$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/qBCV5GtO1EvLQ8eDdjxCroGGyoc.roa File: qBCV5GtO1EvLQ8eDdjxCroGGyoc.roa (raw, json) Hash identifier: MKoEEInVnc+mDKMyIwO9oI34RqlN1SCKAWmAK6Ts73A= Subject key identifier: A8:10:95:E4:6B:4E:D4:4B:CB:43:C7:83:76:3C:42:AE:81:86:CA:87 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1393 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qBCV5GtO1EvLQ8eDdjxCroGGyoc.roa Signing time: Fri 22 Aug 2025 08:59:27 +0000 ROA not before: Fri 22 Aug 2025 08:59:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9674 IP address blocks: 211.77.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5011 (0x1393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A81095E46B4ED44BCB43C783763C42AE8186CA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:09:f7:1d:cc:38:7f:b0:5c:a3:a7:fc:e1: a8:65:b3:96:b5:16:e1:98:02:ee:d8:ba:d1:c8:e3: 70:ed:4f:06:b4:af:17:bb:1e:12:83:03:24:4e:d3: 4a:ea:9d:dc:3b:2e:f6:0c:23:e2:94:1c:45:29:9b: 0c:d2:2e:96:ab:8d:76:de:97:0e:1d:5c:db:31:57: 57:7f:1b:bf:89:cb:71:07:52:ba:29:77:7a:50:5b: a2:6f:d3:f8:43:d3:51:71:de:1e:2f:bb:48:72:17: 1c:8d:27:f0:75:ff:28:6f:9a:ae:29:78:10:d0:06: 1b:e0:d1:1f:67:bd:06:a4:00:c7:47:6a:31:25:0a: 1b:04:27:36:d4:e2:7e:65:ba:cd:bb:9c:6f:27:af: d5:d9:a3:5d:6e:9f:6c:88:03:e4:e3:a4:48:7a:28: fd:f8:7e:d8:df:62:c2:8e:6c:4e:5c:36:32:83:49: 9d:89:8f:2f:79:39:e8:2c:c1:ed:9b:a0:03:26:5d: 3b:59:91:f0:4a:7b:e2:d9:0c:72:36:b3:17:a4:2d: de:72:da:2c:d0:95:a1:18:2a:23:0f:62:1f:75:57: 57:e9:72:6d:28:60:f3:3f:8d:e7:ab:c3:55:ad:5c: 3a:4e:a6:a3:40:03:47:44:ea:ff:bb:a3:68:f9:e6: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:10:95:E4:6B:4E:D4:4B:CB:43:C7:83:76:3C:42:AE:81:86:CA:87 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qBCV5GtO1EvLQ8eDdjxCroGGyoc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.77.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3d:72:d6:44:09:b1:f6:b2:74:9f:d3:3e:5f:f2:6d:a7:67:ca: 48:ce:e4:29:c4:43:f4:16:63:9d:a4:db:8f:bd:16:7a:9a:3f: 29:69:5b:75:07:e3:c0:c6:4f:db:8d:96:c8:6c:36:ea:0b:ec: e2:ee:e2:e7:1a:a5:20:0b:ad:9b:22:b1:c9:2e:fb:44:c8:c5: 77:9b:13:f2:33:3e:3a:91:5e:a9:02:2c:14:f2:65:f5:ff:9b: 5a:36:cb:9d:67:01:4d:5d:3b:a0:95:23:e2:55:18:55:75:0b: 31:41:82:27:be:cc:de:6e:a4:d5:80:a9:07:2c:56:8b:3a:17: 33:62:3c:bd:da:be:01:bb:dc:73:c8:39:c0:6f:71:c8:23:61: 2e:75:fb:e7:13:13:90:4f:86:f8:ac:86:16:04:09:cc:17:9a: 81:36:a9:ee:99:06:f7:40:07:50:09:09:17:27:8a:bd:62:72: fe:ad:37:cd:90:30:02:81:ca:c7:cc:a4:c2:1c:ca:b8:d4:76: 9c:4b:81:b9:16:ab:0e:6a:a0:b8:a9:e9:3b:bd:83:91:c1:af: a3:d8:01:0f:07:9c:bc:7b:3d:a6:07:0e:bb:3a:08:49:77:21: c6:41:4d:38:38:2d:39:dd:2f:59:d3:c9:1f:6a:33:b6:4f:cb: cb:51:f5:d2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4MTA5NUU0NkI0RUQ0 NEJDQjQzQzc4Mzc2M0M0MkFFODE4NkNBODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/ign3Hcw4f7Bco6f84ahls5a1FuGYAu7YutHI43DtTwa0rxe7 HhKDAyRO00rqndw7LvYMI+KUHEUpmwzSLparjXbelw4dXNsxV1d/G7+Jy3EHUrop d3pQW6Jv0/hD01Fx3h4vu0hyFxyNJ/B1/yhvmq4peBDQBhvg0R9nvQakAMdHajEl ChsEJzbU4n5lus27nG8nr9XZo11un2yIA+TjpEh6KP34ftjfYsKObE5cNjKDSZ2J jy95Oegswe2boAMmXTtZkfBKe+LZDHI2sxekLd5y2izQlaEYKiMPYh91V1fpcm0o YPM/jeerw1WtXDpOpqNAA0dE6v+7o2j55manAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUqBCV5GtO1EvLQ8eDdjxCroGGyocwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3FCQ1Y1R3RPMUV2TFE4ZURkanhDcm9H R3lvYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbTTUAwDQYJ KoZIhvcNAQELBQADggEBAD1y1kQJsfaydJ/TPl/ybadnykjO5CnEQ/QWY52k24+9 FnqaPylpW3UH48DGT9uNlshsNuoL7OLu4ucapSALrZsiscku+0TIxXebE/IzPjqR XqkCLBTyZfX/m1o2y51nAU1dO6CVI+JVGFV1CzFBgie+zN5upNWAqQcsVos6FzNi PL3avgG73HPIOcBvccgjYS51++cTE5BPhvishhYECcwXmoE2qe6ZBvdAB1AJCRcn ir1icv6tN82QMAKBysfMpMIcyrjUdpxLgbkWqw5qoLip6Tu9g5HBr6PYAQ8HnLx7 PaYHDrs6CEl3IcZBTTg4LTndL1nTyR9qM7ZPy8tR9dI= -----END CERTIFICATE-----Generated at Sun Aug 24 14:20:11 2025 by rpki-client