$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/o3iKVEx1mVlXKJNRRch6zDRNDXg.roa File: o3iKVEx1mVlXKJNRRch6zDRNDXg.roa (raw, json) Hash identifier: Hg9rPK4l6zaOOBTJE4NJAiuDRcAIfNptuCfSOB9Y34w= Subject key identifier: A3:78:8A:54:4C:75:99:59:57:28:93:51:45:C8:7A:CC:34:4D:0D:78 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13D4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/o3iKVEx1mVlXKJNRRch6zDRNDXg.roa Signing time: Fri 22 Aug 2025 08:59:47 +0000 ROA not before: Fri 22 Aug 2025 08:59:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 203.79.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5076 (0x13d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A3788A544C7599595728935145C87ACC344D0D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:1a:6f:fd:65:6b:e6:93:44:34:a7:d2:c3: 48:95:7a:d6:f6:da:a9:0c:46:6d:6a:45:f4:7c:bf: 68:c6:ae:b5:b7:c8:30:21:df:82:6f:18:83:1d:33: 59:9d:af:29:ac:36:e3:53:10:25:ff:51:a3:d9:a8: bd:58:12:b2:e7:18:a0:01:8c:b3:86:11:d7:9d:02: fa:9a:64:02:3a:6a:7b:81:a6:a0:6e:7c:00:5c:3d: 97:b5:49:19:c4:95:44:61:5b:cc:aa:3c:0c:ac:fa: e6:7c:c1:03:45:ad:2d:67:50:d9:79:ff:59:5e:dd: 3f:30:5b:ec:ab:1c:d9:f2:71:29:03:ae:85:ed:f4: b5:5f:bd:00:81:94:0b:58:3d:1f:e0:9b:92:30:e9: 1b:0b:db:2d:d5:91:09:a8:97:13:33:30:12:ed:62: b6:7e:57:95:33:56:5e:77:7c:00:f2:7c:cd:e3:aa: 21:f4:6e:2f:d6:18:68:4f:ea:8c:ab:43:86:4a:8f: bb:40:02:fd:63:45:85:82:1f:58:24:fc:07:78:bb: 0c:44:bb:e7:da:eb:4a:18:ac:d0:93:3a:d3:26:92: 0f:e5:17:e7:73:a6:62:bc:3b:97:b8:c6:b7:10:b3: c4:da:ea:80:1f:60:e3:2f:15:7f:52:27:42:47:02: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:78:8A:54:4C:75:99:59:57:28:93:51:45:C8:7A:CC:34:4D:0D:78 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/o3iKVEx1mVlXKJNRRch6zDRNDXg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.192.0/18 Signature Algorithm: sha256WithRSAEncryption 70:30:21:3b:b6:6d:10:e9:32:f5:fe:65:ca:ad:10:6a:bb:01: ff:ba:3d:c3:58:53:36:d4:6f:c7:b9:6e:63:9e:39:1c:20:e9: 5a:7b:1a:98:a3:01:ae:38:6b:e6:4f:24:2a:a6:fc:ab:34:68: 72:6a:e9:54:21:d5:0b:ac:af:57:df:c3:61:43:7f:40:21:13: 3f:bf:b6:f6:0f:d3:d6:41:31:58:e1:f9:6b:a6:fe:bd:2e:7a: 40:24:97:ed:94:52:82:0d:a5:ad:c5:4b:53:7a:76:96:d2:71: bd:6e:d5:fe:41:f3:4e:7c:a6:ec:03:5e:8f:ef:7e:66:16:dc: 4d:dc:4f:a4:c9:ad:b7:f9:63:ae:ae:c6:ab:96:ae:e5:25:ca: 64:e7:12:ed:bb:6d:3d:49:bb:c9:7d:78:7a:1c:ad:a7:82:82: 80:1e:04:54:48:b3:53:f8:2f:8c:df:bf:89:78:5c:b5:11:c9: ab:e6:10:3f:04:75:25:d4:3e:c0:a3:ac:fc:8e:55:37:c5:7a: dd:b3:7f:7b:a1:3b:e4:bb:d9:7e:34:21:9a:cc:5e:51:ae:8e: 95:ef:d6:0e:1c:03:3c:11:55:90:8f:bd:a7:b2:ed:cc:b0:f0: 13:7b:b0:e0:ea:6a:c4:03:89:85:ab:1f:45:dd:15:4f:2e:97: d1:32:84:3d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEzNzg4QTU0NEM3NTk5 NTk1NzI4OTM1MTQ1Qzg3QUNDMzQ0RDBENzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxmhpv/WVr5pNENKfSw0iVetb22qkMRm1qRfR8v2jGrrW3yDAh 34JvGIMdM1mdrymsNuNTECX/UaPZqL1YErLnGKABjLOGEdedAvqaZAI6anuBpqBu fABcPZe1SRnElURhW8yqPAys+uZ8wQNFrS1nUNl5/1le3T8wW+yrHNnycSkDroXt 9LVfvQCBlAtYPR/gm5Iw6RsL2y3VkQmolxMzMBLtYrZ+V5UzVl53fADyfM3jqiH0 bi/WGGhP6oyrQ4ZKj7tAAv1jRYWCH1gk/Ad4uwxEu+fa60oYrNCTOtMmkg/lF+dz pmK8O5e4xrcQs8Ta6oAfYOMvFX9SJ0JHAqc/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUo3iKVEx1mVlXKJNRRch6zDRNDXgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL28zaUtWRXgxbVZsWEtKTlJSY2g2ekRS TkRYZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbLT8AwDQYJ KoZIhvcNAQELBQADggEBAHAwITu2bRDpMvX+ZcqtEGq7Af+6PcNYUzbUb8e5bmOe ORwg6Vp7GpijAa44a+ZPJCqm/Ks0aHJq6VQh1Qusr1ffw2FDf0AhEz+/tvYP09ZB MVjh+Wum/r0uekAkl+2UUoINpa3FS1N6dpbScb1u1f5B8058puwDXo/vfmYW3E3c T6TJrbf5Y66uxquWruUlymTnEu27bT1Ju8l9eHocraeCgoAeBFRIs1P4L4zfv4l4 XLURyavmED8EdSXUPsCjrPyOVTfFet2zf3uhO+S72X40IZrMXlGujpXv1g4cAzwR VZCPvaey7cyw8BN7sODqasQDiYWrH0XdFU8ul9EyhD0= -----END CERTIFICATE-----Generated at Thu Nov 6 00:34:15 2025 by rpki-client