$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/TYx2l_8z_nAq2QEus0U2e9VUv_k.roa File: TYx2l_8z_nAq2QEus0U2e9VUv_k.roa (raw, json) Hash identifier: 7CBhEIM0DVkZC40w7yGKlReYMKtOASvRG7tVqSHiGD8= Subject key identifier: 4D:8C:76:97:FF:33:FE:70:2A:D9:01:2E:B3:45:36:7B:D5:54:BF:F9 Certificate issuer: /CN=1F877983527470E200D5AE06A01588213555FEE6 Certificate serial: 0345 Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/TYx2l_8z_nAq2QEus0U2e9VUv_k.roa Signing time: Fri 22 Aug 2025 08:50:49 +0000 ROA not before: Fri 22 Aug 2025 08:50:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 103.14.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6 Validity Not Before: Aug 22 08:50:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4D8C7697FF33FE702AD9012EB345367BD554BFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:59:dc:a7:5c:14:e7:ff:ee:0a:3c:6d:49: 3b:3c:47:ac:01:78:1f:0f:65:73:48:18:fa:d7:ec: 12:ca:57:ec:a3:33:b3:6d:c9:48:86:c7:66:b5:7a: 22:0d:b0:9e:98:81:bb:19:16:f4:07:9b:04:1e:5b: 73:cd:34:43:9d:ae:e2:b3:ef:ae:23:1f:28:60:f1: 12:2b:1a:42:7e:52:fc:90:30:02:73:ea:db:5e:de: 25:01:99:3e:f1:fc:56:0b:98:1e:59:9f:b4:06:9d: 3e:62:7b:99:4f:ff:28:86:b1:37:12:6b:0c:ea:c7: 2c:0a:c6:b9:c5:81:ea:12:4d:5b:0b:01:44:ec:b1: dc:dc:59:4e:ea:c0:16:1a:25:13:93:9a:c3:a1:9e: 02:8e:e0:93:f6:c1:c5:3d:73:87:9e:da:1c:22:24: 2f:5b:f3:88:82:2d:b8:a2:2f:5e:50:f6:ab:38:29: 96:b5:96:2c:ee:45:37:b2:61:57:d4:e5:60:f3:53: af:97:33:db:52:60:04:03:ed:f4:5f:b9:9d:92:19: 8e:c8:bc:2d:1e:79:46:1f:c6:02:15:46:58:cd:24: fe:10:dc:f9:ef:a2:37:86:83:ab:7d:84:1c:66:7f: 5b:94:45:af:57:13:ea:53:af:5b:14:4d:5f:4e:2c: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:76:97:FF:33:FE:70:2A:D9:01:2E:B3:45:36:7B:D5:54:BF:F9 X509v3 Authority Key Identifier: keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/TYx2l_8z_nAq2QEus0U2e9VUv_k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.14.170.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:5c:d8:56:d4:4e:bf:32:9f:a1:b8:74:4e:84:91:ea:81:37: ab:a2:3b:38:a8:1b:e4:8b:99:c6:3a:d3:05:2e:2d:f4:b2:39: e6:37:19:d8:44:f6:f3:d9:cd:68:5c:24:2f:c1:05:91:15:53: 6d:a5:26:0c:0c:b1:3b:3c:91:aa:43:27:6a:ee:8b:9f:31:9e: 3c:45:f1:89:e5:a4:43:a5:9b:95:de:13:88:f6:ac:67:00:bc: b2:a8:c3:89:c0:44:18:72:e9:d4:65:60:81:75:95:ef:ce:5a: 44:3b:c2:a8:7d:ba:cd:4c:db:51:b1:8e:12:4b:13:1d:e2:71: b0:ca:47:4a:29:42:02:e6:a3:2a:ee:2e:56:b8:21:0a:51:58: 3f:93:ee:8b:71:db:6d:83:b2:c2:79:21:5c:33:06:5c:19:80: 58:ef:7b:7f:26:28:8d:5f:4b:05:1f:3e:76:25:5c:04:0d:97: 50:b8:a9:20:9c:65:22:49:0e:68:6b:61:bf:cd:e8:3d:bb:9b: ba:81:18:6e:82:43:6b:e5:91:29:dc:ef:04:5e:28:36:05:67: c9:8a:cd:ba:58:3c:ff:eb:ad:9e:26:2c:15:9f:da:f3:47:98: dd:6b:5e:8e:7e:48:6e:68:cf:df:4c:f8:4c:70:7a:62:cc:50: 74:7d:fc:78 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY4 Nzc5ODM1Mjc0NzBFMjAwRDVBRTA2QTAxNTg4MjEzNTU1RkVFNjAeFw0yNTA4MjIw ODUwNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDREOEM3Njk3RkYzM0ZF NzAyQUQ5MDEyRUIzNDUzNjdCRDU1NEJGRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS71ncp1wU5//uCjxtSTs8R6wBeB8PZXNIGPrX7BLKV+yjM7Nt yUiGx2a1eiINsJ6YgbsZFvQHmwQeW3PNNEOdruKz764jHyhg8RIrGkJ+UvyQMAJz 6tte3iUBmT7x/FYLmB5Zn7QGnT5ie5lP/yiGsTcSawzqxywKxrnFgeoSTVsLAUTs sdzcWU7qwBYaJROTmsOhngKO4JP2wcU9c4ee2hwiJC9b84iCLbiiL15Q9qs4KZa1 lizuRTeyYVfU5WDzU6+XM9tSYAQD7fRfuZ2SGY7IvC0eeUYfxgIVRljNJP4Q3Pnv ojeGg6t9hBxmf1uURa9XE+pTr1sUTV9OLD29AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUTYx2l/8z/nAq2QEus0U2e9VUv/kwHwYDVR0jBBgwFoAUH4d5g1J0cOIA1a4G oBWIITVV/uYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1BTWVMv SDRkNWcxSjBjT0lBMWE0R29CV0lJVFZWX3VZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9INGQ1ZzFKMGNPSUExYTRHb0JXSUlUVlZfdVkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUFNZUy9UWXgybF84el9uQXEyUUV1czBV MmU5VlV2X2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZw6q MA0GCSqGSIb3DQEBCwUAA4IBAQAqXNhW1E6/Mp+huHROhJHqgTerojs4qBvki5nG OtMFLi30sjnmNxnYRPbz2c1oXCQvwQWRFVNtpSYMDLE7PJGqQydq7oufMZ48RfGJ 5aRDpZuV3hOI9qxnALyyqMOJwEQYcunUZWCBdZXvzlpEO8KofbrNTNtRsY4SSxMd 4nGwykdKKUIC5qMq7i5WuCEKUVg/k+6Lcdttg7LCeSFcMwZcGYBY73t/JiiNX0sF Hz52JVwEDZdQuKkgnGUiSQ5oa2G/zeg9u5u6gRhugkNr5ZEp3O8EXig2BWfJis26 WDz/662eJiwVn9rzR5jda16OfkhuaM/fTPhMcHpizFB0ffx4 -----END CERTIFICATE-----Generated at Sun Sep 7 12:41:43 2025 by rpki-client