$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/M1rXzKZZp8r8otYHw2z0DUPNIi8.roa File: M1rXzKZZp8r8otYHw2z0DUPNIi8.roa (raw, json) Hash identifier: ocaUhtktXgcCA+Wy3/W5hRDLojCYHW3nFsM+H9VTo5w= Subject key identifier: 33:5A:D7:CC:A6:59:A7:CA:FC:A2:D6:07:C3:6C:F4:0D:43:CD:22:2F Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0E63 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/M1rXzKZZp8r8otYHw2z0DUPNIi8.roa Signing time: Fri 22 Aug 2025 08:56:28 +0000 ROA not before: Fri 22 Aug 2025 08:56:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 203.121.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3683 (0xe63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 22 08:56:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=335AD7CCA659A7CAFCA2D607C36CF40D43CD222F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:93:70:4e:39:28:7c:d9:7e:65:13:dc:bf: ac:05:b4:00:19:37:e6:d7:8c:1c:02:67:3b:6a:24: 7d:df:24:19:83:9b:c1:3f:a9:68:23:cc:4f:51:67: 76:f3:8a:e7:8f:38:db:92:ac:32:7d:ff:ce:a1:51: 60:77:0f:58:dc:cc:04:29:d0:83:0c:35:3e:de:23: 5e:8f:fb:6b:04:07:18:c8:56:82:b6:43:35:de:18: 7b:dc:42:c4:38:9c:19:77:27:15:21:b8:9a:15:bf: 58:e6:35:eb:81:be:b7:30:08:e2:12:1b:1f:06:a8: 31:2d:dd:65:46:7f:49:89:38:d5:e5:a1:e1:8b:29: 98:38:44:d5:ba:8f:31:7f:41:70:44:e1:a3:a0:45: 85:6f:91:ae:b2:e5:53:bb:9f:fd:a5:86:94:f5:10: 30:b2:82:41:7d:ec:e8:43:bb:a1:93:d8:db:89:ed: f4:36:fd:f1:3f:37:90:e7:e9:9c:05:4c:2a:3a:e1: 7b:9b:29:25:57:b5:8b:d1:91:f7:2d:a0:e6:5c:95: ba:dc:fe:4f:e9:ca:06:9d:05:82:e0:52:88:54:30: 7d:e0:23:01:1b:f5:9c:d8:9b:23:7b:81:8a:e6:a0: b8:7f:24:57:f6:f1:c0:7c:9f:28:da:6f:76:4d:18: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:D7:CC:A6:59:A7:CA:FC:A2:D6:07:C3:6C:F4:0D:43:CD:22:2F X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/M1rXzKZZp8r8otYHw2z0DUPNIi8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption a7:08:b4:b6:a4:b3:5a:0b:86:77:f3:72:54:51:df:c6:78:34: b1:07:da:36:1d:04:67:61:ac:e9:a1:f8:08:fd:02:04:94:9c: 7f:bd:09:64:75:14:9b:02:9b:ba:35:e7:92:53:15:22:a8:63: f1:17:9a:53:53:7f:f5:a4:66:75:81:43:6f:8c:bb:ac:d8:06: 6d:7c:32:6f:5c:11:07:0a:ee:ae:e7:fd:08:27:41:ba:8d:eb: e4:39:12:30:e2:cf:fc:f7:b7:7e:10:04:91:02:50:5c:5f:94: 92:b1:85:a4:5c:fb:7f:bb:25:8b:c5:46:d8:ca:f7:8c:22:cf: 5d:21:91:21:6e:0d:f5:b6:95:00:d9:6d:4d:3f:da:10:38:a8: a4:bd:7b:c6:19:29:69:c7:e1:79:d8:68:ba:f9:e5:9e:2b:41: 40:0b:c7:47:79:4f:aa:0c:e8:2f:e9:08:92:69:ce:54:a5:2a: d6:d3:c1:45:33:d9:fb:de:ab:18:08:32:eb:80:a2:5c:33:5d: 6f:e4:ec:f6:c2:63:ec:93:8c:c2:d7:93:9c:fc:0b:68:6d:77: c0:25:7c:75:26:c9:8e:fb:96:0e:83:6e:82:0a:62:cb:91:f1: 67:f4:82:64:cd:07:71:f4:eb:49:dc:f0:c8:8f:df:ee:2b:08: f3:59:05:04 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw ODU2MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMzNUFEN0NDQTY1OUE3 Q0FGQ0EyRDYwN0MzNkNGNDBENDNDRDIyMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWK5NwTjkofNl+ZRPcv6wFtAAZN+bXjBwCZztqJH3fJBmDm8E/ qWgjzE9RZ3bziuePONuSrDJ9/86hUWB3D1jczAQp0IMMNT7eI16P+2sEBxjIVoK2 QzXeGHvcQsQ4nBl3JxUhuJoVv1jmNeuBvrcwCOISGx8GqDEt3WVGf0mJONXloeGL KZg4RNW6jzF/QXBE4aOgRYVvka6y5VO7n/2lhpT1EDCygkF97OhDu6GT2NuJ7fQ2 /fE/N5Dn6ZwFTCo64XubKSVXtYvRkfctoOZclbrc/k/pygadBYLgUohUMH3gIwEb 9ZzYmyN7gYrmoLh/JFf28cB8nyjab3ZNGDSHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUM1rXzKZZp8r8otYHw2z0DUPNIi8wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9NMXJYektaWnA4cjhvdFlIdzJ6 MERVUE5JaTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy3nw MA0GCSqGSIb3DQEBCwUAA4IBAQCnCLS2pLNaC4Z383JUUd/GeDSxB9o2HQRnYazp ofgI/QIElJx/vQlkdRSbApu6NeeSUxUiqGPxF5pTU3/1pGZ1gUNvjLus2AZtfDJv XBEHCu6u5/0IJ0G6jevkORIw4s/897d+EASRAlBcX5SSsYWkXPt/uyWLxUbYyveM Is9dIZEhbg31tpUA2W1NP9oQOKikvXvGGSlpx+F52Gi6+eWeK0FAC8dHeU+qDOgv 6QiSac5UpSrW08FFM9n73qsYCDLrgKJcM11v5Oz2wmPsk4zC15Oc/AtobXfAJXx1 JsmO+5YOg26CCmLLkfFn9IJkzQdx9OtJ3PDIj9/uKwjzWQUE -----END CERTIFICATE-----Generated at Tue Oct 21 04:59:15 2025 by rpki-client