$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/C0FQft0AjWQ2pEDZCizD4M5gFb8.roa File: C0FQft0AjWQ2pEDZCizD4M5gFb8.roa (raw, json) Hash identifier: KXqYa+r+A3uRe7SjI8SZk8eNluJdkH6RPhdKASp5Xio= Subject key identifier: 0B:41:50:7E:DD:00:8D:64:36:A4:40:D9:0A:2C:C3:E0:CE:60:15:BF Certificate issuer: /CN=603136CCA4FB40559F2F75778C389C9D02C23F40 Certificate serial: 2D Authority key identifier: 60:31:36:CC:A4:FB:40:55:9F:2F:75:77:8C:38:9C:9D:02:C2:3F:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YDE2zKT7QFWfL3V3jDicnQLCP0A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/C0FQft0AjWQ2pEDZCizD4M5gFb8.roa Signing time: Mon 25 Aug 2025 01:39:55 +0000 ROA not before: Mon 25 Aug 2025 01:39:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 56289 IP address blocks: 165.99.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/YDE2zKT7QFWfL3V3jDicnQLCP0A.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/YDE2zKT7QFWfL3V3jDicnQLCP0A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YDE2zKT7QFWfL3V3jDicnQLCP0A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603136CCA4FB40559F2F75778C389C9D02C23F40 Validity Not Before: Aug 25 01:39:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0B41507EDD008D6436A440D90A2CC3E0CE6015BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:13:b3:c8:5a:25:b7:1c:1f:59:b7:a6:6b: 88:85:e0:37:a4:36:af:51:c8:2c:55:2f:83:fd:c3: c7:8a:02:11:71:d0:0b:ff:08:7a:e1:50:30:ce:ba: 9b:72:73:8e:d7:03:9e:e4:78:48:5f:7d:7a:b0:07: 75:48:29:2d:67:e3:57:4d:d2:cb:04:97:c5:fb:e4: 1b:db:70:bf:9f:01:3d:7e:61:5a:05:76:f7:69:6a: cc:8c:cc:0d:34:db:d1:25:3d:e1:a0:8c:8d:8b:bb: 85:20:98:8f:83:9e:f0:01:68:52:47:25:dc:43:63: e0:11:8d:71:c8:d8:57:a3:e8:19:04:dd:55:cc:f2: 7c:be:6e:57:6f:be:a9:ad:b1:fe:35:0f:a7:69:61: 7c:bd:5e:a7:e0:c3:31:b6:ff:37:09:86:36:a7:c2: 5c:59:8c:d9:e7:1a:c2:c2:85:61:5f:ab:67:70:a9: ef:52:cc:30:37:f5:96:31:51:71:b3:d6:aa:0b:5f: cc:8e:b6:db:e1:bf:4c:c1:0c:89:87:ab:3b:99:28: 3c:cc:eb:09:0f:46:1d:3b:da:3c:0e:58:27:25:dc: 86:f4:a4:d9:27:dd:ad:c7:9f:d4:3c:91:59:0b:6f: e2:18:48:d5:8d:15:12:50:38:fd:86:09:96:e2:de: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:41:50:7E:DD:00:8D:64:36:A4:40:D9:0A:2C:C3:E0:CE:60:15:BF X509v3 Authority Key Identifier: keyid:60:31:36:CC:A4:FB:40:55:9F:2F:75:77:8C:38:9C:9D:02:C2:3F:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/YDE2zKT7QFWfL3V3jDicnQLCP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YDE2zKT7QFWfL3V3jDicnQLCP0A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKSG/C0FQft0AjWQ2pEDZCizD4M5gFb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 165.99.170.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:a3:85:91:e6:af:ad:8e:85:ec:53:56:cd:f7:18:07:8e:dc: 05:54:c3:37:da:21:a3:b5:f2:ae:34:07:a3:f9:2f:34:d5:ad: 49:03:c8:29:af:25:d4:28:ef:32:1a:ab:8f:bb:6d:1d:3e:cb: 31:6a:a1:c0:0d:c9:4a:89:b2:16:5f:02:c3:68:b9:3d:b4:d6: 36:69:73:ab:07:83:c6:73:f5:d3:f1:ec:66:86:f0:76:a6:aa: 84:7c:93:03:42:37:13:0b:17:5c:74:b9:08:c2:78:3b:f2:78: a7:be:2f:f2:60:cf:46:b7:53:fb:e4:60:5d:27:7d:b0:8a:4c: 04:87:c1:7d:5a:1f:d2:b2:9d:f7:0a:99:6a:77:58:1e:62:e3: f5:6f:0d:88:7b:8a:b1:82:ef:7d:58:99:22:9b:ff:58:60:da: fd:cb:29:4a:09:e4:c7:64:2b:3e:8a:6d:82:3d:9b:9d:8d:89: 47:07:dc:7d:8d:50:85:ab:3c:eb:75:54:0b:6d:60:03:42:e7: f5:37:f3:e0:dc:0f:ce:e8:5a:3f:bf:96:e2:bd:78:da:a7:d3: 20:dc:09:e8:e9:9f:a3:9d:f7:60:de:9c:7a:6c:2e:25:dd:2d: 3e:b4:69:ce:72:7c:6b:5f:a4:68:bb:67:7e:f3:3c:f7:3c:6e: 85:a2:df:38 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MDMx MzZDQ0E0RkI0MDU1OUYyRjc1Nzc4QzM4OUM5RDAyQzIzRjQwMB4XDTI1MDgyNTAx Mzk1NVoXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoMEI0MTUwN0VERDAwOEQ2 NDM2QTQ0MEQ5MEEyQ0MzRTBDRTYwMTVCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMRuE7PIWiW3HB9Zt6ZriIXgN6Q2r1HILFUvg/3Dx4oCEXHQC/8I euFQMM66m3JzjtcDnuR4SF99erAHdUgpLWfjV03SywSXxfvkG9twv58BPX5hWgV2 92lqzIzMDTTb0SU94aCMjYu7hSCYj4Oe8AFoUkcl3ENj4BGNccjYV6PoGQTdVczy fL5uV2++qa2x/jUPp2lhfL1ep+DDMbb/NwmGNqfCXFmM2ecawsKFYV+rZ3Cp71LM MDf1ljFRcbPWqgtfzI622+G/TMEMiYerO5koPMzrCQ9GHTvaPA5YJyXchvSk2Sfd rcef1DyRWQtv4hhI1Y0VElA4/YYJluLehesCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBQLQVB+3QCNZDakQNkKLMPgzmAVvzAfBgNVHSMEGDAWgBRgMTbMpPtAVZ8vdXeM OJydAsI/QDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EQlNCQU5L U0cvWURFMnpLVDdRRldmTDNWM2pEaWNuUUxDUDBBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ZREUyektUN1FGV2ZMM1YzakRpY25RTENQMEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EQlNCQU5LU0cvQzBGUWZ0MEFqV1Ey cEVEWkNpekQ0TTVnRmI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKVjqjANBgkqhkiG9w0BAQsFAAOCAQEALaOFkeavrY6F7FNWzfcYB47cBVTD N9oho7XyrjQHo/kvNNWtSQPIKa8l1CjvMhqrj7ttHT7LMWqhwA3JSomyFl8Cw2i5 PbTWNmlzqweDxnP10/HsZobwdqaqhHyTA0I3EwsXXHS5CMJ4O/J4p74v8mDPRrdT ++RgXSd9sIpMBIfBfVof0rKd9wqZandYHmLj9W8NiHuKsYLvfViZIpv/WGDa/csp Sgnkx2QrPoptgj2bnY2JRwfcfY1Qhas863VUC21gA0Ln9Tfz4NwPzuhaP7+W4r14 2qfTINwJ6Omfo533YN6cemwuJd0tPrRpznJ8a1+kaLtnfvM89zxuhaLfOA== -----END CERTIFICATE-----Generated at Sun Sep 7 10:09:12 2025 by rpki-client