$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/ZaEYdQEYlwV-99ewE3_Pl_5c-KM.roa File: ZaEYdQEYlwV-99ewE3_Pl_5c-KM.roa (raw, json) Hash identifier: 6c2SxvONR/8qBuF3lZJ54LOGkZExJj3WEROWJnwl/q0= Subject key identifier: 65:A1:18:75:01:18:97:05:7E:F7:D7:B0:13:7F:CF:97:FE:5C:F8:A3 Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Certificate serial: 145D Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/ZaEYdQEYlwV-99ewE3_Pl_5c-KM.roa Signing time: Fri 22 Aug 2025 08:50:47 +0000 ROA not before: Fri 22 Aug 2025 08:50:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9922 IP address blocks: 103.130.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5213 (0x145d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Validity Not Before: Aug 22 08:50:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=65A11875011897057EF7D7B0137FCF97FE5CF8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:6f:c0:26:ab:1f:1f:02:44:b1:5e:14:76: c0:a8:c3:02:c4:23:11:0d:57:54:b8:46:b9:2e:ea: 75:0e:fe:6e:bd:f3:aa:69:c5:58:d5:aa:6b:d7:24: 3c:6b:c5:25:d6:37:21:6c:8c:3b:8b:76:88:87:c7: 3b:52:f9:15:12:ae:d9:54:a7:ae:ca:56:82:1f:a1: 06:5c:54:74:41:a0:34:c7:5b:d2:24:75:12:70:d3: 28:21:61:36:c6:84:33:de:6e:91:07:86:70:d2:0d: 48:cf:d9:ff:77:66:95:15:2e:69:a9:f0:56:77:04: 62:39:72:40:33:25:ab:8f:ca:82:1d:83:95:89:6c: 3a:fc:0a:47:fb:74:0c:42:57:1f:fb:60:2b:28:78: 2a:93:67:8a:04:42:dc:4b:f8:7a:5a:6a:03:42:42: ed:16:f3:b9:5b:8b:d4:14:7f:e6:b1:47:bc:a0:71: f9:7b:a8:12:8d:b6:3b:13:02:ad:96:6d:78:a4:50: a3:32:62:41:0c:8d:75:73:83:83:d9:08:ac:a4:aa: a6:80:02:82:27:d3:20:a6:d1:14:d4:b2:c9:31:f0: 07:aa:85:44:85:9f:44:02:56:88:8a:2d:9d:31:4d: 98:00:fe:ff:47:c2:ec:55:55:ca:14:76:ba:61:19: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A1:18:75:01:18:97:05:7E:F7:D7:B0:13:7F:CF:97:FE:5C:F8:A3 X509v3 Authority Key Identifier: keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/ZaEYdQEYlwV-99ewE3_Pl_5c-KM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.48.0/22 Signature Algorithm: sha256WithRSAEncryption 61:43:b6:d2:7e:e6:df:ff:26:58:20:e5:88:22:dc:e8:f4:9a: e4:c0:55:b6:64:f4:19:1c:86:63:0a:45:28:3f:28:8e:6d:a5: 76:0b:21:50:c5:e8:0e:15:42:5c:fd:a4:9b:03:f0:29:51:76: 55:a0:31:7a:02:df:fe:97:22:0b:0e:e0:15:b8:e4:82:ae:22: c5:78:6c:fd:e4:30:47:1b:9d:ab:f4:90:44:b7:a8:38:cb:96: a0:96:82:26:04:71:ab:e5:8b:00:61:0f:a9:b0:5c:a3:dd:de: b1:8e:ff:55:0c:31:9b:e3:e3:bd:c7:1e:69:ab:c7:1a:3c:12: e3:1a:59:43:ca:13:d7:df:2b:05:30:bb:76:f5:65:c0:33:c7: db:ff:03:0b:b1:50:fe:90:ea:c2:4b:5c:ce:8e:1a:47:46:b1: 57:e9:63:4b:09:e0:2b:ff:76:8a:07:22:24:5c:0b:d8:45:9a: b4:28:bf:8c:c8:f9:70:08:a8:a2:72:d3:bc:84:a8:11:48:3e: a8:56:f3:6f:d5:4e:3a:d6:13:3e:23:ca:60:bc:7c:31:f2:c5: c8:6f:01:0e:9a:9d:07:56:a4:55:03:32:49:cc:7b:30:57:31: 95:dc:04:dc:21:df:0d:e3:cd:6d:49:d6:23:7f:16:dc:a5:7a: ec:c3:f0:81 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICFF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1 MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yNTA4MjIw ODUwNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1QTExODc1MDExODk3 MDU3RUY3RDdCMDEzN0ZDRjk3RkU1Q0Y4QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj7G/AJqsfHwJEsV4UdsCowwLEIxENV1S4Rrku6nUO/m6986pp xVjVqmvXJDxrxSXWNyFsjDuLdoiHxztS+RUSrtlUp67KVoIfoQZcVHRBoDTHW9Ik dRJw0yghYTbGhDPebpEHhnDSDUjP2f93ZpUVLmmp8FZ3BGI5ckAzJauPyoIdg5WJ bDr8Ckf7dAxCVx/7YCsoeCqTZ4oEQtxL+HpaagNCQu0W87lbi9QUf+axR7ygcfl7 qBKNtjsTAq2WbXikUKMyYkEMjXVzg4PZCKykqqaAAoIn0yCm0RTUsskx8AeqhUSF n0QCVoiKLZ0xTZgA/v9HwuxVVcoUdrphGTmvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZaEYdQEYlwV+99ewE3/Pl/5c+KMwHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL1phRVlkUUVZbHdWLTk5ZXdF M19QbF81Yy1LTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn gjAwDQYJKoZIhvcNAQELBQADggEBAGFDttJ+5t//Jlgg5Ygi3Oj0muTAVbZk9Bkc hmMKRSg/KI5tpXYLIVDF6A4VQlz9pJsD8ClRdlWgMXoC3/6XIgsO4BW45IKuIsV4 bP3kMEcbnav0kES3qDjLlqCWgiYEcavliwBhD6mwXKPd3rGO/1UMMZvj473HHmmr xxo8EuMaWUPKE9ffKwUwu3b1ZcAzx9v/AwuxUP6Q6sJLXM6OGkdGsVfpY0sJ4Cv/ dooHIiRcC9hFmrQov4zI+XAIqKJy07yEqBFIPqhW82/VTjrWEz4jymC8fDHyxchv AQ6anQdWpFUDMknMezBXMZXcBNwh3w3jzW1J1iN/FtyleuzD8IE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:10:04 2025 by rpki-client