$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/2vz-xMzPl8hiyTavYHJYKLC1WPY.roa File: 2vz-xMzPl8hiyTavYHJYKLC1WPY.roa (raw, json) Hash identifier: W5GyxgtP1ONLKY2Y7pIwNIhLloHANzxzrB/mIxHajfQ= Subject key identifier: DA:FC:FE:C4:CC:CF:97:C8:62:C9:36:AF:60:72:58:28:B0:B5:58:F6 Certificate issuer: /CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437 Certificate serial: 0A Authority key identifier: 54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/2vz-xMzPl8hiyTavYHJYKLC1WPY.roa Signing time: Tue 28 Oct 2025 08:44:53 +0000 ROA not before: Tue 28 Oct 2025 08:44:53 +0000 ROA not after: Fri 16 Oct 2026 15:30:20 +0000 asID: 396982 IP address blocks: 138.252.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 23:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437 Validity Not Before: Oct 28 08:44:53 2025 GMT Not After : Oct 16 15:30:20 2026 GMT Subject: CN=DAFCFEC4CCCF97C862C936AF60725828B0B558F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:aa:ad:0a:88:b5:9f:c5:a8:00:ed:47:76: 30:9d:7f:92:a6:da:9c:c3:b6:3f:1a:fc:c6:77:71: d1:2b:44:6f:4e:0c:2a:76:d7:49:42:1e:4c:33:71: bd:e2:80:30:38:0c:f0:46:7d:8e:94:15:7f:92:56: a2:9a:f3:32:e3:f5:87:0b:14:38:15:a3:5c:ed:e0: 7b:11:07:d2:b8:ce:20:ac:23:a7:34:ac:89:70:f1: 5c:f2:e2:28:0c:b7:ba:67:00:4c:37:99:a1:af:c7: d6:68:9c:5f:b0:ff:96:2d:0e:c1:41:07:36:fc:d1: ee:59:4e:c3:3c:1a:26:77:61:08:39:43:33:80:12: 6b:7b:f2:ed:d2:6d:1b:8d:29:e5:d7:5b:86:11:a6: c6:6c:df:21:a2:35:7a:a9:4c:79:d3:dc:9b:08:e9: 00:bf:54:0f:e8:12:fa:73:76:f0:ad:bd:15:8a:7b: b3:bf:44:6f:01:3d:fd:92:e3:7f:81:df:2a:e1:8e: 34:4f:bb:68:6d:99:eb:ba:9e:ac:f2:36:b3:de:0e: f7:0d:c1:6b:85:5a:e6:89:0a:c5:63:d1:71:1a:d1: b0:24:5a:25:a1:88:e4:6a:c6:e9:52:58:04:d2:1e: 8d:8a:c3:5d:3b:d4:48:07:fa:a0:a2:be:7b:1e:04: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FC:FE:C4:CC:CF:97:C8:62:C9:36:AF:60:72:58:28:B0:B5:58:F6 X509v3 Authority Key Identifier: keyid:54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/2vz-xMzPl8hiyTavYHJYKLC1WPY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.52.0/24 Signature Algorithm: sha256WithRSAEncryption 04:1f:4a:27:f3:3e:ea:11:b7:9d:31:1e:67:36:aa:32:bc:96: bb:7d:7b:8c:59:87:27:30:5e:0b:dc:fa:6c:a3:07:32:6a:34: 42:47:80:b3:49:ae:95:2c:1f:28:6e:8a:36:70:ac:08:4f:5b: 59:24:e4:9a:b4:3b:0c:52:94:7f:8b:86:37:79:87:28:eb:9b: 89:1a:3b:ea:a7:7b:49:29:e4:a5:21:67:ea:bf:64:dc:02:ea: b3:26:98:e4:13:f4:48:82:14:dd:9d:94:06:ef:28:88:85:c2: 72:48:43:7a:4a:65:48:1a:a1:f3:5f:a4:64:51:0e:a7:ee:94: cb:4f:15:e7:c6:88:a9:63:a5:fb:0c:7a:b8:dc:82:e5:60:bb: 66:83:58:c3:68:4c:9c:a0:1d:ac:c0:4e:a0:b3:e5:f3:b0:3c: 8d:d2:a0:72:22:32:3b:c9:4b:96:e7:96:c9:50:70:9d:10:06: 3a:5a:29:72:e8:5c:66:7f:56:c3:f4:d6:64:07:ec:8a:28:d1: 07:4a:2b:da:e4:aa:fb:08:90:29:0d:05:d8:ee:38:0e:5f:c7: 02:0c:d1:e7:7e:34:4e:0a:d9:78:de:98:a5:64:f6:98:8d:e7: ed:ea:69:e3:20:bb:68:a6:de:58:bd:b1:10:8b:05:79:ee:e9: 9c:12:ea:59 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NDdF NEI2NEY2MDI5RURBQzdDMTY3RDQ1MjJEQTNEOUYwN0VGNDM3MB4XDTI1MTAyODA4 NDQ1M1oXDTI2MTAxNjE1MzAyMFowMzExMC8GA1UEAxMoREFGQ0ZFQzRDQ0NGOTdD ODYyQzkzNkFGNjA3MjU4MjhCMEI1NThGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANDyqq0KiLWfxagA7Ud2MJ1/kqbanMO2Pxr8xndx0StEb04MKnbX SUIeTDNxveKAMDgM8EZ9jpQVf5JWoprzMuP1hwsUOBWjXO3gexEH0rjOIKwjpzSs iXDxXPLiKAy3umcATDeZoa/H1micX7D/li0OwUEHNvzR7llOwzwaJndhCDlDM4AS a3vy7dJtG40p5ddbhhGmxmzfIaI1eqlMedPcmwjpAL9UD+gS+nN28K29FYp7s79E bwE9/ZLjf4HfKuGONE+7aG2Z67qerPI2s94O9w3Ba4Va5okKxWPRcRrRsCRaJaGI 5GrG6VJYBNIejYrDXTvUSAf6oKK+ex4EmRECAwEAAaOCAfQwggHwMB0GA1UdDgQW BBTa/P7EzM+XyGLJNq9gclgosLVY9jAfBgNVHSMEGDAWgBRUfktk9gKe2sfBZ9RS LaPZ8H70NzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CRUJJVFRF Q0gvVkg1TFpQWUNudHJId1dmVVVpMmoyZkItOURjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9WSDVMWlBZQ250ckh3V2ZVVWkyajJmQi05RGMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CRUJJVFRFQ0gvMnZ6LXhNelBsOGhp eVRhdllISllLTEMxV1BZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIr8NDANBgkqhkiG9w0BAQsFAAOCAQEABB9KJ/M+6hG3nTEeZzaqMryWu317 jFmHJzBeC9z6bKMHMmo0QkeAs0mulSwfKG6KNnCsCE9bWSTkmrQ7DFKUf4uGN3mH KOubiRo76qd7SSnkpSFn6r9k3ALqsyaY5BP0SIIU3Z2UBu8oiIXCckhDekplSBqh 81+kZFEOp+6Uy08V58aIqWOl+wx6uNyC5WC7ZoNYw2hMnKAdrMBOoLPl87A8jdKg ciIyO8lLlueWyVBwnRAGOlopcuhcZn9Ww/TWZAfsiijRB0or2uSq+wiQKQ0F2O44 Dl/HAgzR5340TgrZeN6YpWT2mI3n7epp4yC7aKbeWL2xEIsFee7pnBLqWQ== -----END CERTIFICATE-----Generated at Mon Nov 3 21:51:00 2025 by rpki-client