$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ls7kw1LJZ-BNlSZSKwel95mVncA.roa File: Ls7kw1LJZ-BNlSZSKwel95mVncA.roa (raw, json) Hash identifier: Xx2xM2DaFQKOq0K8Bh6AX92xwMKHQk1nVjTK35V3RBo= Subject key identifier: 2E:CE:E4:C3:52:C9:67:E0:4D:95:26:52:2B:07:A5:F7:99:95:9D:C0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13F8 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ls7kw1LJZ-BNlSZSKwel95mVncA.roa Signing time: Fri 22 Aug 2025 08:59:56 +0000 ROA not before: Fri 22 Aug 2025 08:59:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 222.250.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5112 (0x13f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2ECEE4C352C967E04D9526522B07A5F799959DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:52:ed:a7:d7:ad:c3:c6:58:1e:67:85:96: ce:54:4d:c7:ac:0d:03:c5:30:3d:92:00:6d:cc:55: ff:81:86:50:df:ac:f2:bf:b8:e3:d3:57:95:b2:a5: 93:4e:47:d2:a4:c9:7e:46:20:f2:e7:52:b2:d2:58: 60:e3:a4:89:7a:e6:8d:be:ee:26:d0:5a:c4:44:f1: 91:69:2b:f8:95:b5:c4:04:4b:ea:44:9f:32:d2:db: ad:42:ca:5d:f4:ed:87:33:79:80:c8:c4:ee:b7:77: e2:b0:51:17:40:bd:e4:14:28:92:f5:d5:48:1a:a8: e4:0d:6d:46:e1:bc:ae:0a:1d:74:e9:c4:bd:1e:eb: 4d:6b:7f:be:93:a3:26:0b:84:b1:1d:ac:80:30:8a: cf:29:4a:40:95:32:29:15:3c:af:3a:88:21:c6:47: 95:3a:56:d0:4c:af:36:af:b4:dc:1c:3d:06:b0:04: ae:67:ca:fa:bd:b6:d5:57:e1:ad:86:d7:3d:c1:5f: 10:17:05:75:24:32:05:80:5a:5c:78:c5:1d:b9:5f: 1e:2f:0f:dc:c0:ee:3b:69:09:3b:34:bc:d3:c7:75: 6a:87:72:7f:7c:97:ce:4e:b9:9f:d3:a5:7f:7f:75: eb:cf:36:42:35:a1:33:38:e7:d4:5d:33:8c:ce:88: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CE:E4:C3:52:C9:67:E0:4D:95:26:52:2B:07:A5:F7:99:95:9D:C0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ls7kw1LJZ-BNlSZSKwel95mVncA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.250.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:2f:c1:62:45:1d:83:67:96:32:c6:ad:60:62:41:a7:6d:d7: fd:22:44:41:03:30:40:52:e3:f8:7d:08:e5:00:1e:e1:a8:86: a2:31:68:1a:91:aa:a5:cd:a3:b4:59:54:d3:b6:74:68:9b:f8: bb:60:ab:92:f6:62:63:64:23:c2:dd:7b:46:4e:01:ae:9b:55: da:95:11:b6:83:1d:30:59:57:ed:35:83:8a:eb:9f:39:94:c2: d4:15:b4:51:df:70:83:d3:98:73:05:c9:f6:4d:10:81:ac:cc: 37:0c:58:b3:ec:c9:12:61:25:39:22:43:19:2b:f6:6b:8d:ca: 86:69:18:f4:16:2d:48:a6:c7:1b:be:f5:bc:9c:4b:32:03:7a: 27:22:4a:a3:95:75:7d:27:68:ac:7e:5a:9c:96:5f:42:9f:cb: b5:74:76:9b:15:ad:dd:bb:a0:84:1e:71:d8:27:58:cf:21:bb: 4c:58:f0:e2:c2:75:4f:8a:af:46:3f:83:0a:45:9d:bd:67:c5: 58:4e:8c:ba:49:a9:0d:70:5b:f8:fe:af:41:b1:71:0f:38:2a: 02:40:8f:f7:f5:90:cd:29:06:e0:80:04:30:26:13:c0:12:b2: 7d:5b:f9:26:bb:9c:ee:d5:91:69:a3:02:a3:76:38:28:0c:b9: 0b:59:e6:01 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICE/gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJFQ0VFNEMzNTJDOTY3 RTA0RDk1MjY1MjJCMDdBNUY3OTk5NTlEQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtzFLtp9etw8ZYHmeFls5UTcesDQPFMD2SAG3MVf+BhlDfrPK/ uOPTV5WypZNOR9KkyX5GIPLnUrLSWGDjpIl65o2+7ibQWsRE8ZFpK/iVtcQES+pE nzLS261Cyl307YczeYDIxO63d+KwURdAveQUKJL11UgaqOQNbUbhvK4KHXTpxL0e 601rf76ToyYLhLEdrIAwis8pSkCVMikVPK86iCHGR5U6VtBMrzavtNwcPQawBK5n yvq9ttVX4a2G1z3BXxAXBXUkMgWAWlx4xR25Xx4vD9zA7jtpCTs0vNPHdWqHcn98 l85OuZ/TpX9/devPNkI1oTM459RdM4zOiFgjAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQULs7kw1LJZ+BNlSZSKwel95mVncAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0xzN2t3MUxKWi1CTmxTWlNLd2VsOTVt Vm5jQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDe+jANBgkq hkiG9w0BAQsFAAOCAQEAYi/BYkUdg2eWMsatYGJBp23X/SJEQQMwQFLj+H0I5QAe 4aiGojFoGpGqpc2jtFlU07Z0aJv4u2CrkvZiY2Qjwt17Rk4BrptV2pURtoMdMFlX 7TWDiuufOZTC1BW0Ud9wg9OYcwXJ9k0QgazMNwxYs+zJEmElOSJDGSv2a43KhmkY 9BYtSKbHG771vJxLMgN6JyJKo5V1fSdorH5anJZfQp/LtXR2mxWt3bughB5x2CdY zyG7TFjw4sJ1T4qvRj+DCkWdvWfFWE6MukmpDXBb+P6vQbFxDzgqAkCP9/WQzSkG 4IAEMCYTwBKyfVv5Jruc7tWRaaMCo3Y4KAy5C1nmAQ== -----END CERTIFICATE-----Generated at Thu Nov 6 00:34:15 2025 by rpki-client