$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HST/5pVvW1I5Lgp_RKuIQ4OenuUijpI.roa File: 5pVvW1I5Lgp_RKuIQ4OenuUijpI.roa (raw, json) Hash identifier: G09AYv56qe3UDBrK/plI0qqj8WZRbXFUJXUhpNu2IdA= Subject key identifier: E6:95:6F:5B:52:39:2E:0A:7F:44:AB:88:43:83:9E:9E:E5:22:8E:92 Certificate issuer: /CN=833D5BF79B45C730ED141CB539A508D01AA30908 Certificate serial: 0AFD Authority key identifier: 83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/5pVvW1I5Lgp_RKuIQ4OenuUijpI.roa Signing time: Thu 04 Sep 2025 09:09:36 +0000 ROA not before: Thu 04 Sep 2025 09:09:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131666 IP address blocks: 211.76.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833D5BF79B45C730ED141CB539A508D01AA30908 Validity Not Before: Sep 4 09:09:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E6956F5B52392E0A7F44AB8843839E9EE5228E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:c5:ce:15:54:30:2d:ec:f9:b0:22:37:8b: cf:41:ed:cb:96:07:df:4c:0a:99:6b:f6:33:3b:18: 45:2d:36:dc:44:5f:cc:f4:7c:78:a7:95:1a:9c:5a: 61:6b:05:0b:b8:fa:86:5c:58:64:a3:df:c3:d9:2d: 59:49:b1:a2:1c:0b:b2:e7:e4:ab:a3:cc:ba:d4:74: a9:7a:6b:b0:86:f2:9a:01:99:4e:61:c1:24:95:7f: 6b:77:fd:18:d6:d4:d6:1c:48:0a:9a:5c:4b:df:c9: 5d:61:de:74:23:72:b4:51:28:d7:1b:55:09:1d:79: 4e:3c:aa:46:76:39:7a:1f:23:9c:69:34:87:4b:dd: 7e:d1:d0:26:09:b0:ee:f0:49:db:bd:57:b4:2d:13: 14:aa:b8:8d:70:53:70:85:b3:e3:a1:af:77:be:d6: 72:4d:d1:a3:5e:fa:fe:b0:a7:e5:45:bc:45:4e:a9: 82:97:2b:dd:ca:16:18:5b:dc:b5:c4:50:5b:ff:60: de:b2:b4:11:0d:5f:82:36:13:f2:e1:dc:81:48:71: cd:8e:f9:b3:21:cb:5f:ff:28:9e:5a:3e:a6:e3:42: 20:92:3e:58:3b:12:6c:05:97:d9:35:39:2c:63:bc: 89:e3:42:36:6a:ec:6c:11:25:0e:14:be:83:75:5f: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:95:6F:5B:52:39:2E:0A:7F:44:AB:88:43:83:9E:9E:E5:22:8E:92 X509v3 Authority Key Identifier: keyid:83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/5pVvW1I5Lgp_RKuIQ4OenuUijpI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.190.0/23 Signature Algorithm: sha256WithRSAEncryption 45:54:9f:8b:aa:36:7f:21:e9:e1:58:72:d7:bf:86:4f:9f:fb: 76:59:6c:1a:3a:4a:c9:80:7b:2b:f6:78:c5:66:67:3a:85:1c: 1e:0f:cb:af:b2:a1:03:bc:a9:18:c6:c5:eb:78:9c:fd:13:3a: 40:cc:6d:cf:32:c9:89:cb:f9:94:c4:86:89:c5:a7:d5:c9:e1: cb:f7:7f:2e:8c:d6:bd:03:d7:cd:71:fb:ff:26:44:e9:de:ea: c2:e7:2a:d0:b7:fa:f5:30:40:a6:34:3e:b4:67:eb:51:40:04: d3:60:9e:52:fa:97:86:77:cd:6c:0d:45:b2:d9:36:e4:1c:05: bf:75:ec:90:c5:8b:03:9c:bc:4f:d8:af:9a:aa:13:3c:89:87: 68:7a:d7:e2:6d:4f:b6:8f:96:06:fe:0d:cb:5a:c8:3c:5b:1a: 10:1c:f1:da:e0:c9:b7:c4:3d:d7:80:93:1c:ee:df:e7:67:8b: 86:4f:11:60:93:7d:aa:ee:31:66:65:3c:4f:89:20:0a:e1:5b: 64:2b:f7:43:65:92:d2:0c:b5:c9:03:13:9d:cd:59:d3:0f:2f: 37:cd:85:0e:59:f5:81:22:2f:72:70:25:0f:9e:36:84:cc:bc: 04:ef:7b:38:2d:99:fe:75:5a:75:3f:6c:d4:ed:8f:48:0c:34: 69:ef:66:35 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMz RDVCRjc5QjQ1QzczMEVEMTQxQ0I1MzlBNTA4RDAxQUEzMDkwODAeFw0yNTA5MDQw OTA5MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU2OTU2RjVCNTIzOTJF MEE3RjQ0QUI4ODQzODM5RTlFRTUyMjhFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyUMXOFVQwLez5sCI3i89B7cuWB99MCplr9jM7GEUtNtxEX8z0 fHinlRqcWmFrBQu4+oZcWGSj38PZLVlJsaIcC7Ln5KujzLrUdKl6a7CG8poBmU5h wSSVf2t3/RjW1NYcSAqaXEvfyV1h3nQjcrRRKNcbVQkdeU48qkZ2OXofI5xpNIdL 3X7R0CYJsO7wSdu9V7QtExSquI1wU3CFs+Ohr3e+1nJN0aNe+v6wp+VFvEVOqYKX K93KFhhb3LXEUFv/YN6ytBENX4I2E/Lh3IFIcc2O+bMhy1//KJ5aPqbjQiCSPlg7 EmwFl9k1OSxjvInjQjZq7GwRJQ4UvoN1X0u1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU5pVvW1I5Lgp/RKuIQ4OenuUijpIwHwYDVR0jBBgwFoAUgz1b95tFxzDtFBy1 OaUI0BqjCQgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL2d6 MWI5NXRGeHpEdEZCeTFPYVVJMEJxakNRZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Z3oxYjk1dEZ4ekR0RkJ5MU9hVUkwQnFqQ1FnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFNULzVwVnZXMUk1TGdwX1JLdUlRNE9lbnVV aWpwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTTL4wDQYJ KoZIhvcNAQELBQADggEBAEVUn4uqNn8h6eFYcte/hk+f+3ZZbBo6SsmAeyv2eMVm ZzqFHB4Py6+yoQO8qRjGxet4nP0TOkDMbc8yyYnL+ZTEhonFp9XJ4cv3fy6M1r0D 181x+/8mROne6sLnKtC3+vUwQKY0PrRn61FABNNgnlL6l4Z3zWwNRbLZNuQcBb91 7JDFiwOcvE/Yr5qqEzyJh2h61+JtT7aPlgb+DctayDxbGhAc8drgybfEPdeAkxzu 3+dni4ZPEWCTfaruMWZlPE+JIArhW2Qr90NlktIMtckDE53NWdMPLzfNhQ5Z9YEi L3JwJQ+eNoTMvATvezgtmf51WnU/bNTtj0gMNGnvZjU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:13:39 2025 by rpki-client