$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMYKL/XPrM1LaVIbQwT7rMMnAaLDmpBhk.roa File: XPrM1LaVIbQwT7rMMnAaLDmpBhk.roa (raw, json) Hash identifier: qYPJ4Rx3jWotbSaxl5ragkrBL0zTcKpqWVCvoBptGRQ= Subject key identifier: 5C:FA:CC:D4:B6:95:21:B4:30:4F:BA:CC:32:70:1A:2C:39:A9:06:19 Certificate issuer: /CN=9A0CC0BB631D15131023849083D941A2DBCDFA65 Certificate serial: 037F Authority key identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/XPrM1LaVIbQwT7rMMnAaLDmpBhk.roa Signing time: Tue 30 Sep 2025 15:51:04 +0000 ROA not before: Tue 30 Sep 2025 15:51:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 160.191.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 13:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 895 (0x37f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A0CC0BB631D15131023849083D941A2DBCDFA65 Validity Not Before: Sep 30 15:51:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5CFACCD4B69521B4304FBACC32701A2C39A90619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:ba:44:13:bc:1c:80:06:08:d5:cb:57:2c: 38:8f:ef:32:9f:67:38:65:77:aa:cd:04:ea:64:6f: 92:f0:2c:ec:52:9e:50:39:2d:96:f8:77:25:c8:3b: 5b:03:d1:23:b2:52:1f:84:b3:51:b9:dc:2c:9b:1d: 3c:ce:89:24:5b:d2:f0:5a:85:53:0b:91:83:76:e9: 3a:70:59:95:48:56:ab:61:2e:07:6c:44:ed:ec:e8: cc:48:9f:e1:1f:b7:94:11:17:3a:bb:bf:fe:0e:3a: 6c:21:56:1a:0e:a7:36:0b:ad:ee:4d:0d:99:97:7e: b6:0a:cd:f7:0b:81:8c:85:bb:b7:1c:0a:1c:28:3b: 86:44:67:02:3c:b0:f2:53:14:ac:a6:57:fc:10:e3: a0:4e:98:08:57:31:d3:a3:4e:5a:79:1e:56:c2:c9: bd:01:49:1e:db:e7:6e:30:5f:73:26:48:3d:50:cf: 41:82:7a:7c:d0:d0:e4:46:c0:96:52:49:4e:5b:f0: 61:2e:a3:03:ea:44:ec:f4:9f:91:31:c4:cb:39:54: 9d:ab:a0:fe:ec:63:17:2b:54:9b:59:e6:2f:4b:00: 4c:09:e2:f2:6a:8b:4b:65:19:40:57:28:86:1a:28: 16:39:86:12:6a:74:29:76:a5:1a:b1:02:f9:c8:c1: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FA:CC:D4:B6:95:21:B4:30:4F:BA:CC:32:70:1A:2C:39:A9:06:19 X509v3 Authority Key Identifier: keyid:9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/XPrM1LaVIbQwT7rMMnAaLDmpBhk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.4.0/23 Signature Algorithm: sha256WithRSAEncryption aa:82:0a:21:f0:5e:19:54:a8:5a:98:46:09:73:90:d4:a0:ee: 6b:05:c0:1a:07:c6:b1:4f:1e:ea:c6:e1:1e:3e:0e:6c:9c:91: 2c:71:46:57:53:96:ae:0e:d4:cd:6c:70:fb:42:54:31:b1:24: a9:a0:f3:ae:36:2d:37:df:83:ce:5b:82:9b:52:3b:e6:65:9a: 38:e4:20:a6:c7:e0:6c:ce:92:b6:c4:f6:9d:e3:7c:46:6a:24: 79:a3:52:19:ee:3c:df:37:69:18:41:f6:de:bd:48:02:79:37: 5a:d5:90:41:be:60:b3:82:04:95:59:25:1a:19:92:11:be:bc: a5:11:5c:3b:76:e7:70:c6:9f:db:fa:b9:bd:4d:f0:53:06:95: 73:64:4b:4b:67:ae:e0:c2:a2:e7:85:9d:c2:18:0b:52:42:dc: 39:63:57:bc:a0:1b:36:c6:41:75:59:ab:9a:37:84:54:35:92: 87:f7:f0:0a:66:63:11:18:25:62:9f:1e:87:e1:c4:a0:70:a5: 00:ed:6c:ba:a2:e1:3a:56:6b:a7:f2:0c:53:48:04:94:29:84: 5f:69:21:54:4f:87:fd:69:f9:60:d2:a6:ee:eb:03:4e:16:ca: 18:0b:5f:e4:1b:ec:9a:63:90:1f:63:a1:f3:c8:fe:f2:cd:c3: e4:78:d8:ef -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICA38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEw Q0MwQkI2MzFEMTUxMzEwMjM4NDkwODNEOTQxQTJEQkNERkE2NTAeFw0yNTA5MzAx NTUxMDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDRkFDQ0Q0QjY5NTIx QjQzMDRGQkFDQzMyNzAxQTJDMzlBOTA2MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6w7pEE7wcgAYI1ctXLDiP7zKfZzhld6rNBOpkb5LwLOxSnlA5 LZb4dyXIO1sD0SOyUh+Es1G53CybHTzOiSRb0vBahVMLkYN26TpwWZVIVqthLgds RO3s6MxIn+Eft5QRFzq7v/4OOmwhVhoOpzYLre5NDZmXfrYKzfcLgYyFu7ccChwo O4ZEZwI8sPJTFKymV/wQ46BOmAhXMdOjTlp5HlbCyb0BSR7b524wX3MmSD1Qz0GC enzQ0ORGwJZSSU5b8GEuowPqROz0n5ExxMs5VJ2roP7sYxcrVJtZ5i9LAEwJ4vJq i0tlGUBXKIYaKBY5hhJqdCl2pRqxAvnIwYhdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUXPrM1LaVIbQwT7rMMnAaLDmpBhkwHwYDVR0jBBgwFoAUmgzAu2MdFRMQI4SQ g9lBotvN+mUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1ZS0wv bWd6QXUyTWRGUk1RSTRTUWc5bEJvdHZOLW1VLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9tZ3pBdTJNZEZSTVFJNFNRZzlsQm90dk4tbVUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTVlLTC9YUHJNMUxhVkliUXdUN3JNTW5B YUxEbXBCaGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoL8E MA0GCSqGSIb3DQEBCwUAA4IBAQCqggoh8F4ZVKhamEYJc5DUoO5rBcAaB8axTx7q xuEePg5snJEscUZXU5auDtTNbHD7QlQxsSSpoPOuNi0334POW4KbUjvmZZo45CCm x+BszpK2xPad43xGaiR5o1IZ7jzfN2kYQfbevUgCeTda1ZBBvmCzggSVWSUaGZIR vrylEVw7dudwxp/b+rm9TfBTBpVzZEtLZ67gwqLnhZ3CGAtSQtw5Y1e8oBs2xkF1 WauaN4RUNZKH9/AKZmMRGCVinx6H4cSgcKUA7Wy6ouE6Vmun8gxTSASUKYRfaSFU T4f9aflg0qbu6wNOFsoYC1/kG+yaY5AfY6HzyP7yzcPkeNjv -----END CERTIFICATE-----Generated at Sat Oct 25 11:32:17 2025 by rpki-client