$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/QzWy1MHWk24SHo2yAJ3bgpdDN1A.roa File: QzWy1MHWk24SHo2yAJ3bgpdDN1A.roa (raw, json) Hash identifier: 44LoBWlvgqN+zgJz8YSw2luJdhdURnPya64YVCq9w0Q= Subject key identifier: 43:35:B2:D4:C1:D6:93:6E:12:1E:8D:B2:00:9D:DB:82:97:43:37:50 Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0D8E Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/QzWy1MHWk24SHo2yAJ3bgpdDN1A.roa Signing time: Fri 22 Aug 2025 09:03:26 +0000 ROA not before: Fri 22 Aug 2025 09:03:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18179 IP address blocks: 103.20.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3470 (0xd8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Aug 22 09:03:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4335B2D4C1D6936E121E8DB2009DDB8297433750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:ed:ad:6f:ec:ad:92:97:07:1b:c8:25:12: cd:88:8b:c9:0c:e7:a5:96:31:f4:06:03:62:93:9f: 83:97:7f:8f:3a:e0:86:df:49:a4:c4:ea:83:08:4f: e1:d4:65:1f:fc:f3:a2:2b:e5:93:93:d5:20:3c:9d: d2:a6:75:40:05:9c:fb:dd:d6:b4:dd:13:dc:bb:43: fd:22:a1:ea:d8:6f:76:4e:45:9e:9a:11:7e:3f:24: bc:43:29:43:58:74:93:74:5a:25:f0:60:78:bf:38: a1:63:64:c4:fe:8e:34:68:54:45:c2:b1:48:4f:90: 32:a4:92:2f:25:ed:d9:75:5f:42:8c:7a:07:66:5e: 12:48:29:81:63:4d:07:cf:c6:12:1d:4b:63:93:a8: 7c:f7:8f:fc:e3:00:0f:06:8e:b5:0a:7c:b3:45:84: 73:f0:b7:e4:e7:ac:82:ca:fc:8a:f8:9a:8a:a6:77: 14:19:5f:b2:d2:b3:fc:44:bf:94:32:dc:99:2c:75: 0b:c4:aa:3c:41:c4:55:60:86:21:d2:1b:d2:c2:c0: a0:95:26:d3:e7:c6:44:7f:a5:93:c1:d3:7b:b0:71: 30:e2:ef:57:b0:f3:3c:5a:c6:6f:bc:aa:8c:88:dd: 38:72:bc:7f:cd:8f:1e:35:45:54:dd:96:bd:af:17: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:35:B2:D4:C1:D6:93:6E:12:1E:8D:B2:00:9D:DB:82:97:43:37:50 X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/QzWy1MHWk24SHo2yAJ3bgpdDN1A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.20.176.0/22 Signature Algorithm: sha256WithRSAEncryption 01:14:12:5e:6c:bd:67:37:2f:05:eb:a6:5e:e8:fd:42:64:ce: 3e:f6:51:0c:11:a3:73:18:eb:21:7d:1d:e0:af:c7:43:b0:f5: 36:1d:20:01:82:0f:0f:17:7c:4c:9b:3a:02:b8:e3:9d:92:4b: 1e:3b:70:64:ee:cc:ce:b4:ab:af:a6:82:e5:19:45:eb:76:0c: 55:70:ca:68:c5:be:68:39:2b:85:c3:45:c2:c5:e6:d5:f8:88: 13:6e:8a:3a:a1:09:2c:b3:56:70:f2:36:0a:90:ca:6d:90:14: a3:99:cd:ad:d8:86:b3:87:c6:2e:1a:f0:93:c1:0a:c8:7d:3b: 30:22:57:48:1a:cd:21:a7:ea:41:b8:92:65:b8:d3:a3:22:f8: ea:34:36:7d:18:d0:16:67:da:86:52:af:0e:d1:d0:42:70:90: d4:f6:e3:75:1f:87:96:46:e3:6f:12:a5:37:15:33:8c:d4:92: d7:83:30:30:6a:bf:df:44:f5:e5:4a:d4:29:4c:9e:d9:f4:64: 1e:56:c5:d3:ff:08:60:87:9d:73:be:bf:78:5a:d7:2e:d0:87: c3:bd:9f:b7:4c:4b:a2:ab:66:5d:23:a4:6e:a9:03:1c:d0:74: 70:74:fa:9b:78:fb:ff:da:f9:3d:68:4b:0a:6b:69:9d:64:b9: 6e:b0:65:82 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNTA4MjIw OTAzMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQzMzVCMkQ0QzFENjkz NkUxMjFFOERCMjAwOUREQjgyOTc0MzM3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUt+2tb+ytkpcHG8glEs2Ii8kM56WWMfQGA2KTn4OXf4864Ibf SaTE6oMIT+HUZR/886Ir5ZOT1SA8ndKmdUAFnPvd1rTdE9y7Q/0ioerYb3ZORZ6a EX4/JLxDKUNYdJN0WiXwYHi/OKFjZMT+jjRoVEXCsUhPkDKkki8l7dl1X0KMegdm XhJIKYFjTQfPxhIdS2OTqHz3j/zjAA8GjrUKfLNFhHPwt+TnrILK/Ir4moqmdxQZ X7LSs/xEv5Qy3JksdQvEqjxBxFVghiHSG9LCwKCVJtPnxkR/pZPB03uwcTDi71ew 8zxaxm+8qoyI3ThyvH/Njx41RVTdlr2vF6dBAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUQzWy1MHWk24SHo2yAJ3bgpdDN1AwHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9Reld5MU1IV2syNFNI bzJ5QUozYmdwZEROMUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZxSwMA0GCSqGSIb3DQEBCwUAA4IBAQABFBJebL1nNy8F66Ze6P1CZM4+9lEM EaNzGOshfR3gr8dDsPU2HSABgg8PF3xMmzoCuOOdkkseO3Bk7szOtKuvpoLlGUXr dgxVcMpoxb5oOSuFw0XCxebV+IgTboo6oQkss1Zw8jYKkMptkBSjmc2t2Iazh8Yu GvCTwQrIfTswIldIGs0hp+pBuJJluNOjIvjqNDZ9GNAWZ9qGUq8O0dBCcJDU9uN1 H4eWRuNvEqU3FTOM1JLXgzAwar/fRPXlStQpTJ7Z9GQeVsXT/whgh51zvr94Wtcu 0IfDvZ+3TEuiq2ZdI6RuqQMc0HRwdPqbePv/2vk9aEsKa2mdZLlusGWC -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:21 2025 by rpki-client