$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPEN/_S-0ytL0WjOaLeYffXv0yRPOwKE.roa File: _S-0ytL0WjOaLeYffXv0yRPOwKE.roa (raw, json) Hash identifier: 9JMMDqWGlV8+ilgzZgbJ2RGf79H5oFWYSPPlOtT3U/8= Subject key identifier: FD:2F:B4:CA:D2:F4:5A:33:9A:2D:E6:1F:7D:7B:F4:C9:13:CE:C0:A1 Certificate issuer: /CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD Certificate serial: 03 Authority key identifier: 96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/_S-0ytL0WjOaLeYffXv0yRPOwKE.roa Signing time: Tue 16 Sep 2025 06:36:16 +0000 ROA not before: Tue 16 Sep 2025 06:36:16 +0000 ROA not after: Wed 09 Sep 2026 15:30:25 +0000 asID: 148996 IP address blocks: 202.66.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96B8A08E759C90211732DEE84FD4BE259DAA0FFD Validity Not Before: Sep 16 06:36:16 2025 GMT Not After : Sep 9 15:30:25 2026 GMT Subject: CN=FD2FB4CAD2F45A339A2DE61F7D7BF4C913CEC0A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:0a:ac:81:f1:a2:73:4a:b8:c1:79:55:3e: e1:ed:81:f4:0e:a1:d6:f2:33:e9:f6:58:fd:da:1a: ec:43:79:81:c6:a3:16:f4:86:79:3d:1d:e4:b9:dd: d9:d2:16:c5:cd:4f:b7:3e:92:b8:ef:1c:46:d4:55: 3c:a1:7e:b6:31:4a:8e:11:06:e1:16:47:c6:5d:e6: 2a:32:4c:46:9d:2a:54:ba:56:fe:27:45:b3:2b:6e: 87:8f:17:9a:d5:fb:c8:56:3a:0e:00:f4:13:41:6e: df:ce:70:c7:98:1d:0b:5e:c5:d8:d4:19:42:aa:9e: a0:6f:90:c2:56:31:a5:d3:1d:93:19:30:ad:4a:a1: 1f:a7:72:5f:34:9b:99:b1:b8:75:19:e3:e8:3e:0e: 26:f1:32:7c:74:bf:ed:a0:4e:48:50:cd:c4:18:f3: 92:2e:a1:57:a1:3e:6a:7a:a5:3d:2b:9f:fb:0b:27: d1:4e:b8:5c:31:68:cb:1d:1e:cd:f7:a7:69:cc:1c: 98:26:b0:b7:62:40:9e:7d:70:b4:5f:3f:cb:a0:9c: 8f:22:7b:83:24:a0:83:f0:91:06:da:8e:b4:4c:95: 12:8b:18:d9:46:1e:dd:10:49:a7:31:3f:69:70:d7: 67:74:4e:07:97:48:10:2f:29:9d:80:9d:f1:c0:f8: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2F:B4:CA:D2:F4:5A:33:9A:2D:E6:1F:7D:7B:F4:C9:13:CE:C0:A1 X509v3 Authority Key Identifier: keyid:96:B8:A0:8E:75:9C:90:21:17:32:DE:E8:4F:D4:BE:25:9D:AA:0F:FD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/lrigjnWckCEXMt7oT9S-JZ2qD_0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lrigjnWckCEXMt7oT9S-JZ2qD_0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPEN/_S-0ytL0WjOaLeYffXv0yRPOwKE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.66.184.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:74:7d:0b:79:38:34:9a:78:20:26:7d:13:76:c3:81:ec:ab: 74:64:15:35:37:0f:7b:13:c7:5f:fb:f4:11:a6:a2:69:c9:46: 8c:da:be:cf:ca:6a:b3:d0:3e:6e:54:ac:bb:5d:ed:da:f9:44: 48:d6:c0:d1:c9:84:b7:b9:82:7e:ea:3a:e3:36:2d:d8:6d:12: 59:59:4b:3a:df:d5:e9:1e:ca:42:39:d3:65:70:f9:c2:b7:16: 3d:c5:7c:2c:96:d1:8c:df:fc:61:db:b4:47:64:b1:4f:1c:74: fa:17:0b:aa:8e:9d:f9:fb:ae:0d:f6:fd:46:6e:5f:2a:5b:2a: c5:80:b9:05:69:34:ed:8f:6b:40:7d:19:57:39:e4:c6:bc:50: 08:43:5b:ad:fa:94:89:21:57:2c:00:69:7b:7b:4c:92:2c:13: 85:5c:80:7a:b9:a3:ef:4f:89:89:1d:e6:79:e0:70:78:76:62: ba:c1:d5:6e:6f:4e:22:c6:e5:03:ae:86:6d:43:0f:7f:fa:8d: 60:59:08:d3:3e:51:09:fe:f6:1e:f7:8e:af:e2:d2:13:3c:2d: 3c:a8:3f:6c:24:f0:c0:ff:30:a2:68:80:7a:60:6a:1e:b4:ed: 4e:07:a4:11:85:0b:b8:8a:9f:94:05:e4:bf:9b:7a:8a:05:1c: 69:d6:20:2b -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkI4 QTA4RTc1OUM5MDIxMTczMkRFRTg0RkQ0QkUyNTlEQUEwRkZEMB4XDTI1MDkxNjA2 MzYxNloXDTI2MDkwOTE1MzAyNVowMzExMC8GA1UEAxMoRkQyRkI0Q0FEMkY0NUEz MzlBMkRFNjFGN0Q3QkY0QzkxM0NFQzBBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALeFCqyB8aJzSrjBeVU+4e2B9A6h1vIz6fZY/doa7EN5gcajFvSG eT0d5Lnd2dIWxc1Ptz6SuO8cRtRVPKF+tjFKjhEG4RZHxl3mKjJMRp0qVLpW/idF sytuh48XmtX7yFY6DgD0E0Fu385wx5gdC17F2NQZQqqeoG+QwlYxpdMdkxkwrUqh H6dyXzSbmbG4dRnj6D4OJvEyfHS/7aBOSFDNxBjzki6hV6E+anqlPSuf+wsn0U64 XDFoyx0ezfenacwcmCawt2JAnn1wtF8/y6CcjyJ7gySgg/CRBtqOtEyVEosY2UYe 3RBJpzE/aXDXZ3ROB5dIEC8pnYCd8cD464sCAwEAAaOCAeowggHmMB0GA1UdDgQW BBT9L7TK0vRaM5ot5h99e/TJE87AoTAfBgNVHSMEGDAWgBSWuKCOdZyQIRcy3uhP 1L4lnaoP/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOL2xy aWdqbldja0NFWE10N29UOVMtSloycURfMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bHJpZ2puV2NrQ0VYTXQ3b1Q5Uy1KWjJxRF8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTi9fUy0weXRMMFdqT2FMZVlmZlh2MHlS UE93S0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBykK4MA0G CSqGSIb3DQEBCwUAA4IBAQBbdH0LeTg0mnggJn0TdsOB7Kt0ZBU1Nw97E8df+/QR pqJpyUaM2r7Pymqz0D5uVKy7Xe3a+URI1sDRyYS3uYJ+6jrjNi3YbRJZWUs639Xp HspCOdNlcPnCtxY9xXwsltGM3/xh27RHZLFPHHT6Fwuqjp35+64N9v1Gbl8qWyrF gLkFaTTtj2tAfRlXOeTGvFAIQ1ut+pSJIVcsAGl7e0ySLBOFXIB6uaPvT4mJHeZ5 4HB4dmK6wdVub04ixuUDroZtQw9/+o1gWQjTPlEJ/vYe946v4tITPC08qD9sJPDA /zCiaIB6YGoetO1OB6QRhQu4ip+UBeS/m3qKBRxp1iAr -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:56 2025 by rpki-client