$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/uCQSXy9O7rFC4HdZ8I6Qv-rLpKU.roa File: uCQSXy9O7rFC4HdZ8I6Qv-rLpKU.roa (raw, json) Hash identifier: yYN/TniJq1UcsoCWo77ewd0NkAcyzUnSN8aWtg8WmG0= Subject key identifier: B8:24:12:5F:2F:4E:EE:B1:42:E0:77:59:F0:8E:90:BF:EA:CB:A4:A5 Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0FDC Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/uCQSXy9O7rFC4HdZ8I6Qv-rLpKU.roa Signing time: Fri 22 Aug 2025 08:56:18 +0000 ROA not before: Fri 22 Aug 2025 08:56:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9304 IP address blocks: 103.135.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4060 (0xfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Aug 22 08:56:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B824125F2F4EEEB142E07759F08E90BFEACBA4A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:3d:15:b6:5d:39:53:a7:d1:bf:b1:f0:60: 88:84:a6:84:c2:38:a9:da:42:f7:91:f8:f8:98:f0: 06:a2:18:bd:28:bc:77:50:6f:e6:e8:50:f3:a9:9f: ff:87:cb:08:1e:4a:24:61:93:88:f2:96:7e:9e:a6: 25:de:2a:46:ea:c4:55:94:9d:79:41:f5:20:56:53: 0b:60:33:2f:cc:37:5b:97:55:4e:95:cd:65:ed:67: 8d:3c:53:ac:18:1b:bf:70:c3:09:2f:54:50:34:da: f6:cd:f1:58:d0:0e:ad:52:2c:1d:76:80:cf:40:f6: b3:43:ab:c3:17:0f:80:86:ee:80:57:bb:6f:95:ea: a3:b8:79:e0:97:0f:46:0b:f4:3e:9c:de:2a:ba:7a: 36:7b:02:43:7e:66:69:fb:8a:3e:0a:de:22:13:11: 11:30:11:c1:1b:6c:6e:21:3d:c3:c7:9d:69:55:5c: 4b:b1:1c:e6:31:7a:52:aa:ce:09:96:20:88:91:41: b9:46:86:61:99:33:be:fe:0e:43:eb:ed:d9:68:36: 23:1d:50:98:e2:c8:4d:60:0d:de:47:b2:db:0c:ed: d9:b8:f0:23:4d:15:db:12:97:d0:b6:5a:5b:77:74: 0c:f8:bd:35:63:23:6d:a1:b5:b7:ca:44:2c:b8:fb: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:24:12:5F:2F:4E:EE:B1:42:E0:77:59:F0:8E:90:BF:EA:CB:A4:A5 X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/uCQSXy9O7rFC4HdZ8I6Qv-rLpKU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.22.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:a7:55:b2:48:63:9f:0d:5b:d7:7e:eb:af:22:7d:5d:f7:12: ff:0c:17:11:47:c9:30:ac:b8:ea:9a:f3:7a:89:37:76:39:aa: 8f:03:3b:6f:80:6a:8e:cd:07:28:65:0b:34:68:4a:e4:c1:ea: 21:d4:7f:2d:7e:7d:f5:1d:4d:91:b5:02:ff:bd:cd:22:17:61: 07:d7:b1:fd:91:2f:f5:76:1d:ff:8b:ef:7d:08:ef:3f:63:44: 37:87:76:80:46:6c:8f:e2:83:11:a6:27:42:87:9e:2f:7e:d4: b2:2b:41:28:bc:22:9c:e8:ed:e5:4d:59:63:f3:46:79:98:28: 92:41:a2:cb:fd:aa:86:d2:fe:80:0a:c6:6b:fd:fa:04:20:42: aa:82:0b:bd:53:c5:46:72:2c:93:a3:18:7e:21:56:d5:bc:ca: 1f:8b:5d:10:a3:e9:f4:74:be:36:48:46:0e:7a:99:2b:a7:3c: 99:76:e8:ed:5c:2f:22:84:63:11:20:5f:33:c3:7b:cc:34:ce: fc:7e:1b:05:01:a0:79:16:51:0a:aa:a6:f8:e7:2e:8d:0f:14: f6:31:be:5b:90:33:82:6c:77:3e:e0:6d:90:83:c2:e9:c4:bf: 22:3e:ff:36:f3:2b:e5:d7:b7:07:a3:1b:4d:0e:0b:f3:fe:58: 8c:47:c6:18 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTA4MjIw ODU2MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI4MjQxMjVGMkY0RUVF QjE0MkUwNzc1OUYwOEU5MEJGRUFDQkE0QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIjj0Vtl05U6fRv7HwYIiEpoTCOKnaQveR+PiY8AaiGL0ovHdQ b+boUPOpn/+HywgeSiRhk4jyln6epiXeKkbqxFWUnXlB9SBWUwtgMy/MN1uXVU6V zWXtZ408U6wYG79wwwkvVFA02vbN8VjQDq1SLB12gM9A9rNDq8MXD4CG7oBXu2+V 6qO4eeCXD0YL9D6c3iq6ejZ7AkN+Zmn7ij4K3iITEREwEcEbbG4hPcPHnWlVXEux HOYxelKqzgmWIIiRQblGhmGZM77+DkPr7dloNiMdUJjiyE1gDd5HstsM7dm48CNN FdsSl9C2Wlt3dAz4vTVjI22htbfKRCy4++NxAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUuCQSXy9O7rFC4HdZ8I6Qv+rLpKUwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vdUNRU1h5OU83 ckZDNEhkWjhJNlF2LXJMcEtVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWeHFjANBgkqhkiG9w0BAQsFAAOCAQEAbKdVskhjnw1b137rryJ9XfcS /wwXEUfJMKy46przeok3djmqjwM7b4Bqjs0HKGULNGhK5MHqIdR/LX599R1NkbUC /73NIhdhB9ex/ZEv9XYd/4vvfQjvP2NEN4d2gEZsj+KDEaYnQoeeL37UsitBKLwi nOjt5U1ZY/NGeZgokkGiy/2qhtL+gArGa/36BCBCqoILvVPFRnIsk6MYfiFW1bzK H4tdEKPp9HS+NkhGDnqZK6c8mXbo7VwvIoRjESBfM8N7zDTO/H4bBQGgeRZRCqqm +OcujQ8U9jG+W5Azgmx3PuBtkIPC6cS/Ij7/NvMr5de3B6MbTQ4L8/5YjEfGGA== -----END CERTIFICATE-----Generated at Wed Oct 29 08:37:15 2025 by rpki-client