$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/8iU3wEzok3gKvIqLkgbHhsw6-eg.roa File: 8iU3wEzok3gKvIqLkgbHhsw6-eg.roa (raw, json) Hash identifier: xN2RK1h4tjD0XjogrtTLV9kUMGsJJ+fW2BNxkFyGmEs= Subject key identifier: F2:25:37:C0:4C:E8:93:78:0A:BC:8A:8B:92:06:C7:86:CC:3A:F9:E8 Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 0572 Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/8iU3wEzok3gKvIqLkgbHhsw6-eg.roa Signing time: Fri 22 Aug 2025 08:49:02 +0000 ROA not before: Fri 22 Aug 2025 08:49:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 208223 IP address blocks: 160.25.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Aug 22 08:49:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F22537C04CE893780ABC8A8B9206C786CC3AF9E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:b5:f7:12:8d:d6:49:58:06:df:2c:14:57: fc:50:b1:64:5b:a4:78:f1:6a:d6:49:06:aa:39:75: fc:87:38:f5:81:3b:c4:e6:3e:4e:be:72:2f:7e:b5: 5e:12:17:b8:2d:ce:0e:b7:c4:a3:6f:cf:b9:9c:09: b2:7f:9b:20:36:47:7f:b6:3b:90:38:7b:42:34:23: d2:2f:e1:b8:73:ba:15:90:5b:cd:14:16:64:b2:33: e2:ed:b3:86:73:ac:43:2d:58:cb:a1:93:05:56:53: 0c:72:cb:f6:91:52:b6:68:cf:63:eb:8c:7d:f6:c0: 81:27:f8:7b:51:c0:d7:94:9d:af:3d:0f:a2:7e:81: 03:58:60:70:b7:77:23:0d:19:5a:61:b4:fc:54:71: 87:c0:ee:b7:19:f5:17:73:ec:b3:b1:a7:b1:6f:9a: f5:f8:1a:b3:9d:9c:de:46:f7:f0:2f:65:c5:08:05: 89:6f:ab:ee:d2:57:88:83:7e:e6:5a:0e:74:8d:33: 4c:0a:49:8f:97:d1:89:e9:f1:44:03:d4:f7:28:b9: 62:c3:7d:a1:8f:02:fe:56:68:05:ad:e9:98:b1:73: 8b:4f:f9:31:f3:7d:9f:c3:57:ca:ec:1f:3b:06:6f: 38:1e:b6:21:0d:58:cc:39:38:74:6e:13:34:b7:9e: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:25:37:C0:4C:E8:93:78:0A:BC:8A:8B:92:06:C7:86:CC:3A:F9:E8 X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/8iU3wEzok3gKvIqLkgbHhsw6-eg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/24 Signature Algorithm: sha256WithRSAEncryption 43:68:f6:6a:80:5c:1a:13:86:09:27:c7:eb:23:31:35:b6:be: 16:7e:21:a0:40:66:3e:d1:12:77:84:ab:f6:97:cf:9d:e4:63: 50:e6:ee:eb:17:1e:e0:0f:c9:d6:4d:e5:4e:f5:20:5a:99:dc: c0:76:6a:8d:8e:0d:13:5c:04:68:18:8e:1e:93:bd:c0:e6:85: 62:6a:07:80:58:ad:9e:c2:60:47:54:7c:82:da:b1:9b:8d:c5: ef:cd:df:69:c7:c6:e8:3a:3a:0c:9e:46:ff:64:5d:89:25:ed: 32:20:e1:e4:83:df:d4:85:e3:f1:7b:d1:ae:34:74:4f:1d:a2: aa:01:56:5e:50:d3:d1:12:ce:d9:76:67:b2:a9:7e:b9:a6:89: dc:ba:9b:d4:62:bd:67:16:ad:e2:40:76:ff:c1:2c:5a:dc:41: 25:de:b9:e0:f2:06:db:0d:13:2f:22:c6:b4:c8:b0:c6:ff:ee: 0e:c0:fd:90:ca:a8:87:d4:2e:99:1b:ea:32:74:0a:5e:e5:a0: 78:b0:5f:79:2f:5b:1a:51:bd:1d:bb:7e:a7:2d:1a:1a:c1:5a: d3:40:40:c8:ef:7d:1d:99:ac:ec:37:ae:d2:00:7d:b2:ed:23: 9c:7c:af:8c:c9:1e:e5:3e:74:00:5f:fa:2a:72:12:f1:2c:13: a1:d9:c5:de -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTA4MjIw ODQ5MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYyMjUzN0MwNENFODkz NzgwQUJDOEE4QjkyMDZDNzg2Q0MzQUY5RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC++LX3Eo3WSVgG3ywUV/xQsWRbpHjxatZJBqo5dfyHOPWBO8Tm Pk6+ci9+tV4SF7gtzg63xKNvz7mcCbJ/myA2R3+2O5A4e0I0I9Iv4bhzuhWQW80U FmSyM+Lts4ZzrEMtWMuhkwVWUwxyy/aRUrZoz2PrjH32wIEn+HtRwNeUna89D6J+ gQNYYHC3dyMNGVphtPxUcYfA7rcZ9Rdz7LOxp7FvmvX4GrOdnN5G9/AvZcUIBYlv q+7SV4iDfuZaDnSNM0wKSY+X0Ynp8UQD1PcouWLDfaGPAv5WaAWt6Zixc4tP+THz fZ/DV8rsHzsGbzgetiENWMw5OHRuEzS3nmR1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU8iU3wEzok3gKvIqLkgbHhsw6+egwHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvOGlVM3dFem9rM2dLdklx TGtnYkhoc3c2LWVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AKAZaDANBgkqhkiG9w0BAQsFAAOCAQEAQ2j2aoBcGhOGCSfH6yMxNba+Fn4hoEBm PtESd4Sr9pfPneRjUObu6xce4A/J1k3lTvUgWpncwHZqjY4NE1wEaBiOHpO9wOaF YmoHgFitnsJgR1R8gtqxm43F783facfG6Do6DJ5G/2RdiSXtMiDh5IPf1IXj8XvR rjR0Tx2iqgFWXlDT0RLO2XZnsql+uaaJ3Lqb1GK9Zxat4kB2/8EsWtxBJd654PIG 2w0TLyLGtMiwxv/uDsD9kMqoh9QumRvqMnQKXuWgeLBfeS9bGlG9Hbt+py0aGsFa 00BAyO99HZms7Deu0gB9su0jnHyvjMke5T50AF/6KnIS8SwTodnF3g== -----END CERTIFICATE-----Generated at Tue Sep 9 18:56:38 2025 by rpki-client