$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/iJmEFfKdLJK9WTWJ3M2zsQL3Ol0.roa File: iJmEFfKdLJK9WTWJ3M2zsQL3Ol0.roa (raw, json) Hash identifier: XuGTMc06Lntg/W9vuNwEDfkrn+dDnciDr2hiT6DG3DU= Subject key identifier: 88:99:84:15:F2:9D:2C:92:BD:59:35:89:DC:CD:B3:B1:02:F7:3A:5D Certificate issuer: /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Certificate serial: 0530 Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/iJmEFfKdLJK9WTWJ3M2zsQL3Ol0.roa Signing time: Wed 28 Jan 2026 03:39:28 +0000 ROA not before: Wed 28 Jan 2026 03:39:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152624 IP address blocks: 165.99.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 15:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Validity Not Before: Jan 28 03:39:28 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=88998415F29D2C92BD593589DCCDB3B102F73A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:fe:dd:45:51:0f:eb:ea:78:6a:3f:96:6a: 0d:89:ea:f4:54:0f:ef:34:97:2a:69:7a:db:75:91: 99:2b:37:70:eb:79:11:ed:ce:4e:81:27:ab:a8:1c: 45:e2:c5:49:ba:dc:d2:7b:96:7a:14:7f:9e:ae:c2: f9:9c:19:3f:96:0b:9e:fa:29:b7:a0:00:3d:7d:1a: 93:0e:37:8b:bb:5d:6e:be:f2:ba:92:12:e4:22:f1: 2c:06:cc:7a:4e:c6:3c:17:7f:22:1f:37:e8:48:c4: 3e:3a:4d:01:8b:23:a6:09:ac:74:85:4b:bc:53:b7: ba:a4:93:42:2a:f4:47:16:f9:1a:d8:35:8b:f5:78: 99:dc:88:ea:45:4d:f8:79:b8:3a:09:83:53:db:53: 7e:01:43:9b:3d:b1:6e:d6:1a:3b:eb:5b:76:5c:f6: b8:7b:5e:b9:4b:3c:93:3c:f6:83:25:33:61:20:00: d7:12:73:fb:06:a9:4a:00:8e:8e:f4:d6:8b:36:d2: 71:b6:09:e4:bc:b5:7e:e0:40:67:ec:eb:4b:72:d4: 2f:95:4f:c4:96:bd:10:61:a7:89:94:8b:c1:a0:c6: c4:ab:bb:7b:43:8b:fd:51:d5:93:4d:7a:b8:f9:8d: 4b:cd:e9:b5:36:9b:cf:6e:07:5a:a6:9f:8e:6c:df: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:99:84:15:F2:9D:2C:92:BD:59:35:89:DC:CD:B3:B1:02:F7:3A:5D X509v3 Authority Key Identifier: keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/iJmEFfKdLJK9WTWJ3M2zsQL3Ol0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.99.67.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:58:48:97:98:b4:ff:e2:1e:f1:ba:4d:17:5e:bd:83:20:7e: 4e:b1:ec:6d:f5:a3:e4:5f:b0:41:f8:50:46:6e:ef:4c:49:ca: ae:2e:d3:1f:07:29:77:a1:a3:3e:39:aa:09:92:13:7f:fe:34: 8a:99:67:f0:81:0e:f5:3b:39:7a:99:7f:d2:89:99:7b:9a:b5: 62:ac:dd:dd:7a:0c:cb:44:bf:16:46:53:8c:83:fd:7f:24:42: fc:fd:bf:bf:df:66:06:af:8b:be:7f:fc:bd:20:81:db:78:c2: 63:15:f8:cd:06:df:31:f6:de:9a:1c:b6:08:9e:bb:16:a7:4a: 15:ae:84:4f:69:6c:26:28:0f:ad:d2:8b:c2:25:b3:38:55:a5: 7d:20:11:67:51:9c:3f:63:82:53:6f:30:f4:d1:73:5d:20:9d: 5b:09:de:37:d7:7e:ba:74:03:de:ef:d7:11:da:5f:0d:21:2e: 8b:c9:52:96:56:f9:cb:c2:5c:96:7d:27:8c:46:ca:c8:42:42: 13:b7:44:2f:6d:67:79:86:b9:46:e7:5b:ef:fb:65:3e:e8:c4: 4b:5d:44:15:06:24:78:3d:3d:2e:2b:74:fd:c8:25:63:97:28: db:fb:b2:10:f7:40:69:e2:30:27:bb:1d:25:a2:8d:85:c3:78: 42:b8:57:d4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlD NjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5RDAeFw0yNjAxMjgw MzM5MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4OTk4NDE1RjI5RDJD OTJCRDU5MzU4OURDQ0RCM0IxMDJGNzNBNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTCP7dRVEP6+p4aj+Wag2J6vRUD+80lyppett1kZkrN3DreRHt zk6BJ6uoHEXixUm63NJ7lnoUf56uwvmcGT+WC576KbegAD19GpMON4u7XW6+8rqS EuQi8SwGzHpOxjwXfyIfN+hIxD46TQGLI6YJrHSFS7xTt7qkk0Iq9EcW+RrYNYv1 eJnciOpFTfh5uDoJg1PbU34BQ5s9sW7WGjvrW3Zc9rh7XrlLPJM89oMlM2EgANcS c/sGqUoAjo701os20nG2CeS8tX7gQGfs60ty1C+VT8SWvRBhp4mUi8GgxsSru3tD i/1R1ZNNerj5jUvN6bU2m89uB1qmn45s3/ohAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiJmEFfKdLJK9WTWJ3M2zsQL3Ol0wHwYDVR0jBBgwFoAU+cYtwWoyWUFWZBQs knjF3cTYKZ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlP Ly1jWXR3V295V1VGV1pCUXNrbmpGM2NUWUtaMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvLWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPL2lKbUVGZktkTEpLOVdUV0oz TTJ6c1FMM09sMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACl Y0MwDQYJKoZIhvcNAQELBQADggEBAJxYSJeYtP/iHvG6TRdevYMgfk6x7G31o+Rf sEH4UEZu70xJyq4u0x8HKXehoz45qgmSE3/+NIqZZ/CBDvU7OXqZf9KJmXuatWKs 3d16DMtEvxZGU4yD/X8kQvz9v7/fZgavi75//L0ggdt4wmMV+M0G3zH23poctgie uxanShWuhE9pbCYoD63Si8IlszhVpX0gEWdRnD9jglNvMPTRc10gnVsJ3jfXfrp0 A97v1xHaXw0hLovJUpZW+cvCXJZ9J4xGyshCQhO3RC9tZ3mGuUbnW+/7ZT7oxEtd RBUGJHg9PS4rdP3IJWOXKNv7shD3QGniMCe7HSWijYXDeEK4V9Q= -----END CERTIFICATE-----Generated at Mon Mar 2 14:49:39 2026 by rpki-client