$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGXI/y0It2rSVIUtpZCaFm-g0FOIFWKE.roa File: y0It2rSVIUtpZCaFm-g0FOIFWKE.roa (raw, json) Hash identifier: hT1m3KE7RGg7+zcFGlXdugL1MYYVOxzwx6SEZ/67da0= Subject key identifier: CB:42:2D:DA:B4:95:21:4B:69:64:26:85:9B:E8:34:14:E2:05:58:A1 Certificate issuer: /CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Certificate serial: 03 Authority key identifier: 38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/y0It2rSVIUtpZCaFm-g0FOIFWKE.roa Signing time: Thu 06 Nov 2025 03:18:17 +0000 ROA not before: Thu 06 Nov 2025 03:18:17 +0000 ROA not after: Fri 30 Oct 2026 15:30:19 +0000 asID: 24162 IP address blocks: 138.252.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Validity Not Before: Nov 6 03:18:17 2025 GMT Not After : Oct 30 15:30:19 2026 GMT Subject: CN=CB422DDAB495214B696426859BE83414E20558A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:4f:7e:e9:67:6b:f8:62:9e:d7:a5:b5:d8: cf:59:f9:95:b4:77:ad:47:92:ef:ca:fa:12:20:3c: af:94:5b:b5:7e:a0:4b:ec:3e:45:b8:2d:36:15:4d: a8:db:cb:ad:bb:e1:b9:57:7d:83:ab:54:30:57:58: 8d:b8:e0:b8:70:61:83:26:40:0f:1c:5e:b0:35:fe: 57:20:70:35:2f:b9:e1:04:9d:6d:6d:70:f8:e8:14: ad:bf:63:84:5c:97:d2:7d:f4:a3:ed:77:16:b3:b3: 5f:66:c7:bb:f6:36:6b:f4:61:2d:e3:01:3b:c5:f4: 56:5f:2a:71:08:e6:2d:f6:34:68:75:dd:3d:ea:90: 1d:04:d5:64:fd:aa:cd:cb:5a:98:8a:6d:44:eb:31: c2:dc:7e:c0:68:c2:62:85:22:3c:4f:ba:f1:7b:74: 9e:63:b1:98:68:c1:8d:d3:99:7c:80:a7:35:a9:3e: f4:07:58:a3:e7:a7:71:13:eb:87:f7:8a:b4:99:8b: c9:2c:4e:8d:cb:90:c2:29:67:23:b0:e6:00:60:11: 56:d4:2b:86:21:95:dd:bc:59:69:9e:86:bb:fd:35: 28:37:21:cd:66:fb:4b:41:c6:ac:4a:81:72:cc:d5: 69:c6:d5:8a:da:bf:b3:b7:fe:8b:98:8b:d2:d6:bb: d3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:42:2D:DA:B4:95:21:4B:69:64:26:85:9B:E8:34:14:E2:05:58:A1 X509v3 Authority Key Identifier: keyid:38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/y0It2rSVIUtpZCaFm-g0FOIFWKE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.116.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:14:52:21:04:4c:8c:b8:c8:67:6e:3f:bf:f2:e8:9a:44:dd: 94:45:90:7a:99:46:a5:d3:5c:01:44:13:db:eb:e2:fe:a4:ce: c8:ab:55:3c:f6:d0:32:3a:be:91:9b:4e:8a:d3:99:de:02:d6: d1:98:b2:eb:ff:22:5b:c5:19:69:37:b1:24:42:d1:fc:19:78: 22:ec:00:63:22:19:97:62:c8:28:c4:a1:7c:ea:4f:67:14:d4: 30:d8:21:97:51:56:bf:5f:3f:ec:ef:80:81:db:0a:73:7c:68: ac:67:96:b6:bf:fe:22:4d:af:d8:c9:db:7e:a3:02:e2:f0:36: 6c:bb:9f:69:58:6c:f7:30:3f:37:c5:3c:07:7e:0e:bf:4f:f7: 99:f7:d2:60:98:7b:c1:ae:55:cc:8a:ec:03:ed:78:46:e5:75: d9:67:77:0e:77:f8:3b:e8:15:16:eb:62:45:6e:99:76:70:8d: 9e:de:06:40:bb:5f:28:61:d7:74:3a:b0:8f:82:ea:5c:35:a9: b2:ee:6e:19:ad:7e:50:4e:8c:3b:da:14:6a:89:46:30:12:f6: 5a:8c:ec:c8:4f:ee:d6:7c:b6:04:a0:98:61:82:fa:62:a1:a7: 30:f2:4d:59:5a:44:41:7f:81:d4:4e:dd:64:d7:2f:2d:ad:55: ca:fb:b1:94 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOEJG QjMwQzcyQ0E5NTQ4Rjc5NkNDM0Q0RkI2MDA2Qjg4M0UyNzAxMB4XDTI1MTEwNjAz MTgxN1oXDTI2MTAzMDE1MzAxOVowMzExMC8GA1UEAxMoQ0I0MjJEREFCNDk1MjE0 QjY5NjQyNjg1OUJFODM0MTRFMjA1NThBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMxiT37pZ2v4Yp7XpbXYz1n5lbR3rUeS78r6EiA8r5RbtX6gS+w+ RbgtNhVNqNvLrbvhuVd9g6tUMFdYjbjguHBhgyZADxxesDX+VyBwNS+54QSdbW1w +OgUrb9jhFyX0n30o+13FrOzX2bHu/Y2a/RhLeMBO8X0Vl8qcQjmLfY0aHXdPeqQ HQTVZP2qzctamIptROsxwtx+wGjCYoUiPE+68Xt0nmOxmGjBjdOZfICnNak+9AdY o+encRPrh/eKtJmLySxOjcuQwilnI7DmAGARVtQrhiGV3bxZaZ6Gu/01KDchzWb7 S0HGrEqBcszVacbVitq/s7f+i5iL0ta70wkCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBTLQi3atJUhS2lkJoWb6DQU4gVYoTAfBgNVHSMEGDAWgBQ4v7MMcsqVSPeWzD1P tgBriD4nATAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HWEkv T0wtekRITEtsVWozbHN3OVQ3WUFhNGctSndFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PTC16REhMS2xVajNsc3c5VDdZQWE0Zy1Kd0UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HWEkveTBJdDJyU1ZJVXRwWkNhRm0t ZzBGT0lGV0tFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr8 dDANBgkqhkiG9w0BAQsFAAOCAQEAHRRSIQRMjLjIZ24/v/LomkTdlEWQeplGpdNc AUQT2+vi/qTOyKtVPPbQMjq+kZtOitOZ3gLW0Ziy6/8iW8UZaTexJELR/Bl4IuwA YyIZl2LIKMShfOpPZxTUMNghl1FWv18/7O+AgdsKc3xorGeWtr/+Ik2v2MnbfqMC 4vA2bLufaVhs9zA/N8U8B34Ov0/3mffSYJh7wa5VzIrsA+14RuV12Wd3Dnf4O+gV FutiRW6ZdnCNnt4GQLtfKGHXdDqwj4LqXDWpsu5uGa1+UE6MO9oUaolGMBL2Wozs yE/u1ny2BKCYYYL6YqGnMPJNWVpEQX+B1E7dZNcvLa1VyvuxlA== -----END CERTIFICATE-----Generated at Thu Nov 6 12:40:55 2025 by rpki-client