$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/mqtTMHIAwZWCyqJa7LuHi2FU7jg.roa File: mqtTMHIAwZWCyqJa7LuHi2FU7jg.roa (raw, json) Hash identifier: NawBos98lTXwDlztOK6wPoulJfb1zu4vVysJihoFx04= Subject key identifier: 9A:AB:53:30:72:00:C1:95:82:CA:A2:5A:EC:BB:87:8B:61:54:EE:38 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 09D9 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/mqtTMHIAwZWCyqJa7LuHi2FU7jg.roa Signing time: Fri 22 Aug 2025 08:55:25 +0000 ROA not before: Fri 22 Aug 2025 08:55:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 103.137.62.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Aug 22 08:55:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9AAB53307200C19582CAA25AECBB878B6154EE38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:88:e1:95:72:55:f2:ec:3b:18:08:bb:aa: 84:0c:02:23:06:c8:a5:71:bf:b1:2b:65:69:af:f1: 8c:bb:27:51:af:02:ef:9a:04:59:b6:69:82:58:2a: f9:c5:ae:cd:f1:b3:d5:65:38:5c:5d:8c:ce:8f:a6: 07:d1:67:f9:26:81:6c:66:24:be:5c:08:5a:6c:65: 68:da:f1:1b:b6:d9:cf:5e:ca:24:d4:12:4d:57:be: 14:32:88:5d:be:aa:31:3f:f3:4e:34:6b:d0:ca:63: ed:a0:4c:f7:9d:f8:15:2b:d4:b9:d3:55:9e:07:7e: 71:b7:24:2d:9a:df:72:fd:5b:9c:56:3a:1a:2f:78: 4d:46:0c:b0:0d:27:9a:fc:c5:e7:b9:08:f2:f0:32: cd:8d:4e:73:04:f8:c3:c2:b6:89:59:82:ee:5d:92: 7d:92:55:7d:1f:57:22:ef:cf:00:ae:51:83:6b:c3: da:e8:30:cf:eb:b2:10:97:d6:2a:c5:7d:05:5d:9d: 1f:dc:4d:2f:56:5a:05:f8:54:16:87:83:98:29:79: f6:c0:a3:84:f2:c1:91:b2:ae:d3:64:93:61:87:ed: 9a:87:31:24:61:6b:ce:81:27:20:fd:9f:1a:3b:5d: 6f:5f:43:41:55:e3:67:0d:61:51:dd:1c:11:ca:41: 60:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AB:53:30:72:00:C1:95:82:CA:A2:5A:EC:BB:87:8B:61:54:EE:38 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/mqtTMHIAwZWCyqJa7LuHi2FU7jg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.62.0/23 Signature Algorithm: sha256WithRSAEncryption 98:1b:9d:ad:4b:c1:52:7f:f6:1d:d7:ff:fa:06:6e:d2:1b:ce: eb:ed:83:6f:1a:8f:c8:3b:6a:a1:df:7e:a0:8e:8c:da:15:cf: 96:34:3b:15:5f:c5:71:84:ec:55:76:60:d5:ed:ed:a5:78:00: fd:67:da:91:e9:45:c3:00:a4:fc:de:5e:42:0e:6c:8d:0c:b9: 18:5c:b8:5a:04:92:0d:dd:bd:a2:f6:46:99:d4:20:89:80:13: 0f:f6:e2:4a:ac:f9:92:8c:ec:bc:7d:7c:30:e1:05:dd:43:f6: 98:de:d2:d2:e0:78:8a:96:8f:70:b5:66:56:b7:0f:be:cd:33: 48:c0:d7:bf:4a:0a:9f:3b:93:6a:61:2e:bc:39:53:a2:84:e6: bd:a4:f5:78:d3:24:53:f2:5f:2e:26:d4:dc:9b:e9:68:88:79: 5a:1a:ed:fb:76:78:b8:7d:d2:71:fa:82:fa:29:5c:94:0a:63: 13:9b:3e:02:29:75:ce:93:36:4c:23:65:72:a6:d0:86:09:b5: af:65:56:84:76:10:17:c0:0e:c0:d4:69:81:5f:9c:91:8f:99: 7f:95:eb:54:ae:37:fc:c7:01:0b:36:e7:ba:07:59:de:2a:ed: dd:02:0c:30:3a:82:b3:9a:39:39:c2:ae:4c:ce:fe:cd:47:af: 4c:73:7b:e1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNTA4MjIw ODU1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBQUI1MzMwNzIwMEMx OTU4MkNBQTI1QUVDQkI4NzhCNjE1NEVFMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrjojhlXJV8uw7GAi7qoQMAiMGyKVxv7ErZWmv8Yy7J1GvAu+a BFm2aYJYKvnFrs3xs9VlOFxdjM6PpgfRZ/kmgWxmJL5cCFpsZWja8Ru22c9eyiTU Ek1XvhQyiF2+qjE/8040a9DKY+2gTPed+BUr1LnTVZ4HfnG3JC2a33L9W5xWOhov eE1GDLANJ5r8xee5CPLwMs2NTnME+MPCtolZgu5dkn2SVX0fVyLvzwCuUYNrw9ro MM/rshCX1irFfQVdnR/cTS9WWgX4VBaHg5gpefbAo4TywZGyrtNkk2GH7ZqHMSRh a86BJyD9nxo7XW9fQ0FV42cNYVHdHBHKQWCVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUmqtTMHIAwZWCyqJa7LuHi2FU7jgwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL21xdFRNSElBd1pXQ3lxSmE3THVIaTJG VTdqZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniT4wDQYJ KoZIhvcNAQELBQADggEBAJgbna1LwVJ/9h3X//oGbtIbzuvtg28aj8g7aqHffqCO jNoVz5Y0OxVfxXGE7FV2YNXt7aV4AP1n2pHpRcMApPzeXkIObI0MuRhcuFoEkg3d vaL2RpnUIImAEw/24kqs+ZKM7Lx9fDDhBd1D9pje0tLgeIqWj3C1Zla3D77NM0jA 179KCp87k2phLrw5U6KE5r2k9XjTJFPyXy4m1Nyb6WiIeVoa7ft2eLh90nH6gvop XJQKYxObPgIpdc6TNkwjZXKm0IYJta9lVoR2EBfADsDUaYFfnJGPmX+V61SuN/zH AQs257oHWd4q7d0CDDA6grOaOTnCrkzO/s1Hr0xze+E= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:38 2025 by rpki-client