$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/6xb5GIogFcLPLXnAO7uTPNGN-eE.roa File: 6xb5GIogFcLPLXnAO7uTPNGN-eE.roa (raw, json) Hash identifier: kflATpPFlJE3DKWOtuDB50wPQhdlGCWIcRQ6V3dTnKc= Subject key identifier: EB:16:F9:18:8A:20:15:C2:CF:2D:79:C0:3B:BB:93:3C:D1:8D:F9:E1 Certificate issuer: /CN=1F877983527470E200D5AE06A01588213555FEE6 Certificate serial: 0347 Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/6xb5GIogFcLPLXnAO7uTPNGN-eE.roa Signing time: Fri 22 Aug 2025 08:50:49 +0000 ROA not before: Fri 22 Aug 2025 08:50:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38042 IP address blocks: 103.14.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6 Validity Not Before: Aug 22 08:50:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EB16F9188A2015C2CF2D79C03BBB933CD18DF9E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:ba:33:85:cd:3d:71:6a:2a:d4:5c:8a:ad: c0:fe:08:43:7c:69:15:88:99:58:e3:03:ec:76:76: d6:df:7c:ed:a4:de:bc:af:d3:8e:c5:e6:87:fa:01: 55:0d:0c:e9:47:96:7c:ec:1f:ac:94:34:b4:3b:7c: cc:47:8e:f9:ad:5f:3c:1b:d3:8d:1f:d8:1d:81:17: 75:48:6d:e0:b3:92:d6:32:27:8e:9f:09:49:70:44: 73:92:87:0a:8c:bb:9a:52:77:d2:34:20:f9:18:3e: 16:5a:0c:48:0e:dd:c6:91:62:9a:01:08:a2:83:f8: 81:17:06:4d:7d:5b:c8:df:43:b6:4c:33:84:70:36: 70:5e:4f:68:9f:bb:e1:58:7d:41:72:d2:ec:6c:94: 00:cc:50:8b:a9:2a:39:27:d9:6c:0b:8f:22:4a:7e: aa:0e:49:d5:e9:40:ba:91:5a:9d:e9:97:cf:96:4b: 1a:ff:e2:39:53:92:7e:2b:96:6b:52:e0:b7:06:e4: 54:99:1a:22:69:50:c3:48:7e:a3:15:29:a9:6d:b6: 8c:67:ba:2b:7e:10:c7:40:f8:ce:a4:2f:8c:a1:4d: b7:fe:b1:fe:49:2c:0d:c2:52:b2:e7:6c:3d:41:90: f2:72:5c:d6:a7:b3:de:5e:b9:30:40:98:b2:f6:f1: 71:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:16:F9:18:8A:20:15:C2:CF:2D:79:C0:3B:BB:93:3C:D1:8D:F9:E1 X509v3 Authority Key Identifier: keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/6xb5GIogFcLPLXnAO7uTPNGN-eE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.14.170.0/23 Signature Algorithm: sha256WithRSAEncryption 06:b9:62:f4:bc:cc:21:53:44:32:2d:da:53:62:b0:7f:6c:62: 22:db:4d:a3:eb:38:55:8c:68:7e:31:91:88:a9:4d:ed:21:01: 28:dd:50:ee:55:aa:84:39:2e:16:8d:8e:4a:2b:56:83:c9:e3: 0a:b6:47:c8:ef:9d:00:3d:5e:1e:a2:e7:8b:70:06:92:a2:0a: 1d:3e:d8:63:a5:b3:24:6e:b0:5c:74:f0:c1:60:71:d0:a0:35: 47:2e:b1:f1:50:4a:f4:c2:84:39:64:a8:fd:87:d3:f7:b3:02: e8:42:cb:cc:50:43:b5:1a:8d:a4:32:76:2f:24:3f:44:7c:ee: 89:48:d4:96:e2:77:da:97:43:7f:59:d5:f9:bd:2d:c4:e2:35: 1c:11:30:fa:67:f7:ce:63:c1:d5:fb:3e:6c:ce:1c:48:f9:87: c6:bc:d7:4f:dd:eb:10:5f:d1:ae:5e:a0:ce:91:c5:ca:17:0b: 16:7b:b7:6d:dc:92:46:31:49:a4:90:2d:f1:6b:b8:d2:97:5f: 73:30:b8:f0:d9:4c:cc:ff:9c:6a:b9:d3:3f:1a:69:07:ca:5f: 5a:1e:a1:78:74:66:46:c4:ef:c2:29:ef:a9:bb:f4:26:81:a7: 8a:46:22:bb:8e:0e:4b:a8:de:b3:e5:28:7c:a3:9c:47:87:3f: 40:29:f1:ec -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY4 Nzc5ODM1Mjc0NzBFMjAwRDVBRTA2QTAxNTg4MjEzNTU1RkVFNjAeFw0yNTA4MjIw ODUwNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCMTZGOTE4OEEyMDE1 QzJDRjJENzlDMDNCQkI5MzNDRDE4REY5RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpI7ozhc09cWoq1FyKrcD+CEN8aRWImVjjA+x2dtbffO2k3ryv 047F5of6AVUNDOlHlnzsH6yUNLQ7fMxHjvmtXzwb040f2B2BF3VIbeCzktYyJ46f CUlwRHOShwqMu5pSd9I0IPkYPhZaDEgO3caRYpoBCKKD+IEXBk19W8jfQ7ZMM4Rw NnBeT2ifu+FYfUFy0uxslADMUIupKjkn2WwLjyJKfqoOSdXpQLqRWp3pl8+WSxr/ 4jlTkn4rlmtS4LcG5FSZGiJpUMNIfqMVKalttoxnuit+EMdA+M6kL4yhTbf+sf5J LA3CUrLnbD1BkPJyXNans95euTBAmLL28XEfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU6xb5GIogFcLPLXnAO7uTPNGN+eEwHwYDVR0jBBgwFoAUH4d5g1J0cOIA1a4G oBWIITVV/uYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1BTWVMv SDRkNWcxSjBjT0lBMWE0R29CV0lJVFZWX3VZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9INGQ1ZzFKMGNPSUExYTRHb0JXSUlUVlZfdVkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUFNZUy82eGI1R0lvZ0ZjTFBMWG5BTzd1 VFBOR04tZUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZw6q MA0GCSqGSIb3DQEBCwUAA4IBAQAGuWL0vMwhU0QyLdpTYrB/bGIi202j6zhVjGh+ MZGIqU3tIQEo3VDuVaqEOS4WjY5KK1aDyeMKtkfI750APV4eoueLcAaSogodPthj pbMkbrBcdPDBYHHQoDVHLrHxUEr0woQ5ZKj9h9P3swLoQsvMUEO1Go2kMnYvJD9E fO6JSNSW4nfal0N/WdX5vS3E4jUcETD6Z/fOY8HV+z5szhxI+YfGvNdP3esQX9Gu XqDOkcXKFwsWe7dt3JJGMUmkkC3xa7jSl19zMLjw2UzM/5xqudM/GmkHyl9aHqF4 dGZGxO/CKe+pu/QmgaeKRiK7jg5LqN6z5Sh8o5xHhz9AKfHs -----END CERTIFICATE-----Generated at Tue Sep 9 00:41:02 2025 by rpki-client