$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/QlGaKgkMqYIfMM6zxAuzYDXHYjI.roa File: QlGaKgkMqYIfMM6zxAuzYDXHYjI.roa (raw, json) Hash identifier: e2THAPExERdJeWKQN6zMaTMoX3zQT/hm9mmBElF0si8= Subject key identifier: 42:51:9A:2A:09:0C:A9:82:1F:30:CE:B3:C4:0B:B3:60:35:C7:62:32 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0851 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/QlGaKgkMqYIfMM6zxAuzYDXHYjI.roa Signing time: Fri 22 Aug 2025 08:44:22 +0000 ROA not before: Fri 22 Aug 2025 08:44:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131682 IP address blocks: 103.152.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Aug 22 08:44:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=42519A2A090CA9821F30CEB3C40BB36035C76232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:02:49:c6:b9:4d:68:4a:47:1f:50:dd:2d: 16:3b:39:7e:60:c0:98:6f:a2:ae:c2:31:da:d3:81: 17:fa:45:31:7f:76:21:5c:bf:d7:f5:36:40:76:e7: 43:56:6c:41:c3:4f:cc:ab:c3:6d:22:c2:d7:5c:34: 37:5c:e2:84:90:c2:71:48:a9:47:40:8c:22:44:79: fd:cd:e4:b2:a0:c6:43:d5:9d:37:ae:a2:c8:d1:97: 3a:9e:6e:6e:be:e9:9e:0c:82:58:a8:6c:95:72:d5: c8:b4:6a:4f:5e:04:a6:11:01:73:4d:aa:93:21:e2: 04:af:6f:9d:bb:9c:ac:2b:99:f8:7b:10:d6:98:ac: 22:db:49:56:1a:39:55:2b:d2:0e:84:54:14:38:4e: a8:8f:ac:b0:ae:64:6e:0b:1d:96:ff:69:cf:af:8c: f7:43:17:a3:da:62:cf:24:0f:49:fa:0e:27:84:46: 87:20:df:3f:cc:ba:45:57:c9:15:f5:5f:38:fa:3b: fd:20:24:2a:de:66:f6:29:d2:46:1e:ae:d9:40:c6: 6e:6d:f1:f4:03:3c:34:7c:02:19:35:da:92:48:53: 24:b8:d9:84:c2:af:e8:80:b5:91:f1:25:0b:38:82: 93:dc:07:bf:79:36:61:cb:87:db:af:e3:08:34:ce: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:51:9A:2A:09:0C:A9:82:1F:30:CE:B3:C4:0B:B3:60:35:C7:62:32 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/QlGaKgkMqYIfMM6zxAuzYDXHYjI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.202.0/23 Signature Algorithm: sha256WithRSAEncryption 95:85:3b:cf:8d:57:a8:9e:3f:0f:60:85:e9:12:3a:c0:5f:38: 42:2c:f8:bf:53:d5:9c:01:ca:a6:cb:21:19:ec:00:e0:69:cc: 6c:83:87:7e:72:23:44:cf:54:82:74:44:74:4b:67:91:b4:0a: 2f:c4:6b:35:eb:c2:ef:bb:25:d5:04:b4:3b:00:ad:d7:17:73: 93:67:5c:0e:84:15:36:e5:2c:8e:e2:fc:86:c4:ec:42:54:b6: 98:eb:57:57:39:d9:11:82:57:55:87:25:1a:d7:76:53:a3:53: 81:d3:8c:85:65:3d:dd:ce:da:04:e9:e4:e0:69:ac:2f:c5:32: 2b:ab:26:5a:9a:5b:d5:fb:dc:77:6e:a2:97:b0:9e:e0:44:2d: 4d:d5:1f:e9:92:df:eb:75:ed:a0:8b:42:1f:6a:91:c3:c0:e1: 24:88:49:ba:90:8b:a4:3b:cd:11:4e:4e:ff:bc:0f:4b:c1:4b: a0:36:0b:6d:e9:f5:c0:ef:85:2f:52:5a:c6:73:97:e4:91:aa: 2c:35:86:d1:db:34:fd:f4:70:d6:1f:96:f3:9f:77:a8:83:82: 13:fd:69:3e:c8:36:99:e7:af:a8:07:f8:df:42:9d:cf:59:a5: c6:75:41:18:f1:f7:6b:c8:b3:e1:31:dd:9b:2b:d2:18:23:75: 7b:fd:2d:8e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTA4MjIw ODQ0MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQyNTE5QTJBMDkwQ0E5 ODIxRjMwQ0VCM0M0MEJCMzYwMzVDNzYyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuwwJJxrlNaEpHH1DdLRY7OX5gwJhvoq7CMdrTgRf6RTF/diFc v9f1NkB250NWbEHDT8yrw20iwtdcNDdc4oSQwnFIqUdAjCJEef3N5LKgxkPVnTeu osjRlzqebm6+6Z4MgliobJVy1ci0ak9eBKYRAXNNqpMh4gSvb527nKwrmfh7ENaY rCLbSVYaOVUr0g6EVBQ4TqiPrLCuZG4LHZb/ac+vjPdDF6PaYs8kD0n6DieERocg 3z/MukVXyRX1Xzj6O/0gJCreZvYp0kYertlAxm5t8fQDPDR8Ahk12pJIUyS42YTC r+iAtZHxJQs4gpPcB795NmHLh9uv4wg0znj9AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUQlGaKgkMqYIfMM6zxAuzYDXHYjIwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL1FsR2FLZ2tNcVlJ Zk1NNnp4QXV6WURYSFlqSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnmMowDQYJKoZIhvcNAQELBQADggEBAJWFO8+NV6iePw9ghekSOsBfOEIs +L9T1ZwByqbLIRnsAOBpzGyDh35yI0TPVIJ0RHRLZ5G0Ci/EazXrwu+7JdUEtDsA rdcXc5NnXA6EFTblLI7i/IbE7EJUtpjrV1c52RGCV1WHJRrXdlOjU4HTjIVlPd3O 2gTp5OBprC/FMiurJlqaW9X73HduopewnuBELU3VH+mS3+t17aCLQh9qkcPA4SSI SbqQi6Q7zRFOTv+8D0vBS6A2C23p9cDvhS9SWsZzl+SRqiw1htHbNP30cNYflvOf d6iDghP9aT7INpnnr6gH+N9Cnc9ZpcZ1QRjx92vIs+Ex3Zsr0hgjdXv9LY4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:27 2025 by rpki-client