$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/-qhAOnbtY8QEBBEQQAu8255O3vo.roa File: -qhAOnbtY8QEBBEQQAu8255O3vo.roa (raw, json) Hash identifier: HgYP23Nefxr8KP/W3iaaGlpld97HFDJLQ0U8PI9T41U= Subject key identifier: FA:A8:40:3A:76:ED:63:C4:04:04:11:10:40:0B:BC:DB:9E:4E:DE:FA Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Certificate serial: 0DB3 Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/-qhAOnbtY8QEBBEQQAu8255O3vo.roa Signing time: Fri 22 Aug 2025 08:58:04 +0000 ROA not before: Fri 22 Aug 2025 08:58:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 43.250.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Validity Not Before: Aug 22 08:58:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FAA8403A76ED63C404041110400BBCDB9E4EDEFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ec:10:2b:4c:fc:12:19:d9:47:9b:ab:23:1d: c4:89:e0:90:4c:aa:a2:a5:43:1b:d5:f2:77:98:50: 9b:58:a1:8c:d2:0b:7b:58:02:bf:33:15:40:02:ee: 40:97:a7:e3:8d:72:cb:c0:4e:c8:77:37:47:b6:2f: d1:df:71:aa:90:ff:ad:4a:05:c9:c1:91:73:23:3a: 63:89:f4:ce:69:63:8c:ff:8e:34:63:f3:da:8a:7f: e1:68:71:04:60:af:0f:fa:f6:74:a3:e9:49:8c:d7: f2:b2:6d:c0:69:4c:14:44:be:ee:90:41:bc:c8:a5: 51:81:6a:5b:76:65:0a:06:28:c5:4a:88:d8:01:12: 4c:06:0a:cd:da:8b:63:19:74:fc:00:3b:32:30:ed: 28:d9:f8:fa:07:1c:13:92:8e:ad:e8:21:7c:2e:79: 0e:22:ae:7d:21:a8:2c:3e:8d:79:7c:26:4a:e1:2d: 06:e0:aa:dc:e0:07:0a:df:0a:72:17:6d:9c:24:cd: 83:2d:f2:4f:c5:19:d5:33:c8:92:5e:14:5b:e0:c7: 49:6a:26:19:df:6f:be:f3:58:a5:cf:f2:b6:76:39: 3d:42:f2:7e:10:07:1a:46:96:a6:23:5c:1a:ac:8c: d4:39:a3:33:4c:30:5f:e9:c6:bd:14:84:45:e7:7d: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A8:40:3A:76:ED:63:C4:04:04:11:10:40:0B:BC:DB:9E:4E:DE:FA X509v3 Authority Key Identifier: keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/-qhAOnbtY8QEBBEQQAu8255O3vo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.44.0/23 Signature Algorithm: sha256WithRSAEncryption 09:a0:a0:04:b8:97:43:fd:86:9d:83:c8:f9:d3:d2:2e:bd:61: 1a:00:8b:b6:aa:73:96:58:9a:f2:d5:c4:83:db:8f:af:58:43: 43:43:af:cd:05:57:e9:3c:91:94:80:28:ff:79:f6:50:5d:49: da:d6:e3:9e:da:93:96:71:8f:b5:b3:4d:b7:06:76:8b:3b:3c: 2c:4c:2f:8d:7e:25:34:f1:ea:ea:65:20:be:78:7f:f5:b0:27: 0e:f8:b8:84:6f:86:70:eb:4e:ec:f1:81:cb:a6:5b:aa:14:22: 01:9a:7a:b9:2a:41:b6:f5:ec:af:4b:7e:f8:67:cf:b4:c4:91: 52:eb:25:34:ee:13:b0:e3:a8:d7:5a:0a:b2:9f:9f:ea:08:95: 96:08:c6:e2:a4:c5:7c:49:bb:14:a0:f0:ac:e3:e8:48:86:b6: 66:83:a4:67:ee:7e:f4:de:27:fe:5f:20:87:13:de:2c:e3:d7: 7f:e8:13:a7:72:10:92:0e:0d:a6:d4:0e:50:5b:15:da:62:2c: ee:08:18:3c:18:20:5d:42:7f:9a:c1:eb:25:33:03:51:69:8f: ad:7b:94:4e:4e:af:4f:90:43:5e:3d:0c:4e:9e:e3:ad:89:d5: 90:3b:f4:76:1b:1a:fa:99:5c:23:1e:20:c9:ed:69:61:2e:04: ce:62:09:7d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VD N0YxNjc3QkI0OTIzODAyODIxNTNCQjc3RUMyRUJFMzE4NTM3ODAeFw0yNTA4MjIw ODU4MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZBQTg0MDNBNzZFRDYz QzQwNDA0MTExMDQwMEJCQ0RCOUU0RURFRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDv7BArTPwSGdlHm6sjHcSJ4JBMqqKlQxvV8neYUJtYoYzSC3tY Ar8zFUAC7kCXp+ONcsvATsh3N0e2L9HfcaqQ/61KBcnBkXMjOmOJ9M5pY4z/jjRj 89qKf+FocQRgrw/69nSj6UmM1/KybcBpTBREvu6QQbzIpVGBalt2ZQoGKMVKiNgB EkwGCs3ai2MZdPwAOzIw7SjZ+PoHHBOSjq3oIXwueQ4irn0hqCw+jXl8JkrhLQbg qtzgBwrfCnIXbZwkzYMt8k/FGdUzyJJeFFvgx0lqJhnfb77zWKXP8rZ2OT1C8n4Q BxpGlqYjXBqsjNQ5ozNMMF/pxr0UhEXnfRSvAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU+qhAOnbtY8QEBBEQQAu8255O3vowHwYDVR0jBBgwFoAUfsfxZ3u0kjgCghU7 t37C6+MYU3gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL2Zz ZnhaM3Uwa2pnQ2doVTd0MzdDNi1NWVUzZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZnNmeFozdTBramdDZ2hVN3QzN0M2LU1ZVTNnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVFdULy1xaEFPbmJ0WThRRUJCRVFRQXU4MjU1 TzN2by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEr+iwwDQYJ KoZIhvcNAQELBQADggEBAAmgoAS4l0P9hp2DyPnT0i69YRoAi7aqc5ZYmvLVxIPb j69YQ0NDr80FV+k8kZSAKP959lBdSdrW457ak5Zxj7WzTbcGdos7PCxML41+JTTx 6uplIL54f/WwJw74uIRvhnDrTuzxgcumW6oUIgGaerkqQbb17K9Lfvhnz7TEkVLr JTTuE7DjqNdaCrKfn+oIlZYIxuKkxXxJuxSg8Kzj6EiGtmaDpGfufvTeJ/5fIIcT 3izj13/oE6dyEJIODabUDlBbFdpiLO4IGDwYIF1Cf5rB6yUzA1Fpj617lE5Or0+Q Q149DE6e462J1ZA79HYbGvqZXCMeIMntaWEuBM5iCX0= -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:09 2025 by rpki-client