$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IDT/M7CiznJkGUVCHSsC0NC3Pn2m_9w.roa File: M7CiznJkGUVCHSsC0NC3Pn2m_9w.roa (raw, json) Hash identifier: rsxWKrndZSoT8AyBFtnw1c+yKBDpHjj6xjq8XKGJwA4= Subject key identifier: 33:B0:A2:CE:72:64:19:45:42:1D:2B:02:D0:D0:B7:3E:7D:A6:FF:DC Certificate issuer: /CN=4FA6A6A655A0C42B99C7E2087EBEF444ACB56493 Certificate serial: 062A Authority key identifier: 4F:A6:A6:A6:55:A0:C4:2B:99:C7:E2:08:7E:BE:F4:44:AC:B5:64:93 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T6amplWgxCuZx-IIfr70RKy1ZJM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IDT/M7CiznJkGUVCHSsC0NC3Pn2m_9w.roa Signing time: Tue 04 Nov 2025 11:20:08 +0000 ROA not before: Tue 04 Nov 2025 11:20:08 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152179 IP address blocks: 223.26.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IDT/T6amplWgxCuZx-IIfr70RKy1ZJM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IDT/T6amplWgxCuZx-IIfr70RKy1ZJM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T6amplWgxCuZx-IIfr70RKy1ZJM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA6A6A655A0C42B99C7E2087EBEF444ACB56493 Validity Not Before: Nov 4 11:20:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=33B0A2CE72641945421D2B02D0D0B73E7DA6FFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:36:36:ed:cf:ab:60:f5:89:db:6c:ca:96: f5:c7:b0:cd:42:ce:4c:08:e3:64:3b:c7:73:d9:78: 16:9e:0f:05:0f:7d:d0:61:99:19:3b:59:8b:be:b8: fc:1e:56:08:90:41:df:41:31:22:32:4f:6b:4f:4a: ec:74:30:a4:af:05:c5:e6:44:91:4e:38:c5:05:f5: ab:9a:ca:de:4f:eb:fd:11:9d:be:43:fc:ed:34:93: 17:73:30:bf:1c:e2:e6:6b:f1:2f:8d:46:8e:27:ec: 02:b4:b7:04:fd:fb:12:93:a4:29:72:77:de:fd:6c: 3e:bf:2b:cd:ee:66:b9:63:38:f3:29:84:fc:c2:ba: a1:5d:76:8b:90:b2:35:2a:9e:3c:9b:89:d6:59:53: 91:d6:0c:77:9d:da:71:c7:51:ba:e0:29:84:76:3c: 7c:19:f7:17:a6:0d:74:d0:a9:60:24:11:ef:62:03: bc:d6:32:c3:91:dd:7e:0f:cc:ad:a7:de:fd:ea:6e: db:f5:b6:02:63:a2:6d:32:6e:a4:ea:65:2b:8d:be: f5:d4:4e:85:a8:87:4c:39:25:68:ac:0c:bc:90:1d: 68:87:07:1a:fb:36:54:6c:57:a4:16:b9:e1:66:df: 5c:53:51:b9:4d:eb:ed:0a:2b:6a:b7:2e:d1:53:91: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:A2:CE:72:64:19:45:42:1D:2B:02:D0:D0:B7:3E:7D:A6:FF:DC X509v3 Authority Key Identifier: keyid:4F:A6:A6:A6:55:A0:C4:2B:99:C7:E2:08:7E:BE:F4:44:AC:B5:64:93 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IDT/T6amplWgxCuZx-IIfr70RKy1ZJM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T6amplWgxCuZx-IIfr70RKy1ZJM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IDT/M7CiznJkGUVCHSsC0NC3Pn2m_9w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.4.0/23 Signature Algorithm: sha256WithRSAEncryption e3:16:59:77:aa:60:89:44:9b:3f:8d:a0:8c:f7:65:5f:85:49: 62:06:69:88:c8:ee:6d:48:71:98:e9:a2:78:ac:4d:e5:5d:39: 5c:4c:e2:63:10:13:4d:53:95:54:a3:8e:48:42:4c:b7:54:62: a0:fc:15:12:bc:a2:6a:1f:50:02:21:5e:7b:e5:77:87:57:d4: de:f2:31:47:9c:5d:af:78:44:f7:f6:fb:d3:a9:3e:5c:70:bc: 8f:2d:a3:3d:76:a1:ca:65:88:b5:e0:68:97:b5:8d:3a:b6:02: 0e:92:22:8f:43:25:da:8b:c3:88:b1:85:e8:3c:ed:5d:81:7f: 64:4b:21:ee:e7:3d:08:68:7d:25:c9:9f:8c:f0:5c:62:c0:0c: a2:75:6a:85:b7:1d:24:95:ba:ee:e9:2d:72:c3:9f:66:58:d7: 02:1a:9a:26:95:c0:be:3d:5d:a9:d9:2e:17:75:58:0a:64:e5: 88:3e:49:1f:10:ee:e5:e0:b6:4f:72:1a:80:d8:68:2d:6f:ff: 09:f6:2e:ea:60:f4:95:35:8e:ac:1b:17:6c:de:da:da:cc:88: 4a:86:37:b7:4c:a5:e6:e6:6d:c4:80:03:ef:3a:7f:e2:c8:b9: 1a:55:fc:76:00:9e:21:ec:b3:2a:a1:7f:12:ae:ad:7f:15:6b: 15:4b:e8:13 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICBiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZB NkE2QTY1NUEwQzQyQjk5QzdFMjA4N0VCRUY0NDRBQ0I1NjQ5MzAeFw0yNTExMDQx MTIwMDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzQjBBMkNFNzI2NDE5 NDU0MjFEMkIwMkQwRDBCNzNFN0RBNkZGREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy4jY27c+rYPWJ22zKlvXHsM1CzkwI42Q7x3PZeBaeDwUPfdBh mRk7WYu+uPweVgiQQd9BMSIyT2tPSux0MKSvBcXmRJFOOMUF9auayt5P6/0Rnb5D /O00kxdzML8c4uZr8S+NRo4n7AK0twT9+xKTpClyd979bD6/K83uZrljOPMphPzC uqFddouQsjUqnjybidZZU5HWDHed2nHHUbrgKYR2PHwZ9xemDXTQqWAkEe9iA7zW MsOR3X4PzK2n3v3qbtv1tgJjom0ybqTqZSuNvvXUToWoh0w5JWisDLyQHWiHBxr7 NlRsV6QWueFm31xTUblN6+0KK2q3LtFTkVLJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUM7CiznJkGUVCHSsC0NC3Pn2m/9wwHwYDVR0jBBgwFoAUT6amplWgxCuZx+II fr70RKy1ZJMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSURUL1Q2 YW1wbFdneEN1WngtSUlmcjcwUkt5MVpKTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev VDZhbXBsV2d4Q3VaeC1JSWZyNzBSS3kxWkpNLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSURUL003Q2l6bkprR1VWQ0hTc0MwTkMzUG4y bV85dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHfGgQwDQYJ KoZIhvcNAQELBQADggEBAOMWWXeqYIlEmz+NoIz3ZV+FSWIGaYjI7m1IcZjponis TeVdOVxM4mMQE01TlVSjjkhCTLdUYqD8FRK8omofUAIhXnvld4dX1N7yMUecXa94 RPf2+9OpPlxwvI8toz12ocpliLXgaJe1jTq2Ag6SIo9DJdqLw4ixheg87V2Bf2RL Ie7nPQhofSXJn4zwXGLADKJ1aoW3HSSVuu7pLXLDn2ZY1wIamiaVwL49XanZLhd1 WApk5Yg+SR8Q7uXgtk9yGoDYaC1v/wn2Lupg9JU1jqwbF2ze2trMiEqGN7dMpebm bcSAA+86f+LIuRpV/HYAniHssyqhfxKurX8VaxVL6BM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:33 2025 by rpki-client