$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/HG50Z4mnylO2rBaAVQEO35v5iD0.roa File: HG50Z4mnylO2rBaAVQEO35v5iD0.roa (raw, json) Hash identifier: qGoiUCLURpyrfS7ud7SynCARbDJ6QoAovz+p+U5aqNs= Subject key identifier: 1C:6E:74:67:89:A7:CA:53:B6:AC:16:80:55:01:0E:DF:9B:F9:88:3D Certificate issuer: /CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4 Certificate serial: 03E4 Authority key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/HG50Z4mnylO2rBaAVQEO35v5iD0.roa Signing time: Tue 09 Sep 2025 15:46:36 +0000 ROA not before: Tue 09 Sep 2025 15:46:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152618 IP address blocks: 160.187.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4 Validity Not Before: Sep 9 15:46:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1C6E746789A7CA53B6AC168055010EDF9BF9883D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:0d:ae:22:68:e0:4d:00:81:09:db:4a:51: a1:fb:1e:a5:c1:cf:00:d4:fd:a3:79:9e:a4:8e:de: 2c:1a:21:cd:18:69:5d:2a:06:e6:74:d2:ae:46:7a: dd:2d:29:c4:19:84:c2:d0:88:89:bc:c4:69:53:cb: df:f4:e1:e3:77:62:c3:7c:7f:86:e0:b4:8f:b4:8f: cb:8e:d4:45:e3:79:64:3b:8a:b0:b7:09:e8:af:c5: d9:24:72:5f:9b:16:05:85:95:65:98:be:57:95:45: 2c:0a:71:97:80:90:9d:54:85:cd:c0:d0:b8:1b:17: b5:34:75:25:df:58:e7:46:43:5c:c0:5d:16:04:44: 1f:41:9a:ab:1b:1a:7a:2e:36:e0:38:97:f6:42:dc: 81:63:e8:25:13:c8:42:8b:39:54:ff:4d:3c:6b:71: 86:61:bd:62:ac:ab:d6:25:22:ca:3e:52:d8:6f:a5: c2:d1:c6:e6:31:be:af:88:75:0a:18:ca:b3:f9:74: f9:77:f0:f1:cb:3d:90:c2:95:a2:71:b6:b6:c0:dc: e6:ac:ed:52:d0:33:d1:8f:87:8b:52:10:3c:78:bb: be:84:07:18:c0:fa:b2:07:e8:0d:9a:33:dc:e9:1a: 5f:47:8f:be:d0:7b:cb:58:41:86:5e:59:f4:b4:fb: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:74:67:89:A7:CA:53:B6:AC:16:80:55:01:0E:DF:9B:F9:88:3D X509v3 Authority Key Identifier: keyid:6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/HG50Z4mnylO2rBaAVQEO35v5iD0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.100.0/23 Signature Algorithm: sha256WithRSAEncryption 81:15:e8:1f:c3:7e:57:1a:9e:27:c8:85:52:58:68:d6:ca:a4: f2:88:16:56:47:e1:98:fa:74:47:d4:17:68:c8:da:34:e0:59: 7b:8a:e8:cc:c4:02:1a:2b:42:a4:8c:59:61:99:26:fb:0b:de: 49:24:87:3f:82:fd:e1:2d:7b:99:af:43:1f:4d:7a:a4:03:86: 22:48:ba:1c:b0:f9:06:f1:4a:c1:cb:58:1f:c3:7b:2b:8d:54: 93:9a:4e:a4:2e:51:a8:a4:25:b1:65:67:26:b4:6a:ed:09:65: dc:4a:9f:6c:cd:a0:1a:6d:c5:49:9c:4a:ff:52:46:fb:6d:3b: 80:c6:2c:9a:26:1f:30:0a:35:48:e8:58:53:3f:fc:35:61:3f: 5f:f5:1a:a9:e2:e6:b3:f2:8f:c7:cb:aa:98:23:41:ee:6a:5f: 4b:1e:13:64:3c:d2:90:e1:25:fd:fa:dc:6a:95:02:07:c0:36: 6b:db:ad:c8:67:4a:ad:79:a8:41:38:38:66:78:c3:42:3a:01: 3d:82:60:fc:37:e7:9e:f8:75:5b:d9:79:c0:d7:4d:a2:5f:cc: 75:0d:40:86:27:2a:bd:70:4e:f5:99:aa:76:94:98:e1:94:30: 89:83:36:d8:d5:a0:98:23:91:50:98:c7:47:af:63:ae:f5:11: 5a:10:70:d3 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEy QjEzOTZDMTQyREE2NzExNTE4ODc1RTkwQzRBRUM5MEIwRjVDNDAeFw0yNTA5MDkx NTQ2MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFDNkU3NDY3ODlBN0NB NTNCNkFDMTY4MDU1MDEwRURGOUJGOTg4M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwTw2uImjgTQCBCdtKUaH7HqXBzwDU/aN5nqSO3iwaIc0YaV0q BuZ00q5Get0tKcQZhMLQiIm8xGlTy9/04eN3YsN8f4bgtI+0j8uO1EXjeWQ7irC3 Ceivxdkkcl+bFgWFlWWYvleVRSwKcZeAkJ1Uhc3A0LgbF7U0dSXfWOdGQ1zAXRYE RB9BmqsbGnouNuA4l/ZC3IFj6CUTyEKLOVT/TTxrcYZhvWKsq9YlIso+UthvpcLR xuYxvq+IdQoYyrP5dPl38PHLPZDClaJxtrbA3Oas7VLQM9GPh4tSEDx4u76EBxjA +rIH6A2aM9zpGl9Hj77Qe8tYQYZeWfS0+5Q9AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUHG50Z4mnylO2rBaAVQEO35v5iD0wHwYDVR0jBBgwFoAUaisTlsFC2mcRUYh1 6QxK7JCw9cQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9UX1RG Tl9DTy9haXNUbHNGQzJtY1JVWWgxNlF4SzdKQ3c5Y1EuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2Fpc1Rsc0ZDMm1jUlVZaDE2UXhLN0pDdzljUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL05PVF9URk5fQ08vSEc1MFo0bW55 bE8yckJhQVZRRU8zNXY1aUQwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAaC7ZDANBgkqhkiG9w0BAQsFAAOCAQEAgRXoH8N+VxqeJ8iFUlho1sqk 8ogWVkfhmPp0R9QXaMjaNOBZe4rozMQCGitCpIxZYZkm+wveSSSHP4L94S17ma9D H016pAOGIki6HLD5BvFKwctYH8N7K41Uk5pOpC5RqKQlsWVnJrRq7Qll3EqfbM2g Gm3FSZxK/1JG+207gMYsmiYfMAo1SOhYUz/8NWE/X/UaqeLms/KPx8uqmCNB7mpf Sx4TZDzSkOEl/frcapUCB8A2a9utyGdKrXmoQTg4ZnjDQjoBPYJg/Dfnnvh1W9l5 wNdNol/MdQ1AhicqvXBO9ZmqdpSY4ZQwiYM22NWgmCORUJjHR69jrvURWhBw0w== -----END CERTIFICATE-----Generated at Mon Oct 20 17:20:12 2025 by rpki-client