$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/ntyqW4VbuhFf6O39HI9Ntnc23qc.roa File: ntyqW4VbuhFf6O39HI9Ntnc23qc.roa (raw, json) Hash identifier: rXdyYES5bHFseQUY/nnH4hPunTr/LxmE6f86aBiHn9E= Subject key identifier: 9E:DC:AA:5B:85:5B:BA:11:5F:E8:ED:FD:1C:8F:4D:B6:77:36:DE:A7 Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0DC7 Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/ntyqW4VbuhFf6O39HI9Ntnc23qc.roa Signing time: Fri 22 Aug 2025 08:55:19 +0000 ROA not before: Fri 22 Aug 2025 08:55:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131606 IP address blocks: 103.124.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3527 (0xdc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Aug 22 08:55:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9EDCAA5B855BBA115FE8EDFD1C8F4DB67736DEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:49:df:14:55:04:56:36:3e:36:0c:de:bb:28: 88:a1:18:2d:2d:9b:b6:90:d6:1e:f4:73:ad:38:7e: 75:12:4b:d2:89:4e:9f:00:47:ad:84:66:b7:34:06: a7:26:59:e8:67:d4:16:56:af:35:83:f3:5a:e6:e4: 6b:01:95:65:a9:33:cc:92:36:1f:d0:3b:04:bb:87: ca:c4:7a:47:32:c5:c2:21:57:87:34:09:84:c6:b8: c2:6d:53:c4:7f:b8:90:96:6c:6c:2f:ba:58:2b:24: 2f:ee:7f:1c:c0:ac:86:e8:c0:92:ad:a6:d4:8a:42: c0:73:c5:3c:79:49:47:5d:87:2f:8f:b5:f5:bd:8e: 95:16:23:2c:ab:65:4d:73:e3:06:b1:84:d7:13:f5: f2:d1:29:ce:85:57:15:be:04:7f:02:b9:b5:e1:9b: 78:91:df:48:7d:fa:e0:ed:ae:27:21:6f:a6:3e:38: cf:6a:74:a4:fd:1b:f7:7d:0a:ed:23:d4:57:68:77: bd:57:72:6b:91:dc:9f:19:dc:e0:ae:eb:fe:1b:1f: 27:e1:4e:ec:27:d9:8d:b4:0e:7b:c3:27:07:98:f1: 76:9a:98:03:f8:ee:86:ec:23:44:52:22:ff:73:ff: fd:b5:46:87:af:9b:ff:ef:fb:b3:1a:73:69:bb:c2: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DC:AA:5B:85:5B:BA:11:5F:E8:ED:FD:1C:8F:4D:B6:77:36:DE:A7 X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/ntyqW4VbuhFf6O39HI9Ntnc23qc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.40.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:15:f8:9f:28:fd:d3:2e:01:49:2e:3a:67:ac:9d:a1:6c:9b: 62:00:ee:ab:c7:e9:d8:2c:dc:ad:6d:0d:73:be:08:f6:f7:56: 05:08:f6:a8:e7:0a:f0:0e:10:d0:71:aa:25:be:7e:36:8c:c2: e8:2b:25:f6:7a:42:4a:b6:3f:2a:18:92:02:f2:6a:3c:af:6d: 93:17:26:6e:3e:1d:2d:32:57:27:97:7f:d1:d2:e5:01:ac:05: b9:6e:16:0b:df:be:2c:84:7d:db:e8:f3:b0:4c:ae:94:33:02: ba:4f:85:72:e7:72:43:63:f3:32:d3:5a:b1:44:85:ab:4f:ea: 29:a5:d9:ba:0b:82:40:82:ab:bc:ef:dc:39:cf:bb:5a:96:87: 33:86:9f:c1:03:c3:cc:52:57:56:f4:8e:39:92:f2:dc:3b:31: fb:50:5e:f1:23:a4:01:46:32:1e:15:db:e0:f4:e6:4a:f4:c7: 39:00:dc:7b:4a:4b:c3:f1:05:9c:9e:df:c5:57:fc:45:ef:56: 4e:30:88:63:73:3c:84:18:49:cd:39:f3:3d:a4:db:27:82:e8: e6:ea:79:2d:9f:37:61:e7:28:12:c5:60:31:0f:af:bd:c2:6f: f9:a1:e6:30:10:27:e3:a7:9a:a7:84:51:ad:54:64:a2:bd:aa: ec:99:dd:f0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTA4MjIw ODU1MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlFRENBQTVCODU1QkJB MTE1RkU4RURGRDFDOEY0REI2NzczNkRFQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlSd8UVQRWNj42DN67KIihGC0tm7aQ1h70c604fnUSS9KJTp8A R62EZrc0BqcmWehn1BZWrzWD81rm5GsBlWWpM8ySNh/QOwS7h8rEekcyxcIhV4c0 CYTGuMJtU8R/uJCWbGwvulgrJC/ufxzArIbowJKtptSKQsBzxTx5SUddhy+PtfW9 jpUWIyyrZU1z4waxhNcT9fLRKc6FVxW+BH8CubXhm3iR30h9+uDtrichb6Y+OM9q dKT9G/d9Cu0j1Fdod71XcmuR3J8Z3OCu6/4bHyfhTuwn2Y20DnvDJweY8XaamAP4 7obsI0RSIv9z//21Roevm//v+7Mac2m7ws6JAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUntyqW4VbuhFf6O39HI9Ntnc23qcwHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvbnR5cVc0VmJ1aEZmNk8z OUhJOU50bmMyM3FjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWd8KDANBgkqhkiG9w0BAQsFAAOCAQEAnhX4nyj90y4BSS46Z6ydoWybYgDuq8fp 2CzcrW0Nc74I9vdWBQj2qOcK8A4Q0HGqJb5+NozC6Csl9npCSrY/KhiSAvJqPK9t kxcmbj4dLTJXJ5d/0dLlAawFuW4WC9++LIR92+jzsEyulDMCuk+FcudyQ2PzMtNa sUSFq0/qKaXZuguCQIKrvO/cOc+7WpaHM4afwQPDzFJXVvSOOZLy3Dsx+1Be8SOk AUYyHhXb4PTmSvTHOQDce0pLw/EFnJ7fxVf8Re9WTjCIY3M8hBhJzTnzPaTbJ4Lo 5up5LZ83YecoEsVgMQ+vvcJv+aHmMBAn46eap4RRrVRkor2q7Jnd8A== -----END CERTIFICATE-----Generated at Sun Aug 24 17:26:21 2025 by rpki-client