$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Terva5pmHp-9-d1O35n-M49wKxk.roa File: Terva5pmHp-9-d1O35n-M49wKxk.roa (raw, json) Hash identifier: HPjScPRUg7QOSw3maqSBRLj3B9964QGFO7RBNcGgg7M= Subject key identifier: 4D:EA:EF:6B:9A:66:1E:9F:BD:F9:DD:4E:DF:99:FE:33:8F:70:2B:19 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13FA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Terva5pmHp-9-d1O35n-M49wKxk.roa Signing time: Fri 22 Aug 2025 08:59:57 +0000 ROA not before: Fri 22 Aug 2025 08:59:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131142 IP address blocks: 203.79.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5114 (0x13fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4DEAEF6B9A661E9FBDF9DD4EDF99FE338F702B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:05:f3:44:d0:b3:28:bb:73:ad:2c:16:e1: cd:1d:c3:bd:0a:40:e0:d0:ae:ab:81:38:6e:96:d9: 93:20:78:2b:94:45:b2:24:79:2b:2d:a1:38:fa:8c: 98:31:7f:c4:b0:3b:97:c6:8c:b4:af:c7:4c:41:80: eb:d2:45:9d:b9:d3:9e:15:1b:6b:78:16:f4:c4:d7: 36:24:85:77:cb:26:37:52:9b:db:cb:b8:a7:32:81: 8c:83:72:18:3e:90:52:22:3f:dc:e8:8e:e8:c9:69: 07:5c:3f:d2:4f:e4:06:10:4c:35:84:87:76:c3:6a: 06:1f:9e:49:dd:e5:9e:8f:50:be:52:81:49:4d:a2: 8d:0e:e0:68:94:a2:56:6f:96:b2:8f:ef:a3:be:a9: 73:c2:1a:80:96:de:c2:73:4b:ce:e6:70:38:4a:8d: ad:0e:fb:a4:e5:db:6f:ab:ae:27:56:90:1e:d9:51: 96:7a:b1:3d:d1:ee:b4:f5:86:bb:6f:83:ce:16:f5: 5d:8b:6c:01:ba:1a:2e:d4:15:17:2f:52:ea:ae:53: 60:73:7f:f3:64:51:17:c7:4f:a6:51:e7:1e:e9:83: f4:34:b4:4c:89:35:2d:80:92:7d:49:37:c4:84:d2: ec:53:31:5f:89:4d:a0:16:90:3a:23:16:78:a9:d8: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EA:EF:6B:9A:66:1E:9F:BD:F9:DD:4E:DF:99:FE:33:8F:70:2B:19 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Terva5pmHp-9-d1O35n-M49wKxk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.204.0/23 Signature Algorithm: sha256WithRSAEncryption 21:a9:c9:59:19:54:66:1a:bc:d0:7c:1f:48:d4:08:b8:a7:42: 0d:d7:7d:c7:d8:aa:58:17:56:10:01:64:f2:a2:03:3e:7c:b2: 03:89:1f:e1:48:55:18:2f:9b:58:c8:49:47:c0:2b:b8:b0:e9: 0c:09:d7:75:c0:81:2a:9a:db:ab:e2:ff:63:a3:54:96:de:e9: 2e:b1:8b:f1:a5:41:a4:ff:e1:ba:61:a8:84:31:b9:61:08:ae: 81:26:fe:9e:44:f0:c2:a5:83:16:05:6e:d2:41:38:09:19:ba: 17:da:41:1b:dd:8e:f4:a9:7a:bb:a0:a1:20:cb:30:c6:a4:88: 11:1e:2e:05:95:57:16:ef:d3:e8:6b:02:77:e0:be:9e:81:66: f8:9d:d1:9d:2c:9d:5e:a7:7b:37:f4:05:41:5e:91:d9:fc:d5: 8b:b8:a2:91:f7:2c:7c:6c:f5:1e:9a:6f:bb:c6:83:77:47:16: 42:0e:eb:1f:3d:a9:a3:4a:c6:5f:6a:b5:05:f0:1e:0e:67:b8: ba:53:61:a0:df:fb:de:53:ae:63:df:3e:cb:df:33:58:50:f9: bc:87:73:ae:d4:47:2c:a3:56:f4:c0:88:5d:2d:a6:32:0e:76: 38:7d:1d:46:b1:38:c3:d8:39:a4:21:4a:b7:80:b4:b9:ab:5f: 17:7a:67:03 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRERUFFRjZCOUE2NjFF OUZCREY5REQ0RURGOTlGRTMzOEY3MDJCMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSMAXzRNCzKLtzrSwW4c0dw70KQODQrquBOG6W2ZMgeCuURbIk eSstoTj6jJgxf8SwO5fGjLSvx0xBgOvSRZ25054VG2t4FvTE1zYkhXfLJjdSm9vL uKcygYyDchg+kFIiP9zojujJaQdcP9JP5AYQTDWEh3bDagYfnknd5Z6PUL5SgUlN oo0O4GiUolZvlrKP76O+qXPCGoCW3sJzS87mcDhKja0O+6Tl22+rridWkB7ZUZZ6 sT3R7rT1hrtvg84W9V2LbAG6Gi7UFRcvUuquU2Bzf/NkURfHT6ZR5x7pg/Q0tEyJ NS2Akn1JN8SE0uxTMV+JTaAWkDojFnip2KGjAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUTerva5pmHp+9+d1O35n+M49wKxkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1RlcnZhNXBtSHAtOS1kMU8zNW4tTTQ5 d0t4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLT8wwDQYJ KoZIhvcNAQELBQADggEBACGpyVkZVGYavNB8H0jUCLinQg3XfcfYqlgXVhABZPKi Az58sgOJH+FIVRgvm1jISUfAK7iw6QwJ13XAgSqa26vi/2OjVJbe6S6xi/GlQaT/ 4bphqIQxuWEIroEm/p5E8MKlgxYFbtJBOAkZuhfaQRvdjvSperugoSDLMMakiBEe LgWVVxbv0+hrAnfgvp6BZvid0Z0snV6nezf0BUFekdn81Yu4opH3LHxs9R6ab7vG g3dHFkIO6x89qaNKxl9qtQXwHg5nuLpTYaDf+95TrmPfPsvfM1hQ+byHc67URyyj VvTAiF0tpjIOdjh9HUaxOMPYOaQhSreAtLmrXxd6ZwM= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:07 2025 by rpki-client