$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/FJkrjvet6pnYVHl1JNbcizxL0g8.roa File: FJkrjvet6pnYVHl1JNbcizxL0g8.roa (raw, json) Hash identifier: BzeMzMG841+F32q3IBheqxZDU5E0CWxvuV3d5ezHa3s= Subject key identifier: 14:99:2B:8E:F7:AD:EA:99:D8:54:79:75:24:D6:DC:8B:3C:4B:D2:0F Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Certificate serial: 0384 Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/FJkrjvet6pnYVHl1JNbcizxL0g8.roa Signing time: Wed 01 Oct 2025 15:51:13 +0000 ROA not before: Wed 01 Oct 2025 15:51:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150766 IP address blocks: 160.191.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Validity Not Before: Oct 1 15:51:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=14992B8EF7ADEA99D854797524D6DC8B3C4BD20F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:d2:7c:c2:67:46:8c:e2:cf:53:30:f3:8b: b1:e5:7e:6c:53:c7:1b:55:4d:02:b9:3a:ed:b9:5f: 68:9e:56:4d:92:fb:7a:04:50:c9:d2:c9:3e:bd:78: 9a:a7:68:b8:70:4d:f6:e9:b5:c9:68:bb:a1:b7:4a: 45:8b:a3:1f:bf:14:30:aa:8c:4d:58:29:2c:55:2e: 91:2e:5d:be:10:95:15:03:e8:b6:72:19:32:f4:27: 6a:ff:d4:1f:70:4c:e6:4b:eb:58:00:e9:2f:33:ab: 62:ad:ef:db:90:8c:99:3a:44:33:cc:7a:bd:2c:9d: c9:68:a2:ee:c7:dc:8d:86:97:ed:71:fd:85:05:2e: a1:97:fd:8e:6b:8a:12:4c:e2:05:43:e8:76:dc:01: 2b:13:14:4d:79:95:f1:64:ca:7a:7e:5a:4c:69:51: 21:da:fe:dd:bc:2d:a3:8e:14:91:b2:ad:76:97:90: b5:bd:3a:c4:85:e9:cc:0d:d2:96:d4:8e:2e:bb:42: e2:de:94:e7:e2:81:6e:ba:ba:47:3f:dc:a7:07:1a: 0c:df:b7:3d:71:ec:06:b7:c9:d6:b7:f3:3f:2e:ab: 56:1e:4a:31:11:ff:f7:fb:a3:d4:8e:75:82:56:3a: de:72:77:75:55:2e:84:94:82:55:4e:2a:4f:c9:ac: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:2B:8E:F7:AD:EA:99:D8:54:79:75:24:D6:DC:8B:3C:4B:D2:0F X509v3 Authority Key Identifier: keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/FJkrjvet6pnYVHl1JNbcizxL0g8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.8.0/24 Signature Algorithm: sha256WithRSAEncryption 81:a2:8a:86:f0:a3:62:89:16:32:0a:4c:8d:b2:9c:32:04:b3: 9f:c5:f4:3e:6a:ac:46:6a:d6:db:c7:b3:63:14:36:a9:ca:12: 86:52:65:75:34:0c:bb:f2:84:08:15:1e:17:69:9d:27:10:ee: 61:58:49:7f:00:d6:46:19:87:c4:61:bb:77:c7:22:f2:e6:e9: 10:a0:88:e4:7e:9e:31:9c:c7:38:aa:09:d0:74:e4:78:c8:92: 97:85:e6:26:f7:fd:ba:ff:a5:42:b7:b0:6e:5b:73:6e:51:c6: 13:1f:15:c1:a3:7b:ec:4c:96:06:d7:44:67:3b:03:91:11:3f: 22:e3:29:a9:e2:aa:d0:15:8d:6d:76:4c:75:49:32:d3:60:6a: 95:6d:57:30:ab:35:4f:6c:1a:f8:d5:6d:a2:31:a5:94:d4:30: fc:f3:5c:b6:9b:55:89:01:37:36:95:a2:f9:23:4a:79:15:c0: c1:8d:f9:bb:52:ee:de:a6:e6:be:e4:03:7a:86:06:78:12:99: 53:fc:30:6e:68:7d:d5:c4:71:21:04:89:bd:83:a2:61:9c:f0: d5:bf:25:c7:43:04:b3:77:e7:44:fb:ee:cf:d1:dc:18:2b:52: 8e:4a:ad:2d:c7:13:19:f2:31:ff:da:ea:fd:ba:30:74:2a:35: 97:d9:66:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjBB Q0NBODcxODUwMDM3M0FGRjc3QjQxNEIyM0RDNkE1RjE0NzRFRTAeFw0yNTEwMDEx NTUxMTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE0OTkyQjhFRjdBREVB OTlEODU0Nzk3NTI0RDZEQzhCM0M0QkQyMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAwtJ8wmdGjOLPUzDzi7HlfmxTxxtVTQK5Ou25X2ieVk2S+3oE UMnSyT69eJqnaLhwTfbptclou6G3SkWLox+/FDCqjE1YKSxVLpEuXb4QlRUD6LZy GTL0J2r/1B9wTOZL61gA6S8zq2Kt79uQjJk6RDPMer0sncloou7H3I2Gl+1x/YUF LqGX/Y5rihJM4gVD6HbcASsTFE15lfFkynp+WkxpUSHa/t28LaOOFJGyrXaXkLW9 OsSF6cwN0pbUji67QuLelOfigW66ukc/3KcHGgzftz1x7Aa3yda38z8uq1YeSjER //f7o9SOdYJWOt5yd3VVLoSUglVOKk/JrKH5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFJkrjvet6pnYVHl1JNbcizxL0g8wHwYDVR0jBBgwFoAUIKzKhxhQA3Ov93tB SyPcal8UdO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERE L0lLektoeGhRQTNPdjkzdEJTeVBjYWw4VWRPNC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSUt6S2h4aFFBM092OTN0QlN5UGNhbDhVZE80LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSEREL0ZKa3JqdmV0NnBuWVZIbDFK TmJjaXp4TDBnOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACg vwgwDQYJKoZIhvcNAQELBQADggEBAIGiiobwo2KJFjIKTI2ynDIEs5/F9D5qrEZq 1tvHs2MUNqnKEoZSZXU0DLvyhAgVHhdpnScQ7mFYSX8A1kYZh8Rhu3fHIvLm6RCg iOR+njGcxziqCdB05HjIkpeF5ib3/br/pUK3sG5bc25RxhMfFcGje+xMlgbXRGc7 A5ERPyLjKaniqtAVjW12THVJMtNgapVtVzCrNU9sGvjVbaIxpZTUMPzzXLabVYkB NzaVovkjSnkVwMGN+btS7t6m5r7kA3qGBngSmVP8MG5ofdXEcSEEib2DomGc8NW/ JcdDBLN350T77s/R3BgrUo5KrS3HExnyMf/a6v26MHQqNZfZZuI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:13:34 2025 by rpki-client