$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/H76Yqjd_qsLu02XHlrkdTb6cO4g.roa File: H76Yqjd_qsLu02XHlrkdTb6cO4g.roa (raw, json) Hash identifier: 8R3MORDwytvIMNic9SLQgH9B3ARyUty0xVBqwyW73ZU= Subject key identifier: 1F:BE:98:AA:37:7F:AA:C2:EE:D3:65:C7:96:B9:1D:4D:BE:9C:3B:88 Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Certificate serial: 0475 Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/H76Yqjd_qsLu02XHlrkdTb6cO4g.roa Signing time: Fri 22 Aug 2025 08:52:26 +0000 ROA not before: Fri 22 Aug 2025 08:52:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18428 IP address blocks: 103.172.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Validity Not Before: Aug 22 08:52:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1FBE98AA377FAAC2EED365C796B91D4DBE9C3B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:05:d6:81:36:3b:98:ee:3b:9b:67:f7:a8:e2: c1:f4:6f:98:e4:bb:f5:c7:aa:3c:0c:63:ac:34:b8: e4:e5:34:a7:08:8e:98:3d:24:7b:33:de:3e:fc:91: ac:d0:20:8f:41:de:e5:77:62:f1:ec:59:a1:85:8a: b5:4a:9f:d5:71:70:6d:43:26:a6:42:56:33:64:29: 13:b3:9b:60:36:65:ce:55:c4:cd:e4:62:29:1f:8c: c6:cf:5e:8c:35:2d:9c:0e:ea:0c:73:44:be:54:a2: 37:47:c9:c6:e5:8a:47:d7:fb:b8:1a:3f:8c:40:5d: 1c:7a:e9:44:6f:82:01:e2:df:d5:72:4f:04:35:ff: c4:58:d7:07:6a:5f:dc:2e:6e:80:64:87:4b:28:7f: c2:1e:9d:ec:f6:5e:1b:f3:f9:b8:9c:a1:ad:b8:f9: fa:5b:3a:2c:82:e2:6c:b9:ff:d5:b5:5b:11:71:ad: 15:64:2c:7a:20:49:4b:d5:f1:85:43:25:30:96:05: ae:13:ae:95:c6:fa:30:f4:03:1e:b5:07:4b:85:bd: 6c:c3:20:d2:c4:4b:80:d3:12:1b:6e:52:0f:b6:de: 51:dc:cf:04:07:51:85:0c:55:d9:fd:c2:13:40:e7: 0a:ed:a9:ba:30:ff:4f:fd:d2:fc:cf:97:85:ee:20: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:98:AA:37:7F:AA:C2:EE:D3:65:C7:96:B9:1D:4D:BE:9C:3B:88 X509v3 Authority Key Identifier: keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/H76Yqjd_qsLu02XHlrkdTb6cO4g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.172.126.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:3f:24:00:a4:f7:2a:47:86:84:10:78:4a:7d:09:87:70:c4: 84:4f:08:6a:f7:23:55:fa:f7:c2:c9:5d:e6:0a:b8:8e:ab:86: 4e:e1:df:85:33:80:8c:41:5b:6c:5c:8a:7d:8a:7f:2e:41:ec: d1:0f:f8:e7:1c:15:29:9f:dc:57:3b:14:29:1e:7d:44:f7:f4: b1:ad:dc:71:71:9f:34:5b:9e:44:a0:5b:34:d4:ff:4f:59:f5: 9c:ef:5c:4f:f8:33:c2:7d:a9:ca:59:ff:aa:72:16:79:48:91: 95:70:2c:e5:5c:6b:67:d0:2c:e3:85:2f:1e:05:dd:3a:c3:54: 81:b0:1e:a0:d8:c2:25:95:e5:2c:ab:0f:a6:bb:f1:f0:ab:5d: ae:4b:db:df:58:44:68:01:f3:02:ea:89:5c:bc:44:4a:b2:00: 60:25:a4:4b:20:82:00:fb:ab:91:4b:31:08:86:ff:79:58:39: 0e:e9:44:44:68:45:ec:c2:99:90:94:a7:36:b4:f6:8e:83:ba: 74:7c:18:52:fb:b8:8c:e0:73:2c:62:71:1b:75:01:cd:14:00: 23:86:03:d1:72:5b:0d:bd:56:eb:32:0f:08:31:86:53:c5:8f: 05:f2:21:31:3d:b9:a6:c0:01:10:4c:dc:53:07:c5:87:10:be: 5b:d8:d0:a7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB MDlDRTQyODA5RjREQTlEN0IxQzQ0NzNEREYyRjQzNkE1OTlDNDAeFw0yNTA4MjIw ODUyMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGQkU5OEFBMzc3RkFB QzJFRUQzNjVDNzk2QjkxRDREQkU5QzNCODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhBdaBNjuY7jubZ/eo4sH0b5jku/XHqjwMY6w0uOTlNKcIjpg9 JHsz3j78kazQII9B3uV3YvHsWaGFirVKn9VxcG1DJqZCVjNkKROzm2A2Zc5VxM3k YikfjMbPXow1LZwO6gxzRL5UojdHycblikfX+7gaP4xAXRx66URvggHi39VyTwQ1 /8RY1wdqX9wuboBkh0sof8Ienez2Xhvz+bicoa24+fpbOiyC4my5/9W1WxFxrRVk LHogSUvV8YVDJTCWBa4TrpXG+jD0Ax61B0uFvWzDINLES4DTEhtuUg+23lHczwQH UYUMVdn9whNA5wrtqbow/0/90vzPl4XuIAldAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUH76Yqjd/qsLu02XHlrkdTb6cO4gwHwYDVR0jBBgwFoAU0qCc5CgJ9NqdexxE c93y9DalmcQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVSQ1lD QVQvMHFDYzVDZ0o5TnFkZXh4RWM5M3k5RGFsbWNRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wcUNjNUNnSjlOcWRleHhFYzkzeTlEYWxtY1EuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRVJDWUNBVC9INzZZcWpkX3FzTHUw MlhIbHJrZFRiNmNPNGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6x+MA0GCSqGSIb3DQEBCwUAA4IBAQB8PyQApPcqR4aEEHhKfQmHcMSETwhq 9yNV+vfCyV3mCriOq4ZO4d+FM4CMQVtsXIp9in8uQezRD/jnHBUpn9xXOxQpHn1E 9/SxrdxxcZ80W55EoFs01P9PWfWc71xP+DPCfanKWf+qchZ5SJGVcCzlXGtn0Czj hS8eBd06w1SBsB6g2MIlleUsqw+mu/Hwq12uS9vfWERoAfMC6olcvERKsgBgJaRL IIIA+6uRSzEIhv95WDkO6UREaEXswpmQlKc2tPaOg7p0fBhS+7iM4HMsYnEbdQHN FAAjhgPRclsNvVbrMg8IMYZTxY8F8iExPbmmwAEQTNxTB8WHEL5b2NCn -----END CERTIFICATE-----Generated at Wed Nov 5 20:44:48 2025 by rpki-client