$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/bz0YRC0f34d8KxcOVQnPEiTG07g.roa File: bz0YRC0f34d8KxcOVQnPEiTG07g.roa (raw, json) Hash identifier: 3UZ0QmkYt4KRD1/Rq8y81XrRovrenC1HqozVXjf0D8M= Subject key identifier: 6F:3D:18:44:2D:1F:DF:87:7C:2B:17:0E:55:09:CF:12:24:C6:D3:B8 Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 0534 Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/bz0YRC0f34d8KxcOVQnPEiTG07g.roa Signing time: Wed 23 Jul 2025 05:23:39 +0000 ROA not before: Wed 23 Jul 2025 05:23:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134518 IP address blocks: 160.25.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 11:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Jul 23 05:23:39 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6F3D18442D1FDF877C2B170E5509CF1224C6D3B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:fb:ad:cb:38:bb:b6:77:c2:86:c6:e9:e5: 0d:44:6f:15:ef:d0:cc:58:49:aa:87:95:ef:27:4a: 82:c1:59:fc:21:e6:01:03:dc:f0:1f:69:d4:53:80: 4b:6b:9d:a7:11:d4:a6:dd:bd:05:70:6b:f6:4d:03: 0e:e9:32:04:dd:90:76:70:6f:23:55:a9:11:44:fc: 56:68:09:95:c9:18:86:84:83:89:f8:92:41:27:0f: fc:1a:d6:26:aa:8d:f1:21:b5:45:d3:02:70:0c:ee: c1:bb:79:d8:46:6b:95:4d:68:b0:2e:76:7c:52:d7: c3:84:7a:a3:5f:49:86:aa:31:fc:fd:25:7a:4c:12: 42:fe:3f:e7:fe:58:71:13:07:87:87:35:13:83:4e: c5:9a:d3:b2:fe:18:01:3c:3d:25:97:fd:b6:71:29: 03:dc:0c:75:38:75:03:79:2a:40:17:1d:d8:d0:5d: 6c:59:11:64:7d:10:e0:b6:dd:da:04:f0:fc:fe:01: e7:d8:97:2a:f9:f1:7a:e2:91:f6:3e:aa:a2:18:91: 97:79:a3:8f:29:b1:bd:7c:34:36:91:87:a6:3c:61: fa:23:7d:b7:50:db:2a:15:7e:10:4b:5d:e6:55:b7: bf:96:bb:0e:cb:e1:e6:db:1a:39:47:21:b8:7c:f2: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:18:44:2D:1F:DF:87:7C:2B:17:0E:55:09:CF:12:24:C6:D3:B8 X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/bz0YRC0f34d8KxcOVQnPEiTG07g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.221.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a0:71:ce:f9:d2:a7:1f:12:07:bb:84:c5:d2:9f:92:8a:3c: fb:14:98:47:78:a6:0b:90:e0:e3:aa:f6:17:46:0e:8e:75:03: 9b:21:5c:5c:5e:5b:58:37:19:8d:34:00:10:5f:63:3f:66:5d: 85:4f:90:4f:4e:a8:0b:14:9a:0c:c7:9a:82:51:f4:45:e1:60: 5f:42:04:2b:80:7b:d2:e6:28:e9:7c:09:ad:30:6a:3e:5d:cd: 6b:85:c3:74:87:32:4a:d4:6d:21:13:a0:44:63:1a:8a:9d:37: 9e:82:90:65:a5:be:c0:64:ab:8f:5e:67:fb:eb:db:0b:49:63: 7a:af:95:3d:74:d6:02:ce:49:f4:1c:e9:0a:42:38:57:dd:49: 59:18:17:ea:73:c0:fe:d4:0f:8c:ba:f6:b5:68:1d:44:7c:9a: 8f:be:69:20:aa:02:69:c1:24:26:4f:4c:6d:d8:92:b5:b3:6d: 6e:de:e8:f6:d7:b8:84:a4:2e:41:8f:a3:2e:6d:58:da:40:56: 33:48:bd:0d:ba:ff:94:e0:83:15:12:da:54:ec:4b:5c:71:47: a6:ef:8e:99:44:02:22:7f:d7:a2:54:7f:e1:9b:04:58:fd:ec: 2b:5b:37:e7:e4:6a:97:90:f9:1b:f3:71:da:56:a8:fa:a4:bf: 89:3f:80:d8 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDIy RTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVEMDAeFw0yNTA3MjMw NTIzMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGM0QxODQ0MkQxRkRG ODc3QzJCMTcwRTU1MDlDRjEyMjRDNkQzQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ifutyzi7tnfChsbp5Q1EbxXv0MxYSaqHle8nSoLBWfwh5gED 3PAfadRTgEtrnacR1KbdvQVwa/ZNAw7pMgTdkHZwbyNVqRFE/FZoCZXJGIaEg4n4 kkEnD/wa1iaqjfEhtUXTAnAM7sG7edhGa5VNaLAudnxS18OEeqNfSYaqMfz9JXpM EkL+P+f+WHETB4eHNRODTsWa07L+GAE8PSWX/bZxKQPcDHU4dQN5KkAXHdjQXWxZ EWR9EOC23doE8Pz+AefYlyr58XrikfY+qqIYkZd5o48psb18NDaRh6Y8YfojfbdQ 2yoVfhBLXeZVt7+Wuw7L4ebbGjlHIbh88oQZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUbz0YRC0f34d8KxcOVQnPEiTG07gwHwYDVR0jBBgwFoAUQi58ldh96a7rISoM TMsBdOZcpdAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9iejBZUkMwZjM0ZDhL eGNPVlFuUEVpVEcwN2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBndMA0GCSqGSIb3DQEBCwUAA4IBAQCeoHHO+dKnHxIHu4TF0p+Sijz7FJhH eKYLkODjqvYXRg6OdQObIVxcXltYNxmNNAAQX2M/Zl2FT5BPTqgLFJoMx5qCUfRF 4WBfQgQrgHvS5ijpfAmtMGo+Xc1rhcN0hzJK1G0hE6BEYxqKnTeegpBlpb7AZKuP Xmf769sLSWN6r5U9dNYCzkn0HOkKQjhX3UlZGBfqc8D+1A+Muva1aB1EfJqPvmkg qgJpwSQmT0xt2JK1s21u3uj217iEpC5Bj6MubVjaQFYzSL0Nuv+U4IMVEtpU7Etc cUem746ZRAIif9eiVH/hmwRY/ewrWzfn5GqXkPkb83HaVqj6pL+JP4DY -----END CERTIFICATE-----Generated at Sat Jul 26 08:09:22 2025 by rpki-client