$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/_GqmShDcEstZsMAS7oGaX-ISQd4.roa File: _GqmShDcEstZsMAS7oGaX-ISQd4.roa (raw, json) Hash identifier: kaaH/mLD+1k/a2VYdU+lQKttb71WLUG3pbR5Acgoxi4= Subject key identifier: FC:6A:A6:4A:10:DC:12:CB:59:B0:C0:12:EE:81:9A:5F:E2:12:41:DE Certificate issuer: /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Certificate serial: 0B3A Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/_GqmShDcEstZsMAS7oGaX-ISQd4.roa Signing time: Fri 22 Aug 2025 08:56:37 +0000 ROA not before: Fri 22 Aug 2025 08:56:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 103.147.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 12:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Validity Not Before: Aug 22 08:56:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FC6AA64A10DC12CB59B0C012EE819A5FE21241DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:83:65:d5:f2:c9:60:41:1a:2d:c8:d4:c4: 36:6f:0e:5d:3f:8a:c7:2e:e3:ef:10:c1:0b:20:35: 33:87:76:23:3c:42:30:0b:cf:1c:5b:5d:fe:a8:f1: 96:4c:9c:4b:8b:8b:c5:05:f8:4e:3f:23:ba:6a:3d: 1c:41:aa:80:95:09:7c:43:24:ba:cc:09:9d:69:a1: 89:fa:56:20:99:2d:d7:d0:62:60:1d:f0:fa:df:9d: 13:e4:04:da:65:23:b5:03:3b:b6:dd:ae:df:4d:27: 06:2e:c1:73:b1:7b:c6:2e:f7:57:3d:1b:18:45:51: 1d:4c:1e:bd:26:e2:8a:99:91:bd:2e:0d:92:79:68: 9e:62:cb:e6:ca:d2:1e:32:8c:bb:7c:3c:1a:04:ff: 66:79:a7:89:df:50:2b:8e:b6:88:22:2a:ea:24:a9: 8b:6e:b2:f0:9e:d0:45:48:fd:e4:d1:cb:db:e9:e4: 23:83:7a:05:ac:67:43:93:34:6a:6c:f3:aa:50:7d: 0e:ae:58:9f:4f:8b:a8:99:8a:a7:2f:5e:13:4f:0f: 86:ee:41:fa:6f:a3:44:a8:02:0e:f8:ab:66:e6:21: b6:7e:70:52:6e:e2:32:2c:2b:b6:89:ba:b0:b7:01: 81:c4:97:9d:a1:d0:a1:56:a3:65:de:d0:58:dd:99: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6A:A6:4A:10:DC:12:CB:59:B0:C0:12:EE:81:9A:5F:E2:12:41:DE X509v3 Authority Key Identifier: keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/_GqmShDcEstZsMAS7oGaX-ISQd4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.147.22.0/23 Signature Algorithm: sha256WithRSAEncryption 36:16:a2:d5:15:b2:a3:bb:be:ca:a7:40:1c:30:4e:44:7d:55: 59:2d:15:b0:63:3d:e8:24:d4:c0:5d:02:e8:26:7c:fb:da:c6: e8:18:44:14:10:4f:46:6a:73:2a:8e:15:cb:ac:de:97:09:52: 12:70:66:aa:94:27:0c:3d:0a:86:3f:b9:e3:c7:9f:44:7a:7c: 92:16:b8:fc:c9:b7:26:23:ce:15:b5:52:66:57:52:42:68:7d: 99:da:90:3e:08:56:e5:02:33:63:44:1b:02:72:9c:d2:54:40: 00:27:be:f7:44:39:bc:9c:d2:6e:17:6d:f5:99:2e:89:f4:ca: 53:3d:a4:29:3f:d4:bc:6e:4b:53:4a:33:0a:31:5a:e1:a2:95: 4e:93:24:45:d5:19:83:7b:7c:95:f8:26:ed:f1:6a:cc:b9:8a: c3:d7:05:eb:93:dc:6a:62:a5:df:82:69:e4:df:14:c4:66:11: 53:7d:ec:5a:b4:a4:c8:89:c1:8c:73:2f:d6:c0:c1:41:9a:d5: a5:c8:fb:ee:82:b9:52:36:97:e4:e4:ed:6f:6f:5c:2a:09:03: 73:ca:88:ea:05:2c:a3:90:9f:5e:15:2e:38:49:fa:1c:0e:33: 98:21:aa:c8:a8:36:14:ca:46:1a:e3:5d:b1:ad:2c:53:8e:f6: cb:31:b5:85 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICCzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkx QkFGNkEwQzE3NkNFMEEzMjQyMzY2NkJDRTc4RjlEOTE4MjRDQjAeFw0yNTA4MjIw ODU2MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZDNkFBNjRBMTBEQzEy Q0I1OUIwQzAxMkVFODE5QTVGRTIxMjQxREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTvINl1fLJYEEaLcjUxDZvDl0/iscu4+8QwQsgNTOHdiM8QjAL zxxbXf6o8ZZMnEuLi8UF+E4/I7pqPRxBqoCVCXxDJLrMCZ1poYn6ViCZLdfQYmAd 8PrfnRPkBNplI7UDO7bdrt9NJwYuwXOxe8Yu91c9GxhFUR1MHr0m4oqZkb0uDZJ5 aJ5iy+bK0h4yjLt8PBoE/2Z5p4nfUCuOtogiKuokqYtusvCe0EVI/eTRy9vp5COD egWsZ0OTNGps86pQfQ6uWJ9Pi6iZiqcvXhNPD4buQfpvo0SoAg74q2bmIbZ+cFJu 4jIsK7aJurC3AYHEl52h0KFWo2Xe0FjdmdobAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU/GqmShDcEstZsMAS7oGaX+ISQd4wHwYDVR0jBBgwFoAUKRuvagwXbOCjJCNm a854+dkYJMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdEUy9L UnV2YWd3WGJPQ2pKQ05tYTg1NC1ka1lKTXMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0tSdXZhZ3dYYk9DakpDTm1hODU0LWRrWUpNcy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RXRFMvX0dxbVNoRGNFc3Rac01BUzdvR2FY LUlTUWQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeTFjAN BgkqhkiG9w0BAQsFAAOCAQEANhai1RWyo7u+yqdAHDBORH1VWS0VsGM96CTUwF0C 6CZ8+9rG6BhEFBBPRmpzKo4Vy6zelwlSEnBmqpQnDD0Khj+548efRHp8kha4/Mm3 JiPOFbVSZldSQmh9mdqQPghW5QIzY0QbAnKc0lRAACe+90Q5vJzSbhdt9ZkuifTK Uz2kKT/UvG5LU0ozCjFa4aKVTpMkRdUZg3t8lfgm7fFqzLmKw9cF65PcamKl34Jp 5N8UxGYRU33sWrSkyInBjHMv1sDBQZrVpcj77oK5UjaX5OTtb29cKgkDc8qI6gUs o5CfXhUuOEn6HA4zmCGqyKg2FMpGGuNdsa0sU472yzG1hQ== -----END CERTIFICATE-----Generated at Sat Oct 25 08:42:58 2025 by rpki-client