$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIYIYI/KAU6wUbri2krkxuiY2fzVqbaR1w.roa File: KAU6wUbri2krkxuiY2fzVqbaR1w.roa (raw, json) Hash identifier: HpnxJTtpUqdddwvBmEtSRnlPDoFYZfXah0i09cLzgqg= Subject key identifier: 28:05:3A:C1:46:EB:8B:69:2B:93:1B:A2:63:67:F3:56:A6:DA:47:5C Certificate issuer: /CN=7827337AE5F44B54F385CB72D4FCD07FAEA5C943 Certificate serial: 55 Authority key identifier: 78:27:33:7A:E5:F4:4B:54:F3:85:CB:72:D4:FC:D0:7F:AE:A5:C9:43 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eCczeuX0S1Tzhcty1PzQf66lyUM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIYIYI/KAU6wUbri2krkxuiY2fzVqbaR1w.roa Signing time: Thu 16 Oct 2025 08:33:05 +0000 ROA not before: Thu 16 Oct 2025 08:33:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7536 IP address blocks: 49.213.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIYIYI/eCczeuX0S1Tzhcty1PzQf66lyUM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIYIYI/eCczeuX0S1Tzhcty1PzQf66lyUM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eCczeuX0S1Tzhcty1PzQf66lyUM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7827337AE5F44B54F385CB72D4FCD07FAEA5C943 Validity Not Before: Oct 16 08:33:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=28053AC146EB8B692B931BA26367F356A6DA475C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:ba:74:6a:5c:6e:a1:af:0e:fc:11:da:66: b6:78:22:c1:47:fe:3a:32:20:52:de:b5:1f:2d:50: 9a:b9:cb:16:78:e9:cc:bb:87:ce:82:0f:ce:5c:27: 59:54:02:2f:51:c8:16:26:bd:0b:0b:87:ac:b2:6c: a4:b7:32:96:bd:74:a8:cf:c5:0c:1a:40:e3:7c:48: 2a:05:8a:0a:d8:84:fa:09:64:88:b3:54:cf:5c:4f: 29:c2:76:32:1f:3a:50:ad:a0:b7:87:7a:8f:9c:7c: f6:52:50:cd:0e:61:9f:51:eb:39:7d:c9:80:f9:fd: f3:2c:da:01:2f:60:be:fe:01:55:78:42:70:bc:ee: 65:d6:98:16:10:37:32:c6:97:9e:66:33:15:84:68: 28:2c:0e:c1:1a:5a:f4:e4:5b:95:9d:9d:1b:44:e0: fe:86:bb:f0:17:fe:9c:f1:f0:68:1c:d4:7f:e6:f2: be:6c:81:60:a8:75:3c:37:de:8b:0e:0a:52:93:28: 16:cd:06:3f:9e:fc:e7:21:a2:8b:ea:30:79:34:44: 68:3b:19:6f:19:29:2f:b8:d1:c1:eb:8f:f0:ab:c1: 1e:ed:34:e3:b4:f8:ae:2b:78:d1:79:7a:b6:4a:a0: 75:99:e4:f2:3c:7b:bb:97:62:c0:33:20:7e:6c:5e: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:3A:C1:46:EB:8B:69:2B:93:1B:A2:63:67:F3:56:A6:DA:47:5C X509v3 Authority Key Identifier: keyid:78:27:33:7A:E5:F4:4B:54:F3:85:CB:72:D4:FC:D0:7F:AE:A5:C9:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIYIYI/eCczeuX0S1Tzhcty1PzQf66lyUM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eCczeuX0S1Tzhcty1PzQf66lyUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIYIYI/KAU6wUbri2krkxuiY2fzVqbaR1w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.213.34.0/23 Signature Algorithm: sha256WithRSAEncryption 29:40:ff:3d:d6:9e:65:97:3a:70:bf:14:4d:17:c1:f0:59:ff: f6:db:62:94:a0:73:64:8d:02:9f:9d:ca:2e:e8:9f:de:09:f2: 7b:36:af:e3:39:5c:b9:1a:d6:aa:18:96:2c:90:10:19:db:96: b4:71:f1:e8:d4:b5:ef:b3:ac:55:d4:bd:84:54:d8:8c:db:b9: cc:02:fd:47:bf:5b:4b:df:1a:e1:8e:58:ed:bb:b2:d5:19:6a: 89:2a:dd:67:c8:b3:20:af:24:b7:e2:fd:44:97:78:2c:49:e0: 32:29:5b:22:79:61:12:95:42:33:cf:7c:ac:8d:c7:02:87:37: 8d:92:40:6f:4f:8e:c4:3b:90:55:9e:25:68:ac:77:a2:af:81: fb:35:61:5b:9f:d9:4a:c6:f1:e3:06:bd:4a:58:06:4b:6e:7b: ff:a2:55:44:72:6a:95:c7:ac:1d:d2:a3:31:c5:5f:37:9d:c0: fa:87:a3:9f:23:7b:40:62:b7:58:73:6c:ff:f2:9b:b8:4c:1a: 27:bc:c6:aa:5c:f6:e4:9b:e0:99:fb:7b:dc:c0:46:6d:7e:bd: f4:20:47:60:16:c1:b9:17:36:ef:ce:8e:26:4a:b2:62:01:7b: 19:9d:d0:22:a2:5f:84:52:c7:d6:da:f7:d5:09:df:46:26:f9: 91:31:9a:f6 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3ODI3 MzM3QUU1RjQ0QjU0RjM4NUNCNzJENEZDRDA3RkFFQTVDOTQzMB4XDTI1MTAxNjA4 MzMwNVoXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoMjgwNTNBQzE0NkVCOEI2 OTJCOTMxQkEyNjM2N0YzNTZBNkRBNDc1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOQpunRqXG6hrw78EdpmtngiwUf+OjIgUt61Hy1QmrnLFnjpzLuH zoIPzlwnWVQCL1HIFia9CwuHrLJspLcylr10qM/FDBpA43xIKgWKCtiE+glkiLNU z1xPKcJ2Mh86UK2gt4d6j5x89lJQzQ5hn1HrOX3JgPn98yzaAS9gvv4BVXhCcLzu ZdaYFhA3MsaXnmYzFYRoKCwOwRpa9ORblZ2dG0Tg/oa78Bf+nPHwaBzUf+byvmyB YKh1PDfeiw4KUpMoFs0GP5785yGii+oweTREaDsZbxkpL7jRweuP8KvBHu0047T4 rit40Xl6tkqgdZnk8jx7u5diwDMgfmxef70CAwEAAaOCAfAwggHsMB0GA1UdDgQW BBQoBTrBRuuLaSuTG6JjZ/NWptpHXDAfBgNVHSMEGDAWgBR4JzN65fRLVPOFy3LU /NB/rqXJQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSElZSVlJ L2VDY3pldVgwUzFUemhjdHkxUHpRZjY2bHlVTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZUNjemV1WDBTMVR6aGN0eTFQelFmNjZseVVNLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJWUlZSS9LQVU2d1Vicmkya3JreHVp WTJmelZxYmFSMXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu dHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB MdUiMA0GCSqGSIb3DQEBCwUAA4IBAQApQP891p5llzpwvxRNF8HwWf/222KUoHNk jQKfncou6J/eCfJ7Nq/jOVy5GtaqGJYskBAZ25a0cfHo1LXvs6xV1L2EVNiM27nM Av1Hv1tL3xrhjljtu7LVGWqJKt1nyLMgryS34v1El3gsSeAyKVsieWESlUIzz3ys jccChzeNkkBvT47EO5BVniVorHeir4H7NWFbn9lKxvHjBr1KWAZLbnv/olVEcmqV x6wd0qMxxV83ncD6h6OfI3tAYrdYc2z/8pu4TBonvMaqXPbkm+CZ+3vcwEZtfr30 IEdgFsG5Fzbvzo4mSrJiAXsZndAiol+EUsfW2vfVCd9GJvmRMZr2 -----END CERTIFICATE-----Generated at Wed Oct 29 08:33:07 2025 by rpki-client