$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/WRcQcGJ2xmH9rFK1BPBRxmIvb3E.roa File: WRcQcGJ2xmH9rFK1BPBRxmIvb3E.roa (raw, json) Hash identifier: odUq4Ix44ZWDlGT29OMidkx+JNnI5Im6W18wI0G07fc= Subject key identifier: 59:17:10:70:62:76:C6:61:FD:AC:52:B5:04:F0:51:C6:62:2F:6F:71 Certificate issuer: /CN=0CE68958C4074750F9B01967C18F50F9CB112212 Certificate serial: 0D33 Authority key identifier: 0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/WRcQcGJ2xmH9rFK1BPBRxmIvb3E.roa Signing time: Fri 22 Aug 2025 08:56:32 +0000 ROA not before: Fri 22 Aug 2025 08:56:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131620 IP address blocks: 103.116.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE68958C4074750F9B01967C18F50F9CB112212 Validity Not Before: Aug 22 08:56:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=591710706276C661FDAC52B504F051C6622F6F71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:02:50:f3:7f:3f:4a:a0:a1:5c:aa:49:92: e0:05:73:3b:29:e6:ee:e6:a8:89:03:5c:ee:82:ca: 1c:e2:10:c1:e0:19:f8:7d:c7:7b:06:a5:1c:5e:ef: 18:81:d6:19:e5:18:dd:ee:a7:24:60:81:72:b7:57: 95:0d:2c:39:a0:c8:e7:48:4d:15:62:ab:8d:45:ae: 91:fe:fd:19:3a:44:92:25:78:49:5e:c6:79:d1:87: ad:18:43:d0:b0:51:99:14:64:58:04:bb:50:2a:39: 25:47:18:4d:f6:7c:82:ea:0d:23:0c:c4:b2:2c:12: 3b:68:ce:25:1b:2d:16:7e:ed:67:90:23:54:8c:ae: a2:b2:e2:9d:2e:9a:a3:24:9c:de:b2:c9:ea:a4:54: e6:f0:24:d2:39:1e:ea:47:69:5a:a8:32:a6:98:cc: 1e:37:a6:ca:f3:97:fa:1f:27:18:d7:94:54:08:ae: 22:9e:d8:37:b4:e2:8b:e0:54:18:55:4b:95:47:80: 41:63:5d:3c:6c:07:77:38:28:b2:5c:e9:b1:cd:36: dc:17:75:8c:56:03:d2:98:0a:7c:c6:12:6d:d6:d4: ce:db:0f:14:0f:ac:80:7c:7b:98:72:0b:82:fc:d4: d8:30:66:1c:df:17:3b:80:7d:37:b9:52:08:6c:e4: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:17:10:70:62:76:C6:61:FD:AC:52:B5:04:F0:51:C6:62:2F:6F:71 X509v3 Authority Key Identifier: keyid:0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/WRcQcGJ2xmH9rFK1BPBRxmIvb3E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.68.0/22 Signature Algorithm: sha256WithRSAEncryption 12:a4:57:b7:35:ea:de:38:7d:11:0d:74:38:5f:2d:b2:dd:cb: f1:b3:2d:f7:07:87:5a:d6:66:68:19:af:af:c3:6e:38:45:a2: a7:21:54:c3:0b:c0:b1:b1:7d:49:41:78:24:65:ac:c4:b3:ea: e1:2c:4c:67:9a:a3:02:c7:1d:b6:ee:0a:02:2f:91:8b:c8:9d: 14:0a:e5:38:b9:88:85:41:09:f8:d0:ad:ce:00:ee:d3:d1:bf: 33:47:47:0b:d3:53:17:0f:55:9c:95:0a:1c:54:1a:81:7b:7a: 43:bb:f5:97:84:92:76:e2:22:72:28:54:c7:75:5b:d2:ca:40: 4a:10:ca:e4:3c:76:d5:db:32:15:1b:d7:06:aa:6d:b0:eb:20: e3:27:da:16:bb:a7:8b:44:01:5a:23:67:f8:73:a8:ea:6e:34: 0e:8f:1e:fe:83:a2:ff:b7:93:0f:12:c7:05:8d:06:d3:a4:03: f9:59:b3:0d:b8:60:b4:aa:de:b2:5d:fc:f6:57:fd:67:13:9e: 18:af:d1:c1:55:af:5c:b4:c8:00:4a:8e:98:8c:e5:72:07:e1: c8:42:0d:3d:11:f1:a3:33:1e:0b:66:6b:4e:c0:bf:d2:a1:b2: 97:16:aa:3a:c6:fb:76:1e:90:a1:62:cb:a8:9f:3b:b7:03:8d: 4d:01:8c:d7 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENF Njg5NThDNDA3NDc1MEY5QjAxOTY3QzE4RjUwRjlDQjExMjIxMjAeFw0yNTA4MjIw ODU2MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5MTcxMDcwNjI3NkM2 NjFGREFDNTJCNTA0RjA1MUM2NjIyRjZGNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvxwJQ838/SqChXKpJkuAFczsp5u7mqIkDXO6CyhziEMHgGfh9 x3sGpRxe7xiB1hnlGN3upyRggXK3V5UNLDmgyOdITRViq41FrpH+/Rk6RJIleEle xnnRh60YQ9CwUZkUZFgEu1AqOSVHGE32fILqDSMMxLIsEjtoziUbLRZ+7WeQI1SM rqKy4p0umqMknN6yyeqkVObwJNI5HupHaVqoMqaYzB43psrzl/ofJxjXlFQIriKe 2De04ovgVBhVS5VHgEFjXTxsB3c4KLJc6bHNNtwXdYxWA9KYCnzGEm3W1M7bDxQP rIB8e5hyC4L81NgwZhzfFzuAfTe5Ughs5Pr5AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUWRcQcGJ2xmH9rFK1BPBRxmIvb3EwHwYDVR0jBBgwFoAUDOaJWMQHR1D5sBln wY9Q+csRIhIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VSVkNP TVAvRE9hSldNUUhSMUQ1c0JsbndZOVEtY3NSSWhJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ET2FKV01RSFIxRDVzQmxud1k5US1jc1JJaEkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TRVJWQ09NUC9XUmNRY0dKMnhtSDly RksxQlBCUnhtSXZiM0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3REMA0GCSqGSIb3DQEBCwUAA4IBAQASpFe3NereOH0RDXQ4Xy2y3cvxsy33 B4da1mZoGa+vw244RaKnIVTDC8CxsX1JQXgkZazEs+rhLExnmqMCxx227goCL5GL yJ0UCuU4uYiFQQn40K3OAO7T0b8zR0cL01MXD1WclQocVBqBe3pDu/WXhJJ24iJy KFTHdVvSykBKEMrkPHbV2zIVG9cGqm2w6yDjJ9oWu6eLRAFaI2f4c6jqbjQOjx7+ g6L/t5MPEscFjQbTpAP5WbMNuGC0qt6yXfz2V/1nE54Yr9HBVa9ctMgASo6YjOVy B+HIQg09EfGjMx4LZmtOwL/SobKXFqo6xvt2HpChYsuonzu3A41NAYzX -----END CERTIFICATE-----Generated at Wed Nov 5 19:08:35 2025 by rpki-client