$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/aYWMSqmBB6ik2GyP0b0tZZVkHT0.roa File: aYWMSqmBB6ik2GyP0b0tZZVkHT0.roa (raw, json) Hash identifier: u/+EJCjirKhwltPebNClCNGDdR/3KvninTPQeVJChdk= Subject key identifier: 69:85:8C:4A:A9:81:07:A8:A4:D8:6C:8F:D1:BD:2D:65:95:64:1D:3D Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0DD3 Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/aYWMSqmBB6ik2GyP0b0tZZVkHT0.roa Signing time: Fri 22 Aug 2025 08:55:22 +0000 ROA not before: Fri 22 Aug 2025 08:55:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17408 IP address blocks: 103.123.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3539 (0xdd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Aug 22 08:55:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=69858C4AA98107A8A4D86C8FD1BD2D6595641D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:d6:33:e2:6d:b8:c5:27:da:d3:ae:23:76: c9:00:06:6e:62:a6:5d:ed:2b:18:3f:5c:29:10:d3: 39:81:38:cb:38:b8:dc:2c:31:da:f9:86:45:6c:6e: 76:75:8b:c5:fb:d8:b7:e6:ef:5c:4d:18:77:47:69: 1e:5d:45:6b:4a:51:58:f8:68:4a:6b:43:71:26:10: 75:fa:48:35:61:d0:a0:ae:6a:06:4d:a6:56:0c:63: 88:d0:48:b2:fe:02:7e:b2:cd:d6:8c:ea:17:e3:89: 92:9a:1c:82:36:51:8c:48:c2:d3:45:33:a8:4b:a2: 90:8a:bd:92:73:a6:45:8a:c7:e8:5d:e7:c7:6d:d9: e0:77:90:0a:37:a0:c7:d1:ad:92:f2:5e:df:7d:d3: ce:37:87:67:4d:28:3f:95:69:4c:b5:d4:fa:d5:c0: b3:18:ce:31:9d:be:59:80:8a:2a:93:e5:6c:a1:8c: e2:ba:d8:d8:34:15:34:b4:46:6c:a8:ba:52:12:29: ef:c2:d9:f8:e7:59:db:67:71:2d:53:cf:10:57:69: 24:a2:8e:b9:2f:53:ab:14:0e:83:82:56:f7:af:93: f9:68:9d:06:d2:17:de:c4:84:15:4c:08:10:b1:17: bb:bd:7c:4c:f4:a5:3d:f4:4b:41:8a:cc:dd:6f:79: 5b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:85:8C:4A:A9:81:07:A8:A4:D8:6C:8F:D1:BD:2D:65:95:64:1D:3D X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/aYWMSqmBB6ik2GyP0b0tZZVkHT0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.140.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:f7:39:81:88:69:3d:3d:a7:71:c3:50:9d:22:4a:f7:ce:0b: c3:0e:8f:6f:6c:3d:ac:81:38:ed:ac:a9:9f:6d:45:3d:7d:07: c0:fb:d0:5f:b3:78:42:95:fc:6d:76:7f:77:9a:ce:f6:46:a0: d1:1d:f5:38:47:e0:49:6a:8a:15:2e:6c:e0:b8:c9:fc:60:d6: 64:53:05:82:61:a6:1c:24:33:e4:08:67:b3:83:a7:fb:57:63: e2:28:12:2d:2f:2f:a3:d0:b5:0b:1f:64:62:49:a2:5c:b3:51: a8:44:df:d7:33:13:4d:20:0a:d2:a6:23:8a:89:7d:68:54:36: 19:24:be:66:50:4a:94:19:d4:f0:e5:58:d1:8d:f8:7e:80:c5: 1f:cd:6b:ef:28:08:0e:de:ca:5a:53:fc:dc:50:4c:38:f5:bf: 16:63:bf:db:fb:95:92:05:9c:db:c9:e4:ee:1f:44:89:1e:da: fd:60:23:7c:56:6a:91:82:fb:ff:3e:6c:64:c7:34:81:bc:18: 40:21:fd:44:3c:69:17:93:e4:24:92:1d:9e:f3:d9:49:62:3e: 11:a7:25:60:8b:1c:41:84:e8:b1:9d:15:5e:9e:27:9d:23:15: fa:b7:60:e7:66:da:22:8a:11:60:64:0f:5f:1d:b5:49:db:d4: aa:7d:d0:e2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTA4MjIw ODU1MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY5ODU4QzRBQTk4MTA3 QThBNEQ4NkM4RkQxQkQyRDY1OTU2NDFEM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbRNYz4m24xSfa064jdskABm5ipl3tKxg/XCkQ0zmBOMs4uNws Mdr5hkVsbnZ1i8X72Lfm71xNGHdHaR5dRWtKUVj4aEprQ3EmEHX6SDVh0KCuagZN plYMY4jQSLL+An6yzdaM6hfjiZKaHII2UYxIwtNFM6hLopCKvZJzpkWKx+hd58dt 2eB3kAo3oMfRrZLyXt990843h2dNKD+VaUy11PrVwLMYzjGdvlmAiiqT5WyhjOK6 2Ng0FTS0RmyoulISKe/C2fjnWdtncS1TzxBXaSSijrkvU6sUDoOCVvevk/lonQbS F97EhBVMCBCxF7u9fEz0pT30S0GKzN1veVvPAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUaYWMSqmBB6ik2GyP0b0tZZVkHT0wHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvYVlXTVNxbUJCNmlrMkd5 UDBiMHRaWlZrSFQwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amd7jDANBgkqhkiG9w0BAQsFAAOCAQEAe/c5gYhpPT2nccNQnSJK984Lww6Pb2w9 rIE47aypn21FPX0HwPvQX7N4QpX8bXZ/d5rO9kag0R31OEfgSWqKFS5s4LjJ/GDW ZFMFgmGmHCQz5Ahns4On+1dj4igSLS8vo9C1Cx9kYkmiXLNRqETf1zMTTSAK0qYj iol9aFQ2GSS+ZlBKlBnU8OVY0Y34foDFH81r7ygIDt7KWlP83FBMOPW/FmO/2/uV kgWc28nk7h9EiR7a/WAjfFZqkYL7/z5sZMc0gbwYQCH9RDxpF5PkJJIdnvPZSWI+ EaclYIscQYTosZ0VXp4nnSMV+rdg52baIooRYGQPXx21SdvUqn3Q4g== -----END CERTIFICATE-----Generated at Wed Nov 5 04:59:23 2025 by rpki-client