$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/qPtRE2RicqHDIIbRUceeq1G248Q.roa File: qPtRE2RicqHDIIbRUceeq1G248Q.roa (raw, json) Hash identifier: yIg2xc4B5GY4bxs3VGyvaguCdyC26v0DOu6EzgrdFM8= Subject key identifier: A8:FB:51:13:64:62:72:A1:C3:20:86:D1:51:C7:9E:AB:51:B6:E3:C4 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 5A79 Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/qPtRE2RicqHDIIbRUceeq1G248Q.roa Signing time: Fri 22 Aug 2025 08:55:53 +0000 ROA not before: Fri 22 Aug 2025 08:55:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 103.46.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23161 (0x5a79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Aug 22 08:55:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A8FB5113646272A1C32086D151C79EAB51B6E3C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:92:60:20:8c:f0:aa:b9:d1:24:53:6f:15: fa:27:21:f1:34:c3:bd:41:ba:54:37:ee:26:70:17: 71:6a:aa:cd:a8:2e:e3:e9:da:ec:b0:db:79:bd:d7: fb:b2:f5:4a:da:93:b6:06:0b:1d:27:36:04:cf:01: ec:70:34:11:06:d7:b9:f4:7a:7f:eb:23:5d:c0:25: 4f:2c:60:c0:ea:a4:4f:00:d7:33:31:5e:e8:48:ac: 71:bf:42:b0:9b:32:47:8f:94:44:41:e6:fa:45:00: 73:0a:40:55:78:ea:71:0e:8d:f6:b8:57:72:4a:c8: 0e:a0:6b:97:0b:a6:8e:d0:7d:37:a3:ed:44:c2:31: e2:b4:d2:bb:ad:cd:ca:2b:aa:5d:a3:e0:5e:23:8b: 3d:76:97:36:7b:74:e8:01:c7:ea:7c:70:d4:ba:a3: ef:8e:c0:f4:e6:d1:aa:72:d2:5d:46:5c:1b:d2:d5: 69:15:d7:cb:5d:21:c1:48:2e:71:3f:5c:95:e9:c2: 9b:da:b9:3f:80:cc:d1:bb:7d:9e:9c:fb:f8:eb:68: da:2b:4a:75:b7:fa:fe:44:17:b2:1e:d1:7f:68:2a: ea:7b:7b:2c:02:c5:20:f9:f1:ee:ac:a5:6a:8a:a7: 75:6a:39:48:ec:8d:ed:e6:fe:3d:66:7f:fe:96:55: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FB:51:13:64:62:72:A1:C3:20:86:D1:51:C7:9E:AB:51:B6:E3:C4 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/qPtRE2RicqHDIIbRUceeq1G248Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.46.188.0/22 Signature Algorithm: sha256WithRSAEncryption 79:f5:d2:3c:91:c1:c8:de:0f:4b:d5:d3:04:4d:6f:51:cc:a2: cb:b5:0d:3c:5e:8b:0d:2b:db:58:23:6a:21:32:af:83:23:94: 1f:df:87:b1:ff:80:d8:14:35:19:09:12:f7:d3:41:84:2a:fe: 61:4e:e5:bc:d8:8d:2c:22:71:6e:57:de:64:b3:5d:7d:00:65: 38:44:85:df:1f:92:b4:30:d6:45:28:2c:b4:38:62:c6:76:e5: a0:19:30:64:e4:e1:49:8b:40:58:02:81:dc:b9:d5:a2:b8:c1: d2:49:05:81:e7:84:11:42:b6:0a:af:56:59:f1:b8:fd:db:22: 54:ba:d8:73:cd:ad:8d:49:1b:65:08:d1:fe:60:70:a7:e9:19: e9:75:b2:3c:cb:bd:63:54:3f:84:64:2c:92:d4:6b:5b:8b:8d: f8:d3:75:79:18:82:dc:12:2d:1b:9a:98:8a:35:98:1e:91:ab: 0c:ef:8a:32:6c:4a:40:15:3e:70:46:a9:5f:ba:1b:80:5a:5d: d8:c3:8e:e8:06:c6:23:a6:7b:5f:d4:0d:98:4c:6f:e7:85:51: 83:be:e6:b5:31:0f:21:11:57:99:d8:4d:e2:f0:dc:7e:9a:8d: 99:b8:6e:89:bb:af:c0:e3:d2:01:72:ef:77:ed:d9:b9:b1:ef: a7:6f:52:99 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWnkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNTA4MjIw ODU1NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4RkI1MTEzNjQ2Mjcy QTFDMzIwODZEMTUxQzc5RUFCNTFCNkUzQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCct5JgIIzwqrnRJFNvFfonIfE0w71BulQ37iZwF3Fqqs2oLuPp 2uyw23m91/uy9Urak7YGCx0nNgTPAexwNBEG17n0en/rI13AJU8sYMDqpE8A1zMx XuhIrHG/QrCbMkePlERB5vpFAHMKQFV46nEOjfa4V3JKyA6ga5cLpo7QfTej7UTC MeK00rutzcorql2j4F4jiz12lzZ7dOgBx+p8cNS6o++OwPTm0apy0l1GXBvS1WkV 18tdIcFILnE/XJXpwpvauT+AzNG7fZ6c+/jraNorSnW3+v5EF7Ie0X9oKup7eywC xSD58e6spWqKp3VqOUjsje3m/j1mf/6WVQdVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUqPtRE2RicqHDIIbRUceeq1G248QwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvcVB0UkUyUmljcUhESUli UlVjZWVxMUcyNDhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmcuvDANBgkqhkiG9w0BAQsFAAOCAQEAefXSPJHByN4PS9XTBE1vUcyiy7UNPF6L DSvbWCNqITKvgyOUH9+Hsf+A2BQ1GQkS99NBhCr+YU7lvNiNLCJxblfeZLNdfQBl OESF3x+StDDWRSgstDhixnbloBkwZOThSYtAWAKB3LnVorjB0kkFgeeEEUK2Cq9W WfG4/dsiVLrYc82tjUkbZQjR/mBwp+kZ6XWyPMu9Y1Q/hGQsktRrW4uN+NN1eRiC 3BItG5qYijWYHpGrDO+KMmxKQBU+cEapX7obgFpd2MOO6AbGI6Z7X9QNmExv54VR g77mtTEPIRFXmdhN4vDcfpqNmbhuibuvwOPSAXLvd+3ZubHvp29SmQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:08:10 2025 by rpki-client