$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dq5-NodFjZ7qJPR1LW1avRL7PMk.roa File: dq5-NodFjZ7qJPR1LW1avRL7PMk.roa (raw, json) Hash identifier: Xagzc2UAMPlxDfkSOJ2b3LYQSWSVLHCa8AdXt0E2upA= Subject key identifier: 76:AE:7E:36:87:45:8D:9E:EA:24:F4:75:2D:6D:5A:BD:12:FB:3C:C9 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13A8 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dq5-NodFjZ7qJPR1LW1avRL7PMk.roa Signing time: Fri 22 Aug 2025 08:59:33 +0000 ROA not before: Fri 22 Aug 2025 08:59:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 203.79.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5032 (0x13a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=76AE7E3687458D9EEA24F4752D6D5ABD12FB3CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:ce:a2:59:bf:16:a8:cf:17:71:0a:d2:07: 29:e9:3f:a8:d0:d8:4a:8b:07:b9:d5:38:af:c7:7b: 68:1d:5b:cb:38:b0:76:fe:bf:f5:a2:bc:86:25:54: 9e:19:08:f2:5a:42:ae:20:39:e7:b3:9b:a3:1a:fa: 0d:47:3c:d4:bb:e2:a9:da:98:2f:8a:d4:28:90:83: 52:e8:a3:e4:28:f6:c8:ee:9d:eb:b1:7b:df:5d:36: b2:2b:4c:12:b1:b3:c6:18:aa:e0:d3:80:f4:1a:33: d6:c4:41:0a:19:b0:03:d2:7d:f9:79:5c:a9:b7:97: 14:bb:23:5c:b4:b4:f5:58:b1:5b:52:8d:db:5f:27: b0:b4:88:0a:bf:44:9e:fe:42:19:14:f1:02:35:e9: c3:85:a1:45:b0:e4:63:f8:87:21:8f:bb:3c:e1:80: 83:ed:bb:05:38:a8:8b:5e:d6:92:45:14:7a:79:f6: 2b:c9:3b:41:d6:39:11:4f:fd:94:a7:e9:c8:88:f6: 20:f2:fd:04:f3:14:4b:8e:9b:23:1d:da:26:0e:16: 5e:2c:43:4e:1c:29:f9:e6:15:bc:3e:e0:20:fa:ce: 5c:20:7c:c0:6b:72:3c:f4:33:ac:0d:79:1b:2a:24: 45:85:e3:0d:43:51:a1:28:11:f3:71:e0:52:8c:61: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AE:7E:36:87:45:8D:9E:EA:24:F4:75:2D:6D:5A:BD:12:FB:3C:C9 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dq5-NodFjZ7qJPR1LW1avRL7PMk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.248.0/21 Signature Algorithm: sha256WithRSAEncryption 22:c1:fa:2d:b7:b4:82:e8:58:76:6d:0a:01:35:f7:f6:f9:3a: c2:98:3e:b5:22:33:1a:59:06:13:00:b3:65:af:74:e0:92:f7: 18:5e:21:d8:3f:2e:d3:bf:e0:23:bc:12:61:56:3d:4c:a6:24: 4c:31:e6:6b:9e:54:e7:b4:21:85:96:46:3f:a8:78:e1:b7:1c: 50:3f:61:00:f5:6f:69:b9:db:54:a3:3f:4d:a7:5a:04:f2:50: ca:d9:40:a7:fc:67:51:06:37:7f:8b:32:b3:59:56:cb:03:7f: c2:ba:4e:1e:59:aa:e8:69:ec:e2:fb:0a:7c:e4:5f:88:ad:f6: 6a:a6:81:74:7b:cc:23:4f:e3:74:6e:4e:5e:cf:f4:5f:8e:6d: 0c:3d:56:fd:21:8d:f4:dc:07:e0:bb:31:c3:db:5e:5f:78:36: 4b:56:bc:22:5b:9e:4c:1b:1a:97:41:3e:de:f2:09:9b:a6:11: 50:c4:32:06:34:8b:98:3c:fe:95:ee:40:ab:f0:ae:f3:47:d4: e1:9e:3d:f3:9c:5e:4a:34:64:86:6c:28:34:b8:7b:15:3c:a8: 9d:9d:3a:b2:1e:68:58:44:e5:cf:1f:2c:bc:30:43:94:42:57: 96:0f:5a:db:83:da:a4:3c:70:92:13:44:5b:c6:f3:c2:28:d6: 2d:9e:7e:be -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc2QUU3RTM2ODc0NThE OUVFQTI0RjQ3NTJENkQ1QUJEMTJGQjNDQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNhc6iWb8WqM8XcQrSBynpP6jQ2EqLB7nVOK/He2gdW8s4sHb+ v/WivIYlVJ4ZCPJaQq4gOeezm6Ma+g1HPNS74qnamC+K1CiQg1Loo+Qo9sjuneux e99dNrIrTBKxs8YYquDTgPQaM9bEQQoZsAPSffl5XKm3lxS7I1y0tPVYsVtSjdtf J7C0iAq/RJ7+QhkU8QI16cOFoUWw5GP4hyGPuzzhgIPtuwU4qIte1pJFFHp59ivJ O0HWORFP/ZSn6ciI9iDy/QTzFEuOmyMd2iYOFl4sQ04cKfnmFbw+4CD6zlwgfMBr cjz0M6wNeRsqJEWF4w1DUaEoEfNx4FKMYVI1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUdq5+NodFjZ7qJPR1LW1avRL7PMkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RxNS1Ob2RGalo3cUpQUjFMVzFhdlJM N1BNay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPLT/gwDQYJ KoZIhvcNAQELBQADggEBACLB+i23tILoWHZtCgE19/b5OsKYPrUiMxpZBhMAs2Wv dOCS9xheIdg/LtO/4CO8EmFWPUymJEwx5mueVOe0IYWWRj+oeOG3HFA/YQD1b2m5 21SjP02nWgTyUMrZQKf8Z1EGN3+LMrNZVssDf8K6Th5Zquhp7OL7CnzkX4it9mqm gXR7zCNP43RuTl7P9F+ObQw9Vv0hjfTcB+C7McPbXl94NktWvCJbnkwbGpdBPt7y CZumEVDEMgY0i5g8/pXuQKvwrvNH1OGePfOcXko0ZIZsKDS4exU8qJ2dOrIeaFhE 5c8fLLwwQ5RCV5YPWtuD2qQ8cJITRFvG88Io1i2efr4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:45:15 2025 by rpki-client