$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/MmRwGizQe7P5XOYXvAa2onWIGp4.roa File: MmRwGizQe7P5XOYXvAa2onWIGp4.roa (raw, json) Hash identifier: 7TrID/axKbgXxyMlZObAezfY1RJP1h2uhl97dQkI1Io= Subject key identifier: 32:64:70:1A:2C:D0:7B:B3:F9:5C:E6:17:BC:06:B6:A2:75:88:1A:9E Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0E19 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/MmRwGizQe7P5XOYXvAa2onWIGp4.roa Signing time: Fri 22 Aug 2025 09:00:51 +0000 ROA not before: Fri 22 Aug 2025 09:00:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 101.3.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3609 (0xe19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 22 09:00:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3264701A2CD07BB3F95CE617BC06B6A275881A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:f6:db:42:75:b6:d6:a2:ce:f0:49:1c:b9: 0d:6d:45:c0:8f:61:c5:72:c8:da:e4:0c:a0:02:7a: 61:30:81:db:f0:49:72:fd:9f:30:1c:56:47:e6:98: 67:9f:b6:6d:3b:f7:2f:f2:a4:86:7c:44:64:9e:0e: a9:b1:1c:6c:2e:47:4b:55:6f:26:4d:d3:8b:8b:ca: 5d:39:49:b3:74:c4:67:e8:60:75:87:1b:de:1f:43: d6:d3:0d:d3:1b:37:cc:03:dd:bb:85:2e:fc:7b:4b: 3e:3a:a3:07:e0:5a:7f:dc:d4:51:24:88:11:30:d0: 97:ca:f2:1d:fd:86:0c:fd:4a:a8:c7:79:47:eb:01: b7:9f:00:d1:37:b2:03:6b:47:29:af:9f:df:79:8a: 28:b4:eb:f1:fe:b7:36:5f:15:de:8c:21:85:6a:e5: 11:91:54:c4:91:ee:be:4b:cc:4b:81:42:d5:52:f4: 0f:82:02:8b:6f:d1:48:8f:ce:20:8a:e3:4f:5b:44: 6c:8b:93:f7:c7:3a:6f:ef:fc:f8:fd:da:99:9f:89: ff:a8:36:55:92:de:30:68:d4:0a:49:46:b9:05:b1: 82:d0:73:c1:2c:63:b2:c1:95:a4:89:e0:9c:d4:32: 90:5b:07:6e:51:4d:4a:3d:d6:75:0a:da:74:f8:b6: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:64:70:1A:2C:D0:7B:B3:F9:5C:E6:17:BC:06:B6:A2:75:88:1A:9E X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/MmRwGizQe7P5XOYXvAa2onWIGp4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.108.0/22 Signature Algorithm: sha256WithRSAEncryption df:bf:ea:38:1d:23:77:cc:e2:69:fc:01:b2:a0:83:ff:53:f5: 26:44:c4:3a:33:6f:d7:42:8b:97:c6:79:fb:1c:d7:8e:ee:93: e5:5b:9e:b0:0e:7e:fe:cb:1a:ef:77:e4:27:7d:96:ac:73:df: 9f:87:b6:00:93:6f:12:db:62:d6:ab:8f:af:42:05:14:99:9c: 7d:fa:94:ce:5c:17:01:61:80:03:0c:0d:b1:10:4c:38:44:c8: 99:91:89:ff:ac:b2:23:e9:37:37:46:29:27:6c:3d:09:0d:20: 69:58:bd:7a:ba:cc:f0:27:9e:81:26:2f:66:6b:d8:55:93:f5: 77:4b:b6:92:83:b4:bb:65:59:3d:46:06:ea:5d:49:49:57:f0: 68:4b:23:c3:b1:54:11:eb:2d:7b:da:59:31:0e:83:cd:10:30: d4:4d:f3:a4:0c:c7:88:ff:3c:4c:8d:f2:bf:ba:8d:69:b6:3d: 3b:5c:9a:00:df:6f:0c:a1:ed:89:14:d2:39:14:24:c8:de:d1: 56:fc:98:9a:b7:dd:e8:6e:2a:7e:90:3b:13:5b:02:ee:47:b3: 0d:7d:a9:10:b9:c5:9d:58:4e:f9:24:89:12:f2:32:2d:ea:4e: db:53:fc:b2:eb:dd:f4:34:5d:1d:98:35:0b:23:60:b1:bf:da: 67:8c:ea:f5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTA4MjIw OTAwNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMyNjQ3MDFBMkNEMDdC QjNGOTVDRTYxN0JDMDZCNkEyNzU4ODFBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu1PbbQnW21qLO8EkcuQ1tRcCPYcVyyNrkDKACemEwgdvwSXL9 nzAcVkfmmGeftm079y/ypIZ8RGSeDqmxHGwuR0tVbyZN04uLyl05SbN0xGfoYHWH G94fQ9bTDdMbN8wD3buFLvx7Sz46owfgWn/c1FEkiBEw0JfK8h39hgz9SqjHeUfr AbefANE3sgNrRymvn995iii06/H+tzZfFd6MIYVq5RGRVMSR7r5LzEuBQtVS9A+C Aotv0UiPziCK409bRGyLk/fHOm/v/Pj92pmfif+oNlWS3jBo1ApJRrkFsYLQc8Es Y7LBlaSJ4JzUMpBbB25RTUo91nUK2nT4tnqFAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUMmRwGizQe7P5XOYXvAa2onWIGp4wHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L01tUndHaXpRZTdQ NVhPWVh2QWEyb25XSUdwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJlA2wwDQYJKoZIhvcNAQELBQADggEBAN+/6jgdI3fM4mn8AbKgg/9T9SZE xDozb9dCi5fGefsc147uk+VbnrAOfv7LGu935Cd9lqxz35+HtgCTbxLbYtarj69C BRSZnH36lM5cFwFhgAMMDbEQTDhEyJmRif+ssiPpNzdGKSdsPQkNIGlYvXq6zPAn noEmL2Zr2FWT9XdLtpKDtLtlWT1GBupdSUlX8GhLI8OxVBHrLXvaWTEOg80QMNRN 86QMx4j/PEyN8r+6jWm2PTtcmgDfbwyh7YkU0jkUJMje0Vb8mJq33ehuKn6QOxNb Au5Hsw19qRC5xZ1YTvkkiRLyMi3qTttT/LLr3fQ0XR2YNQsjYLG/2meM6vU= -----END CERTIFICATE-----Generated at Wed Nov 5 18:31:33 2025 by rpki-client