$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/mKGQlYhMDPyeNvtsofe0doy_PME.roa File: mKGQlYhMDPyeNvtsofe0doy_PME.roa (raw, json) Hash identifier: XDckfBhjRQglpuKL6wd4hTFj2yF/L+Wj0Wlr6P5OAzE= Subject key identifier: 98:A1:90:95:88:4C:0C:FC:9E:36:FB:6C:A1:F7:B4:76:8C:BF:3C:C1 Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Certificate serial: 0273 Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/mKGQlYhMDPyeNvtsofe0doy_PME.roa Signing time: Fri 22 Aug 2025 09:01:13 +0000 ROA not before: Fri 22 Aug 2025 09:01:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38136 IP address blocks: 103.236.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Validity Not Before: Aug 22 09:01:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=98A19095884C0CFC9E36FB6CA1F7B4768CBF3CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:66:e6:87:b2:f3:36:f5:98:d2:55:81:ae: d5:bb:f2:1b:ec:a8:54:61:2a:00:38:21:94:e7:a9: c4:1b:d2:fb:29:6f:3a:5b:6d:1c:68:8d:c6:cc:e2: 10:ae:7a:74:68:1c:a1:42:2d:b3:a9:4c:f1:5f:b7: 52:83:53:8c:79:bd:5c:85:a7:9e:31:f2:0e:2f:dc: eb:7f:1b:60:88:9b:a5:20:de:b5:fa:06:d1:72:fa: 84:91:91:d1:65:a9:21:ae:64:9e:f0:e6:03:49:c5: a0:71:18:8b:fd:1f:be:2f:65:a3:8e:22:41:4a:04: d5:44:e8:13:67:44:57:62:d2:c6:bb:a3:54:94:e0: 09:4d:43:0f:cd:07:88:6a:c8:a2:e6:b9:8b:c0:76: a6:e4:8f:b6:6a:46:82:55:53:86:af:45:85:21:cf: ed:db:e5:b6:65:36:f9:bd:be:8e:90:0b:b1:d0:89: 74:be:45:6e:be:33:ec:d1:16:00:f5:d2:21:09:5b: eb:1a:af:b8:57:34:78:1c:da:a9:bc:61:76:0e:ec: 0f:d0:bf:5e:3d:e9:c9:fb:5f:42:d9:90:73:af:c5: ad:09:67:21:e4:6b:bc:b4:84:8f:93:be:bc:ff:69: 94:c2:c9:9d:fd:4a:35:f0:be:a9:c3:d3:af:61:d3: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:90:95:88:4C:0C:FC:9E:36:FB:6C:A1:F7:B4:76:8C:BF:3C:C1 X509v3 Authority Key Identifier: keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/mKGQlYhMDPyeNvtsofe0doy_PME.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.226.0/23 Signature Algorithm: sha256WithRSAEncryption b2:27:56:55:cb:84:5b:03:cd:46:e8:2b:0e:8c:3d:2a:c7:37: 28:5f:dd:09:83:32:99:18:0e:7a:97:b0:7a:19:d2:4c:5e:5a: 6c:b2:37:7b:66:25:72:21:04:93:7d:fe:3d:ba:83:30:67:9b: 7d:46:34:63:63:6b:c1:7c:eb:ec:61:00:5b:ed:b7:9b:fd:35: 80:c9:09:87:66:f7:de:89:a6:b6:fb:8e:b9:f5:a0:57:ac:b5: 48:a7:b6:7c:80:f6:a2:41:5e:a2:4e:ac:26:ec:4b:d5:2d:7f: 24:f0:63:00:a9:16:64:a5:6f:0b:3c:b8:89:1c:74:b9:f1:98: af:8b:2c:28:eb:1b:6a:24:74:97:0b:3c:5d:87:6f:e7:51:16: c0:a4:a4:f9:f3:8b:bb:94:3d:a2:c4:8a:d4:98:ad:87:46:39: fa:ec:38:bb:8b:06:a1:b7:f5:1e:00:c3:73:ec:4a:78:94:4f: 3d:a9:42:ac:f8:c0:64:cd:f1:bc:48:96:0d:74:9d:d6:61:90: 0f:0a:50:a4:97:f4:90:46:91:7b:66:cc:86:1c:20:e4:d3:2f: a2:06:f6:63:4f:1e:59:84:14:c3:c1:3e:eb:c6:af:e1:14:64: 72:27:b6:d7:0a:0c:d5:16:4f:f1:ac:d5:c8:cd:d4:b7:22:ec: 2d:1d:4d:57 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjI3 RDY3NUZGNUUyQzhCQTkwRjRCNjU1QjEwOEI2OTI1REFGMTU5NTAeFw0yNTA4MjIw OTAxMTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk4QTE5MDk1ODg0QzBD RkM5RTM2RkI2Q0ExRjdCNDc2OENCRjNDQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO+Gbmh7LzNvWY0lWBrtW78hvsqFRhKgA4IZTnqcQb0vspbzpb bRxojcbM4hCuenRoHKFCLbOpTPFft1KDU4x5vVyFp54x8g4v3Ot/G2CIm6Ug3rX6 BtFy+oSRkdFlqSGuZJ7w5gNJxaBxGIv9H74vZaOOIkFKBNVE6BNnRFdi0sa7o1SU 4AlNQw/NB4hqyKLmuYvAdqbkj7ZqRoJVU4avRYUhz+3b5bZlNvm9vo6QC7HQiXS+ RW6+M+zRFgD10iEJW+sar7hXNHgc2qm8YXYO7A/Qv1496cn7X0LZkHOvxa0JZyHk a7y0hI+Tvrz/aZTCyZ39SjXwvqnD069h0/yhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUmKGQlYhMDPyeNvtsofe0doy/PMEwHwYDVR0jBBgwFoAUYn1nX/XiyLqQ9LZV sQi2kl2vFZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL1lu MW5YX1hpeUxxUTlMWlZzUWkya2wydkZaVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev WW4xblhfWGl5THFROUxaVnNRaTJrbDJ2RlpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL21LR1FsWWhNRFB5ZU52dHNvZmUwZG95 X1BNRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7OIwDQYJ KoZIhvcNAQELBQADggEBALInVlXLhFsDzUboKw6MPSrHNyhf3QmDMpkYDnqXsHoZ 0kxeWmyyN3tmJXIhBJN9/j26gzBnm31GNGNja8F86+xhAFvtt5v9NYDJCYdm996J prb7jrn1oFestUintnyA9qJBXqJOrCbsS9UtfyTwYwCpFmSlbws8uIkcdLnxmK+L LCjrG2okdJcLPF2Hb+dRFsCkpPnzi7uUPaLEitSYrYdGOfrsOLuLBqG39R4Aw3Ps SniUTz2pQqz4wGTN8bxIlg10ndZhkA8KUKSX9JBGkXtmzIYcIOTTL6IG9mNPHlmE FMPBPuvGr+EUZHInttcKDNUWT/Gs1cjN1Lci7C0dTVc= -----END CERTIFICATE-----Generated at Sun Aug 24 06:47:00 2025 by rpki-client