$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/W5BmdQotnxv-3hOJA05GBWwWgd0.roa File: W5BmdQotnxv-3hOJA05GBWwWgd0.roa (raw, json) Hash identifier: aOe4BEe1mjgp3cdmNyBe6BTembT4z1YgqCYeSRf/WTg= Subject key identifier: 5B:90:66:75:0A:2D:9F:1B:FE:DE:13:89:03:4E:46:05:6C:16:81:DD Certificate issuer: /CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5 Certificate serial: 0381 Authority key identifier: 76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/W5BmdQotnxv-3hOJA05GBWwWgd0.roa Signing time: Fri 22 Aug 2025 08:48:55 +0000 ROA not before: Fri 22 Aug 2025 08:48:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7483 IP address blocks: 103.189.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 06:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5 Validity Not Before: Aug 22 08:48:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5B9066750A2D9F1BFEDE1389034E46056C1681DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:8e:25:3e:18:e0:5c:2c:e3:93:85:8d:ff: 02:92:65:01:fc:71:36:25:9e:50:23:3d:b8:c2:35: 74:a9:c8:04:f1:37:df:5a:3a:42:1a:97:2c:6a:ae: 8a:9d:10:fc:d8:03:c4:1d:ae:70:08:36:21:05:f5: d8:72:bc:ca:c8:51:f6:95:ca:4c:5c:56:f2:21:95: 34:3d:72:e2:b1:65:79:a0:40:3d:cb:7a:a2:01:59: 98:f2:ea:f0:86:a7:77:02:94:8c:a0:1f:35:07:7e: 7c:1e:74:c6:9a:1f:82:b1:92:36:f5:9c:07:39:64: c9:e5:99:b4:6e:53:fa:45:07:15:21:f5:de:df:cd: e5:bc:1d:4a:8c:3e:52:c4:17:4f:94:d5:35:80:54: 3e:09:a4:30:81:97:cb:6f:70:39:0a:5a:46:d4:5a: ef:de:df:64:c8:69:b8:cf:53:71:1d:0f:47:2d:28: 0c:5a:bf:11:4e:fc:23:8d:8a:4e:db:92:43:23:b2: fe:c0:32:5b:69:81:09:c0:47:ca:49:bf:f4:9f:ff: 3c:2b:44:a5:1f:cf:57:f6:95:b9:ef:dc:d5:29:c1: 5e:1c:8e:c7:15:6c:a2:10:4a:37:1f:0d:cf:f2:63: f1:14:f1:bd:ae:03:35:b5:4f:7f:d4:8a:d5:ed:ad: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:90:66:75:0A:2D:9F:1B:FE:DE:13:89:03:4E:46:05:6C:16:81:DD X509v3 Authority Key Identifier: keyid:76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/W5BmdQotnxv-3hOJA05GBWwWgd0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.189.108.0/23 Signature Algorithm: sha256WithRSAEncryption 50:b8:00:35:5c:44:21:81:ca:06:0d:4d:cb:2e:89:17:28:35: 9d:87:55:bc:38:53:50:12:bf:a5:44:05:7d:b3:51:d2:ff:a5: ea:e0:c3:56:73:d9:7c:6a:fc:30:85:00:7a:28:2b:95:8f:34: 2e:f0:54:7e:f6:c7:69:ff:3a:7a:a7:37:38:25:9e:a4:7d:c5: 36:97:eb:54:be:d3:a9:8c:ac:6d:fd:71:1a:3d:cd:6c:cd:30: 05:91:35:62:20:e2:74:fe:eb:aa:2d:79:6c:ca:03:72:1e:7c: a3:57:94:12:ef:4c:5d:49:97:31:23:9f:e6:a5:f2:1d:1e:84: a3:7b:86:ba:13:36:ba:2f:54:cf:18:df:2c:f4:8b:66:b2:93: 1e:90:47:3a:6f:96:d9:d6:26:cf:52:87:fa:4f:c7:87:60:5f: d6:c4:e3:9a:73:7d:29:f4:2b:03:0f:cf:90:9f:2e:5e:82:67: 2c:cb:17:bb:c8:bc:82:58:3a:e5:7a:b1:c8:b4:3d:de:66:78: e5:f8:5a:29:30:52:91:21:0a:b0:3a:93:4b:22:ad:06:eb:9f: 65:b0:38:4b:2c:3a:89:70:bd:da:83:58:c1:87:a2:f7:d7:ba: c7:0f:95:0a:c4:87:10:b3:5e:eb:d3:30:88:c1:62:96:e3:9a: c3:0b:b1:83 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 MzdFRUJFRkVGNzBDNTM4Q0VBRERDRjk4NDhGQUE3OUM3MzZBNTAeFw0yNTA4MjIw ODQ4NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVCOTA2Njc1MEEyRDlG MUJGRURFMTM4OTAzNEU0NjA1NkMxNjgxREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0M44lPhjgXCzjk4WN/wKSZQH8cTYlnlAjPbjCNXSpyATxN99a OkIalyxqroqdEPzYA8QdrnAINiEF9dhyvMrIUfaVykxcVvIhlTQ9cuKxZXmgQD3L eqIBWZjy6vCGp3cClIygHzUHfnwedMaaH4Kxkjb1nAc5ZMnlmbRuU/pFBxUh9d7f zeW8HUqMPlLEF0+U1TWAVD4JpDCBl8tvcDkKWkbUWu/e32TIabjPU3EdD0ctKAxa vxFO/CONik7bkkMjsv7AMltpgQnAR8pJv/Sf/zwrRKUfz1f2lbnv3NUpwV4cjscV bKIQSjcfDc/yY/EU8b2uAzW1T3/UitXtrW75AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUW5BmdQotnxv+3hOJA05GBWwWgd0wHwYDVR0jBBgwFoAUdmN+6+/vcMU4zq3c +YSPqnnHNqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVO R1RXL2RtTi02LV92Y01VNHpxM2MtWVNQcW5uSE5xVS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvZG1OLTYtX3ZjTVU0enEzYy1ZU1Bxbm5ITnFVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVOR1RXL1c1Qm1kUW90bnh2 LTNoT0pBMDVHQld3V2dkMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnvWwwDQYJKoZIhvcNAQELBQADggEBAFC4ADVcRCGBygYNTcsuiRcoNZ2H Vbw4U1ASv6VEBX2zUdL/pergw1Zz2Xxq/DCFAHooK5WPNC7wVH72x2n/OnqnNzgl nqR9xTaX61S+06mMrG39cRo9zWzNMAWRNWIg4nT+66oteWzKA3IefKNXlBLvTF1J lzEjn+al8h0ehKN7hroTNrovVM8Y3yz0i2aykx6QRzpvltnWJs9Sh/pPx4dgX9bE 45pzfSn0KwMPz5CfLl6CZyzLF7vIvIJYOuV6sci0Pd5meOX4WikwUpEhCrA6k0si rQbrn2WwOEssOolwvdqDWMGHovfXuscPlQrEhxCzXuvTMIjBYpbjmsMLsYM= -----END CERTIFICATE-----Generated at Mon Oct 27 02:25:18 2025 by rpki-client