$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/_V-PNVuyFEKeosK_LpuLs1zLMiI.roa File: _V-PNVuyFEKeosK_LpuLs1zLMiI.roa (raw, json) Hash identifier: S6iqj00ZFyP368cf2wvvCwSyiuKxO5Jz3xIgGqcTPzU= Subject key identifier: FD:5F:8F:35:5B:B2:14:42:9E:A2:C2:BF:2E:9B:8B:B3:5C:CB:32:22 Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Certificate serial: 017C Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/_V-PNVuyFEKeosK_LpuLs1zLMiI.roa Signing time: Fri 22 Aug 2025 08:57:03 +0000 ROA not before: Fri 22 Aug 2025 08:57:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9923 IP address blocks: 160.30.98.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Validity Not Before: Aug 22 08:57:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FD5F8F355BB214429EA2C2BF2E9B8BB35CCB3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:58:e8:e9:64:23:77:d2:f8:67:fb:92:c5:57: 7c:d4:2b:79:3c:99:38:8e:2b:0c:73:67:18:a2:25: 67:50:f0:3e:77:61:02:31:a9:9e:0f:0a:dd:02:8b: c3:75:7f:ea:40:ef:39:e1:32:49:f3:8c:22:14:57: 7c:b3:10:9f:1a:ff:00:c0:ae:35:00:e3:42:84:9e: a9:23:a9:b0:e1:88:60:23:c8:08:85:f5:35:62:9c: 67:a4:ca:0a:72:38:15:37:52:0d:23:1c:8f:71:df: 09:d9:20:c8:bc:99:a5:12:d4:f9:05:cb:51:f2:15: 13:c3:82:a2:f4:a7:24:56:5f:36:2c:3b:cd:78:d8: 57:38:ee:a7:57:19:b4:40:ce:bb:72:dd:da:71:4c: b6:89:69:2a:24:86:d2:0d:d0:5e:90:f7:30:08:86: 9d:77:0a:cc:56:a6:01:79:8e:ca:10:b6:1e:ac:2f: 35:2c:b0:5c:59:39:56:4a:bc:07:03:fa:e7:c4:43: 3a:d9:72:cc:b1:e5:93:33:a7:b2:1c:39:d1:93:c5: 4c:72:70:2a:98:70:b2:28:ae:d8:fd:bd:62:0d:10: 02:64:63:d4:47:0b:06:57:0f:35:36:7f:ca:15:71: 16:02:94:47:58:1d:7c:18:cf:76:00:2e:d9:70:c7: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5F:8F:35:5B:B2:14:42:9E:A2:C2:BF:2E:9B:8B:B3:5C:CB:32:22 X509v3 Authority Key Identifier: keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/_V-PNVuyFEKeosK_LpuLs1zLMiI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.98.0/23 Signature Algorithm: sha256WithRSAEncryption 86:04:aa:5e:b0:b3:5f:77:26:68:e9:50:e7:d0:06:a2:6d:fd: 88:ac:65:b1:23:47:45:78:29:1d:3f:0b:8c:f5:8d:cf:57:99: 17:9b:b0:2f:5c:da:8a:32:c3:c4:b3:f1:11:3f:6a:cd:15:c6: 07:2e:af:e7:56:42:d3:db:cf:15:14:33:7e:97:4e:f1:97:49: 5f:13:a5:f5:fc:b3:0e:9a:b6:dc:63:d1:18:e6:0d:8d:61:4a: 2f:54:07:42:5a:9a:06:9f:d0:09:a6:de:3f:64:bf:59:e0:bb: b7:5d:db:e4:27:24:c1:78:ea:29:6a:df:7a:4d:4f:c3:6f:13: d7:27:08:79:55:5d:a4:1f:28:8e:f1:2f:9b:23:31:ec:af:79: a6:ef:2c:65:f9:db:d9:29:39:79:24:23:5f:9f:59:13:19:9f: 09:88:3c:61:a1:2d:c4:46:3d:cf:a8:a0:46:7a:aa:11:9d:cd: b7:23:d8:a7:82:ca:90:1c:7c:be:a4:86:71:c9:6c:44:77:dd: 17:ea:07:a5:33:82:1a:5b:a7:7d:df:c7:ee:de:06:bf:51:31: 3c:c7:6b:98:d7:19:31:99:72:08:67:80:dc:03:68:b6:d9:7c: 0d:62:02:f1:24:86:67:4e:e4:7a:81:8b:a9:3c:e0:5b:15:15: 1f:24:ef:cf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUUx OTQxQzM3QkQxRTJDRjEyNTEyRjk4QUIzNjZDMjlEQTc5QjcxODAeFw0yNTA4MjIw ODU3MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZENUY4RjM1NUJCMjE0 NDI5RUEyQzJCRjJFOUI4QkIzNUNDQjMyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkWOjpZCN30vhn+5LFV3zUK3k8mTiOKwxzZxiiJWdQ8D53YQIx qZ4PCt0Ci8N1f+pA7znhMknzjCIUV3yzEJ8a/wDArjUA40KEnqkjqbDhiGAjyAiF 9TVinGekygpyOBU3Ug0jHI9x3wnZIMi8maUS1PkFy1HyFRPDgqL0pyRWXzYsO814 2Fc47qdXGbRAzrty3dpxTLaJaSokhtIN0F6Q9zAIhp13CsxWpgF5jsoQth6sLzUs sFxZOVZKvAcD+ufEQzrZcsyx5ZMzp7IcOdGTxUxycCqYcLIortj9vWINEAJkY9RH CwZXDzU2f8oVcRYClEdYHXwYz3YALtlwx0p/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/V+PNVuyFEKeosK/LpuLs1zLMiIwHwYDVR0jBBgwFoAU7hlBw3vR4s8SUS+Y qzZsKdp5txgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExF LzdobEJ3M3ZSNHM4U1VTLVlxelpzS2RwNXR4Zy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvN2hsQnczdlI0czhTVVMtWXF6WnNLZHA1dHhnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExFL19WLVBOVnV5RkVLZW9zS19M cHVMczF6TE1pSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg HmIwDQYJKoZIhvcNAQELBQADggEBAIYEql6ws193JmjpUOfQBqJt/YisZbEjR0V4 KR0/C4z1jc9XmRebsC9c2ooyw8Sz8RE/as0Vxgcur+dWQtPbzxUUM36XTvGXSV8T pfX8sw6attxj0RjmDY1hSi9UB0Jamgaf0Amm3j9kv1ngu7dd2+QnJMF46ilq33pN T8NvE9cnCHlVXaQfKI7xL5sjMeyveabvLGX529kpOXkkI1+fWRMZnwmIPGGhLcRG Pc+ooEZ6qhGdzbcj2KeCypAcfL6khnHJbER33RfqB6Uzghpbp33fx+7eBr9RMTzH a5jXGTGZcghngNwDaLbZfA1iAvEkhmdO5HqBi6k84FsVFR8k788= -----END CERTIFICATE-----Generated at Sat Oct 25 15:25:43 2025 by rpki-client