$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/WkGHlkHiKRr9YdA9HkFCfEw3NcA.roa File: WkGHlkHiKRr9YdA9HkFCfEw3NcA.roa (raw, json) Hash identifier: Jz4U0BnfPv0KHUcYi+wtEY13mo+tbc7KgFpXp/haMRo= Subject key identifier: 5A:41:87:96:41:E2:29:1A:FD:61:D0:3D:1E:41:42:7C:4C:37:35:C0 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 0A7F Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/WkGHlkHiKRr9YdA9HkFCfEw3NcA.roa Signing time: Tue 24 Mar 2026 12:52:07 +0000 ROA not before: Tue 24 Mar 2026 12:52:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 203548 IP address blocks: 103.157.42.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 23:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Mar 24 12:52:07 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5A41879641E2291AFD61D03D1E41427C4C3735C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:22:e9:7a:3d:93:5e:3d:24:a4:48:9f:78: c1:30:a5:ca:d9:5d:d7:19:e8:36:d6:b0:e9:f8:1a: a2:a7:c9:4a:6d:c3:c0:c7:62:19:dd:e8:cd:4b:ec: a6:a2:99:84:d8:68:aa:55:97:f5:80:ee:2f:3f:bc: 71:23:e4:10:6e:75:01:c2:e1:4a:3c:af:01:90:d8: 77:d7:8d:a9:68:8f:09:36:ca:00:82:95:be:b3:d1: de:49:15:fb:0a:12:77:3f:76:6d:be:e7:a0:bf:88: 66:b7:7a:23:7b:66:8a:bc:4e:46:db:8f:14:52:8e: e1:26:6c:13:e9:45:7e:0b:ae:60:e1:b7:c0:de:39: 81:d1:88:e2:cb:be:bb:55:40:43:fd:52:ba:fa:78: 81:4d:b0:95:81:a0:7b:71:08:9c:6c:1a:5f:44:37: 6f:fd:cd:0a:22:01:ac:ab:58:0f:09:d0:fe:1c:b1: f8:19:e2:38:8f:c0:89:cd:55:b3:40:c4:95:4b:ca: b7:e4:9e:22:be:09:c1:19:a8:13:b8:90:a4:3c:8e: 78:8d:9c:39:63:d2:e2:a6:33:4e:30:0c:e1:13:cf: 8a:3f:bc:a0:6e:0e:e1:9a:18:24:24:2f:34:a4:d6: 51:a5:e4:46:bb:2e:fa:25:bd:4e:de:35:7b:44:13: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:41:87:96:41:E2:29:1A:FD:61:D0:3D:1E:41:42:7C:4C:37:35:C0 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/WkGHlkHiKRr9YdA9HkFCfEw3NcA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.157.42.0/23 Signature Algorithm: sha256WithRSAEncryption 00:a2:97:20:00:3e:ad:1d:b6:67:b4:17:22:9f:2d:64:48:fd: 04:ac:7b:ca:03:87:a1:2f:62:72:b3:16:b4:89:3d:59:97:92: 13:8a:d6:22:a8:f0:c2:b8:e1:74:32:36:eb:61:03:b8:a0:88: 13:7b:75:86:43:26:8f:27:fa:6d:85:76:e2:3f:e2:55:b8:49: b7:b5:ca:30:5f:94:04:1f:8e:4f:43:85:ba:f2:9c:7c:4e:07: 11:5c:27:0f:33:a9:34:9f:d7:f0:79:5d:e8:84:55:2f:13:35: b6:09:44:50:91:8a:5a:f5:b0:d2:5b:d1:60:5d:8f:d1:fa:1d: 9b:ec:39:4d:4b:32:42:b6:c2:a1:21:89:71:fa:48:bc:80:4a: 4c:71:71:fe:10:01:9e:e3:82:8f:82:f5:f8:e0:b0:9d:a2:77: 73:fe:11:20:88:81:96:d8:4e:97:bf:ba:84:39:53:8e:f5:7e: 69:29:95:55:30:60:ae:5e:b4:de:c5:9b:4e:56:45:cb:65:6f: 98:43:1b:02:b4:3f:6a:58:04:2e:8d:50:1c:5a:a9:36:e5:f7: c1:cf:92:4a:c8:60:55:1a:b8:56:9e:6d:f0:8b:fc:bd:9b:f9: 6b:bf:53:81:f2:7c:49:8f:9a:08:84:55:4d:44:74:b3:71:1c: 3c:da:b7:b6 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNjAzMjQx MjUyMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBNDE4Nzk2NDFFMjI5 MUFGRDYxRDAzRDFFNDE0MjdDNEMzNzM1QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAaSLpej2TXj0kpEifeMEwpcrZXdcZ6DbWsOn4GqKnyUptw8DH Yhnd6M1L7KaimYTYaKpVl/WA7i8/vHEj5BBudQHC4Uo8rwGQ2HfXjalojwk2ygCC lb6z0d5JFfsKEnc/dm2+56C/iGa3eiN7Zoq8TkbbjxRSjuEmbBPpRX4LrmDht8De OYHRiOLLvrtVQEP9Urr6eIFNsJWBoHtxCJxsGl9EN2/9zQoiAayrWA8J0P4csfgZ 4jiPwInNVbNAxJVLyrfkniK+CcEZqBO4kKQ8jniNnDlj0uKmM04wDOETz4o/vKBu DuGaGCQkLzSk1lGl5Ea7LvolvU7eNXtEE+3ZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUWkGHlkHiKRr9YdA9HkFCfEw3NcAwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL1drR0hsa0hpS1JyOVlkQTlIa0ZDZkV3 M05jQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnSowDQYJ KoZIhvcNAQELBQADggEBAACilyAAPq0dtme0FyKfLWRI/QSse8oDh6EvYnKzFrSJ PVmXkhOK1iKo8MK44XQyNuthA7igiBN7dYZDJo8n+m2FduI/4lW4Sbe1yjBflAQf jk9DhbrynHxOBxFcJw8zqTSf1/B5XeiEVS8TNbYJRFCRilr1sNJb0WBdj9H6HZvs OU1LMkK2wqEhiXH6SLyASkxxcf4QAZ7jgo+C9fjgsJ2id3P+ESCIgZbYTpe/uoQ5 U471fmkplVUwYK5etN7Fm05WRctlb5hDGwK0P2pYBC6NUBxaqTbl98HPkkrIYFUa uFaebfCL/L2b+Wu/U4HyfEmPmgiEVU1EdLNxHDzat7Y= -----END CERTIFICATE-----Generated at Thu Mar 26 23:13:19 2026 by rpki-client