$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NORDATW/7VGRnxKysULr-dNQQ62GgbCVAso.roa File: 7VGRnxKysULr-dNQQ62GgbCVAso.roa (raw, json) Hash identifier: wiome8vdAkP2NVL4H8iDOBcR50Q4nvjy8Rp0exzjqoU= Subject key identifier: ED:51:91:9F:12:B2:B1:42:EB:F9:D3:50:43:AD:86:81:B0:95:02:CA Certificate issuer: /CN=159D5F897276F0DEC857E7E2DEDD649876E8A482 Certificate serial: 0F59 Authority key identifier: 15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/7VGRnxKysULr-dNQQ62GgbCVAso.roa Signing time: Mon 03 Nov 2025 08:56:48 +0000 ROA not before: Mon 03 Nov 2025 08:56:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150288 IP address blocks: 211.79.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 16:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3929 (0xf59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159D5F897276F0DEC857E7E2DEDD649876E8A482 Validity Not Before: Nov 3 08:56:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ED51919F12B2B142EBF9D35043AD8681B09502CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:3c:0d:8d:cf:ae:83:fe:ec:94:97:f1:33: 49:b7:b3:bb:33:9a:9c:f0:6a:61:60:86:78:c0:86: 11:e5:60:4c:e2:b2:f1:8b:65:8a:94:e3:fd:de:7e: fd:df:cf:8d:15:23:10:f3:8e:63:b1:b0:e2:a5:02: 3a:89:8e:f9:41:97:c8:e1:f2:34:9b:7d:a1:9f:dc: 15:b1:20:74:05:9b:23:7f:66:bb:9e:bd:dc:b9:f3: 53:53:3d:8c:92:61:ce:1a:4e:9e:99:3d:df:dd:a8: 0e:bb:f8:53:c8:b5:d7:97:cd:b3:e7:0a:ad:76:c3: 78:45:55:a1:6b:a3:fa:f9:96:0e:31:cf:06:be:68: 17:0c:02:7c:0e:30:36:e2:83:6b:50:13:3b:7a:1a: 5e:43:21:af:f4:83:d0:85:c4:3c:b7:7f:4c:bf:98: 4a:f6:21:2d:f9:37:95:2c:c9:90:29:71:44:68:a8: 91:96:bf:3b:c4:30:51:50:c4:03:c8:7d:63:89:50: 0d:c5:5d:14:e3:4e:06:26:57:26:61:bf:b6:1b:bd: fa:d9:01:56:87:bb:0f:bd:4f:e7:c3:a3:4f:88:fb: 71:53:99:5b:68:f2:62:4b:78:46:8f:6c:5e:fc:43: 4d:ba:c4:cd:b8:3f:60:e7:41:b8:bd:ba:84:92:c1: 35:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:51:91:9F:12:B2:B1:42:EB:F9:D3:50:43:AD:86:81:B0:95:02:CA X509v3 Authority Key Identifier: keyid:15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/7VGRnxKysULr-dNQQ62GgbCVAso.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.98.0/23 Signature Algorithm: sha256WithRSAEncryption 43:6e:93:cf:be:4a:d7:09:11:74:92:9a:30:1d:52:06:2e:2f: 99:b4:4d:56:1d:43:6f:8d:82:31:b6:4f:4f:40:bf:84:87:46: 71:d1:29:d0:0e:2b:19:fb:bc:b6:58:18:9b:67:da:81:6f:15: c5:e9:a0:59:4f:b4:bc:c4:24:db:7e:c4:79:32:57:69:61:14: b1:fa:f8:d6:06:0a:34:84:ac:ca:e7:9b:12:d0:46:e9:c8:46: 2e:06:50:fa:59:53:d1:d5:ca:63:bc:38:61:50:e3:c2:64:db: 14:03:e3:4d:c0:02:00:84:02:55:73:9b:fd:8e:5e:27:4f:57: bf:ab:dc:58:dc:d2:dd:92:f6:a9:8f:38:4c:73:ac:fd:f5:9d: f6:2a:20:da:47:5d:00:8f:8c:9e:26:f2:29:2f:31:d5:e5:79: 70:d3:a3:f1:91:fd:f7:db:87:ce:ee:65:97:c2:c2:69:38:b6: a1:89:38:7e:58:a1:ab:d1:66:a9:03:d8:0a:2f:61:c4:cb:6d: 14:5f:50:c8:7d:d1:4b:24:52:98:a0:ed:45:c9:45:cd:77:73: da:9c:d9:44:c2:da:49:70:20:7a:e3:a5:da:d2:a2:e0:9e:73: 46:50:e6:68:d6:8f:dd:f4:47:43:2e:99:23:94:c7:9f:cc:04: 9b:dd:01:47 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTU5 RDVGODk3Mjc2RjBERUM4NTdFN0UyREVERDY0OTg3NkU4QTQ4MjAeFw0yNTExMDMw ODU2NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVENTE5MTlGMTJCMkIx NDJFQkY5RDM1MDQzQUQ4NjgxQjA5NTAyQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsxDwNjc+ug/7slJfxM0m3s7szmpzwamFghnjAhhHlYEzisvGL ZYqU4/3efv3fz40VIxDzjmOxsOKlAjqJjvlBl8jh8jSbfaGf3BWxIHQFmyN/Zrue vdy581NTPYySYc4aTp6ZPd/dqA67+FPItdeXzbPnCq12w3hFVaFro/r5lg4xzwa+ aBcMAnwOMDbig2tQEzt6Gl5DIa/0g9CFxDy3f0y/mEr2IS35N5UsyZApcURoqJGW vzvEMFFQxAPIfWOJUA3FXRTjTgYmVyZhv7YbvfrZAVaHuw+9T+fDo0+I+3FTmVto 8mJLeEaPbF78Q026xM24P2DnQbi9uoSSwTVFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU7VGRnxKysULr+dNQQ62GgbCVAsowHwYDVR0jBBgwFoAUFZ1fiXJ28N7IV+fi 3t1kmHbopIIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9SREFU Vy9GWjFmaVhKMjhON0lWLWZpM3Qxa21IYm9wSUkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0ZaMWZpWEoyOE43SVYtZmkzdDFrbUhib3BJSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05PUkRBVFcvN1ZHUm54S3lzVUxyLWRO UVE2MkdnYkNWQXNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AdNPYjANBgkqhkiG9w0BAQsFAAOCAQEAQ26Tz75K1wkRdJKaMB1SBi4vmbRNVh1D b42CMbZPT0C/hIdGcdEp0A4rGfu8tlgYm2fagW8VxemgWU+0vMQk237EeTJXaWEU sfr41gYKNISsyuebEtBG6chGLgZQ+llT0dXKY7w4YVDjwmTbFAPjTcACAIQCVXOb /Y5eJ09Xv6vcWNzS3ZL2qY84THOs/fWd9iog2kddAI+MnibyKS8x1eV5cNOj8ZH9 99uHzu5ll8LCaTi2oYk4flihq9FmqQPYCi9hxMttFF9QyH3RSyRSmKDtRclFzXdz 2pzZRMLaSXAgeuOl2tKi4J5zRlDmaNaP3fRHQy6ZI5THn8wEm90BRw== -----END CERTIFICATE-----Generated at Tue Nov 4 15:41:29 2025 by rpki-client