$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/HRd0DGAYMfHdLA-Ck-ySfzFGKi4.roa File: HRd0DGAYMfHdLA-Ck-ySfzFGKi4.roa (raw, json) Hash identifier: 3OsxpfuVXKB+1jcDNTRKLkaXJSgltpY6etfFnl0BPCY= Subject key identifier: 1D:17:74:0C:60:18:31:F1:DD:2C:0F:82:93:EC:92:7F:31:46:2A:2E Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Certificate serial: 056F Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/HRd0DGAYMfHdLA-Ck-ySfzFGKi4.roa Signing time: Wed 05 Nov 2025 08:25:18 +0000 ROA not before: Wed 05 Nov 2025 08:25:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 14618 IP address blocks: 103.196.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Validity Not Before: Nov 5 08:25:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1D17740C601831F1DD2C0F8293EC927F31462A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:40:06:57:61:c9:c7:1b:6b:96:61:6e:3b: 27:3a:b8:75:ed:6c:4b:e7:4f:1e:05:9d:3d:13:bd: 82:8a:a5:56:7d:10:db:e2:be:ca:b7:e2:70:6a:a4: a9:ba:53:4d:a6:1c:2b:40:2e:f6:1b:82:b0:57:d2: 4f:48:1f:d2:63:e0:fe:21:b1:f9:1a:b6:0f:9a:25: da:02:ba:ec:20:96:d5:c1:fc:64:3a:07:9e:dc:6d: b0:c8:9a:26:3c:53:96:ea:0d:a3:7b:48:25:f3:84: dd:6f:77:dc:23:6f:4c:8a:29:91:f1:a6:89:45:99: 41:78:c1:1e:2a:b2:88:e7:4f:2f:b4:dc:64:53:71: 26:d3:fc:2c:f0:1f:f6:2c:b3:f7:3c:91:03:05:8a: 2d:bb:e9:eb:65:c8:9d:91:9f:40:65:4a:14:42:c4: 07:8e:24:e2:52:1b:ce:b8:a9:e7:ab:b6:ff:5d:b0: 81:eb:a5:7a:7c:cc:dd:3c:e2:d1:a7:ba:a7:42:23: eb:74:3a:c4:c2:16:27:b2:7e:38:e9:65:15:d4:ea: 40:81:ba:a9:f9:55:d7:fa:5e:3a:09:f3:9d:ca:b2: fd:77:2c:76:e6:d6:f1:3f:ab:f0:50:37:5a:ce:f6: e1:b7:09:0a:ee:8c:01:2b:a6:3d:cc:20:df:c1:0e: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:74:0C:60:18:31:F1:DD:2C:0F:82:93:EC:92:7F:31:46:2A:2E X509v3 Authority Key Identifier: keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/HRd0DGAYMfHdLA-Ck-ySfzFGKi4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.196.174.0/24 Signature Algorithm: sha256WithRSAEncryption 53:79:dd:95:cb:08:f2:4a:36:fb:8b:96:f5:69:a3:54:07:06: ae:66:1a:9e:2d:1d:9a:ed:4d:4f:bf:cb:6a:36:38:fe:e5:33: 3b:08:e4:38:c9:93:31:9f:4f:c1:95:60:91:72:ad:5f:8c:54: 24:08:ea:d7:54:e9:af:ac:43:50:b3:6f:a9:6b:dd:16:0f:b8: 5d:f4:9a:a1:78:87:ae:20:5a:a8:6d:dc:3b:ac:57:c1:51:a3: 9a:75:44:13:51:9d:0f:83:83:58:40:e9:54:96:79:cb:83:05: 14:af:53:a1:a9:ac:d4:a6:09:aa:6d:7d:6d:ff:1f:6f:1b:cd: 31:ee:c9:4b:69:80:9c:a9:cb:c2:6b:c0:ee:aa:67:f4:cb:ab: 22:d9:e7:0d:56:e4:ff:a6:a4:45:1c:4f:27:f1:40:6d:3f:1d: 51:87:a0:ba:49:3a:7f:23:ee:e9:dc:7d:5e:08:66:b5:dc:57: 27:cb:1b:ef:29:60:36:23:9f:ed:48:35:82:ef:32:78:00:36: c2:51:fb:5c:16:da:f6:f7:22:6e:08:5d:e8:d4:53:c0:d1:6a: 8e:d8:a7:f7:33:12:38:dd:5c:7f:b4:0e:18:cf:b9:93:84:26: af:28:27:48:1d:a1:24:3c:8e:b4:1f:d3:41:d4:a3:d6:7f:06: 61:d3:7e:16 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYz MDlGODM3NUFDNkQ4NjdDRjE0Qzk1RjI3QTc0RTREMkRGMTlCRDAeFw0yNTExMDUw ODI1MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFEMTc3NDBDNjAxODMx RjFERDJDMEY4MjkzRUM5MjdGMzE0NjJBMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjG0AGV2HJxxtrlmFuOyc6uHXtbEvnTx4FnT0TvYKKpVZ9ENvi vsq34nBqpKm6U02mHCtALvYbgrBX0k9IH9Jj4P4hsfkatg+aJdoCuuwgltXB/GQ6 B57cbbDImiY8U5bqDaN7SCXzhN1vd9wjb0yKKZHxpolFmUF4wR4qsojnTy+03GRT cSbT/CzwH/Yss/c8kQMFii276etlyJ2Rn0BlShRCxAeOJOJSG864qeertv9dsIHr pXp8zN084tGnuqdCI+t0OsTCFieyfjjpZRXU6kCBuqn5Vdf6XjoJ853Ksv13LHbm 1vE/q/BQN1rO9uG3CQrujAErpj3MIN/BDn69AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUHRd0DGAYMfHdLA+Ck+ySfzFGKi4wHwYDVR0jBBgwFoAUtjCfg3WsbYZ88UyV 8np05NLfGb0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvdGpDZmczV3NiWVo4OFV5VjhucDA1TkxmR2IwLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS90akNmZzNXc2JZWjg4VXlWOG5wMDVOTGZHYjAuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9IUmQwREdBWU1mSGRM QS1Day15U2Z6RkdLaTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8SuMA0GCSqGSIb3DQEBCwUAA4IBAQBTed2VywjySjb7i5b1aaNUBwauZhqe LR2a7U1Pv8tqNjj+5TM7COQ4yZMxn0/BlWCRcq1fjFQkCOrXVOmvrENQs2+pa90W D7hd9JqheIeuIFqobdw7rFfBUaOadUQTUZ0Pg4NYQOlUlnnLgwUUr1OhqazUpgmq bX1t/x9vG80x7slLaYCcqcvCa8Duqmf0y6si2ecNVuT/pqRFHE8n8UBtPx1Rh6C6 STp/I+7p3H1eCGa13FcnyxvvKWA2I5/tSDWC7zJ4ADbCUftcFtr29yJuCF3o1FPA 0WqO2Kf3MxI43Vx/tA4Yz7mThCavKCdIHaEkPI60H9NB1KPWfwZh034W -----END CERTIFICATE-----Generated at Wed Nov 5 22:10:47 2025 by rpki-client