$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/RoS5b8nrMBFR5k-B8ogC7PWmnRg.roa File: RoS5b8nrMBFR5k-B8ogC7PWmnRg.roa (raw, json) Hash identifier: v1srdbDW+gbUYEb2FWz9tqpDY8/Rqh0cvjuLgZXGR58= Subject key identifier: 46:84:B9:6F:C9:EB:30:11:51:E6:4F:81:F2:88:02:EC:F5:A6:9D:18 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 148B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RoS5b8nrMBFR5k-B8ogC7PWmnRg.roa Signing time: Fri 22 Aug 2025 09:00:32 +0000 ROA not before: Fri 22 Aug 2025 09:00:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 210.85.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5259 (0x148b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4684B96FC9EB301151E64F81F28802ECF5A69D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ef:7a:6c:ee:92:14:c9:9d:b7:ff:c0:e5:c7: 5e:e5:10:a1:a2:b8:75:fe:09:22:5f:49:92:d9:0e: 96:31:f4:08:c6:c4:b7:05:35:2a:f3:b6:e3:7c:34: 6f:07:b7:9e:ce:44:91:08:73:0a:e8:67:99:5d:58: 59:7a:fc:00:d4:a0:d4:c3:95:b4:f3:ac:ef:ca:01: a1:0d:71:09:25:b9:b5:c2:9c:51:06:cf:13:d1:42: ff:46:86:58:b4:8f:d4:de:6c:0b:4d:30:94:45:9a: 02:8d:8a:92:cc:bb:3b:76:9e:ab:98:90:cf:a6:40: 63:13:21:3d:95:13:60:6e:aa:2b:8a:ff:9a:52:74: 7b:82:09:35:23:ef:cf:18:15:f4:c1:a5:c4:fb:8c: cb:d3:45:19:cd:78:47:a0:a8:e5:55:ce:92:85:6d: 2d:ca:06:10:b1:86:6c:74:66:79:5e:94:f2:7f:de: 1f:2f:2b:27:54:3d:ba:94:c3:cd:0b:cc:f4:ac:a4: 7b:82:11:98:54:0e:9d:6d:14:c2:d6:58:05:b0:5b: ce:f2:42:10:df:bc:21:83:3f:b7:c6:8e:3c:97:b6: 2d:2b:77:53:bc:1e:81:16:1b:8b:f4:19:34:93:dd: 0c:2c:be:74:6b:6b:dc:94:41:27:de:52:99:03:e1: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:84:B9:6F:C9:EB:30:11:51:E6:4F:81:F2:88:02:EC:F5:A6:9D:18 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RoS5b8nrMBFR5k-B8ogC7PWmnRg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.85.0.0/22 Signature Algorithm: sha256WithRSAEncryption 52:7c:3d:bd:1e:e9:ee:4c:45:77:a0:7a:12:a3:fe:fd:71:f0: ce:13:9f:90:72:a3:a9:de:05:44:a9:c0:39:61:00:f3:ab:4f: aa:41:b6:8c:d7:38:93:43:13:23:d2:84:e1:1b:80:91:87:63: 32:48:dd:1f:4b:e6:76:6a:2b:88:8b:69:c8:e8:72:44:d7:07: 85:96:da:8f:b2:cb:4b:da:8a:ca:0f:43:d2:22:3c:88:cb:7d: 5a:2d:47:b9:57:0d:3f:a3:98:be:9a:c5:e5:5a:f4:6b:67:b5: b9:5d:be:5f:91:2b:d7:44:6a:78:19:3c:9d:21:e2:d5:ee:11: f9:f8:c3:ab:02:09:ec:a6:d2:0d:42:50:33:54:c2:94:41:72: 7e:1b:41:a1:27:68:08:74:eb:3b:91:ff:ac:43:3c:b8:cb:57: 51:1a:39:69:e1:d0:04:20:46:42:48:71:fe:2b:42:f5:4f:ab: d7:4c:99:4a:07:ce:0f:54:5d:71:9a:cd:43:8f:d4:99:a8:32: 50:bb:38:a6:ca:63:a0:42:6a:7b:92:32:91:cc:ed:0e:d8:9a: e2:00:b4:0f:82:02:32:ce:29:e7:f4:0f:26:b9:a3:76:24:38: a9:de:c6:da:c4:a4:95:4a:b2:98:65:b6:48:c8:e8:bb:44:2e: b1:30:c5:cb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ2ODRCOTZGQzlFQjMw MTE1MUU2NEY4MUYyODgwMkVDRjVBNjlEMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU73ps7pIUyZ23/8Dlx17lEKGiuHX+CSJfSZLZDpYx9AjGxLcF NSrztuN8NG8Ht57ORJEIcwroZ5ldWFl6/ADUoNTDlbTzrO/KAaENcQklubXCnFEG zxPRQv9Ghli0j9TebAtNMJRFmgKNipLMuzt2nquYkM+mQGMTIT2VE2BuqiuK/5pS dHuCCTUj788YFfTBpcT7jMvTRRnNeEegqOVVzpKFbS3KBhCxhmx0ZnlelPJ/3h8v KydUPbqUw80LzPSspHuCEZhUDp1tFMLWWAWwW87yQhDfvCGDP7fGjjyXti0rd1O8 HoEWG4v0GTST3QwsvnRra9yUQSfeUpkD4Sd1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQURoS5b8nrMBFR5k+B8ogC7PWmnRgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1JvUzViOG5yTUJGUjVrLUI4b2dDN1BX bW5SZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSVQAwDQYJ KoZIhvcNAQELBQADggEBAFJ8Pb0e6e5MRXegehKj/v1x8M4Tn5Byo6neBUSpwDlh APOrT6pBtozXOJNDEyPShOEbgJGHYzJI3R9L5nZqK4iLacjockTXB4WW2o+yy0va isoPQ9IiPIjLfVotR7lXDT+jmL6axeVa9Gtntbldvl+RK9dEangZPJ0h4tXuEfn4 w6sCCeym0g1CUDNUwpRBcn4bQaEnaAh06zuR/6xDPLjLV1EaOWnh0AQgRkJIcf4r QvVPq9dMmUoHzg9UXXGazUOP1JmoMlC7OKbKY6BCanuSMpHM7Q7YmuIAtA+CAjLO Kef0Dya5o3YkOKnextrEpJVKsphltkjI6LtELrEwxcs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:22:34 2025 by rpki-client