$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/ngM9AfLd76RmEwF4fUl-p_U5hjY.roa File: ngM9AfLd76RmEwF4fUl-p_U5hjY.roa (raw, json) Hash identifier: /skVHUh6pEhtW0w95j+NY8k26AtfHLky5krAMGko3tE= Subject key identifier: 9E:03:3D:01:F2:DD:EF:A4:66:13:01:78:7D:49:7E:A7:F5:39:86:36 Certificate issuer: /CN=063F818DACB171B835415ABD278993922F3CDC5D Certificate serial: 0296 Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ngM9AfLd76RmEwF4fUl-p_U5hjY.roa Signing time: Fri 22 Aug 2025 09:02:13 +0000 ROA not before: Fri 22 Aug 2025 09:02:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 103.220.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D Validity Not Before: Aug 22 09:02:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9E033D01F2DDEFA4661301787D497EA7F5398636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:74:ce:d9:25:e5:66:80:9a:2f:ac:d5:63: 12:41:ce:59:35:f6:90:c4:b5:25:1f:6d:4a:ab:ef: fa:9b:b8:1b:dc:0b:e5:a3:5d:b2:98:0f:f7:90:21: dd:89:2e:2a:57:1b:2a:4c:d5:e7:6d:74:bd:e6:a2: 92:ee:0d:17:52:33:28:96:f0:46:b8:29:c3:93:ba: 1c:89:57:f5:7e:cd:72:b6:79:9f:fe:6a:19:7f:b9: 4c:30:2f:48:cf:e3:97:cb:bc:06:e4:ef:6c:22:a4: 56:c4:97:b1:72:55:50:d3:44:e8:c1:1c:96:5e:ba: 2a:34:a0:c1:95:ae:1a:12:b5:d2:6c:b4:bd:8e:1e: 5f:a6:ab:aa:3e:6e:be:d9:71:72:79:63:8c:28:b8: 1f:ac:08:1f:ee:5d:2b:7e:5c:78:ce:a6:30:4c:f7: cb:79:b8:3e:66:b0:e0:b0:18:92:1c:85:ef:29:e3: ab:9b:fc:90:3f:23:b2:39:8f:2c:ae:8e:0f:58:0e: e4:95:11:6f:cd:43:64:4f:4d:92:1d:43:4b:63:c6: a7:74:34:f9:33:e4:a9:fb:b0:86:fb:62:1e:90:e3: ec:96:36:b1:36:eb:96:f3:69:e9:76:34:9c:28:56: 7e:74:bb:3b:39:84:fa:8e:c1:01:30:db:18:40:9a: 30:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:03:3D:01:F2:DD:EF:A4:66:13:01:78:7D:49:7E:A7:F5:39:86:36 X509v3 Authority Key Identifier: keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/ngM9AfLd76RmEwF4fUl-p_U5hjY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.218.0/23 Signature Algorithm: sha256WithRSAEncryption 69:73:ff:43:b5:6a:5a:ad:f7:0e:0b:e9:31:76:f1:8a:30:2d: 23:a6:25:a0:68:02:65:ae:3e:ce:69:e3:6b:d0:27:fe:e3:1a: 13:ab:1e:74:14:d1:d7:e8:35:9f:f0:4e:74:d0:03:19:11:a2: ca:04:fa:a1:9c:4e:10:87:16:75:99:96:ce:bb:31:b0:ec:e0: 2a:33:37:68:24:02:4e:81:23:7e:b1:2c:54:d8:62:8e:3b:96: 01:3d:e9:27:5a:88:2c:82:6c:9e:97:2c:e5:00:c0:05:bb:43: d7:16:14:2f:ef:0c:ce:f9:bd:3f:de:ba:43:e5:b6:49:31:b0: 2a:02:18:15:ba:6a:f6:d2:bf:29:69:0b:6d:c9:9c:f8:ab:40: e0:60:8d:92:d5:17:1f:91:fe:b5:a9:8d:4a:07:b5:a0:93:2e: 8d:80:5f:34:a3:8c:a4:2c:bd:bb:63:4b:4a:2d:10:2a:11:c6: ed:e4:b0:a6:7a:a7:b0:c4:73:eb:14:5d:b7:8b:46:3c:2b:4e: da:89:55:5c:95:e5:54:11:a2:ea:ea:92:d2:b6:d0:1e:3c:ac: fb:cd:51:73:32:f6:c7:fe:7d:39:ff:85:fe:a1:38:4f:f7:f0: 6f:17:07:67:a2:e4:8c:15:a8:c6:01:7f:a4:e6:50:79:23:ee: c8:f6:70:80 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICApYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYz RjgxOERBQ0IxNzFCODM1NDE1QUJEMjc4OTkzOTIyRjNDREM1RDAeFw0yNTA4MjIw OTAyMTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlFMDMzRDAxRjJEREVG QTQ2NjEzMDE3ODdENDk3RUE3RjUzOTg2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK03TO2SXlZoCaL6zVYxJBzlk19pDEtSUfbUqr7/qbuBvcC+Wj XbKYD/eQId2JLipXGypM1edtdL3mopLuDRdSMyiW8Ea4KcOTuhyJV/V+zXK2eZ/+ ahl/uUwwL0jP45fLvAbk72wipFbEl7FyVVDTROjBHJZeuio0oMGVrhoStdJstL2O Hl+mq6o+br7ZcXJ5Y4wouB+sCB/uXSt+XHjOpjBM98t5uD5msOCwGJIche8p46ub /JA/I7I5jyyujg9YDuSVEW/NQ2RPTZIdQ0tjxqd0NPkz5Kn7sIb7Yh6Q4+yWNrE2 65bzael2NJwoVn50uzs5hPqOwQEw2xhAmjCLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUngM9AfLd76RmEwF4fUl+p/U5hjYwHwYDVR0jBBgwFoAUBj+Bjayxcbg1QVq9 J4mTki883F0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERDL0Jq LUJqYXl4Y2JnMVFWcTlKNG1Ua2k4ODNGMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QmotQmpheXhjYmcxUVZxOUo0bVRraTg4M0YwLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVERDL25nTTlBZkxkNzZSbUV3RjRmVWwtcF9V NWhqWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn3NowDQYJ KoZIhvcNAQELBQADggEBAGlz/0O1alqt9w4L6TF28YowLSOmJaBoAmWuPs5p42vQ J/7jGhOrHnQU0dfoNZ/wTnTQAxkRosoE+qGcThCHFnWZls67MbDs4CozN2gkAk6B I36xLFTYYo47lgE96SdaiCyCbJ6XLOUAwAW7Q9cWFC/vDM75vT/eukPltkkxsCoC GBW6avbSvylpC23JnPirQOBgjZLVFx+R/rWpjUoHtaCTLo2AXzSjjKQsvbtjS0ot ECoRxu3ksKZ6p7DEc+sUXbeLRjwrTtqJVVyV5VQRourqktK20B48rPvNUXMy9sf+ fTn/hf6hOE/38G8XB2ei5IwVqMYBf6TmUHkj7sj2cIA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:59:56 2025 by rpki-client