$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DAFU/i7omx6o11gBFgGp3c0tO3ImxhE4.roa File: i7omx6o11gBFgGp3c0tO3ImxhE4.roa (raw, json) Hash identifier: /ELE9O+keNY3c44Uw0aAEp0XObWlYsiYEqIrlONgjQY= Subject key identifier: 8B:BA:26:C7:AA:35:D6:00:45:80:6A:77:73:4B:4E:DC:89:B1:84:4E Certificate issuer: /CN=F913CB7A44A57D0893D34D8FE9DB1E77EFE6AB1C Certificate serial: 09 Authority key identifier: F9:13:CB:7A:44:A5:7D:08:93:D3:4D:8F:E9:DB:1E:77:EF:E6:AB:1C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-RPLekSlfQiT002P6dsed-_mqxw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/i7omx6o11gBFgGp3c0tO3ImxhE4.roa Signing time: Fri 03 Oct 2025 07:09:55 +0000 ROA not before: Fri 03 Oct 2025 07:09:55 +0000 ROA not after: Fri 25 Sep 2026 15:30:20 +0000 asID: 131657 IP address blocks: 210.1.235.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/-RPLekSlfQiT002P6dsed-_mqxw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/-RPLekSlfQiT002P6dsed-_mqxw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-RPLekSlfQiT002P6dsed-_mqxw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F913CB7A44A57D0893D34D8FE9DB1E77EFE6AB1C Validity Not Before: Oct 3 07:09:55 2025 GMT Not After : Sep 25 15:30:20 2026 GMT Subject: CN=8BBA26C7AA35D60045806A77734B4EDC89B1844E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:dd:e2:09:62:50:71:47:8c:d8:43:94:3c: 61:48:a0:09:67:71:81:55:3b:f9:8a:81:3e:c2:8e: f7:5f:90:1b:3f:92:5d:0f:8a:ac:e4:3f:4f:3a:44: e3:06:e9:5a:bc:38:dc:63:06:9b:ec:b8:2b:84:35: 44:26:e0:2b:ce:61:ff:e1:0c:49:9f:1a:05:26:d5: 02:e1:2e:b6:3c:ca:dd:63:67:93:a3:87:6b:79:05: 8b:da:9c:06:ba:68:44:63:14:9c:e5:7c:7c:ce:2e: 53:3e:75:70:02:56:40:2a:b7:78:73:b8:e6:e8:4d: 5c:62:f5:80:38:c4:b2:55:96:e4:0a:ff:0c:d8:f1: 8e:00:81:ea:28:30:6d:a8:17:22:af:bf:4e:69:0a: 5f:5e:f5:ac:ef:5c:27:8c:bf:d4:37:76:0e:07:90: 7c:61:83:79:e3:d8:7a:97:ae:5a:92:9f:91:3d:38: 90:f9:17:cd:c3:b5:71:72:9c:06:86:12:fa:8a:0b: e1:79:8c:b2:c7:26:5d:41:a7:2c:5a:9b:1b:4e:f3: f5:f2:24:2a:7c:5b:67:72:ed:ed:01:fd:b9:f7:4c: d8:f6:45:e0:4b:56:c9:2e:45:9b:fa:e1:45:a0:0d: 7d:05:b9:55:03:8b:16:3f:61:f9:1f:78:a6:db:f7: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BA:26:C7:AA:35:D6:00:45:80:6A:77:73:4B:4E:DC:89:B1:84:4E X509v3 Authority Key Identifier: keyid:F9:13:CB:7A:44:A5:7D:08:93:D3:4D:8F:E9:DB:1E:77:EF:E6:AB:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/-RPLekSlfQiT002P6dsed-_mqxw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-RPLekSlfQiT002P6dsed-_mqxw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DAFU/i7omx6o11gBFgGp3c0tO3ImxhE4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.1.235.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b4:71:13:8d:75:ba:af:d9:9a:6a:fd:71:64:d5:14:1d:e4: 3f:31:d3:d2:69:d2:e9:c5:a9:d8:f6:99:ee:c4:95:a2:e2:cb: 35:6d:66:22:50:5e:03:2d:e4:3b:a8:74:15:31:2a:a4:28:63: 97:e9:da:16:68:b2:04:8d:e3:d3:ae:f0:65:7a:8a:e2:fd:2e: 26:f5:04:0c:57:53:3e:f0:56:b5:26:96:ab:6f:94:06:5e:ba: 46:95:f0:69:6e:37:7a:ab:f1:52:fa:e8:5f:15:ab:00:9f:98: 57:db:eb:60:d7:7f:be:4e:71:38:51:d1:82:70:22:bc:26:7c: 76:8b:5a:53:ae:1b:cd:29:cd:af:a1:0a:7a:94:64:04:d2:f4: 2a:91:bc:3a:ae:b2:68:74:81:86:e9:07:f2:c7:78:11:c4:b7: d3:c7:58:bd:9a:ba:58:69:b6:0f:39:9c:da:80:02:bf:16:89: b3:29:e8:f4:9e:df:c4:5c:84:a1:36:d6:bf:19:f4:26:f9:b7: 10:cb:91:71:25:55:9d:cd:e9:70:58:ec:36:ba:30:d7:ea:69: 1e:a1:fe:c9:35:6c:d8:6f:25:ee:57:7d:26:c2:51:e5:7f:e3: 0f:40:fa:df:55:43:a2:ac:a5:8d:1e:0a:d8:fa:df:ca:9d:f8: f2:aa:3a:f2 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOTEz Q0I3QTQ0QTU3RDA4OTNEMzREOEZFOURCMUU3N0VGRTZBQjFDMB4XDTI1MTAwMzA3 MDk1NVoXDTI2MDkyNTE1MzAyMFowMzExMC8GA1UEAxMoOEJCQTI2QzdBQTM1RDYw MDQ1ODA2QTc3NzM0QjRFREM4OUIxODQ0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALz+3eIJYlBxR4zYQ5Q8YUigCWdxgVU7+YqBPsKO91+QGz+SXQ+K rOQ/TzpE4wbpWrw43GMGm+y4K4Q1RCbgK85h/+EMSZ8aBSbVAuEutjzK3WNnk6OH a3kFi9qcBrpoRGMUnOV8fM4uUz51cAJWQCq3eHO45uhNXGL1gDjEslWW5Ar/DNjx jgCB6igwbagXIq+/TmkKX171rO9cJ4y/1Dd2DgeQfGGDeePYepeuWpKfkT04kPkX zcO1cXKcBoYS+ooL4XmMsscmXUGnLFqbG07z9fIkKnxbZ3Lt7QH9ufdM2PZF4EtW yS5Fm/rhRaANfQW5VQOLFj9h+R94ptv3FecCAwEAAaOCAeowggHmMB0GA1UdDgQW BBSLuibHqjXWAEWAandzS07cibGETjAfBgNVHSMEGDAWgBT5E8t6RKV9CJPTTY/p 2x537+arHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EQUZVLy1S UExla1NsZlFpVDAwMlA2ZHNlZC1fbXF4dy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev LVJQTGVrU2xmUWlUMDAyUDZkc2VkLV9tcXh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvREFGVS9pN29teDZvMTFnQkZnR3AzYzB0TzNJ bXhoRTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0gHrMA0G CSqGSIb3DQEBCwUAA4IBAQAEtHETjXW6r9maav1xZNUUHeQ/MdPSadLpxanY9pnu xJWi4ss1bWYiUF4DLeQ7qHQVMSqkKGOX6doWaLIEjePTrvBleori/S4m9QQMV1M+ 8Fa1Jparb5QGXrpGlfBpbjd6q/FS+uhfFasAn5hX2+tg13++TnE4UdGCcCK8Jnx2 i1pTrhvNKc2voQp6lGQE0vQqkbw6rrJodIGG6Qfyx3gRxLfTx1i9mrpYabYPOZza gAK/FomzKej0nt/EXIShNta/GfQm+bcQy5FxJVWdzelwWOw2ujDX6mkeof7JNWzY byXuV30mwlHlf+MPQPrfVUOirKWNHgrY+t/Knfjyqjry -----END CERTIFICATE-----Generated at Tue Oct 21 04:15:37 2025 by rpki-client