$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/hFaB3XhXAnNbZBpE7aL31D5ofRY.roa File: hFaB3XhXAnNbZBpE7aL31D5ofRY.roa (raw, json) Hash identifier: Ipe8A432ASfzltgqJ8Y74EISmOQfLJ20ONCeLJ4k5Rg= Subject key identifier: 84:56:81:DD:78:57:02:73:5B:64:1A:44:ED:A2:F7:D4:3E:68:7D:16 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1486 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hFaB3XhXAnNbZBpE7aL31D5ofRY.roa Signing time: Fri 22 Aug 2025 09:00:31 +0000 ROA not before: Fri 22 Aug 2025 09:00:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 210.203.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5254 (0x1486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=845681DD785702735B641A44EDA2F7D43E687D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:b6:b7:20:62:39:87:bd:e0:54:44:79:13: 89:9e:e9:f5:a2:30:d3:83:42:8e:88:54:d7:c2:56: de:b0:ff:87:19:1f:3a:35:ac:a7:8f:c2:29:b4:86: 94:75:67:67:d5:ab:b2:c4:35:80:d2:72:49:90:6a: d0:25:d0:34:cc:53:3e:1c:53:15:38:7d:14:41:49: 09:85:08:36:d1:a3:81:8a:40:a6:5e:1c:a3:d6:7b: 22:ee:ce:5f:b0:a8:84:0b:00:4c:60:f5:73:52:22: 31:cd:b3:90:90:83:69:23:4a:cd:94:f7:ec:86:6b: 8f:fd:d0:f6:3d:33:8e:e9:ee:4a:0e:8c:40:c8:ca: 70:c8:d3:94:85:98:3c:19:c8:15:96:6a:e0:92:5f: a1:bb:d7:ee:fc:a9:fe:e7:4c:de:56:15:b8:5f:51: cf:1c:69:3a:6b:41:5e:93:85:02:65:8f:b6:43:4c: 48:1a:90:d2:c5:04:0b:fa:3a:52:79:9f:d5:cc:1c: 8c:4e:63:b5:86:0b:ff:c8:9c:bf:6e:2e:c3:38:2b: 65:f9:70:cb:5a:16:84:c3:02:63:cc:73:60:d9:9e: 2a:d3:38:c3:26:a2:da:7b:73:71:92:54:f3:c3:8d: c8:b7:d4:93:85:af:d6:ab:f7:e3:40:55:ed:a6:01: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:56:81:DD:78:57:02:73:5B:64:1A:44:ED:A2:F7:D4:3E:68:7D:16 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hFaB3XhXAnNbZBpE7aL31D5ofRY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.20.0/22 Signature Algorithm: sha256WithRSAEncryption 31:90:58:0c:d4:a3:b2:35:6a:37:14:62:a4:4f:35:b9:2a:6d: 82:5c:5d:cb:6d:a8:70:dc:e6:7a:51:54:80:a0:9e:b7:d4:6d: 1d:64:30:7d:e6:e4:c0:25:fb:74:fd:3d:f1:14:76:9b:92:65: bf:21:ae:27:24:8d:5c:fe:c4:bc:de:d0:8b:d2:30:5a:e9:a2: 56:6f:ec:18:cf:4f:d7:00:b3:7a:70:f2:75:b1:2b:86:29:32: 13:85:d7:ae:0b:5e:3f:2d:82:ca:5c:9a:3e:46:cb:91:4b:26: c5:ff:ce:0a:56:77:8d:77:96:4b:54:b1:4e:3a:15:a1:c5:68: 7b:71:f9:83:36:eb:35:d5:5c:58:47:f0:43:fe:3f:8d:7a:ac: c7:41:09:c1:88:27:33:1c:70:80:a9:b9:c3:3d:ca:9d:ce:28: 04:4f:b2:7c:99:c3:80:0d:62:68:00:09:a0:ea:87:88:2d:0c: 99:b2:09:af:e0:2c:af:ac:ca:73:7a:4d:cc:94:c5:59:3a:de: ae:8b:4a:70:ab:70:d1:86:b0:c7:95:ac:e3:bd:88:81:fa:ce: d2:76:b5:5b:78:ef:9f:df:a2:56:fa:f4:44:a9:7f:d3:ec:67: af:3b:42:6c:c4:19:93:6c:93:b6:b2:55:11:0b:53:a5:92:ab: 2e:94:45:fb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg0NTY4MURENzg1NzAy NzM1QjY0MUE0NEVEQTJGN0Q0M0U2ODdEMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Vba3IGI5h73gVER5E4me6fWiMNODQo6IVNfCVt6w/4cZHzo1 rKePwim0hpR1Z2fVq7LENYDSckmQatAl0DTMUz4cUxU4fRRBSQmFCDbRo4GKQKZe HKPWeyLuzl+wqIQLAExg9XNSIjHNs5CQg2kjSs2U9+yGa4/90PY9M47p7koOjEDI ynDI05SFmDwZyBWWauCSX6G71+78qf7nTN5WFbhfUc8caTprQV6ThQJlj7ZDTEga kNLFBAv6OlJ5n9XMHIxOY7WGC//InL9uLsM4K2X5cMtaFoTDAmPMc2DZnirTOMMm otp7c3GSVPPDjci31JOFr9ar9+NAVe2mAVYdAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUhFaB3XhXAnNbZBpE7aL31D5ofRYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2hGYUIzWGhYQW5OYlpCcEU3YUwzMUQ1 b2ZSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyxQwDQYJ KoZIhvcNAQELBQADggEBADGQWAzUo7I1ajcUYqRPNbkqbYJcXcttqHDc5npRVICg nrfUbR1kMH3m5MAl+3T9PfEUdpuSZb8hrickjVz+xLze0IvSMFrpolZv7BjPT9cA s3pw8nWxK4YpMhOF164LXj8tgspcmj5Gy5FLJsX/zgpWd413lktUsU46FaHFaHtx +YM26zXVXFhH8EP+P416rMdBCcGIJzMccICpucM9yp3OKARPsnyZw4ANYmgACaDq h4gtDJmyCa/gLK+synN6TcyUxVk63q6LSnCrcNGGsMeVrOO9iIH6ztJ2tVt475/f olb69ESpf9PsZ687QmzEGZNsk7ayVRELU6WSqy6URfs= -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:40 2025 by rpki-client