$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/VM3cK59Lfo9RbeiOOvD2MR6iN7A.roa File: VM3cK59Lfo9RbeiOOvD2MR6iN7A.roa (raw, json) Hash identifier: y6eC7Epa0gtHxkSWsuEyzXwL6Bz4O30NISxow98QW1w= Subject key identifier: 54:CD:DC:2B:9F:4B:7E:8F:51:6D:E8:8E:3A:F0:F6:31:1E:A2:37:B0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13F0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VM3cK59Lfo9RbeiOOvD2MR6iN7A.roa Signing time: Fri 22 Aug 2025 08:59:54 +0000 ROA not before: Fri 22 Aug 2025 08:59:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 223.22.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5104 (0x13f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=54CDDC2B9F4B7E8F516DE88E3AF0F6311EA237B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:5a:ff:1d:0d:25:79:04:6c:65:48:9f:ca: 97:41:f4:61:d7:8c:5e:e0:67:77:a8:a8:fe:48:24: f0:1e:5e:70:d5:b0:bf:56:61:b7:85:a7:52:b2:39: 00:03:d4:fa:f3:7a:39:cb:2f:2c:03:b7:f1:89:e7: 01:74:81:29:9b:1c:a3:ce:de:15:e9:ad:b9:da:02: fe:83:f9:ee:16:37:e5:80:3d:94:1f:bf:10:1a:cb: f5:63:67:1e:b3:5f:c4:57:56:8f:3a:e7:4c:f2:11: b8:57:d6:82:11:73:af:3f:dd:d8:18:41:11:f7:55: 7b:0d:46:41:67:80:e9:77:66:d4:71:fb:de:0d:4b: 0e:f1:3d:fb:95:83:dd:17:ea:25:b0:5d:bf:31:f8: 10:89:f8:09:f1:cc:16:4b:67:7e:e6:b2:28:89:98: 30:b6:3a:d1:ee:8e:6c:95:af:d6:70:5d:99:b5:64: fa:0e:16:50:53:be:18:08:17:25:3f:5c:7d:95:33: e1:1b:da:e5:9a:11:3a:59:10:b6:3c:37:df:f9:47: 88:44:cd:84:fe:4e:60:61:9b:6b:30:2e:9c:79:99: e2:1f:ce:17:d0:39:ca:19:08:27:09:8b:ed:46:a8: 60:a7:b5:79:63:50:95:13:16:9b:84:3a:e3:06:db: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CD:DC:2B:9F:4B:7E:8F:51:6D:E8:8E:3A:F0:F6:31:1E:A2:37:B0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VM3cK59Lfo9RbeiOOvD2MR6iN7A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.0.0/18 Signature Algorithm: sha256WithRSAEncryption 9a:7d:29:a9:47:ec:32:4c:e1:30:12:be:d1:55:92:7e:57:ec: d9:fd:d0:6e:c8:15:40:5d:06:ef:62:02:d6:39:4d:8d:7e:38: 8e:8a:4d:e4:8e:e5:a4:8e:66:6c:07:41:a7:b7:c9:39:93:97: 9f:70:3b:75:fb:85:5a:b2:51:c4:db:15:02:df:fa:53:5f:cd: 54:77:fe:0f:e9:6d:0b:91:ac:b9:55:01:42:0d:5d:33:91:3a: c1:2f:a3:bf:54:c1:66:9b:4e:76:0a:f5:be:02:38:00:03:77: b8:1a:33:34:7e:1a:fc:a4:51:8c:9f:01:c1:1d:8c:9a:f0:91: 23:6d:b4:12:c0:1c:e8:03:a9:e1:57:0e:1a:47:56:f1:5b:8b: bd:c8:6d:a9:d4:8b:4c:0b:2e:da:30:e7:d0:25:8a:5c:ef:36: 42:33:80:11:26:35:ec:b9:9e:be:3d:ce:25:ee:ad:2f:2b:54: 8a:dd:f7:b6:6c:1f:a8:58:4f:a2:f4:ee:2a:44:5d:c4:b7:b6: 2b:f1:53:14:d7:d4:23:64:6c:c2:07:b8:30:ac:43:45:05:df: 7d:e1:7d:8c:c8:43:63:40:af:b8:f7:42:27:c7:1c:bc:91:22: 36:87:b5:e3:80:16:a2:06:43:9b:6c:89:62:2c:9a:a5:6f:d8: ee:f2:cd:ff -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU0Q0REQzJCOUY0QjdF OEY1MTZERTg4RTNBRjBGNjMxMUVBMjM3QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGH1r/HQ0leQRsZUifypdB9GHXjF7gZ3eoqP5IJPAeXnDVsL9W YbeFp1KyOQAD1PrzejnLLywDt/GJ5wF0gSmbHKPO3hXprbnaAv6D+e4WN+WAPZQf vxAay/VjZx6zX8RXVo8650zyEbhX1oIRc68/3dgYQRH3VXsNRkFngOl3ZtRx+94N Sw7xPfuVg90X6iWwXb8x+BCJ+AnxzBZLZ37msiiJmDC2OtHujmyVr9ZwXZm1ZPoO FlBTvhgIFyU/XH2VM+Eb2uWaETpZELY8N9/5R4hEzYT+TmBhm2swLpx5meIfzhfQ OcoZCCcJi+1GqGCntXljUJUTFpuEOuMG238VAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUVM3cK59Lfo9RbeiOOvD2MR6iN7AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1ZNM2NLNTlMZm85UmJlaU9PdkQyTVI2 aU43QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbfFgAwDQYJ KoZIhvcNAQELBQADggEBAJp9KalH7DJM4TASvtFVkn5X7Nn90G7IFUBdBu9iAtY5 TY1+OI6KTeSO5aSOZmwHQae3yTmTl59wO3X7hVqyUcTbFQLf+lNfzVR3/g/pbQuR rLlVAUINXTOROsEvo79UwWabTnYK9b4COAADd7gaMzR+GvykUYyfAcEdjJrwkSNt tBLAHOgDqeFXDhpHVvFbi73IbanUi0wLLtow59AlilzvNkIzgBEmNey5nr49ziXu rS8rVIrd97ZsH6hYT6L07ipEXcS3tivxUxTX1CNkbMIHuDCsQ0UF333hfYzIQ2NA r7j3QifHHLyRIjaHteOAFqIGQ5tsiWIsmqVv2O7yzf8= -----END CERTIFICATE-----Generated at Thu Nov 6 00:34:11 2025 by rpki-client