$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFU/NbPar3BUYlliItSGa4n9j5rT5oE.roa File: NbPar3BUYlliItSGa4n9j5rT5oE.roa (raw, json) Hash identifier: WMly4YmM8b2GNIglXNrpB66PWuIM8QUKX+vYr2SJY00= Subject key identifier: 35:B3:DA:AF:70:54:62:59:62:22:D4:86:6B:89:FD:8F:9A:D3:E6:81 Certificate issuer: /CN=755748435F601F238562117ECF4335000C89E5F7 Certificate serial: 03 Authority key identifier: 75:57:48:43:5F:60:1F:23:85:62:11:7E:CF:43:35:00:0C:89:E5:F7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/NbPar3BUYlliItSGa4n9j5rT5oE.roa Signing time: Tue 04 Nov 2025 06:09:41 +0000 ROA not before: Tue 04 Nov 2025 06:09:41 +0000 ROA not after: Tue 01 Sep 2026 15:30:20 +0000 asID: 9918 IP address blocks: 202.133.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755748435F601F238562117ECF4335000C89E5F7 Validity Not Before: Nov 4 06:09:41 2025 GMT Not After : Sep 1 15:30:20 2026 GMT Subject: CN=35B3DAAF705462596222D4866B89FD8F9AD3E681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:b3:e8:61:f2:da:ed:e1:fd:eb:01:83:98: 4b:36:c6:18:57:70:71:a4:d7:7a:ae:fc:22:13:fa: 10:97:32:2f:8e:11:31:af:6e:16:9f:09:1b:12:dd: d6:21:82:86:1a:fa:8a:61:ad:58:bc:49:fa:de:42: e9:06:12:0a:93:19:08:ac:91:05:ca:41:b2:90:85: 7b:74:d4:95:29:9d:16:6e:77:21:78:cd:86:f5:d4: 0f:97:b7:2b:d1:1c:af:c6:7b:04:ee:cc:34:8e:a2: c2:11:de:2f:a5:f9:54:90:5e:f1:6d:55:c5:54:be: 20:de:2c:c2:fe:65:d4:6c:e1:66:ad:24:8b:39:12: 93:09:8b:20:ec:41:75:f2:98:76:45:9d:ac:3f:d8: 0f:c7:70:6a:44:56:14:ee:8d:41:49:e2:c3:78:29: a2:87:59:e7:9e:22:2a:97:f9:d3:6a:e0:49:8a:8c: d6:2c:8a:00:e5:00:71:c5:86:79:17:2c:41:c3:70: a8:1f:0e:cf:c3:41:d7:5b:fb:08:62:a5:60:cd:63: 20:40:73:4e:d9:f5:0a:84:6b:ed:ef:46:8c:92:62: ec:af:e7:0b:86:29:60:51:02:63:6a:5a:0f:a6:f3: 77:46:a5:0b:4c:80:d7:e1:15:46:09:a1:40:f6:22: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:DA:AF:70:54:62:59:62:22:D4:86:6B:89:FD:8F:9A:D3:E6:81 X509v3 Authority Key Identifier: keyid:75:57:48:43:5F:60:1F:23:85:62:11:7E:CF:43:35:00:0C:89:E5:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dVdIQ19gHyOFYhF-z0M1AAyJ5fc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFU/NbPar3BUYlliItSGa4n9j5rT5oE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.133.68.0/23 Signature Algorithm: sha256WithRSAEncryption 62:06:54:08:ab:d6:90:99:7d:23:19:f6:3c:15:51:f5:07:09: 6a:e0:db:52:d0:98:ea:7f:26:4e:f7:a2:ed:d8:f1:59:bc:0a: 14:0c:cb:72:40:16:50:11:db:3e:7e:c5:48:18:07:9b:ec:d5: 94:62:65:21:db:94:6e:5b:6a:fe:58:65:80:fc:dd:13:f3:7f: 30:fc:64:9a:2e:7c:eb:7f:8a:33:cc:f0:c1:39:68:24:5c:b2: c4:fc:73:b8:52:f5:4c:96:ff:53:90:4b:74:03:69:45:12:b1: ca:a7:dd:69:a2:c3:b1:92:ab:be:2f:09:bd:43:0c:6a:42:a1: b6:bd:b6:02:da:90:65:00:c5:41:4d:72:06:db:37:6e:ee:b0: 37:89:84:d4:fc:0d:94:dc:bb:6a:b4:41:16:46:6b:e2:10:c0: b8:44:aa:2e:4a:33:1f:69:49:29:fc:64:93:ec:76:36:8b:27: b6:8d:19:1f:f1:07:bd:36:12:a4:35:2b:1a:11:cd:1e:b4:ac: 07:d6:e3:b0:01:26:35:38:bc:79:2a:7c:5b:ff:45:32:f9:b2: b6:eb:b2:01:cb:d8:52:7a:71:d4:4e:cd:73:b3:57:5a:3a:fc: d4:f1:37:89:58:2b:1b:8e:f2:11:5d:eb:63:99:b0:bc:82:33: 96:ee:be:c5 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NTU3 NDg0MzVGNjAxRjIzODU2MjExN0VDRjQzMzUwMDBDODlFNUY3MB4XDTI1MTEwNDA2 MDk0MVoXDTI2MDkwMTE1MzAyMFowMzExMC8GA1UEAxMoMzVCM0RBQUY3MDU0NjI1 OTYyMjJENDg2NkI4OUZEOEY5QUQzRTY4MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKSbs+hh8trt4f3rAYOYSzbGGFdwcaTXeq78IhP6EJcyL44RMa9u Fp8JGxLd1iGChhr6imGtWLxJ+t5C6QYSCpMZCKyRBcpBspCFe3TUlSmdFm53IXjN hvXUD5e3K9Ecr8Z7BO7MNI6iwhHeL6X5VJBe8W1VxVS+IN4swv5l1GzhZq0kizkS kwmLIOxBdfKYdkWdrD/YD8dwakRWFO6NQUniw3gpoodZ554iKpf502rgSYqM1iyK AOUAccWGeRcsQcNwqB8Oz8NB11v7CGKlYM1jIEBzTtn1CoRr7e9GjJJi7K/nC4Yp YFECY2paD6bzd0alC0yA1+EVRgmhQPYiQ00CAwEAAaOCAewwggHoMB0GA1UdDgQW BBQ1s9qvcFRiWWIi1IZrif2PmtPmgTAfBgNVHSMEGDAWgBR1V0hDX2AfI4ViEX7P QzUADInl9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQUlGVS9k VmRJUTE5Z0h5T0ZZaEYtejBNMUFBeUo1ZmMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2RWZElRMTlnSHlPRlloRi16ME0xQUF5SjVmYy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RBSUZVL05iUGFyM0JVWWxsaUl0U0dhNG45 ajVyVDVvRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKhUQw DQYJKoZIhvcNAQELBQADggEBAGIGVAir1pCZfSMZ9jwVUfUHCWrg21LQmOp/Jk73 ou3Y8Vm8ChQMy3JAFlAR2z5+xUgYB5vs1ZRiZSHblG5bav5YZYD83RPzfzD8ZJou fOt/ijPM8ME5aCRcssT8c7hS9UyW/1OQS3QDaUUSscqn3Wmiw7GSq74vCb1DDGpC oba9tgLakGUAxUFNcgbbN27usDeJhNT8DZTcu2q0QRZGa+IQwLhEqi5KMx9pSSn8 ZJPsdjaLJ7aNGR/xB702EqQ1KxoRzR60rAfW47ABJjU4vHkqfFv/RTL5srbrsgHL 2FJ6cdROzXOzV1o6/NTxN4lYKxuO8hFd62OZsLyCM5buvsU= -----END CERTIFICATE-----Generated at Wed Nov 5 21:57:08 2025 by rpki-client