$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/nKFYIe_qWPANSuWT0vvL2XqaZeE.roa File: nKFYIe_qWPANSuWT0vvL2XqaZeE.roa (raw, json) Hash identifier: fxiHuaqYkGaKErtFOyEZkqbJPHIsHSjhd7/VdL3nokk= Subject key identifier: 9C:A1:58:21:EF:EA:58:F0:0D:4A:E5:93:D2:FB:CB:D9:7A:9A:65:E1 Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Certificate serial: 056C Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/nKFYIe_qWPANSuWT0vvL2XqaZeE.roa Signing time: Mon 03 Nov 2025 08:42:13 +0000 ROA not before: Mon 03 Nov 2025 08:42:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 16509 IP address blocks: 103.196.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Validity Not Before: Nov 3 08:42:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9CA15821EFEA58F00D4AE593D2FBCBD97A9A65E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:b3:75:45:00:8a:c5:87:3d:a5:48:79:78: 4a:a1:0e:c4:b4:4b:9e:42:d4:8d:54:69:01:c7:47: e4:08:84:4d:65:1a:9e:45:f7:62:34:ef:6c:96:50: c4:9d:d8:d0:81:60:ff:e9:1e:b2:f0:50:c5:33:25: 8a:3f:a9:72:96:80:5b:0c:37:a2:b6:fb:20:e1:41: a7:2f:ad:6e:17:c7:0e:fc:bc:ef:99:78:e1:41:e9: 4c:85:8e:89:cd:8d:7b:77:85:9d:14:dc:bc:c6:a9: 10:21:52:ad:3d:71:21:9b:c4:93:18:87:77:39:56: 37:b0:35:ff:7e:02:11:cd:ce:21:7d:09:cd:37:bb: b3:1d:9b:00:10:21:af:39:8f:f7:1c:89:bb:97:e6: 86:9d:99:34:7e:5a:8c:80:74:30:a4:1a:69:a2:0b: 37:29:f5:1e:e2:13:4a:d4:88:d7:8b:55:9b:26:b6: 5f:13:55:92:c1:57:84:dc:11:6c:90:b4:7e:56:cd: 9f:a0:c5:2f:9d:d6:9d:97:f6:05:8c:f8:dd:91:cf: 20:58:22:3b:0f:bf:58:1f:43:b8:32:db:b6:58:4f: b8:da:91:61:b0:3e:c3:18:28:9f:52:18:f5:d8:67: 09:f0:55:ae:16:08:ab:3c:60:8d:a4:35:d9:70:93: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A1:58:21:EF:EA:58:F0:0D:4A:E5:93:D2:FB:CB:D9:7A:9A:65:E1 X509v3 Authority Key Identifier: keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/nKFYIe_qWPANSuWT0vvL2XqaZeE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.196.175.0/24 Signature Algorithm: sha256WithRSAEncryption 82:ce:04:1c:40:c2:c4:8d:99:b6:00:1e:12:c5:8b:64:59:e9: 2f:4b:b9:6d:6c:87:59:08:ba:66:b3:96:c8:8f:9f:32:14:1b: c2:17:a5:e5:9c:00:13:21:df:73:c7:5f:3a:e5:59:ca:4b:ab: 70:f8:16:27:2f:e3:5c:09:aa:67:1e:8e:a9:90:88:e3:12:65: 12:e3:21:6b:d8:93:35:bb:e8:71:e2:b9:b9:44:22:36:c2:05: 07:3c:1f:e3:44:f4:84:a3:a1:08:ea:8e:2e:a8:14:66:a9:78: 98:fb:85:99:3d:db:28:01:92:59:8b:e9:47:46:ff:f1:8b:62: 8d:66:e7:cd:92:ad:a2:02:c6:bc:f0:7d:c6:5f:5a:f2:6e:a2: 03:a2:fd:df:7e:d8:b0:af:d0:85:ee:b2:5a:fd:82:8b:f0:5b: ec:64:6c:07:9f:69:87:c9:25:76:37:31:b5:92:9d:12:0a:09: 35:0f:b2:75:f9:ab:9e:c3:e6:24:e4:41:bf:40:52:00:23:40: 51:00:0a:b7:ac:01:1f:f1:68:0e:b6:5b:e8:bc:39:da:fd:fa: 85:af:07:21:2a:04:ee:4c:da:f7:b8:66:ff:d6:82:fc:c4:1d: 56:43:b3:68:90:0c:0f:98:55:a1:a7:59:28:aa:20:66:40:5f: f6:65:14:e8 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYz MDlGODM3NUFDNkQ4NjdDRjE0Qzk1RjI3QTc0RTREMkRGMTlCRDAeFw0yNTExMDMw ODQyMTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlDQTE1ODIxRUZFQTU4 RjAwRDRBRTU5M0QyRkJDQkQ5N0E5QTY1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsjLN1RQCKxYc9pUh5eEqhDsS0S55C1I1UaQHHR+QIhE1lGp5F 92I072yWUMSd2NCBYP/pHrLwUMUzJYo/qXKWgFsMN6K2+yDhQacvrW4Xxw78vO+Z eOFB6UyFjonNjXt3hZ0U3LzGqRAhUq09cSGbxJMYh3c5VjewNf9+AhHNziF9Cc03 u7MdmwAQIa85j/ccibuX5oadmTR+WoyAdDCkGmmiCzcp9R7iE0rUiNeLVZsmtl8T VZLBV4TcEWyQtH5WzZ+gxS+d1p2X9gWM+N2RzyBYIjsPv1gfQ7gy27ZYT7jakWGw PsMYKJ9SGPXYZwnwVa4WCKs8YI2kNdlwk8ApAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUnKFYIe/qWPANSuWT0vvL2XqaZeEwHwYDVR0jBBgwFoAUtjCfg3WsbYZ88UyV 8np05NLfGb0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvdGpDZmczV3NiWVo4OFV5VjhucDA1TkxmR2IwLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS90akNmZzNXc2JZWjg4VXlWOG5wMDVOTGZHYjAuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9uS0ZZSWVfcVdQQU5T dVdUMHZ2TDJYcWFaZUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ8SvMA0GCSqGSIb3DQEBCwUAA4IBAQCCzgQcQMLEjZm2AB4SxYtkWekvS7lt bIdZCLpms5bIj58yFBvCF6XlnAATId9zx1865VnKS6tw+BYnL+NcCapnHo6pkIjj EmUS4yFr2JM1u+hx4rm5RCI2wgUHPB/jRPSEo6EI6o4uqBRmqXiY+4WZPdsoAZJZ i+lHRv/xi2KNZufNkq2iAsa88H3GX1rybqIDov3fftiwr9CF7rJa/YKL8FvsZGwH n2mHySV2NzG1kp0SCgk1D7J1+auew+Yk5EG/QFIAI0BRAAq3rAEf8WgOtlvovDna /fqFrwchKgTuTNr3uGb/1oL8xB1WQ7NokAwPmFWhp1koqiBmQF/2ZRTo -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:21 2025 by rpki-client