$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FUYU/HV6k0jPT9jnucGWKQ6nC-66nn54.roa File: HV6k0jPT9jnucGWKQ6nC-66nn54.roa (raw, json) Hash identifier: eboLgYZLDYJYbajXhks+tl7qtRbNqb9jc0PhNl5r/ak= Subject key identifier: 1D:5E:A4:D2:33:D3:F6:39:EE:70:65:8A:43:A9:C2:FB:AE:A7:9F:9E Certificate issuer: /CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Certificate serial: 01F2 Authority key identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/HV6k0jPT9jnucGWKQ6nC-66nn54.roa Signing time: Sat 20 Sep 2025 03:00:01 +0000 ROA not before: Sat 20 Sep 2025 03:00:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63906 IP address blocks: 157.20.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Validity Not Before: Sep 20 03:00:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1D5EA4D233D3F639EE70658A43A9C2FBAEA79F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:6b:97:66:bf:d1:51:97:42:e7:f2:a3:a7: 4a:0c:55:c9:6d:11:14:ab:c9:f2:d5:a5:ce:86:c4: 0f:89:de:e3:31:fd:55:d9:41:74:2b:34:19:13:2d: db:a4:67:52:db:b2:8d:b7:46:0e:71:65:2f:6e:67: dc:99:c8:ea:26:cb:78:b9:0a:44:fd:d8:df:4a:81: df:1f:42:28:9f:a4:83:f9:c7:1e:d1:45:8d:54:2a: ca:6d:19:a4:be:f8:f3:2a:ca:d6:c6:61:83:62:69: 7a:81:fb:e8:90:e0:f0:ae:75:76:a7:f1:69:df:48: 03:9d:23:c5:66:13:26:02:cd:4e:b9:0a:60:99:78: a8:5a:0b:fb:02:26:4d:28:74:98:d9:75:33:00:9d: 97:22:1c:42:a3:4a:ec:29:dc:d3:11:c8:56:d7:42: 6d:13:02:fe:fb:9c:88:8e:16:6c:67:1c:26:4f:a6: 3b:0f:eb:a7:fa:70:6e:43:8a:00:42:52:9d:f6:94: cd:03:ea:ec:42:a2:8e:0d:4c:9b:43:6e:65:64:78: 44:53:3a:98:8e:c6:e8:13:98:00:dd:e8:70:2b:a5: a5:ca:a4:b9:f0:ab:39:ee:46:3c:f3:d4:dc:aa:0c: 5c:3f:4e:83:7e:26:48:5c:bc:a4:89:73:d8:6f:e2: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5E:A4:D2:33:D3:F6:39:EE:70:65:8A:43:A9:C2:FB:AE:A7:9F:9E X509v3 Authority Key Identifier: keyid:DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/HV6k0jPT9jnucGWKQ6nC-66nn54.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.68.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:a5:59:5d:fb:7c:ef:d0:c1:d8:37:89:73:b9:05:8c:0a:2a: 3f:30:94:1c:c0:62:f1:2c:82:5b:a3:c9:0b:bd:d6:a5:9b:1a: e4:cb:67:92:ac:4a:02:26:25:0a:c2:c8:64:27:81:22:86:97: db:b5:1d:e9:b9:f7:58:fb:a7:f5:88:b6:d9:7d:c3:fc:4b:ef: 10:4b:ef:ea:1e:c3:ac:37:9a:8f:bf:bc:de:c3:50:1e:8c:40: 43:bc:1a:8a:d9:99:29:7b:e4:7e:56:ab:4b:e7:25:d4:55:b5: f4:82:38:1b:6d:42:5d:9b:60:9d:31:ab:5a:57:51:83:ff:a2: df:d3:7f:31:e8:be:e7:03:d9:b7:37:96:82:b3:83:ac:96:ec: cb:47:09:22:ff:e1:65:e4:b1:e9:17:19:94:6c:7b:50:64:84: 04:f8:74:61:fb:fc:7f:c7:40:c7:ae:d8:39:11:2c:b2:d8:44: 46:95:77:f1:d0:09:4e:9c:d1:6c:74:a6:b2:4b:b7:c0:5f:f7: d5:2b:75:7c:48:fc:95:ce:51:9f:3d:3d:66:84:4e:aa:fc:4d: 43:b9:72:b4:e4:be:99:40:09:83:ad:99:36:52:a6:0a:d4:07: 2b:59:29:82:06:7b:b1:dd:ab:d5:69:37:88:c5:65:2a:08:be: 2e:36:e7:50 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREU4 NzJCQUQyNjJEMThGMEE2NzQ5RTAyNzJEOTc1MjYxRDk0OUVDMzAeFw0yNTA5MjAw MzAwMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFENUVBNEQyMzNEM0Y2 MzlFRTcwNjU4QTQzQTlDMkZCQUVBNzlGOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCbmuXZr/RUZdC5/Kjp0oMVcltERSryfLVpc6GxA+J3uMx/VXZ QXQrNBkTLdukZ1Lbso23Rg5xZS9uZ9yZyOomy3i5CkT92N9Kgd8fQiifpIP5xx7R RY1UKsptGaS++PMqytbGYYNiaXqB++iQ4PCudXan8WnfSAOdI8VmEyYCzU65CmCZ eKhaC/sCJk0odJjZdTMAnZciHEKjSuwp3NMRyFbXQm0TAv77nIiOFmxnHCZPpjsP 66f6cG5DigBCUp32lM0D6uxCoo4NTJtDbmVkeERTOpiOxugTmADd6HArpaXKpLnw qznuRjzz1NyqDFw/ToN+JkhcvKSJc9hv4jrhAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUHV6k0jPT9jnucGWKQ6nC+66nn54wHwYDVR0jBBgwFoAU3ocrrSYtGPCmdJ4C ctl1Jh2UnsMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRlVZVS8z b2NyclNZdEdQQ21kSjRDY3RsMUpoMlVuc00uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzNvY3JyU1l0R1BDbWRKNENjdGwxSmgyVW5zTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0ZVWVUvSFY2azBqUFQ5am51Y0dXS1E2bkMt NjZubjU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0URDAN BgkqhkiG9w0BAQsFAAOCAQEAXaVZXft879DB2DeJc7kFjAoqPzCUHMBi8SyCW6PJ C73WpZsa5MtnkqxKAiYlCsLIZCeBIoaX27Ud6bn3WPun9Yi22X3D/EvvEEvv6h7D rDeaj7+83sNQHoxAQ7waitmZKXvkflarS+cl1FW19II4G21CXZtgnTGrWldRg/+i 39N/Mei+5wPZtzeWgrODrJbsy0cJIv/hZeSx6RcZlGx7UGSEBPh0Yfv8f8dAx67Y OREssthERpV38dAJTpzRbHSmsku3wF/31St1fEj8lc5Rnz09ZoROqvxNQ7lytOS+ mUAJg62ZNlKmCtQHK1kpggZ7sd2r1Wk3iMVlKgi+LjbnUA== -----END CERTIFICATE-----Generated at Tue Oct 21 05:27:37 2025 by rpki-client