$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/DYQ8mMjGvWcKQ7DIXdb5PFxmx00.roa File: DYQ8mMjGvWcKQ7DIXdb5PFxmx00.roa (raw, json) Hash identifier: 1rcFBDQLm5tXyUgp+TU+L1DgPdmjBXapEeme5ohuYeA= Subject key identifier: 0D:84:3C:98:C8:C6:BD:67:0A:43:B0:C8:5D:D6:F9:3C:5C:66:C7:4D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 141B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DYQ8mMjGvWcKQ7DIXdb5PFxmx00.roa Signing time: Fri 22 Aug 2025 09:00:05 +0000 ROA not before: Fri 22 Aug 2025 09:00:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131591 IP address blocks: 223.22.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5147 (0x141b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0D843C98C8C6BD670A43B0C85DD6F93C5C66C74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:5c:9b:8f:b4:e0:30:b2:94:b8:4a:15:99: 9a:d9:ab:10:a6:be:72:34:ab:e6:d9:3e:0b:5e:86: 1b:e4:dc:49:91:6d:60:8c:2c:51:5e:fc:c0:fe:89: 21:12:27:39:6d:1c:e2:d3:43:51:3d:bf:9c:79:08: a6:07:cd:2a:8b:87:62:cd:52:d3:d2:e5:5a:9b:99: 09:4f:5e:e5:f7:d5:c6:da:1a:9f:6f:db:25:05:36: 55:50:08:24:ee:02:fa:7f:44:fd:e3:3b:06:0f:61: 22:86:5a:80:08:14:7f:00:0c:b1:db:66:2d:8e:85: 44:bc:6c:7b:dd:8e:25:d5:89:4d:c7:db:ec:eb:4a: 1e:5d:3b:c1:dc:79:32:66:71:c4:33:5c:2b:cb:71: 96:33:fb:a4:e2:3b:f8:3e:70:96:76:f9:0e:a7:2d: 95:9c:bb:77:a0:80:51:8b:fd:92:d8:b6:1a:68:36: 70:0e:e7:48:f5:6c:0f:cd:86:b8:d6:65:c1:54:fb: a4:40:f0:bb:0b:02:a9:8a:e5:3c:6f:c8:bf:c0:92: 24:fd:64:98:ec:0a:de:9b:64:a7:ef:c4:ab:c6:c1: 50:18:b5:4c:57:43:ed:4c:5c:91:40:1b:b9:84:b4: d7:f9:6f:70:9f:ff:54:53:25:4a:6c:62:4b:03:12: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:84:3C:98:C8:C6:BD:67:0A:43:B0:C8:5D:D6:F9:3C:5C:66:C7:4D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DYQ8mMjGvWcKQ7DIXdb5PFxmx00.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.32.0/19 Signature Algorithm: sha256WithRSAEncryption 65:4b:05:48:42:db:35:40:a2:5e:36:50:15:65:03:48:99:93: cc:e9:84:17:a9:94:6f:dd:f2:af:18:b3:ef:cf:f3:c9:e9:10: 9a:c2:cd:71:12:eb:4f:68:7e:8f:c1:77:86:e6:21:a4:20:ec: 5f:fe:83:98:48:ff:98:49:13:11:d9:da:19:c6:d1:3e:2e:fd: af:00:1c:11:d7:63:91:67:0d:cd:31:8c:35:fd:0b:c4:a3:d5: 37:b9:be:0f:59:ed:0b:bf:e2:c7:91:0c:7a:4c:06:14:0b:04: c7:5a:af:e5:87:07:88:e4:7e:2d:5e:f5:60:76:98:a2:c5:62: bd:5e:42:a6:17:35:7a:8c:e5:91:fe:55:d4:22:38:5c:4d:db: ba:76:75:3b:64:a2:8b:71:0b:5d:ea:a4:1a:26:01:50:9e:9e: 68:21:45:57:9c:38:65:a4:36:e4:1d:76:40:1a:fe:b8:78:fc: e3:92:de:07:9d:9f:a6:97:46:db:98:c8:61:41:60:a0:c2:f7: 48:88:97:08:38:a4:65:ad:51:aa:d3:00:c7:29:b6:d9:0b:24: 35:92:dc:78:e5:d3:a5:c9:6a:13:4f:c1:ea:6c:e1:a6:3c:f7: 66:c1:a0:cc:b9:3e:bd:db:90:aa:fc:4e:55:28:06:ec:bc:4d: 67:12:4e:15 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBEODQzQzk4QzhDNkJE NjcwQTQzQjBDODVERDZGOTNDNUM2NkM3NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLKVybj7TgMLKUuEoVmZrZqxCmvnI0q+bZPgtehhvk3EmRbWCM LFFe/MD+iSESJzltHOLTQ1E9v5x5CKYHzSqLh2LNUtPS5VqbmQlPXuX31cbaGp9v 2yUFNlVQCCTuAvp/RP3jOwYPYSKGWoAIFH8ADLHbZi2OhUS8bHvdjiXViU3H2+zr Sh5dO8HceTJmccQzXCvLcZYz+6TiO/g+cJZ2+Q6nLZWcu3eggFGL/ZLYthpoNnAO 50j1bA/NhrjWZcFU+6RA8LsLAqmK5TxvyL/AkiT9ZJjsCt6bZKfvxKvGwVAYtUxX Q+1MXJFAG7mEtNf5b3Cf/1RTJUpsYksDEkidAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUDYQ8mMjGvWcKQ7DIXdb5PFxmx00wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0RZUThtTWpHdldjS1E3RElYZGI1UEZ4 bXgwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXfFiAwDQYJ KoZIhvcNAQELBQADggEBAGVLBUhC2zVAol42UBVlA0iZk8zphBeplG/d8q8Ys+/P 88npEJrCzXES609ofo/Bd4bmIaQg7F/+g5hI/5hJExHZ2hnG0T4u/a8AHBHXY5Fn Dc0xjDX9C8Sj1Te5vg9Z7Qu/4seRDHpMBhQLBMdar+WHB4jkfi1e9WB2mKLFYr1e QqYXNXqM5ZH+VdQiOFxN27p2dTtkootxC13qpBomAVCenmghRVecOGWkNuQddkAa /rh4/OOS3gedn6aXRtuYyGFBYKDC90iIlwg4pGWtUarTAMcpttkLJDWS3Hjl06XJ ahNPweps4aY892bBoMy5Pr3bkKr8TlUoBuy8TWcSThU= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:30 2025 by rpki-client