$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/N0C3fSWd2C5fGP17YVAOZiuDm8w.roa File: N0C3fSWd2C5fGP17YVAOZiuDm8w.roa (raw, json) Hash identifier: 6Js7ux85K9FQfMd/VtHrXw8YY1/vtZUaSQQykn2D3dA= Subject key identifier: 37:40:B7:7D:25:9D:D8:2E:5F:18:FD:7B:61:50:0E:66:2B:83:9B:CC Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0857 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/N0C3fSWd2C5fGP17YVAOZiuDm8w.roa Signing time: Fri 22 Aug 2025 08:44:23 +0000 ROA not before: Fri 22 Aug 2025 08:44:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17415 IP address blocks: 103.152.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2135 (0x857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Aug 22 08:44:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3740B77D259DD82E5F18FD7B61500E662B839BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:d0:76:60:5d:eb:8b:2d:d3:b3:a7:3a:a5: 70:e5:03:5a:d7:13:9c:54:e2:1c:6e:cc:15:63:51: dc:ea:af:73:9b:1b:89:66:03:ed:e0:59:b8:55:02: 18:fc:c5:87:d9:a4:0f:b3:d5:a0:8f:88:e3:9f:bb: dd:92:e3:c6:e9:f7:20:98:00:a3:12:12:17:4e:3a: 47:0f:d2:12:ad:fc:6d:03:42:df:d8:f6:93:28:66: 6f:22:2e:d6:e6:da:7e:58:2f:c4:b7:d7:6a:94:3a: 93:79:76:de:d2:56:57:96:98:82:d6:2b:55:46:a6: bc:1e:7b:de:89:21:64:d2:24:d5:59:9b:72:e1:35: b0:1f:f9:bd:ef:60:29:04:cc:56:63:0e:19:a0:b2: 6e:a8:16:53:a3:ef:c8:8b:c6:e6:d1:98:80:9e:52: fb:97:3f:b8:4a:59:59:a3:b7:17:b2:f4:8b:5f:21: d2:7a:65:e9:3b:20:1f:9c:4b:3e:c8:82:2a:1f:c1: 27:d3:1e:3a:6d:33:32:60:1c:66:f1:2c:96:7a:e6: 8e:35:b0:b3:9b:73:b7:d9:e5:4d:74:15:d1:39:f0: ba:f9:63:94:3b:3b:11:cb:65:de:da:58:9f:dd:49: e6:3d:bb:c2:40:c9:7d:7a:c4:b4:97:2b:a1:e6:54: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:40:B7:7D:25:9D:D8:2E:5F:18:FD:7B:61:50:0E:66:2B:83:9B:CC X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/N0C3fSWd2C5fGP17YVAOZiuDm8w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.202.0/23 Signature Algorithm: sha256WithRSAEncryption 42:ee:0f:31:fe:12:fe:a6:7d:e3:e5:9d:2e:2f:98:5f:d7:c6: fa:ec:a5:47:19:16:85:74:17:d5:82:e6:9b:7f:4e:3f:28:ea: 7d:ce:62:0d:3e:c6:3f:b7:db:62:7d:49:0d:80:23:a2:9c:48: 96:63:9e:af:1b:74:5b:99:15:1b:97:cb:17:b2:76:3c:ac:3c: 16:54:b3:a7:3f:e3:bb:99:dc:8a:69:f1:56:68:a1:25:94:e8: 0b:bd:11:41:7c:9d:8e:13:6d:43:6a:6e:5d:cd:61:63:8c:c3: 1f:d7:fa:7e:83:7d:1c:53:e2:37:c3:0d:d6:14:84:9c:77:08: 76:6d:31:38:30:5c:c5:3c:14:6c:8c:61:da:45:7e:33:d4:ed: 8d:2c:d3:fc:b5:4a:f2:aa:b5:86:6e:40:75:39:52:ad:8a:bd: 35:01:02:d4:d7:bb:d7:dc:05:f3:85:b4:42:23:3c:d8:a2:44: 50:e7:ba:dc:0a:fc:73:85:f5:79:31:45:64:f3:dd:06:cb:8c: c5:d3:77:0f:fa:2e:f9:d1:43:bb:82:8a:91:47:b0:04:4a:bd: 4c:8c:da:1d:6a:4e:1a:d7:64:34:bf:4e:56:f5:ce:70:0b:86: db:47:74:5d:19:5d:b4:ee:7b:8a:fa:69:35:02:37:df:28:86: d1:0b:3e:8a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTA4MjIw ODQ0MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3NDBCNzdEMjU5REQ4 MkU1RjE4RkQ3QjYxNTAwRTY2MkI4MzlCQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDfdB2YF3riy3Ts6c6pXDlA1rXE5xU4hxuzBVjUdzqr3ObG4lm A+3gWbhVAhj8xYfZpA+z1aCPiOOfu92S48bp9yCYAKMSEhdOOkcP0hKt/G0DQt/Y 9pMoZm8iLtbm2n5YL8S312qUOpN5dt7SVleWmILWK1VGprwee96JIWTSJNVZm3Lh NbAf+b3vYCkEzFZjDhmgsm6oFlOj78iLxubRmICeUvuXP7hKWVmjtxey9ItfIdJ6 Zek7IB+cSz7IgiofwSfTHjptMzJgHGbxLJZ65o41sLObc7fZ5U10FdE58Lr5Y5Q7 OxHLZd7aWJ/dSeY9u8JAyX16xLSXK6HmVHNXAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUN0C3fSWd2C5fGP17YVAOZiuDm8wwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL04wQzNmU1dkMkM1 ZkdQMTdZVkFPWml1RG04dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnmMowDQYJKoZIhvcNAQELBQADggEBAELuDzH+Ev6mfePlnS4vmF/Xxvrs pUcZFoV0F9WC5pt/Tj8o6n3OYg0+xj+322J9SQ2AI6KcSJZjnq8bdFuZFRuXyxey djysPBZUs6c/47uZ3Ipp8VZooSWU6Au9EUF8nY4TbUNqbl3NYWOMwx/X+n6DfRxT 4jfDDdYUhJx3CHZtMTgwXMU8FGyMYdpFfjPU7Y0s0/y1SvKqtYZuQHU5Uq2KvTUB AtTXu9fcBfOFtEIjPNiiRFDnutwK/HOF9XkxRWTz3QbLjMXTdw/6LvnRQ7uCipFH sARKvUyM2h1qThrXZDS/Tlb1znALhttHdF0ZXbTue4r6aTUCN98ohtELPoo= -----END CERTIFICATE-----Generated at Thu Nov 6 05:53:39 2025 by rpki-client