$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/KH3CPNAEUFcaTX1jQaDAXFuqnz8.roa File: KH3CPNAEUFcaTX1jQaDAXFuqnz8.roa (raw, json) Hash identifier: btvcxS0QIPF5uW2LVaNrhvmKQsXvkQco3sZFm07rvRo= Subject key identifier: 28:7D:C2:3C:D0:04:50:57:1A:4D:7D:63:41:A0:C0:5C:5B:AA:9F:3F Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Certificate serial: 0A00 Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/KH3CPNAEUFcaTX1jQaDAXFuqnz8.roa Signing time: Mon 13 Oct 2025 06:57:47 +0000 ROA not before: Mon 13 Oct 2025 06:57:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134522 IP address blocks: 211.76.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Validity Not Before: Oct 13 06:57:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=287DC23CD00450571A4D7D6341A0C05C5BAA9F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:38:a2:4e:f8:7c:74:c9:4a:70:11:5e:99: 8d:bc:fe:db:10:db:e3:46:34:e4:1a:8b:82:45:cb: b8:13:2b:ac:3a:6e:67:57:c5:a1:dc:62:01:37:81: 18:1b:50:76:95:15:1c:c7:01:07:03:9f:50:1f:68: f5:e3:eb:18:0f:1a:59:f4:12:2e:e6:4c:1e:ce:28: 78:a4:b4:98:b3:8b:a7:71:70:63:4a:25:3c:e0:e9: cd:b6:62:6c:ca:37:3e:b8:9f:39:80:c3:2d:51:a6: e9:0c:7d:96:4c:1d:54:e2:6f:7c:ff:f4:fb:07:fa: ce:31:92:fe:66:09:fc:af:c9:64:07:0c:26:83:98: f1:8f:28:f7:05:f7:b4:81:ee:83:21:cd:92:94:8b: 8b:68:2d:bd:94:cd:82:bc:5d:22:a9:7b:b0:43:c6: 47:5d:95:30:b0:94:7c:70:b5:d7:4a:01:30:5c:33: 66:fc:a1:1c:be:31:0b:c4:58:1c:e2:bf:36:e9:46: 5f:5d:0d:49:6a:b7:a6:f5:a5:8c:be:4f:71:d2:f1: a9:0a:c5:59:30:71:94:e1:4a:b5:bd:60:3b:59:b8: 0a:d5:cf:f2:a0:7a:9a:7c:9e:1c:3a:ce:12:e1:6f: 3c:3a:a3:82:9c:26:aa:45:2a:50:f2:5f:54:14:dd: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7D:C2:3C:D0:04:50:57:1A:4D:7D:63:41:A0:C0:5C:5B:AA:9F:3F X509v3 Authority Key Identifier: keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/KH3CPNAEUFcaTX1jQaDAXFuqnz8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.182.0/24 Signature Algorithm: sha256WithRSAEncryption 56:cd:50:1c:23:a9:14:1c:3c:2a:f2:ba:91:bb:6d:c9:69:48: 9b:94:5d:64:07:fb:67:c6:5a:f4:8b:95:06:c0:83:72:20:d9: e7:11:8a:8a:69:a8:97:81:64:3e:e1:24:a4:93:c6:f7:ee:a4: 64:44:2d:8f:e4:7f:61:a2:b2:56:c9:d8:f3:14:9c:1c:22:cb: d0:f1:9f:db:75:f9:c2:91:0d:90:9b:70:ce:4e:1f:ea:92:e7: a5:b0:8b:a9:21:ab:e4:be:c0:9f:bf:5d:0f:68:21:49:da:53: 3f:38:cc:c8:25:f0:3f:6c:8d:ca:29:26:fc:97:fa:0a:07:e9: 7f:a0:05:3a:39:0b:79:32:5d:d3:8d:bf:52:e7:34:29:ac:dd: 2e:b5:ca:8d:be:4d:fc:32:9e:95:b9:c9:0d:4c:61:4d:a7:6a: 26:0c:bd:51:8c:7b:ef:96:55:e3:26:df:ff:31:b4:8f:15:e2: 97:61:2e:20:a2:d9:07:1b:8b:d6:8d:e1:03:c0:00:72:54:97: e5:b1:3f:bc:b9:b7:84:e0:b1:d4:b4:2a:04:ba:1c:f3:66:a8: b6:4b:35:60:3c:d9:9f:a9:2c:d9:59:c7:ba:bb:9e:91:7c:54: ae:67:79:bf:3d:be:54:6a:26:35:40:c8:45:39:6e:ae:d6:0f: 93:55:1b:83 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FE NTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRBQzAeFw0yNTEwMTMw NjU3NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4N0RDMjNDRDAwNDUw NTcxQTREN0Q2MzQxQTBDMDVDNUJBQTlGM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+fTiiTvh8dMlKcBFemY28/tsQ2+NGNOQai4JFy7gTK6w6bmdX xaHcYgE3gRgbUHaVFRzHAQcDn1AfaPXj6xgPGln0Ei7mTB7OKHiktJizi6dxcGNK JTzg6c22YmzKNz64nzmAwy1RpukMfZZMHVTib3z/9PsH+s4xkv5mCfyvyWQHDCaD mPGPKPcF97SB7oMhzZKUi4toLb2UzYK8XSKpe7BDxkddlTCwlHxwtddKATBcM2b8 oRy+MQvEWBzivzbpRl9dDUlqt6b1pYy+T3HS8akKxVkwcZThSrW9YDtZuArVz/Kg epp8nhw6zhLhbzw6o4KcJqpFKlDyX1QU3c/FAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUKH3CPNAEUFcaTX1jQaDAXFuqnz8wHwYDVR0jBBgwFoAUytUnAiyM0HVo7J/I Khzg3eWyxKwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNU V0FSRS95dFVuQWl5TTBIVm83Sl9JS2h6ZzNlV3l4S3cuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RXQkVTVFdBUkUvS0gzQ1BOQUVV RmNhVFgxalFhREFYRnVxbno4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANNMtjANBgkqhkiG9w0BAQsFAAOCAQEAVs1QHCOpFBw8KvK6kbttyWlI m5RdZAf7Z8Za9IuVBsCDciDZ5xGKimmol4FkPuEkpJPG9+6kZEQtj+R/YaKyVsnY 8xScHCLL0PGf23X5wpENkJtwzk4f6pLnpbCLqSGr5L7An79dD2ghSdpTPzjMyCXw P2yNyikm/Jf6Cgfpf6AFOjkLeTJd042/Uuc0KazdLrXKjb5N/DKelbnJDUxhTadq Jgy9UYx775ZV4ybf/zG0jxXil2EuIKLZBxuL1o3hA8AAclSX5bE/vLm3hOCx1LQq BLoc82aotks1YDzZn6ks2VnHuruekXxUrmd5vz2+VGomNUDIRTlurtYPk1Ubgw== -----END CERTIFICATE-----Generated at Tue Oct 21 06:17:53 2025 by rpki-client