$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Nfg7IxE6Hfzm1cs2N82W3xSU5GA.roa File: Nfg7IxE6Hfzm1cs2N82W3xSU5GA.roa (raw, json) Hash identifier: DpK0iD6ljzQNotaou2N6FvAYEk3Ol/8me+IIoHLgy+o= Subject key identifier: 35:F8:3B:23:11:3A:1D:FC:E6:D5:CB:36:37:CD:96:DF:14:94:E4:60 Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0DD4 Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Nfg7IxE6Hfzm1cs2N82W3xSU5GA.roa Signing time: Fri 22 Aug 2025 08:55:22 +0000 ROA not before: Fri 22 Aug 2025 08:55:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17408 IP address blocks: 103.123.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Aug 22 08:55:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=35F83B23113A1DFCE6D5CB3637CD96DF1494E460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:6e:fe:cc:cc:1d:7c:be:e0:3b:df:4a:e8: 1f:fc:14:8a:74:bb:45:ed:e8:58:4f:a8:61:71:43: 91:3b:ee:ce:f1:be:81:cc:99:e2:a6:07:fc:b8:c5: 51:43:79:7b:71:01:9d:0a:9d:cc:ad:60:e5:ed:13: c4:f9:89:86:3e:a8:d6:f0:fc:6e:b1:36:3d:40:cc: 10:33:3d:10:a4:65:c4:87:c0:e9:44:ac:b7:c2:36: 09:b9:55:df:c7:b4:be:88:34:d5:0a:f6:7e:ac:a8: 8a:e0:64:df:52:18:3b:de:f0:ac:53:c6:32:de:cd: fc:cf:77:16:6c:9f:1f:00:5c:3b:b8:c7:ff:9b:cc: f8:85:76:88:e5:11:31:de:a1:41:00:54:9d:2d:5f: 57:07:1a:4e:15:17:28:c9:e5:e9:ae:90:6d:97:49: 57:09:d9:fe:33:31:e2:66:37:41:bb:91:1c:65:06: 1b:12:6b:17:54:cd:c9:4c:10:70:96:4f:9c:72:47: 35:2e:08:42:5f:db:e8:d1:3d:8f:47:f0:a1:e3:9d: 2a:68:f8:49:82:d6:40:2b:86:aa:0a:5e:1f:76:07: fd:a5:50:ba:cf:46:17:fc:6f:0a:d8:ff:11:d4:f8: 9f:68:55:ec:cc:c0:bf:dc:7a:a7:93:f6:38:43:90: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:3B:23:11:3A:1D:FC:E6:D5:CB:36:37:CD:96:DF:14:94:E4:60 X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Nfg7IxE6Hfzm1cs2N82W3xSU5GA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.140.0/24 Signature Algorithm: sha256WithRSAEncryption 32:24:5a:c3:91:1b:1f:95:9c:70:ac:c6:9a:1a:87:6b:b7:29: 84:95:43:42:24:40:14:40:94:06:11:12:19:57:b8:1c:61:9a: 0b:55:58:ef:d9:74:aa:d3:20:8c:ca:11:4a:ab:ec:c5:d4:70: 13:15:de:8f:8f:81:9f:6c:8a:7c:5c:f4:f2:18:c7:36:0c:d9: a7:15:de:ef:a3:0e:33:8f:be:9e:41:df:4e:1b:fd:6b:1e:39: 2c:f3:22:75:3a:bc:f5:32:f3:9c:12:cb:ee:0a:f8:ab:90:43: 8b:6d:a7:1a:f6:7f:0d:dc:b6:d3:7f:a5:8d:fb:b6:d9:b4:76: bf:fd:80:8e:2e:10:84:56:0d:b1:9a:8a:ea:9d:19:c7:4b:b0: 54:70:a7:86:6d:44:8c:d1:b8:66:70:be:62:a9:6a:86:70:3a: 33:b2:7f:24:d1:05:f4:02:30:69:93:78:ce:5a:a9:b8:fe:65: 56:6c:38:50:80:cc:ce:db:35:38:15:6b:6e:98:93:91:89:f5: 4b:34:df:01:db:7a:2e:f9:ce:64:5b:41:2a:cc:b7:6a:aa:2f: 4b:b0:35:da:a3:0e:ae:d5:4c:f3:23:52:09:95:45:6d:0e:bf: 4b:c3:6b:b4:ce:b5:5e:2a:53:50:4c:a2:2a:23:81:0a:ca:c9: fe:ba:0e:1c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTA4MjIw ODU1MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM1RjgzQjIzMTEzQTFE RkNFNkQ1Q0IzNjM3Q0Q5NkRGMTQ5NEU0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8IG7+zMwdfL7gO99K6B/8FIp0u0Xt6FhPqGFxQ5E77s7xvoHM meKmB/y4xVFDeXtxAZ0KncytYOXtE8T5iYY+qNbw/G6xNj1AzBAzPRCkZcSHwOlE rLfCNgm5Vd/HtL6INNUK9n6sqIrgZN9SGDve8KxTxjLezfzPdxZsnx8AXDu4x/+b zPiFdojlETHeoUEAVJ0tX1cHGk4VFyjJ5emukG2XSVcJ2f4zMeJmN0G7kRxlBhsS axdUzclMEHCWT5xyRzUuCEJf2+jRPY9H8KHjnSpo+EmC1kArhqoKXh92B/2lULrP Rhf8bwrY/xHU+J9oVezMwL/ceqeT9jhDkGJvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUNfg7IxE6Hfzm1cs2N82W3xSU5GAwHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvTmZnN0l4RTZIZnptMWNz Mk44MlczeFNVNUdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd7jDANBgkqhkiG9w0BAQsFAAOCAQEAMiRaw5EbH5WccKzGmhqHa7cphJVDQiRA FECUBhESGVe4HGGaC1VY79l0qtMgjMoRSqvsxdRwExXej4+Bn2yKfFz08hjHNgzZ pxXe76MOM4++nkHfThv9ax45LPMidTq89TLznBLL7gr4q5BDi22nGvZ/Ddy203+l jfu22bR2v/2Aji4QhFYNsZqK6p0Zx0uwVHCnhm1EjNG4ZnC+YqlqhnA6M7J/JNEF 9AIwaZN4zlqpuP5lVmw4UIDMzts1OBVrbpiTkYn1SzTfAdt6LvnOZFtBKsy3aqov S7A12qMOrtVM8yNSCZVFbQ6/S8NrtM61XipTUEyiKiOBCsrJ/roOHA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:12:59 2025 by rpki-client