$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/D95rP_i5bI_VhgVTa5boYv4tDIw.roa File: D95rP_i5bI_VhgVTa5boYv4tDIw.roa (raw, json) Hash identifier: qQ6k2939/UVYM1adrboSWLKDyj5nf/GUagMQYpGZGak= Subject key identifier: 0F:DE:6B:3F:F8:B9:6C:8F:D5:86:05:53:6B:96:E8:62:FE:2D:0C:8C Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E83 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/D95rP_i5bI_VhgVTa5boYv4tDIw.roa Signing time: Fri 22 Aug 2025 09:03:20 +0000 ROA not before: Fri 22 Aug 2025 09:03:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 61.247.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3715 (0xe83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0FDE6B3FF8B96C8FD58605536B96E862FE2D0C8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:92:cf:60:e5:c9:95:c3:24:0d:1f:86:ec: b5:f1:a3:b4:39:29:ac:8c:f2:86:21:5c:7e:d6:99: bc:b6:c7:9f:b0:b9:7c:e4:95:90:f5:2d:d9:e4:75: 41:60:08:52:61:99:ba:c0:0a:87:63:c8:b0:ca:57: e8:c6:fa:d8:de:02:5a:24:f4:f4:e6:e4:53:23:e9: df:c0:ea:95:a2:4d:a4:2a:f1:5d:1d:6c:ef:6f:d1: 2a:00:34:f6:39:44:5f:40:78:e6:a1:36:c0:49:63: 25:e1:14:93:9f:3a:f6:5e:9a:c5:5b:0c:99:bb:a6: 62:5f:d8:86:fa:bd:a5:31:4f:79:6b:d1:c9:07:14: 12:9c:94:00:8d:91:01:ed:20:d4:9c:0c:dd:df:8b: 27:cc:bc:42:fb:46:82:f1:11:8f:4f:75:0d:f9:6f: 3d:22:a6:40:d2:82:81:9b:e8:99:b6:e4:74:d0:ca: 0f:7e:af:82:5b:f3:63:80:19:a5:1c:d7:b7:ef:1b: 16:34:c6:ab:52:38:7e:e3:19:0b:ee:3e:52:fd:9a: b1:ae:f1:01:e6:b1:31:79:c7:b9:c1:50:bb:51:26: a8:e7:b2:cf:14:0e:90:b2:d8:69:0b:4f:30:88:bb: a4:08:d8:e9:74:0a:95:02:1c:cc:5b:ab:8a:94:d6: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DE:6B:3F:F8:B9:6C:8F:D5:86:05:53:6B:96:E8:62:FE:2D:0C:8C X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/D95rP_i5bI_VhgVTa5boYv4tDIw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.247.160.0/20 Signature Algorithm: sha256WithRSAEncryption a0:f5:59:84:9c:e4:ba:69:a2:f1:29:89:ba:b8:6f:ed:4c:ea: 7f:0c:63:c0:fe:49:fc:01:81:e6:0b:36:e5:14:e1:f3:63:47: 14:44:bf:4a:f7:8b:5a:e9:e0:7b:8b:09:27:cb:00:34:e8:8e: 1d:40:ef:71:65:89:b1:25:df:8f:fd:02:78:50:61:c6:e6:b9: 65:02:5b:44:a1:3c:3f:08:2c:4f:4e:f0:ed:a2:40:0e:a3:6e: a8:3d:05:01:13:b5:84:34:94:e1:19:a3:33:e0:ce:b5:df:2f: 8c:c3:5e:a0:2a:f7:d5:4c:25:1b:90:9f:49:2f:78:46:54:5d: 6a:f9:82:41:bd:de:9d:87:d7:ac:48:1f:52:69:43:6a:27:52: 42:e4:f8:81:aa:3c:a6:5e:e6:36:61:46:9e:3b:c8:69:d4:4e: e9:19:ca:22:36:7b:9a:15:7a:b8:27:ae:18:aa:9c:47:e6:0a: 98:e0:76:46:de:ca:77:d3:d7:45:bc:72:fc:ee:6c:b7:af:c7: 59:04:da:32:3d:3f:81:2a:2c:24:f3:59:59:c7:7c:5a:80:05: 6d:e4:d0:02:f0:74:90:09:08:11:2f:9c:91:f7:53:b1:e0:45: fc:61:0f:9e:93:80:3f:e7:ec:26:99:e2:2e:65:3f:55:26:9c: 60:8f:ca:c0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBGREU2QjNGRjhCOTZD OEZENTg2MDU1MzZCOTZFODYyRkUyRDBDOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqbpLPYOXJlcMkDR+G7LXxo7Q5KayM8oYhXH7Wmby2x5+wuXzk lZD1LdnkdUFgCFJhmbrACodjyLDKV+jG+tjeAlok9PTm5FMj6d/A6pWiTaQq8V0d bO9v0SoANPY5RF9AeOahNsBJYyXhFJOfOvZemsVbDJm7pmJf2Ib6vaUxT3lr0ckH FBKclACNkQHtINScDN3fiyfMvEL7RoLxEY9PdQ35bz0ipkDSgoGb6Jm25HTQyg9+ r4Jb82OAGaUc17fvGxY0xqtSOH7jGQvuPlL9mrGu8QHmsTF5x7nBULtRJqjnss8U DpCy2GkLTzCIu6QI2Ol0CpUCHMxbq4qU1rFjAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUD95rP/i5bI/VhgVTa5boYv4tDIwwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL0Q5NXJQX2k1YklfVmhnVlRh NWJvWXY0dERJdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 96AwDQYJKoZIhvcNAQELBQADggEBAKD1WYSc5LppovEpibq4b+1M6n8MY8D+SfwB geYLNuUU4fNjRxREv0r3i1rp4HuLCSfLADTojh1A73FlibEl34/9AnhQYcbmuWUC W0ShPD8ILE9O8O2iQA6jbqg9BQETtYQ0lOEZozPgzrXfL4zDXqAq99VMJRuQn0kv eEZUXWr5gkG93p2H16xIH1JpQ2onUkLk+IGqPKZe5jZhRp47yGnUTukZyiI2e5oV ergnrhiqnEfmCpjgdkbeynfT10W8cvzubLevx1kE2jI9P4EqLCTzWVnHfFqABW3k 0ALwdJAJCBEvnJH3U7HgRfxhD56TgD/n7CaZ4i5lP1UmnGCPysA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:57:25 2025 by rpki-client