$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/SmpA2ix_vrB5r_6RzrsQmpAg_UE.roa File: SmpA2ix_vrB5r_6RzrsQmpAg_UE.roa (raw, json) Hash identifier: ng5xNZ5kHEjWg9cr4bLnCszV8EQ2GYfZDghhqghZKCA= Subject key identifier: 4A:6A:40:DA:2C:7F:BE:B0:79:AF:FE:91:CE:BB:10:9A:90:20:FD:41 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1390 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/SmpA2ix_vrB5r_6RzrsQmpAg_UE.roa Signing time: Fri 22 Aug 2025 08:59:26 +0000 ROA not before: Fri 22 Aug 2025 08:59:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9674 IP address blocks: 27.240.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5008 (0x1390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4A6A40DA2C7FBEB079AFFE91CEBB109A9020FD41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:05:1a:d3:ef:47:a4:86:13:b7:fd:50:00: b5:f9:63:03:f0:0d:a0:5e:c8:d1:fb:3d:25:86:bb: 44:e9:7f:e8:c1:41:af:8b:d5:8b:87:ef:ac:cf:17: f0:34:bf:66:28:72:1e:da:0a:84:a1:8c:35:d6:33: 84:9b:d5:30:60:8b:da:5b:20:6b:6b:47:04:e2:46: 80:8f:84:82:4c:e2:55:94:01:65:a5:d2:f4:f0:d1: fd:8b:ac:45:23:5c:05:6e:17:b3:c4:46:f1:08:26: e1:dd:2f:f7:92:08:59:5a:0e:25:df:d5:30:5e:3c: cc:05:3d:8f:a3:44:3e:77:38:d7:0d:67:5f:70:7d: 30:8b:5e:14:34:85:85:bd:2b:42:96:d4:b6:e5:63: 9c:63:9d:14:93:3c:2d:05:3b:b4:b8:9d:84:11:c7: 74:dd:84:7c:e4:e4:9f:12:e7:71:3d:f7:d5:c8:2b: b7:07:69:68:37:66:63:6a:96:ed:76:b1:a6:c5:33: 10:90:d5:76:1d:c8:11:8c:bd:e6:b9:59:54:e6:00: 8f:91:1f:d9:bb:9a:37:e5:6e:6f:96:61:6f:b5:50: e4:0b:6b:4b:3c:eb:19:0f:9a:fc:48:a8:43:56:f1: d3:1d:7a:80:c5:aa:bf:c0:a8:51:17:ae:bd:c4:d4: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6A:40:DA:2C:7F:BE:B0:79:AF:FE:91:CE:BB:10:9A:90:20:FD:41 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/SmpA2ix_vrB5r_6RzrsQmpAg_UE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.240.0.0/13 Signature Algorithm: sha256WithRSAEncryption be:61:66:79:5c:77:aa:42:80:d0:3d:fb:9a:d4:a5:6d:e0:f4: 11:bc:b9:59:63:f9:2a:b2:bd:1a:61:f0:f8:f2:2b:ae:f9:85: 0c:22:dd:92:5d:e0:8b:3e:65:a2:62:e0:58:8f:0d:bb:e2:5d: ee:67:29:4f:44:c8:6a:d1:3e:c5:2a:36:72:fc:b5:3d:72:9c: 1b:b9:90:0e:bb:f3:6a:05:41:a7:56:30:6d:c0:d2:4c:d3:c4: 36:63:13:be:ed:94:07:21:c0:ed:4a:c4:6f:fe:3b:c6:36:92: 83:52:68:2f:1d:2f:af:61:73:ae:d5:6b:5c:29:15:ce:f8:b5: 43:78:42:61:eb:76:0d:d5:c6:f1:b1:fa:b9:dd:97:7e:95:b3: 3d:7c:ac:80:43:9f:97:d9:e0:ef:6e:c1:b7:a9:99:13:38:b0: f4:d4:20:0b:75:36:de:17:1c:54:a6:9b:ed:1d:f3:dd:70:e1: 61:dc:83:3f:df:fc:cb:1d:54:a8:63:27:7e:e7:f9:33:89:26: fc:61:e8:98:9e:c2:d8:eb:b3:0d:6d:ef:66:ba:4d:d1:a3:88: 86:7d:26:d8:fd:4e:29:ea:af:61:8e:fa:2e:3b:9b:90:10:18: 30:11:f1:f5:88:c4:9e:3c:4e:dd:d2:55:dc:85:7e:96:7f:97: e6:95:18:5c -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICE5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRBNkE0MERBMkM3RkJF QjA3OUFGRkU5MUNFQkIxMDlBOTAyMEZENDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFAgUa0+9HpIYTt/1QALX5YwPwDaBeyNH7PSWGu0Tpf+jBQa+L 1YuH76zPF/A0v2Yoch7aCoShjDXWM4Sb1TBgi9pbIGtrRwTiRoCPhIJM4lWUAWWl 0vTw0f2LrEUjXAVuF7PERvEIJuHdL/eSCFlaDiXf1TBePMwFPY+jRD53ONcNZ19w fTCLXhQ0hYW9K0KW1LblY5xjnRSTPC0FO7S4nYQRx3TdhHzk5J8S53E999XIK7cH aWg3ZmNqlu12sabFMxCQ1XYdyBGMvea5WVTmAI+RH9m7mjflbm+WYW+1UOQLa0s8 6xkPmvxIqENW8dMdeoDFqr/AqFEXrr3E1NGpAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUSmpA2ix/vrB5r/6RzrsQmpAg/UEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1NtcEEyaXhfdnJCNXJfNlJ6cnNRbXBB Z19VRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwMb8DANBgkq hkiG9w0BAQsFAAOCAQEAvmFmeVx3qkKA0D37mtSlbeD0Eby5WWP5KrK9GmHw+PIr rvmFDCLdkl3giz5lomLgWI8Nu+Jd7mcpT0TIatE+xSo2cvy1PXKcG7mQDrvzagVB p1YwbcDSTNPENmMTvu2UByHA7UrEb/47xjaSg1JoLx0vr2FzrtVrXCkVzvi1Q3hC Yet2DdXG8bH6ud2XfpWzPXysgEOfl9ng727Bt6mZEziw9NQgC3U23hccVKab7R3z 3XDhYdyDP9/8yx1UqGMnfuf5M4km/GHomJ7C2OuzDW3vZrpN0aOIhn0m2P1OKeqv YY76LjubkBAYMBHx9YjEnjxO3dJV3IV+ln+X5pUYXA== -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:32 2025 by rpki-client