$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/GAzRpMunFC5OmAYvtkOBqfpL3D0.roa File: GAzRpMunFC5OmAYvtkOBqfpL3D0.roa (raw, json) Hash identifier: VetV9645HHIaBNLmHmaTCEaxQpV4ld/+RxKVe+L5YOM= Subject key identifier: 18:0C:D1:A4:CB:A7:14:2E:4E:98:06:2F:B6:43:81:A9:FA:4B:DC:3D Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0D8F Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/GAzRpMunFC5OmAYvtkOBqfpL3D0.roa Signing time: Fri 22 Aug 2025 09:03:26 +0000 ROA not before: Fri 22 Aug 2025 09:03:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18179 IP address blocks: 103.16.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3471 (0xd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Aug 22 09:03:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=180CD1A4CBA7142E4E98062FB64381A9FA4BDC3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:2f:53:f4:57:12:0d:87:a0:75:37:2a:4c: 5f:04:30:c6:e9:20:e8:2a:22:06:64:ea:01:38:2d: b1:de:b2:66:3c:87:80:58:c1:ee:83:d5:55:8f:79: 1e:af:81:12:b2:70:b7:a5:3f:fc:00:54:e8:47:4b: 2a:3f:8a:30:d0:9d:7e:5b:f8:0f:e4:ab:fd:80:ff: 13:e8:b0:a0:05:9d:ab:fd:63:10:e3:34:cd:0c:19: 49:8d:37:a7:21:66:1c:1e:a4:f1:f2:e8:bb:a5:87: a3:3d:e4:1a:00:86:28:15:b1:9d:a2:95:57:5a:81: f8:9b:d9:1e:b6:51:7f:40:ee:ba:83:47:3b:92:07: 26:61:be:87:80:09:b6:05:dd:62:5e:d4:48:a0:5d: 51:4b:af:0c:42:1c:73:c2:4f:bb:05:d9:aa:72:9d: 77:ed:dd:d5:c0:09:68:94:43:7c:5e:bd:12:de:51: 0a:97:81:02:dd:91:1b:5e:e6:64:ea:b6:a4:58:32: 7e:62:c0:9e:a1:4b:27:11:14:8e:e3:c2:6f:2e:d5: b3:c8:30:cc:9c:b9:77:75:ca:c5:c7:14:ce:98:1e: 27:50:39:00:54:c0:67:d9:db:e5:d4:a9:44:e2:c0: fb:88:87:44:62:3d:dd:97:0b:33:5b:5a:1c:df:9b: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0C:D1:A4:CB:A7:14:2E:4E:98:06:2F:B6:43:81:A9:FA:4B:DC:3D X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/GAzRpMunFC5OmAYvtkOBqfpL3D0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.16.244.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:8a:60:ce:c1:67:89:b6:a2:6e:d5:fc:2a:1e:c4:f8:ae:7f: 22:7d:27:58:9f:b3:17:e6:c2:4b:1c:71:39:67:24:59:23:fb: f1:22:65:40:86:e4:8b:1b:24:c5:c7:12:1b:71:0d:68:e6:8d: f0:66:2f:e6:33:ab:86:96:7a:5d:3a:70:8e:ac:ca:3c:36:08: 88:aa:80:dc:63:9a:c2:37:c7:72:01:a6:bf:93:80:a6:47:9a: 4e:ff:10:6a:de:10:2b:c3:3b:4c:72:45:ec:2d:15:df:3b:28: 8d:09:aa:a9:e8:93:6e:a7:e9:a7:ca:be:db:f0:8e:ab:93:3b: 4c:77:9d:1d:1a:1a:14:bb:93:b4:69:1d:cd:50:2d:46:19:d3: 74:e1:42:54:92:01:ef:e8:10:2d:80:84:ea:e6:ff:6c:d6:ab: 50:01:3e:62:e5:62:24:7e:14:90:0a:dd:da:8f:02:82:05:d8: 5f:e0:37:8e:e8:7d:b2:1c:96:92:a2:4c:eb:51:a6:a4:17:12: 4e:8b:75:ca:98:d0:f3:02:44:2c:7c:eb:62:55:c6:42:1d:bb: 39:3b:eb:a8:e6:7d:22:08:e6:15:bb:7c:d8:4e:30:08:fb:b6: 7b:bc:1e:6e:c6:90:cd:a7:7c:04:25:1e:19:6c:4c:d7:bc:9b: bc:29:e0:11 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNTA4MjIw OTAzMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE4MENEMUE0Q0JBNzE0 MkU0RTk4MDYyRkI2NDM4MUE5RkE0QkRDM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbES9T9FcSDYegdTcqTF8EMMbpIOgqIgZk6gE4LbHesmY8h4BY we6D1VWPeR6vgRKycLelP/wAVOhHSyo/ijDQnX5b+A/kq/2A/xPosKAFnav9YxDj NM0MGUmNN6chZhwepPHy6Lulh6M95BoAhigVsZ2ilVdagfib2R62UX9A7rqDRzuS ByZhvoeACbYF3WJe1EigXVFLrwxCHHPCT7sF2apynXft3dXACWiUQ3xevRLeUQqX gQLdkRte5mTqtqRYMn5iwJ6hSycRFI7jwm8u1bPIMMycuXd1ysXHFM6YHidQOQBU wGfZ2+XUqUTiwPuIh0RiPd2XCzNbWhzfm+5bAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUGAzRpMunFC5OmAYvtkOBqfpL3D0wHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9HQXpScE11bkZDNU9t QVl2dGtPQnFmcEwzRDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZxD0MA0GCSqGSIb3DQEBCwUAA4IBAQAMimDOwWeJtqJu1fwqHsT4rn8ifSdY n7MX5sJLHHE5ZyRZI/vxImVAhuSLGyTFxxIbcQ1o5o3wZi/mM6uGlnpdOnCOrMo8 NgiIqoDcY5rCN8dyAaa/k4CmR5pO/xBq3hArwztMckXsLRXfOyiNCaqp6JNup+mn yr7b8I6rkztMd50dGhoUu5O0aR3NUC1GGdN04UJUkgHv6BAtgITq5v9s1qtQAT5i 5WIkfhSQCt3ajwKCBdhf4DeO6H2yHJaSokzrUaakFxJOi3XKmNDzAkQsfOtiVcZC Hbs5O+uo5n0iCOYVu3zYTjAI+7Z7vB5uxpDNp3wEJR4ZbEzXvJu8KeAR -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:22 2025 by rpki-client