02:b7:7c:ba: 9e:2b:33:cc:c1:ea:d5:fc:35:57:01:a2:f7:3d:75: 31:05:da:af:fb:7e:58:e0:e8:a2:ce:8d:ff:9b:61: ed:17:34:cc:64:3e:6c:96:38:e4:d1:6b:35:9f:92: 00:d1:6e:fd:fb:41:f5:84:35:6e:a0:a4:5f:46:84: fb:02:40:b7:06:1e:8d:16:2c:29:33:ab:a0:33:99: 80:92:9c:76:d6:23:c2:5e:97:f3:1c:47:77:9e:27: 9c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:20:A6:92:2E:07:8A:A1:5C:6B:B2:A3:25:6E:2D:CE:9D:0F:28:42 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9yCmki4HiqFca7KjJW4tzp0PKEI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.85.48.0/20 Signature Algorithm: sha256WithRSAEncryption 38:16:2f:e3:e7:a1:73:92:8a:46:e6:6f:fc:53:d2:13:ee:01: d4:2d:62:3f:b1:88:16:fd:ad:d7:ba:f4:20:60:24:38:8f:da: 3e:2e:9b:d9:2e:1c:a6:75:4c:d8:1c:cb:4c:5f:4e:da:21:f6: 38:f8:0b:ea:35:4c:80:c8:51:2b:a2:cd:99:92:99:c6:46:30: 13:9b:f2:8a:a1:b7:b2:58:64:9e:b6:4d:5d:1e:65:c7:37:b9: f7:03:1e:e0:2c:fd:7a:7c:f6:34:8a:25:29:38:4e:55:b4:78: d0:76:50:05:39:74:57:16:06:95:a3:c7:9a:a2:8f:cf:4c:43: 79:b9:5d:61:55:42:a5:26:02:6a:0b:9f:43:4b:0d:27:ad:11: a2:79:bf:9b:0f:d2:53:1d:c3:33:01:c3:e4:0f:5e:d7:65:7f: 30:b9:0c:c5:23:9e:e4:c2:fa:4f:fd:b2:f2:33:3b:6a:03:15: d6:64:45:e0:13:d9:17:86:c4:5e:ff:43:bb:47:32:22:a2:e2: 09:45:41:01:f5:ff:e5:e8:36:b2:0b:02:e3:4b:e5:e3:84:54: 67:68:94:d1:a8:0e:72:d5:30:ed:75:72:8f:68:3e:c6:a3:6b: 92:3f:f1:e7:78:38:83:db:28:14:70:e3:f8:56:cd:42:8a:d5: f1:71:0f:fb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNjA0MTAw OTM5NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY3MjBBNjkyMkUwNzhB QTE1QzZCQjJBMzI1NkUyRENFOUQwRjI4NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOO7AuLLF1lMfcByUSb6hZY4n3zL1MeVnjgn7SayuKfWrJu1MB dNk6J6umxwGxEjkFIMh464XuAaQeEw8deHqeZyy8LHZT2gEuXbjD9IBPjO8geViW fbt5xJ7PV2e4pGD/wuzKf2JBYxhXkSlV9hjppAS9NQIu8YWl5HnFQT1KG8icE6GP TrNk9qXQeer3IoMyDbSL+FgV/mQDFWXp72F8Ard8up4rM8zB6tX8NVcBovc9dTEF 2q/7fljg6KLOjf+bYe0XNMxkPmyWOOTRazWfkgDRbv37QfWENW6gpF9GhPsCQLcG Ho0WLCkzq6AzmYCSnHbWI8Jel/McR3eeJ5wrAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU9yCmki4HiqFca7KjJW4tzp0PKEIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzl5Q21raTRIaXFGY2E3S2pKVzR0enAw UEtFSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSVTAwDQYJ KoZIhvcNAQELBQADggEBADgWL+PnoXOSikbmb/xT0hPuAdQtYj+xiBb9rde69CBg JDiP2j4um9kuHKZ1TNgcy0xfTtoh9jj4C+o1TIDIUSuizZmSmcZGMBOb8oqht7JY ZJ62TV0eZcc3ufcDHuAs/Xp89jSKJSk4TlW0eNB2UAU5dFcWBpWjx5qij89MQ3m5 XWFVQqUmAmoLn0NLDSetEaJ5v5sP0lMdwzMBw+QPXtdlfzC5DMUjnuTC+k/9svIz O2oDFdZkReAT2ReGxF7/Q7tHMiKi4glFQQH1/+XoNrILAuNL5eOEVGdolNGoDnLV MO11co9oPsaja5I/8ed4OIPbKBRw4/hWzUKK1fFxD/s= -----END CERTIFICATE-----Generated at Sun Apr 19 09:27:51 2026 by rpki-client