$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/4T7hYy9R_gAPqja_uuLgoJCAcrE.roa File: 4T7hYy9R_gAPqja_uuLgoJCAcrE.roa (raw, json) Hash identifier: QtGMxl+HFh5aMEuZ0sYHbmxReOl1vspkRkUoCc8Uq1g= Subject key identifier: E1:3E:E1:63:2F:51:FE:00:0F:AA:36:BF:BA:E2:E0:A0:90:80:72:B1 Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 0832 Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/4T7hYy9R_gAPqja_uuLgoJCAcrE.roa Signing time: Sun 26 Oct 2025 14:50:53 +0000 ROA not before: Sun 26 Oct 2025 14:50:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 223.26.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Oct 26 14:50:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E13EE1632F51FE000FAA36BFBAE2E0A0908072B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:d9:d4:b7:16:2e:56:09:9b:9e:15:00:3a: 3e:06:9d:05:01:6c:bb:f3:cd:25:47:a6:c5:5b:bb: 28:34:cf:25:7c:a4:15:c3:86:ac:51:28:21:12:e5: 48:5f:63:8f:6f:0c:a7:76:7a:7e:b5:a1:74:fc:fe: 25:55:a4:7b:d6:4f:53:b3:3a:67:83:0e:c8:c7:0c: 77:3c:e2:d9:44:15:ba:4d:83:fa:d5:3f:8d:94:66: 5f:42:18:b5:c5:92:26:d7:d0:02:a5:d7:10:7d:68: 57:9a:56:43:69:39:45:2c:01:d6:06:90:e7:83:b4: 8b:4e:14:45:ef:54:7e:b5:e4:88:74:cf:fe:0f:82: 6d:e6:1d:03:14:c4:20:30:de:60:fb:62:88:c7:81: ef:36:e5:62:a9:f6:0a:08:4f:ee:19:1f:75:d4:c9: 92:73:bd:c3:8f:77:d8:5b:7e:ff:94:2b:91:76:d0: 27:c2:f8:e2:c0:ed:6f:81:a4:65:d8:27:80:63:90: b4:7f:96:bf:eb:95:cb:af:a3:49:15:1f:5c:17:9b: b9:92:99:da:39:58:bb:83:86:bf:7c:5e:b4:ea:df: 62:56:77:b1:c0:51:79:fe:7d:de:98:ba:49:b8:46: c4:e6:0a:9d:63:b2:ac:e5:b0:ad:b7:61:b8:bb:86: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3E:E1:63:2F:51:FE:00:0F:AA:36:BF:BA:E2:E0:A0:90:80:72:B1 X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/4T7hYy9R_gAPqja_uuLgoJCAcrE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.0.0/24 Signature Algorithm: sha256WithRSAEncryption 72:cd:78:f1:87:3e:29:c6:3a:5a:29:ca:38:81:08:b7:31:86: dc:58:85:1a:ee:29:53:db:29:a5:59:12:43:49:85:d0:dc:06: f2:b6:b4:0c:36:72:3d:e9:db:65:68:85:80:5e:a9:fb:a6:3a: cc:f6:ef:e6:bd:91:23:4d:ff:05:39:a4:ca:81:2c:80:33:a2: bc:0a:a2:65:f3:8e:47:ba:ab:ba:56:a9:d8:e3:32:fd:4b:74: 46:47:40:7e:c9:45:8f:c7:45:a9:0b:24:2a:be:6a:4b:a7:ee: cf:87:e9:92:81:95:99:61:0f:18:c5:aa:47:f7:e0:3d:87:31: 1f:a6:aa:67:d8:ca:0c:e0:87:c3:49:0a:46:8a:84:5d:8c:8d: eb:3f:28:e3:53:8e:95:96:f1:12:69:a5:47:9b:51:00:4e:2c: 0f:69:a6:fb:cf:d2:04:6b:05:26:ae:45:3e:04:e1:33:6c:12: 3c:ae:60:8a:ed:c9:26:5e:93:be:d3:8d:bb:45:59:49:8a:ff: 7a:47:aa:c2:ba:5a:ab:f2:45:7e:13:c0:4b:12:ca:c9:bf:47: 8f:70:bb:b4:c2:d5:78:a5:d1:5b:b3:44:0a:e5:c2:fe:1a:77: e1:6c:5d:6b:12:48:4f:d6:f5:1f:a6:d8:de:e5:76:22:83:74: 87:6f:19:36 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTEwMjYx NDUwNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUxM0VFMTYzMkY1MUZF MDAwRkFBMzZCRkJBRTJFMEEwOTA4MDcyQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkFdnUtxYuVgmbnhUAOj4GnQUBbLvzzSVHpsVbuyg0zyV8pBXD hqxRKCES5UhfY49vDKd2en61oXT8/iVVpHvWT1OzOmeDDsjHDHc84tlEFbpNg/rV P42UZl9CGLXFkibX0AKl1xB9aFeaVkNpOUUsAdYGkOeDtItOFEXvVH615Ih0z/4P gm3mHQMUxCAw3mD7YojHge825WKp9goIT+4ZH3XUyZJzvcOPd9hbfv+UK5F20CfC +OLA7W+BpGXYJ4BjkLR/lr/rlcuvo0kVH1wXm7mSmdo5WLuDhr98XrTq32JWd7HA UXn+fd6Yukm4RsTmCp1jsqzlsK23Ybi7hpP9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4T7hYy9R/gAPqja/uuLgoJCAcrEwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzRUN2hZeTlSX2dBUHFqYV91 dUxnb0pDQWNyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADf GgAwDQYJKoZIhvcNAQELBQADggEBAHLNePGHPinGOlopyjiBCLcxhtxYhRruKVPb KaVZEkNJhdDcBvK2tAw2cj3p22VohYBeqfumOsz27+a9kSNN/wU5pMqBLIAzorwK omXzjke6q7pWqdjjMv1LdEZHQH7JRY/HRakLJCq+akun7s+H6ZKBlZlhDxjFqkf3 4D2HMR+mqmfYygzgh8NJCkaKhF2Mjes/KONTjpWW8RJppUebUQBOLA9ppvvP0gRr BSauRT4E4TNsEjyuYIrtySZek77TjbtFWUmK/3pHqsK6WqvyRX4TwEsSysm/R49w u7TC1Xil0VuzRArlwv4ad+FsXWsSSE/W9R+m2N7ldiKDdIdvGTY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:14:40 2025 by rpki-client