$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/PlXwq9Ot9HWkkup4GTBaaI1Zz24.roa File: PlXwq9Ot9HWkkup4GTBaaI1Zz24.roa (raw, json) Hash identifier: H85XFwCL2a5mvKQR47Qsml8TQlWHVw3Alxr2iYpeoKo= Subject key identifier: 3E:55:F0:AB:D3:AD:F4:75:A4:92:EA:78:19:30:5A:68:8D:59:CF:6E Certificate issuer: /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D Certificate serial: 047A Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/PlXwq9Ot9HWkkup4GTBaaI1Zz24.roa Signing time: Fri 22 Aug 2025 08:49:59 +0000 ROA not before: Fri 22 Aug 2025 08:49:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 14618 IP address blocks: 103.168.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 13:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D Validity Not Before: Aug 22 08:49:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3E55F0ABD3ADF475A492EA7819305A688D59CF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:28:24:e8:86:8d:19:0f:bb:50:9d:d8:d2: 2c:40:5a:86:59:4b:4c:e2:f6:f9:b7:d6:5b:88:6d: b3:30:c9:e7:b6:46:d4:15:f9:13:52:3e:86:3c:5b: a2:77:67:7d:6c:f7:2c:0b:a4:11:be:42:9c:95:d8: 77:21:7e:f8:de:77:0b:bf:01:46:d4:4c:8f:b2:4b: 3a:bc:bd:6a:36:e9:1b:2c:c1:a0:da:c7:c3:9d:bd: cc:06:8d:d5:06:ac:83:18:d5:c1:d9:78:87:1e:68: 77:1a:79:3e:4e:96:a5:54:3f:5c:a2:94:5a:c6:99: 0d:ca:c9:c7:d4:f7:db:dd:f9:36:59:45:13:3b:3f: 3e:67:96:4a:ce:a0:dc:e2:e7:69:bc:a9:23:7e:d4: 62:db:0f:93:bc:db:d7:c9:61:63:51:b9:19:c1:bf: c6:93:d6:06:e6:63:8e:91:62:46:02:70:e2:27:a5: 61:ca:45:a7:d2:9f:96:c6:ff:5a:46:92:e1:e3:5d: 0f:bd:3e:78:6d:3d:4a:0d:c2:a6:2a:c8:b3:53:a4: 71:96:4d:70:71:81:54:04:d5:d5:b7:7f:4e:05:14: b5:6c:e2:ca:d8:a1:14:e0:e4:23:b8:46:6b:a8:6b: 7c:9b:6c:11:6d:12:c6:14:55:58:ae:7d:37:d6:ec: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:55:F0:AB:D3:AD:F4:75:A4:92:EA:78:19:30:5A:68:8D:59:CF:6E X509v3 Authority Key Identifier: keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/PlXwq9Ot9HWkkup4GTBaaI1Zz24.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.168.156.0/23 Signature Algorithm: sha256WithRSAEncryption 30:44:29:cf:0b:ee:20:88:1c:f9:04:5e:43:70:2a:e5:8b:d1: 9a:b5:92:86:0b:d7:ec:ce:ff:d2:a3:5f:b4:f0:23:c0:c9:2e: 7e:ba:f5:59:a7:67:74:34:dd:70:1d:4e:5f:a3:77:82:a4:12: 44:63:7e:b8:b6:c2:d7:9e:2a:8d:0a:e2:71:89:88:34:48:95: c6:37:5e:4b:c1:cb:6c:d0:01:93:58:17:cf:40:e1:a6:3d:12: 78:16:3f:83:7a:c0:5a:18:9e:c0:05:90:f9:18:ae:59:61:93: 1d:fb:51:57:d4:2e:2b:c8:79:69:5c:fb:c0:d1:b0:fa:e1:2a: d8:5a:7c:76:50:fe:9d:d3:1c:d2:82:aa:75:09:a3:43:86:8f: 9d:01:99:f1:0a:0e:51:59:53:98:5f:f9:19:15:ec:43:ca:c7: 66:6a:53:f2:87:d5:09:33:c7:59:61:0f:9a:68:bb:fa:b0:80: ee:48:f1:90:8b:84:e9:d8:74:c5:ab:c5:ae:47:df:ba:a5:7d: 91:ee:c2:de:7d:e0:74:47:66:39:31:36:e3:10:3c:b9:03:85: 89:96:63:2a:ac:8b:73:43:4f:1b:3d:06:8c:82:63:7d:3a:ac: f0:a0:b6:81:08:a5:05:a8:eb:45:2b:fb:1c:0b:80:77:67:5d: f5:f6:96:ac -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBHowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEM1 MDhCN0REQTAyNEZCMkM5RUY3RkJCRjRGQkQwMkI5RjQzMTkxRDAeFw0yNTA4MjIw ODQ5NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNFNTVGMEFCRDNBREY0 NzVBNDkyRUE3ODE5MzA1QTY4OEQ1OUNGNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCyygk6IaNGQ+7UJ3Y0ixAWoZZS0zi9vm31luIbbMwyee2RtQV +RNSPoY8W6J3Z31s9ywLpBG+QpyV2Hchfvjedwu/AUbUTI+ySzq8vWo26RsswaDa x8OdvcwGjdUGrIMY1cHZeIceaHcaeT5OlqVUP1yilFrGmQ3KycfU99vd+TZZRRM7 Pz5nlkrOoNzi52m8qSN+1GLbD5O829fJYWNRuRnBv8aT1gbmY46RYkYCcOInpWHK RafSn5bG/1pGkuHjXQ+9PnhtPUoNwqYqyLNTpHGWTXBxgVQE1dW3f04FFLVs4srY oRTg5CO4Rmuoa3ybbBFtEsYUVViufTfW7Nu7AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUPlXwq9Ot9HWkkup4GTBaaI1Zz24wHwYDVR0jBBgwFoAUjFCLfdoCT7LJ73+7 9PvQK59DGR0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lCRVJM SU5LL2pGQ0xmZG9DVDdMSjczLTc5UHZRSzU5REdSMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvakZDTGZkb0NUN0xKNzMtNzlQdlFLNTlER1IwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lCRVJMSU5LL1BsWHdxOU90OUhX a2t1cDRHVEJhYUkxWnoyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnqJwwDQYJKoZIhvcNAQELBQADggEBADBEKc8L7iCIHPkEXkNwKuWL0Zq1 koYL1+zO/9KjX7TwI8DJLn669VmnZ3Q03XAdTl+jd4KkEkRjfri2wteeKo0K4nGJ iDRIlcY3XkvBy2zQAZNYF89A4aY9EngWP4N6wFoYnsAFkPkYrllhkx37UVfULivI eWlc+8DRsPrhKthafHZQ/p3THNKCqnUJo0OGj50BmfEKDlFZU5hf+RkV7EPKx2Zq U/KH1Qkzx1lhD5pou/qwgO5I8ZCLhOnYdMWrxa5H37qlfZHuwt594HRHZjkxNuMQ PLkDhYmWYyqsi3NDTxs9BoyCY306rPCgtoEIpQWo60Ur+xwLgHdnXfX2lqw= -----END CERTIFICATE-----Generated at Thu Sep 18 08:03:27 2025 by rpki-client