$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/qF2JcggJ8XIo-sOmKudZCeYevqY.roa File: qF2JcggJ8XIo-sOmKudZCeYevqY.roa (raw, json) Hash identifier: GoNZ9N/t5i3H0OtEJevdFFpmdMXtFNSRtLLN8ROsZVk= Subject key identifier: A8:5D:89:72:08:09:F1:72:28:FA:C3:A6:2A:E7:59:09:E6:1E:BE:A6 Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0D8D Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/qF2JcggJ8XIo-sOmKudZCeYevqY.roa Signing time: Fri 22 Aug 2025 09:03:26 +0000 ROA not before: Fri 22 Aug 2025 09:03:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18179 IP address blocks: 211.78.240.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Aug 22 09:03:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A85D89720809F17228FAC3A62AE75909E61EBEA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:e1:df:ff:d7:94:0f:5b:af:94:3a:16:92: ff:a5:1d:f4:34:16:e0:7e:3c:60:99:b8:0e:5c:8e: 8d:34:38:51:7c:74:ae:4c:36:a1:94:34:ac:b9:26: 22:68:d2:b9:c2:b0:64:35:2b:8e:8b:4b:d7:30:2d: bb:aa:7a:d8:1e:5f:ef:c9:20:0a:03:82:f8:71:a4: bb:8a:58:f3:70:37:40:67:e7:4d:5e:0f:dc:b6:60: 3f:be:a7:03:50:fd:d4:09:86:d1:a6:f2:80:df:ed: 69:ea:c0:a8:bc:5c:9b:d9:67:e4:0b:bc:f1:50:d3: e4:03:a6:92:0b:04:5a:e2:dd:81:53:43:ef:5b:ab: 87:8f:a2:39:7d:21:bc:ba:95:3a:a2:0a:c1:62:8b: d8:10:0b:00:a6:42:09:2a:9a:2c:d6:94:28:bc:77: 02:e8:04:ff:48:b6:bc:04:03:58:1a:0b:17:2d:ce: 0a:d6:d7:1d:91:41:f5:3a:5c:2f:55:91:b7:e5:f9: 6f:e1:d6:a8:f2:ac:69:28:d0:20:16:50:32:12:7b: 12:6f:1e:73:e6:e9:e9:2c:a9:7c:70:53:46:1c:5d: 6b:44:e5:80:3c:e8:3d:a0:8f:15:4f:0a:77:0d:08: d5:09:6d:e9:27:16:fd:17:c8:41:d5:06:85:f9:54: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5D:89:72:08:09:F1:72:28:FA:C3:A6:2A:E7:59:09:E6:1E:BE:A6 X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/qF2JcggJ8XIo-sOmKudZCeYevqY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.240.0/20 Signature Algorithm: sha256WithRSAEncryption 73:90:ee:ac:20:2f:6c:58:49:33:04:1a:00:a5:e5:51:b6:eb: 82:21:ea:d0:5a:4e:b9:bd:2a:98:d2:4d:05:bb:24:d2:a5:d9: c1:e2:dc:68:e1:71:dc:0f:2f:01:26:9c:dc:98:9e:f9:2c:2b: 17:cc:98:7e:7e:77:4e:fa:d0:2c:9e:45:1c:d1:71:e6:e8:2e: 78:f1:dc:c5:c1:c9:a1:b0:87:e6:30:77:b2:b2:e0:bb:d0:91: 36:20:88:61:e4:b6:c0:f8:30:2f:12:b0:8e:96:43:79:16:db: b5:ae:88:31:a1:78:c5:dd:33:ec:a1:92:08:7c:22:ea:cc:03: 87:04:a5:83:fa:45:5b:e6:ef:b6:e6:fb:87:b5:91:17:43:a5: e6:3c:46:06:1c:d2:0a:5e:c1:fb:c0:7b:09:fa:a4:46:82:73: 88:b7:9e:d9:ac:a4:20:b5:ac:af:b5:ab:3a:fa:54:63:80:d7: ec:47:32:53:72:ed:3d:be:3d:cf:65:c5:c5:b0:0c:9a:46:72: ba:5a:b8:c8:d3:d4:41:b6:e6:bc:32:2a:77:77:45:58:93:09: f0:03:dc:c4:47:bb:b0:cd:5d:ef:51:f6:03:ce:88:91:83:16: 08:72:ad:b3:24:92:03:44:3f:90:72:88:91:84:84:b0:b1:bd: b3:78:6b:4a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNTA4MjIw OTAzMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4NUQ4OTcyMDgwOUYx NzIyOEZBQzNBNjJBRTc1OTA5RTYxRUJFQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM1+Hf/9eUD1uvlDoWkv+lHfQ0FuB+PGCZuA5cjo00OFF8dK5M NqGUNKy5JiJo0rnCsGQ1K46LS9cwLbuqetgeX+/JIAoDgvhxpLuKWPNwN0Bn501e D9y2YD++pwNQ/dQJhtGm8oDf7WnqwKi8XJvZZ+QLvPFQ0+QDppILBFri3YFTQ+9b q4ePojl9Iby6lTqiCsFii9gQCwCmQgkqmizWlCi8dwLoBP9ItrwEA1gaCxctzgrW 1x2RQfU6XC9Vkbfl+W/h1qjyrGko0CAWUDISexJvHnPm6eksqXxwU0YcXWtE5YA8 6D2gjxVPCncNCNUJbeknFv0XyEHVBoX5VLjPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUqF2JcggJ8XIo+sOmKudZCeYevqYwHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9xRjJKY2dnSjhYSW8t c09tS3VkWkNlWWV2cVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQE007wMA0GCSqGSIb3DQEBCwUAA4IBAQBzkO6sIC9sWEkzBBoApeVRtuuCIerQ Wk65vSqY0k0FuyTSpdnB4txo4XHcDy8BJpzcmJ75LCsXzJh+fndO+tAsnkUc0XHm 6C548dzFwcmhsIfmMHeysuC70JE2IIhh5LbA+DAvErCOlkN5Ftu1rogxoXjF3TPs oZIIfCLqzAOHBKWD+kVb5u+25vuHtZEXQ6XmPEYGHNIKXsH7wHsJ+qRGgnOIt57Z rKQgtayvtas6+lRjgNfsRzJTcu09vj3PZcXFsAyaRnK6WrjI09RBtua8Mip3d0VY kwnwA9zER7uwzV3vUfYDzoiRgxYIcq2zJJIDRD+QcoiRhISwsb2zeGtK -----END CERTIFICATE-----Generated at Thu Nov 6 02:50:47 2025 by rpki-client