$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_ccORBS5h97TKJ-aMqEUMdAJQYM.roa File: _ccORBS5h97TKJ-aMqEUMdAJQYM.roa (raw, json) Hash identifier: f8P1BcnyzXU1xSdrT1Jwpqrc2Swe7AwTymCUXJo7uj4= Subject key identifier: FD:C7:0E:44:14:B9:87:DE:D3:28:9F:9A:32:A1:14:31:D0:09:41:83 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13CF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_ccORBS5h97TKJ-aMqEUMdAJQYM.roa Signing time: Fri 22 Aug 2025 08:59:46 +0000 ROA not before: Fri 22 Aug 2025 08:59:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131601 IP address blocks: 210.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5071 (0x13cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FDC70E4414B987DED3289F9A32A11431D0094183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:69:72:25:5d:a3:ee:f5:39:87:70:bb:81: 24:67:35:9e:70:d2:93:5b:08:07:d0:97:3d:d4:cc: 56:61:06:78:04:27:84:91:18:fe:70:a7:72:68:2a: c7:ce:d5:4b:b3:b6:b4:10:bf:f4:8c:13:39:c9:0c: d1:66:fe:7f:d1:e4:c8:d4:24:1e:f1:c2:35:78:c8: 2a:a2:c7:42:fd:6a:2b:ce:46:d0:3b:15:b1:8d:0e: fd:b8:5c:44:15:e3:1a:99:7e:5c:42:ee:c8:67:bc: 8d:c5:d9:bd:c8:39:45:27:93:3c:78:88:9f:de:04: 5b:39:14:ad:98:a2:a9:b4:a4:b5:d5:ff:6c:87:bb: 15:26:51:d5:a3:b4:2e:d2:35:95:66:ff:93:93:5e: a1:58:4e:a8:f0:3b:bb:15:41:09:c7:a8:2b:9e:5a: fe:ff:bb:54:d0:95:8c:97:de:03:70:e7:12:c6:ee: 32:09:2c:df:e1:d9:81:2c:73:f5:1f:86:4d:30:09: d8:6a:e1:88:5f:a1:9a:46:2c:8c:27:4f:c0:08:81: fd:e7:00:5b:03:c9:4a:bd:60:be:ff:46:1c:46:d9: f5:8f:8f:56:8e:c9:b8:d9:4f:51:eb:61:fe:8a:97: da:b1:e2:09:3e:af:dc:5a:ee:75:02:37:0b:df:bb: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C7:0E:44:14:B9:87:DE:D3:28:9F:9A:32:A1:14:31:D0:09:41:83 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_ccORBS5h97TKJ-aMqEUMdAJQYM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.120.0/24 Signature Algorithm: sha256WithRSAEncryption 73:cf:1f:e0:4c:8d:6c:8a:67:1f:ea:cb:22:da:bd:1e:1c:e8: 4f:89:da:d1:60:6a:b9:e8:cc:a6:84:ec:9c:b1:c2:25:b9:e0: 29:ef:1b:07:6e:a3:1f:a6:04:b9:7b:30:b0:71:db:94:99:b2: 82:7c:5d:78:b3:68:0b:bf:1e:85:24:f5:1b:84:fc:14:8e:ad: f9:19:c9:e8:8f:1e:45:72:ee:54:b0:6c:fe:88:90:67:33:d1: 46:8a:21:52:8d:6c:36:9a:52:3d:d9:91:b6:ae:b1:d8:1e:2b: 56:63:ae:62:e7:09:c8:e8:f8:e8:2d:b6:ee:86:e0:7b:d9:b9: 05:79:2d:e1:5a:7d:26:89:08:e7:2f:a7:78:40:94:e1:5c:0e: 65:f1:e3:5e:24:5a:0e:3b:03:65:78:17:fd:41:fa:64:b4:d1: e3:e6:e0:aa:08:db:e9:01:e1:3c:ed:95:32:f5:ef:24:85:36: 47:6f:4f:3c:51:72:20:61:c8:32:6a:13:56:29:ef:25:3d:5f: e6:53:db:a8:a0:58:67:dd:6a:cf:85:d1:4c:e3:5f:1a:d2:56: 1b:64:e6:93:02:4d:ab:f8:27:89:85:b7:02:c1:8e:66:95:78: be:cc:93:26:3d:21:79:80:6b:b2:a4:8e:41:12:ce:3b:e2:3b: 76:75:aa:42 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZEQzcwRTQ0MTRCOTg3 REVEMzI4OUY5QTMyQTExNDMxRDAwOTQxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/RGlyJV2j7vU5h3C7gSRnNZ5w0pNbCAfQlz3UzFZhBngEJ4SR GP5wp3JoKsfO1UuztrQQv/SMEznJDNFm/n/R5MjUJB7xwjV4yCqix0L9aivORtA7 FbGNDv24XEQV4xqZflxC7shnvI3F2b3IOUUnkzx4iJ/eBFs5FK2Yoqm0pLXV/2yH uxUmUdWjtC7SNZVm/5OTXqFYTqjwO7sVQQnHqCueWv7/u1TQlYyX3gNw5xLG7jIJ LN/h2YEsc/Ufhk0wCdhq4YhfoZpGLIwnT8AIgf3nAFsDyUq9YL7/RhxG2fWPj1aO ybjZT1HrYf6Kl9qx4gk+r9xa7nUCNwvfu/rXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU/ccORBS5h97TKJ+aMqEUMdAJQYMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19jY09SQlM1aDk3VEtKLWFNcUVVTWRB SlFZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOngwDQYJ KoZIhvcNAQELBQADggEBAHPPH+BMjWyKZx/qyyLavR4c6E+J2tFgarnozKaE7Jyx wiW54CnvGwduox+mBLl7MLBx25SZsoJ8XXizaAu/HoUk9RuE/BSOrfkZyeiPHkVy 7lSwbP6IkGcz0UaKIVKNbDaaUj3ZkbausdgeK1ZjrmLnCcjo+Ogttu6G4HvZuQV5 LeFafSaJCOcvp3hAlOFcDmXx414kWg47A2V4F/1B+mS00ePm4KoI2+kB4TztlTL1 7ySFNkdvTzxRciBhyDJqE1Yp7yU9X+ZT26igWGfdas+F0UzjXxrSVhtk5pMCTav4 J4mFtwLBjmaVeL7MkyY9IXmAa7KkjkESzjviO3Z1qkI= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:33 2025 by rpki-client