$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/4to_EBWNFvhuC7MdYnGsIDUAeN0.roa File: 4to_EBWNFvhuC7MdYnGsIDUAeN0.roa (raw, json) Hash identifier: xgrARI/yzuov9A6xEfCD2TDEHo6wDQbSDf5obMJjloQ= Subject key identifier: E2:DA:3F:10:15:8D:16:F8:6E:0B:B3:1D:62:71:AC:20:35:00:78:DD Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E7E Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/4to_EBWNFvhuC7MdYnGsIDUAeN0.roa Signing time: Fri 22 Aug 2025 09:03:19 +0000 ROA not before: Fri 22 Aug 2025 09:03:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 113.21.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3710 (0xe7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E2DA3F10158D16F86E0BB31D6271AC20350078DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:6e:55:35:aa:48:a0:97:67:14:22:f7:50: 83:1f:52:ee:88:4a:22:0f:0b:9e:19:99:b0:bd:21: 09:c3:13:ee:e6:9c:aa:4f:88:17:73:67:e8:da:ee: 77:f7:3e:48:58:d8:32:64:c5:0a:0f:76:30:7e:27: 76:27:56:a0:a9:21:4a:f7:ff:76:55:83:35:76:3d: 76:95:1a:21:33:5f:3a:6d:ab:96:3a:8d:1c:b1:19: 27:77:5f:4c:4c:06:ff:43:2b:0c:63:6e:36:bb:56: 60:f1:4d:5b:e2:72:1c:d3:bb:d1:29:e8:01:3b:51: e0:a1:38:0f:65:f4:cc:67:ad:43:22:8b:b9:63:c8: 20:60:90:2d:88:45:4d:ed:eb:83:90:af:d6:75:c9: 5b:99:0e:f1:b3:1d:bd:db:a8:b3:e5:42:b7:53:ec: 8d:84:c6:24:d7:95:19:08:69:1a:9c:fd:d7:f1:ac: 37:ee:88:0f:6f:1b:df:7c:f2:f6:88:c8:4e:73:42: 6c:fb:e7:22:3d:d5:36:99:51:ee:b1:24:c8:48:6a: 3e:e0:f5:16:f5:cc:b7:27:31:0b:11:72:64:f8:2e: 9e:2c:d5:4f:4d:3f:af:fb:96:b1:0e:03:b2:c0:dd: dd:7a:2b:36:bf:12:f3:56:58:87:b5:e5:4e:06:f4: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DA:3F:10:15:8D:16:F8:6E:0B:B3:1D:62:71:AC:20:35:00:78:DD X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/4to_EBWNFvhuC7MdYnGsIDUAeN0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.160.0/19 Signature Algorithm: sha256WithRSAEncryption 5b:f3:cd:2d:b7:5f:aa:4f:a1:b2:ca:12:55:08:ee:b9:a6:91: 77:21:f4:c7:bf:9f:ac:3a:ff:73:72:d5:d3:2b:b0:26:bf:a4: 72:c7:ad:64:5d:57:89:32:12:b1:b0:8f:e1:e8:12:66:ce:36: 97:cf:96:ac:f4:4a:90:d4:59:2b:d6:9d:c6:b4:9c:0c:19:83: 20:34:cf:ed:2f:6c:16:ca:38:4e:aa:aa:24:a4:a8:3e:d6:2b: a2:48:a7:2e:67:76:82:1e:94:56:cc:80:87:89:68:6c:5b:d7: 3b:af:29:53:e7:bd:3a:27:b9:f5:74:34:17:70:68:8d:8e:11: d1:c8:5a:04:72:2c:57:78:d5:90:ac:49:7c:6c:53:c1:88:ed: dd:15:eb:02:01:d7:b7:7d:ff:56:0f:c8:b5:ea:58:9f:e4:fc: 6d:a7:33:88:3b:c4:35:b5:94:31:61:ca:7b:fc:33:93:ba:ed: 4e:4f:6f:8a:a8:1b:59:e9:19:1b:64:dc:20:fa:5b:b2:29:73: f0:d8:d8:8d:1e:87:1c:52:2e:a0:dc:a0:82:a9:98:42:2c:fd: fe:30:41:67:e3:f2:39:3b:8d:cd:e5:92:7a:5d:46:6b:01:89: 1d:13:5f:4c:a5:5a:d7:ff:f9:70:28:3a:49:ec:71:0e:a6:0f: 5c:1f:fd:b1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUyREEzRjEwMTU4RDE2 Rjg2RTBCQjMxRDYyNzFBQzIwMzUwMDc4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8jW5VNapIoJdnFCL3UIMfUu6ISiIPC54ZmbC9IQnDE+7mnKpP iBdzZ+ja7nf3PkhY2DJkxQoPdjB+J3YnVqCpIUr3/3ZVgzV2PXaVGiEzXzptq5Y6 jRyxGSd3X0xMBv9DKwxjbja7VmDxTVvichzTu9Ep6AE7UeChOA9l9MxnrUMii7lj yCBgkC2IRU3t64OQr9Z1yVuZDvGzHb3bqLPlQrdT7I2ExiTXlRkIaRqc/dfxrDfu iA9vG9988vaIyE5zQmz75yI91TaZUe6xJMhIaj7g9Rb1zLcnMQsRcmT4Lp4s1U9N P6/7lrEOA7LA3d16Kza/EvNWWIe15U4G9CCPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4to/EBWNFvhuC7MdYnGsIDUAeN0wHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVULzR0b19FQldORnZodUM3TWRZ bkdzSURVQWVOMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVx FaAwDQYJKoZIhvcNAQELBQADggEBAFvzzS23X6pPobLKElUI7rmmkXch9Me/n6w6 /3Ny1dMrsCa/pHLHrWRdV4kyErGwj+HoEmbONpfPlqz0SpDUWSvWnca0nAwZgyA0 z+0vbBbKOE6qqiSkqD7WK6JIpy5ndoIelFbMgIeJaGxb1zuvKVPnvTonufV0NBdw aI2OEdHIWgRyLFd41ZCsSXxsU8GI7d0V6wIB17d9/1YPyLXqWJ/k/G2nM4g7xDW1 lDFhynv8M5O67U5Pb4qoG1npGRtk3CD6W7Ipc/DY2I0ehxxSLqDcoIKpmEIs/f4w QWfj8jk7jc3lknpdRmsBiR0TX0ylWtf/+XAoOknscQ6mD1wf/bE= -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:57 2025 by rpki-client