$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/N8WyAPQZm16CQ5yXwqdjS4eFF-4.roa File: N8WyAPQZm16CQ5yXwqdjS4eFF-4.roa (raw, json) Hash identifier: 0CTwoedTrKlk5m3OhoJoe2+r4zDv5wP5aPlXsI0smGc= Subject key identifier: 37:C5:B2:00:F4:19:9B:5E:82:43:9C:97:C2:A7:63:4B:87:85:17:EE Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 144D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N8WyAPQZm16CQ5yXwqdjS4eFF-4.roa Signing time: Fri 22 Aug 2025 09:00:17 +0000 ROA not before: Fri 22 Aug 2025 09:00:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131591 IP address blocks: 223.23.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5197 (0x144d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=37C5B200F4199B5E82439C97C2A7634B878517EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:a7:6d:4f:21:b5:e8:42:57:5b:22:53:3e: 67:cf:53:46:58:ab:2d:e0:2c:04:fa:72:0f:8d:c3: ef:6e:24:7d:51:d4:b2:e0:ef:e9:d7:fa:70:16:c3: 3f:c5:67:a9:d1:f7:6d:52:36:64:a7:f0:bc:ad:eb: 68:d8:ec:05:d8:1a:4a:e2:59:31:4b:94:12:1f:28: dd:49:c9:7b:71:b3:5f:c1:09:ab:b7:ff:a4:9c:a4: ba:06:f1:8d:cb:45:1f:9a:08:3d:f2:a0:ef:2a:93: 5a:61:c9:17:0d:19:8b:c7:7e:2d:80:23:41:29:fc: 40:cf:1d:57:84:1b:71:d5:8a:37:a8:ca:a6:31:eb: b3:73:ea:b6:1d:a3:80:fa:6d:60:39:b8:49:77:98: 1d:8a:86:24:3b:51:51:e9:51:ce:c4:77:85:09:2c: 64:32:1b:ca:1d:b3:56:9a:42:d5:3e:bd:bf:14:70: a4:77:ab:f8:4c:a6:73:9a:11:90:ec:68:ee:4c:ca: 49:48:fe:05:87:c3:25:7b:15:d5:dd:6f:7c:73:c6: 93:66:34:2d:1f:41:db:f0:42:69:d8:f1:d9:c6:d7: 81:50:44:8d:7e:c8:1e:9b:b0:db:11:6f:d0:ee:dc: dc:7d:01:81:22:f7:14:8d:0c:ee:ba:f3:0e:28:72: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C5:B2:00:F4:19:9B:5E:82:43:9C:97:C2:A7:63:4B:87:85:17:EE X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N8WyAPQZm16CQ5yXwqdjS4eFF-4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.23.0.0/16 Signature Algorithm: sha256WithRSAEncryption 25:9a:d8:a5:6c:d1:63:00:ee:e3:e6:eb:70:34:08:73:47:51: cb:c7:6f:99:b1:81:28:e9:3a:c4:89:db:b7:f2:9c:33:8d:3f: c9:5a:b6:bd:ab:93:fe:f1:33:38:33:84:0a:cf:3e:a7:b3:a3: 4f:63:7b:be:3e:6c:59:34:a8:6a:85:ab:18:ff:20:0d:16:2d: b0:24:d3:be:bc:0a:b4:47:07:bc:11:06:a7:2c:09:a4:2e:ff: 5d:b7:95:ad:37:3a:42:c4:54:ad:96:78:f8:1a:f5:ab:55:9a: 36:74:2f:ab:da:78:20:89:27:5f:35:3e:19:f5:5c:5b:34:03: 90:c9:c0:d2:44:f5:51:63:c1:d2:0b:b9:c5:6c:d4:01:33:9c: d9:5b:e3:c5:b9:32:d5:66:71:24:55:88:dc:66:07:53:f3:9b: c0:9e:79:5e:a0:2a:f0:64:de:06:b6:b9:2c:78:d8:dd:dd:7c: 9e:d6:65:70:1e:f7:0e:c0:b4:ae:a7:04:37:18:1a:bd:83:99: 0e:f9:d4:51:a8:06:ad:2c:c5:79:6a:ee:26:da:ca:c2:ab:e8: 42:4f:69:98:6c:3f:02:04:df:d2:ff:1e:fb:50:72:69:29:cf: 84:2d:93:ff:7c:ab:18:96:2a:4d:9e:a6:9b:89:02:b9:81:e5: de:12:6e:6a -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICFE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3QzVCMjAwRjQxOTlC NUU4MjQzOUM5N0MyQTc2MzRCODc4NTE3RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMkqdtTyG16EJXWyJTPmfPU0ZYqy3gLAT6cg+Nw+9uJH1R1LLg 7+nX+nAWwz/FZ6nR921SNmSn8Lyt62jY7AXYGkriWTFLlBIfKN1JyXtxs1/BCau3 /6ScpLoG8Y3LRR+aCD3yoO8qk1phyRcNGYvHfi2AI0Ep/EDPHVeEG3HVijeoyqYx 67Nz6rYdo4D6bWA5uEl3mB2KhiQ7UVHpUc7Ed4UJLGQyG8ods1aaQtU+vb8UcKR3 q/hMpnOaEZDsaO5MyklI/gWHwyV7FdXdb3xzxpNmNC0fQdvwQmnY8dnG14FQRI1+ yB6bsNsRb9Du3Nx9AYEi9xSNDO668w4oct0BAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUN8WyAPQZm16CQ5yXwqdjS4eFF+4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL044V3lBUFFabTE2Q1E1eVh3cWRqUzRl RkYtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDfFzANBgkq hkiG9w0BAQsFAAOCAQEAJZrYpWzRYwDu4+brcDQIc0dRy8dvmbGBKOk6xInbt/Kc M40/yVq2vauT/vEzODOECs8+p7OjT2N7vj5sWTSoaoWrGP8gDRYtsCTTvrwKtEcH vBEGpywJpC7/XbeVrTc6QsRUrZZ4+Br1q1WaNnQvq9p4IIknXzU+GfVcWzQDkMnA 0kT1UWPB0gu5xWzUATOc2Vvjxbky1WZxJFWI3GYHU/ObwJ55XqAq8GTeBra5LHjY 3d18ntZlcB73DsC0rqcENxgavYOZDvnUUagGrSzFeWruJtrKwqvoQk9pmGw/AgTf 0v8e+1ByaSnPhC2T/3yrGJYqTZ6mm4kCuYHl3hJuag== -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:00 2025 by rpki-client