$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/qzPi6PMbzMqc1fg1ERlNAG4e19M.roa File: qzPi6PMbzMqc1fg1ERlNAG4e19M.roa (raw, json) Hash identifier: PnheDiQ6rF/u+0g0H8DopfJXpFVlYVmdjKWPFOiwSLg= Subject key identifier: AB:33:E2:E8:F3:1B:CC:CA:9C:D5:F8:35:11:19:4D:00:6E:1E:D7:D3 Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 054D Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/qzPi6PMbzMqc1fg1ERlNAG4e19M.roa Signing time: Fri 22 Aug 2025 08:49:39 +0000 ROA not before: Fri 22 Aug 2025 08:49:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9002 IP address blocks: 160.25.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 07:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Aug 22 08:49:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AB33E2E8F31BCCCA9CD5F83511194D006E1ED7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:d8:af:ad:ae:9c:02:de:d8:55:57:d7:ef: 71:46:76:5e:8f:76:39:4f:49:3f:9b:04:4b:10:ea: ce:1b:92:02:52:b7:b6:d1:5c:67:c6:99:74:43:52: 58:8f:f5:65:bc:ae:92:d1:91:f5:44:ee:a7:b0:b5: e8:c9:06:9a:7d:be:47:58:04:38:9d:43:1a:68:e4: 3a:2a:13:ed:95:73:fe:4a:31:64:25:67:61:5f:db: 36:c2:5a:32:0d:76:49:27:02:ea:72:7a:d2:60:19: c2:2f:0e:23:6c:69:86:39:6a:96:72:36:89:55:02: 0c:66:e9:42:83:2a:85:08:19:90:3d:d2:e1:e6:bd: 70:e0:f5:29:0d:e2:fb:a0:41:06:79:0e:a3:8e:e5: 46:92:1b:9f:6c:21:fc:65:8b:cf:e0:a0:ea:67:dc: 62:c6:fe:5d:4d:76:a7:69:c3:d6:26:55:58:cb:43: 66:b9:4a:43:2d:d5:87:db:89:5a:37:22:97:42:5e: 49:49:d2:90:71:63:07:5c:4f:05:26:93:9a:31:47: 29:72:9d:b8:70:6d:a6:e4:e0:37:d6:35:fe:70:da: 44:9e:b8:48:34:2b:ce:55:26:46:07:43:da:3d:c7: 0f:fc:a0:4b:91:ec:41:8f:60:1f:4b:36:47:52:24: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:E2:E8:F3:1B:CC:CA:9C:D5:F8:35:11:19:4D:00:6E:1E:D7:D3 X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/qzPi6PMbzMqc1fg1ERlNAG4e19M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.221.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:2f:af:e0:fa:57:ba:87:80:22:7e:55:2c:a2:e4:79:48:67: 74:13:36:f8:3d:1e:48:30:72:e8:54:80:bf:01:4a:b8:f3:13: 4f:af:bc:2d:4a:66:1b:9d:62:d4:9b:e0:66:f4:e7:57:87:ad: 4d:65:c6:86:32:95:86:e2:fd:ce:8d:ac:e9:90:61:9b:69:80: a2:3e:e4:aa:07:04:51:33:d8:2b:a8:79:6a:92:a2:13:6e:02: f3:ee:25:03:f4:f9:d2:da:ce:38:5a:04:3c:8f:77:a3:17:c7: 58:23:64:b2:72:1c:49:ab:28:82:d0:d8:ef:d7:a0:cf:21:c4: b9:c4:f4:69:1a:3e:f7:a6:c7:52:5e:00:b9:4d:7a:b5:fb:b8: 74:1b:68:6e:e7:5d:88:30:ce:3e:fd:32:a1:e5:0d:35:1e:4f: cf:c8:f1:cb:5e:aa:f3:fc:eb:59:43:35:3f:8e:19:22:52:69: ad:fa:23:54:2e:f2:ac:8d:66:83:17:58:04:f2:bb:ef:b5:91: c8:76:40:f4:3f:07:e1:87:6c:04:89:4f:eb:c6:5b:1c:ea:70: 02:77:cf:af:3c:f3:67:0d:18:47:9e:4d:67:0a:10:42:68:8d: c3:8a:48:2e:64:49:26:48:51:27:fb:88:75:9f:eb:99:e8:73: 03:cb:b3:8e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDIy RTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVEMDAeFw0yNTA4MjIw ODQ5MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCMzNFMkU4RjMxQkND Q0E5Q0Q1RjgzNTExMTk0RDAwNkUxRUQ3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgMtivra6cAt7YVVfX73FGdl6PdjlPST+bBEsQ6s4bkgJSt7bR XGfGmXRDUliP9WW8rpLRkfVE7qewtejJBpp9vkdYBDidQxpo5DoqE+2Vc/5KMWQl Z2Ff2zbCWjINdkknAupyetJgGcIvDiNsaYY5apZyNolVAgxm6UKDKoUIGZA90uHm vXDg9SkN4vugQQZ5DqOO5UaSG59sIfxli8/goOpn3GLG/l1Ndqdpw9YmVVjLQ2a5 SkMt1YfbiVo3IpdCXklJ0pBxYwdcTwUmk5oxRylynbhwbabk4DfWNf5w2kSeuEg0 K85VJkYHQ9o9xw/8oEuR7EGPYB9LNkdSJGsNAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUqzPi6PMbzMqc1fg1ERlNAG4e19MwHwYDVR0jBBgwFoAUQi58ldh96a7rISoM TMsBdOZcpdAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9xelBpNlBNYnpNcWMx ZmcxRVJsTkFHNGUxOU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBndMA0GCSqGSIb3DQEBCwUAA4IBAQBbL6/g+le6h4AiflUsouR5SGd0Ezb4 PR5IMHLoVIC/AUq48xNPr7wtSmYbnWLUm+Bm9OdXh61NZcaGMpWG4v3OjazpkGGb aYCiPuSqBwRRM9grqHlqkqITbgLz7iUD9PnS2s44WgQ8j3ejF8dYI2SychxJqyiC 0Njv16DPIcS5xPRpGj73psdSXgC5TXq1+7h0G2hu512IMM4+/TKh5Q01Hk/PyPHL Xqrz/OtZQzU/jhkiUmmt+iNULvKsjWaDF1gE8rvvtZHIdkD0Pwfhh2wEiU/rxlsc 6nACd8+vPPNnDRhHnk1nChBCaI3DikguZEkmSFEn+4h1n+uZ6HMDy7OO -----END CERTIFICATE-----Generated at Tue Oct 28 05:39:03 2025 by rpki-client