$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/kTYpKrfHkCdlEIQChFYkocC4-n0.roa File: kTYpKrfHkCdlEIQChFYkocC4-n0.roa (raw, json) Hash identifier: iiYIEnKElATm2iunbaQADEZjZtPRpmBizuTG3yB2ZG8= Subject key identifier: 91:36:29:2A:B7:C7:90:27:65:10:84:02:84:56:24:A1:C0:B8:FA:7D Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E0E Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/kTYpKrfHkCdlEIQChFYkocC4-n0.roa Signing time: Fri 22 Aug 2025 08:54:22 +0000 ROA not before: Fri 22 Aug 2025 08:54:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 117.56.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3598 (0xe0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 22 08:54:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9136292AB7C7902765108402845624A1C0B8FA7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:ff:9d:5b:57:7c:2d:c5:3b:50:ba:55:de: c9:4d:03:21:0b:dd:6c:ee:53:18:b3:c3:6d:29:75: 33:9f:28:b6:18:ad:60:bb:8b:0d:09:36:2b:38:08: ca:f1:9d:51:b3:ef:ef:64:76:20:1b:84:5b:6a:85: 8f:b2:5e:e3:fc:eb:21:82:5e:28:5d:85:a8:52:f7: 6a:d2:a4:15:0f:5e:12:41:47:b1:61:b4:c1:be:77: 70:45:89:0e:e1:c6:1e:0a:49:60:ef:ed:cf:5e:d9: 20:65:7a:36:c0:dd:e6:39:1c:65:6e:23:15:17:98: 83:7b:a7:f5:28:fe:6e:7a:92:a8:c3:b8:3d:ae:bc: b8:3a:4c:24:89:b2:88:32:e8:69:30:9d:7c:09:b5: af:5c:e6:b9:82:83:9d:99:b4:d4:c1:d6:be:40:23: 51:15:2f:33:1e:bd:ad:db:a5:0a:b1:a5:45:5b:a2: b9:ac:a8:a3:b1:33:37:26:47:94:51:45:cf:86:11: 4e:08:1b:85:48:ed:35:82:7c:e2:ac:5c:80:29:9c: d0:43:c4:c4:0e:bc:9d:24:f9:16:fd:e9:2c:9b:66: fc:b8:5e:bb:a7:f4:ae:0d:d2:c2:d1:9c:f7:60:40: b8:bb:cc:1b:0c:48:83:bc:bc:3c:15:79:18:46:38: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:29:2A:B7:C7:90:27:65:10:84:02:84:56:24:A1:C0:B8:FA:7D X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/kTYpKrfHkCdlEIQChFYkocC4-n0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 117.56.0.0/18 Signature Algorithm: sha256WithRSAEncryption 89:24:5b:c9:ce:ed:d8:71:11:31:d6:38:9f:fe:07:5a:b6:95: 0d:b0:6a:08:fa:17:2f:63:8d:22:f7:c9:27:d9:a4:0a:d3:ba: 73:81:fe:31:dd:0f:d7:d9:be:46:d5:8a:9a:b9:a6:0c:f6:54: 5e:8f:cb:39:98:73:68:dc:d2:47:31:d6:47:2b:59:46:1f:bc: ca:f9:23:a3:5b:1f:2f:0d:3c:5d:51:32:bf:0c:3b:69:1c:fc: b7:a4:1d:29:0c:0e:8d:7e:bd:c7:73:e0:2f:a5:dc:29:3f:93: b7:21:bc:36:ef:4c:52:c0:93:99:32:16:cc:74:9e:0c:ff:80: 55:19:b4:60:e8:9a:03:51:2c:a8:6e:83:52:f2:88:cb:cb:a0: 6d:db:ae:3a:df:25:67:8c:86:33:35:d3:24:32:36:ba:de:ac: 40:8f:e3:5d:c7:e8:58:8f:8a:36:7a:dd:9e:b1:f7:cb:44:01: 00:d6:a9:1d:40:92:39:2a:b0:1a:fe:ea:8d:45:f4:c2:27:6e: 07:3f:2b:e5:06:c6:94:d6:41:a1:4b:30:68:fe:e8:45:fc:e7: 36:e9:6e:b8:c1:d8:47:ad:72:f5:36:4e:9e:a3:22:36:0b:c4: 2a:36:50:86:9f:46:4e:47:44:48:d0:08:5e:4e:02:15:ae:27: c1:14:93:3f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTA4MjIw ODU0MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkxMzYyOTJBQjdDNzkw Mjc2NTEwODQwMjg0NTYyNEExQzBCOEZBN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf7P+dW1d8LcU7ULpV3slNAyEL3WzuUxizw20pdTOfKLYYrWC7 iw0JNis4CMrxnVGz7+9kdiAbhFtqhY+yXuP86yGCXihdhahS92rSpBUPXhJBR7Fh tMG+d3BFiQ7hxh4KSWDv7c9e2SBlejbA3eY5HGVuIxUXmIN7p/Uo/m56kqjDuD2u vLg6TCSJsogy6GkwnXwJta9c5rmCg52ZtNTB1r5AI1EVLzMeva3bpQqxpUVborms qKOxMzcmR5RRRc+GEU4IG4VI7TWCfOKsXIApnNBDxMQOvJ0k+Rb96SybZvy4Xrun 9K4N0sLRnPdgQLi7zBsMSIO8vDwVeRhGOOHDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUkTYpKrfHkCdlEIQChFYkocC4+n0wHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2tUWXBLcmZIa0NkbEVJUUNoRllrb2ND NC1uMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ1OAAwDQYJ KoZIhvcNAQELBQADggEBAIkkW8nO7dhxETHWOJ/+B1q2lQ2wagj6Fy9jjSL3ySfZ pArTunOB/jHdD9fZvkbVipq5pgz2VF6PyzmYc2jc0kcx1kcrWUYfvMr5I6NbHy8N PF1RMr8MO2kc/LekHSkMDo1+vcdz4C+l3Ck/k7chvDbvTFLAk5kyFsx0ngz/gFUZ tGDomgNRLKhug1LyiMvLoG3brjrfJWeMhjM10yQyNrrerECP413H6FiPijZ63Z6x 98tEAQDWqR1AkjkqsBr+6o1F9MInbgc/K+UGxpTWQaFLMGj+6EX85zbpbrjB2Eet cvU2Tp6jIjYLxCo2UIafRk5HREjQCF5OAhWuJ8EUkz8= -----END CERTIFICATE-----Generated at Wed Nov 5 21:11:38 2025 by rpki-client