$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/1FZ9xVPUVQZd3NZxmi3VEnlQsEg.roa File: 1FZ9xVPUVQZd3NZxmi3VEnlQsEg.roa (raw, json) Hash identifier: U+TPLK5JTqhFXUtthiNct6dA59hyvG0NSPtNFes7KL0= Subject key identifier: D4:56:7D:C5:53:D4:55:06:5D:DC:D6:71:9A:2D:D5:12:79:50:B0:48 Certificate issuer: /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Certificate serial: 031A Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/1FZ9xVPUVQZd3NZxmi3VEnlQsEg.roa Signing time: Fri 22 Aug 2025 09:01:34 +0000 ROA not before: Fri 22 Aug 2025 09:01:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 103.51.88.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 12:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Validity Not Before: Aug 22 09:01:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D4567DC553D455065DDCD6719A2DD5127950B048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:e9:f4:4d:ad:37:7e:e6:5f:bd:b9:e0:de: 80:d6:cf:da:12:46:1e:eb:c8:0a:f0:6d:21:bf:38: cc:a1:f5:88:26:db:fb:8e:4d:a8:22:13:21:4d:e8: cf:8d:ff:1c:07:c8:e0:6e:5e:4f:11:9d:b5:5a:41: c8:49:de:22:b9:fc:ca:95:2b:b6:11:88:2b:a1:03: eb:ef:0b:e7:df:5f:a6:6d:4e:6c:23:a6:67:bc:4c: 40:14:18:22:ae:f9:78:74:10:4e:a3:e1:ba:dc:64: 77:af:fa:3d:6a:19:97:cb:cb:d3:c9:8b:5a:fa:b8: 32:8e:09:ef:a4:40:fd:4c:0e:71:91:f2:96:e8:c7: ad:bd:0f:89:21:12:53:b3:c1:7e:2e:c6:dd:0f:06: 01:7d:31:42:74:fa:7b:af:11:5d:bd:8c:aa:97:f0: 07:18:04:b2:83:ab:a9:2a:30:45:44:d2:17:c5:4a: e2:5f:00:e6:c5:0c:c5:89:3b:fa:79:44:d9:2c:eb: 7c:f1:2a:ec:2c:56:64:7d:9f:fd:8b:fa:a7:af:06: 32:76:41:08:b7:b8:e6:c0:4e:68:63:3a:01:23:ad: 92:f7:7f:2e:78:ec:85:ba:d5:89:4a:84:ff:82:69: 47:11:52:fe:32:eb:0c:63:ff:b9:19:00:13:de:67: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:56:7D:C5:53:D4:55:06:5D:DC:D6:71:9A:2D:D5:12:79:50:B0:48 X509v3 Authority Key Identifier: keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/1FZ9xVPUVQZd3NZxmi3VEnlQsEg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.51.88.0/23 Signature Algorithm: sha256WithRSAEncryption 22:0e:0e:59:cd:89:8b:d9:a7:ea:5d:c9:7f:70:e7:7e:f8:74: 5a:2f:b5:d8:4e:3b:3a:30:87:1a:58:1b:e6:37:5f:5a:c5:2f: 1e:75:4e:31:f5:64:8e:b5:48:2a:ff:ea:3a:7f:ab:49:a0:12: 92:1e:f6:8b:6d:36:da:30:4f:50:29:c2:b8:f6:bc:43:45:b6: 49:94:8b:18:09:dd:94:01:a2:27:c5:ea:11:1f:d3:06:3b:bd: a9:55:e0:71:fd:d0:8f:a6:0f:03:29:85:f3:90:7e:d2:a5:99: 98:d1:b7:14:18:0b:86:70:21:c6:9d:b7:6f:97:23:f2:31:1b: c8:26:04:aa:d8:20:47:3c:d7:8a:ac:04:ef:b1:63:99:ab:2a: 6c:54:2c:e3:f9:7a:81:db:c0:e7:32:e0:1c:a7:0f:b1:3e:f6: fb:a3:97:57:85:83:d7:56:e8:6a:9f:d0:b7:f6:00:a1:c0:fe: 69:ee:40:ed:fa:57:10:35:c7:94:19:2b:4a:2d:92:6c:89:c4: 1a:6a:30:29:9b:fa:25:e4:b2:61:5f:52:9b:3e:86:f0:8b:42: 3e:71:16:75:9d:e9:b4:16:b0:8c:99:ec:07:89:12:d0:93:ec: 18:2d:39:cc:34:55:4f:70:c3:78:ad:e9:1f:50:53:fd:61:15: 2f:d8:fd:91 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJG Q0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJEMzAeFw0yNTA4MjIw OTAxMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ0NTY3REM1NTNENDU1 MDY1RERDRDY3MTlBMkRENTEyNzk1MEIwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1t+n0Ta03fuZfvbng3oDWz9oSRh7ryArwbSG/OMyh9Ygm2/uO TagiEyFN6M+N/xwHyOBuXk8RnbVaQchJ3iK5/MqVK7YRiCuhA+vvC+ffX6ZtTmwj pme8TEAUGCKu+Xh0EE6j4brcZHev+j1qGZfLy9PJi1r6uDKOCe+kQP1MDnGR8pbo x629D4khElOzwX4uxt0PBgF9MUJ0+nuvEV29jKqX8AcYBLKDq6kqMEVE0hfFSuJf AObFDMWJO/p5RNks63zxKuwsVmR9n/2L+qevBjJ2QQi3uObATmhjOgEjrZL3fy54 7IW61YlKhP+CaUcRUv4y6wxj/7kZABPeZwNJAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU1FZ9xVPUVQZd3NZxmi3VEnlQsEgwHwYDVR0jBBgwFoAUm/z6ohBnQrLAmeP0 wqUEKOXNYtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERS SVZFTi9tX3o2b2hCblFyTEFtZVAwd3FVRUtPWE5ZdE0uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RFQ0hEUklWRU4vMUZaOXhWUFVW UVpkM05aeG1pM1ZFbmxRc0VnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWczWDANBgkqhkiG9w0BAQsFAAOCAQEAIg4OWc2Ji9mn6l3Jf3Dnfvh0 Wi+12E47OjCHGlgb5jdfWsUvHnVOMfVkjrVIKv/qOn+rSaASkh72i2022jBPUCnC uPa8Q0W2SZSLGAndlAGiJ8XqER/TBju9qVXgcf3Qj6YPAymF85B+0qWZmNG3FBgL hnAhxp23b5cj8jEbyCYEqtggRzzXiqwE77FjmasqbFQs4/l6gdvA5zLgHKcPsT72 +6OXV4WD11boap/Qt/YAocD+ae5A7fpXEDXHlBkrSi2SbInEGmowKZv6JeSyYV9S mz6G8ItCPnEWdZ3ptBawjJnsB4kS0JPsGC05zDRVT3DDeK3pH1BT/WEVL9j9kQ== -----END CERTIFICATE-----Generated at Sat Oct 25 11:35:56 2025 by rpki-client