$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mcEfOHLhhR_GahOwhR8AJA9DdCs.roa File: mcEfOHLhhR_GahOwhR8AJA9DdCs.roa (raw, json) Hash identifier: qqPw4t0aSE8b5ZH1ur96CE8BRUzMDbEnqvpGoPu6RQQ= Subject key identifier: 99:C1:1F:38:72:E1:85:1F:C6:6A:13:B0:85:1F:00:24:0F:43:74:2B Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13E3 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mcEfOHLhhR_GahOwhR8AJA9DdCs.roa Signing time: Fri 22 Aug 2025 08:59:51 +0000 ROA not before: Fri 22 Aug 2025 08:59:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131142 IP address blocks: 223.22.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5091 (0x13e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=99C11F3872E1851FC66A13B0851F00240F43742B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:f9:ed:b3:dd:41:d7:08:98:b5:7e:7f:1c: f4:f7:d5:a7:5d:6a:28:07:df:0e:bf:11:b8:e8:f1: b8:00:3b:b7:4c:37:d1:a5:b3:e9:57:8f:45:e3:f8: 8f:fe:0c:99:3e:b5:1a:6e:ef:13:a8:cf:b8:4d:79: 30:a3:1f:15:ee:89:34:59:ac:43:be:ce:db:75:e2: b3:b2:53:e7:37:6e:a1:32:39:77:ce:7d:11:2c:30: a3:bf:1b:57:85:c1:f4:f0:14:e3:f4:9d:5f:3d:82: 12:4b:73:44:55:af:97:0f:27:6b:c2:df:bd:cd:ed: 16:89:a8:0f:04:89:3f:9d:84:26:b1:33:17:1a:44: 7f:82:98:78:9e:e0:1f:94:f6:0b:44:e0:27:ee:29: 4c:65:77:17:ce:d5:92:23:33:05:2b:02:44:eb:bf: 4d:da:79:cc:65:ea:62:e7:f6:ff:82:2d:a0:4e:31: 38:8f:8c:1a:dc:4e:72:e5:ef:80:e0:1f:90:09:88: 24:bd:93:68:a6:7a:c3:d6:1d:e6:14:44:bf:6c:32: 18:59:c2:3e:25:aa:ac:15:bf:68:53:42:31:0b:88: 0e:18:e9:a4:b1:ef:fe:9d:bc:d9:51:a5:4e:d1:bc: f3:2f:45:35:f9:67:cb:ca:1c:a2:f9:ac:63:26:65: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:1F:38:72:E1:85:1F:C6:6A:13:B0:85:1F:00:24:0F:43:74:2B X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mcEfOHLhhR_GahOwhR8AJA9DdCs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.254.0/24 Signature Algorithm: sha256WithRSAEncryption 37:60:4e:dd:43:bc:55:e8:b8:7e:47:25:d4:2a:99:d5:94:e9: a2:fe:c1:10:a1:9d:d0:8d:d1:47:9a:53:4f:39:39:72:32:9d: da:2c:57:db:08:46:ff:db:d2:90:ff:5a:24:76:79:b8:ae:3c: 3c:bf:93:5e:86:17:bf:48:d7:ae:65:92:fd:17:84:19:4b:f5: 2a:0e:93:f4:fd:c6:bd:d4:63:03:d8:25:78:25:15:d1:39:ce: d5:76:46:44:68:e0:5d:cb:96:f4:59:5f:15:6c:93:20:61:6f: b2:16:83:67:51:52:42:50:43:e8:ab:7b:01:10:87:69:97:d1: 57:14:08:0f:c1:58:fa:d5:d3:51:38:1b:d0:d0:43:74:72:bc: fd:c9:7c:00:0a:b6:ca:05:6f:21:ef:f3:8e:2d:c7:eb:74:02: d2:c1:46:93:51:a9:da:73:dc:89:48:60:5e:ba:d6:bb:1c:f0: ea:2d:79:88:e9:6c:2b:ab:1d:33:3b:1d:93:74:e1:ba:16:de: 50:9d:b0:a2:c1:7f:8e:be:dd:17:c5:71:fd:dc:77:3a:1a:32: cd:f9:9e:ff:a6:de:4d:43:1e:06:fe:f9:c0:de:e6:2d:ab:b4: 04:8c:eb:38:f7:a7:c7:3d:e9:35:3a:43:5f:7f:1c:39:5b:a5: 0e:97:b1:5f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE+MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk5QzExRjM4NzJFMTg1 MUZDNjZBMTNCMDg1MUYwMDI0MEY0Mzc0MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbf/nts91B1wiYtX5/HPT31addaigH3w6/Ebjo8bgAO7dMN9Gl s+lXj0Xj+I/+DJk+tRpu7xOoz7hNeTCjHxXuiTRZrEO+ztt14rOyU+c3bqEyOXfO fREsMKO/G1eFwfTwFOP0nV89ghJLc0RVr5cPJ2vC373N7RaJqA8EiT+dhCaxMxca RH+CmHie4B+U9gtE4CfuKUxldxfO1ZIjMwUrAkTrv03aecxl6mLn9v+CLaBOMTiP jBrcTnLl74DgH5AJiCS9k2imesPWHeYURL9sMhhZwj4lqqwVv2hTQjELiA4Y6aSx 7/6dvNlRpU7RvPMvRTX5Z8vKHKL5rGMmZRYRAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUmcEfOHLhhR/GahOwhR8AJA9DdCswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL21jRWZPSExoaFJfR2FoT3doUjhBSkE5 RGRDcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADfFv4wDQYJ KoZIhvcNAQELBQADggEBADdgTt1DvFXouH5HJdQqmdWU6aL+wRChndCN0UeaU085 OXIyndosV9sIRv/b0pD/WiR2ebiuPDy/k16GF79I165lkv0XhBlL9SoOk/T9xr3U YwPYJXglFdE5ztV2RkRo4F3LlvRZXxVskyBhb7IWg2dRUkJQQ+irewEQh2mX0VcU CA/BWPrV01E4G9DQQ3RyvP3JfAAKtsoFbyHv844tx+t0AtLBRpNRqdpz3IlIYF66 1rsc8OoteYjpbCurHTM7HZN04boW3lCdsKLBf46+3RfFcf3cdzoaMs35nv+m3k1D Hgb++cDe5i2rtASM6zj3p8c96TU6Q19/HDlbpQ6XsV8= -----END CERTIFICATE-----Generated at Wed Nov 5 21:44:56 2025 by rpki-client