$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/_1MGSDDTIi7CHPlvLWFr-g-Ap0Q.roa File: _1MGSDDTIi7CHPlvLWFr-g-Ap0Q.roa (raw, json) Hash identifier: SAbSpgbuZlLEmDI1YoyecWf5B8E6w7BxzFFNJG1IJ0M= Subject key identifier: FF:53:06:48:30:D3:22:2E:C2:1C:F9:6F:2D:61:6B:FA:0F:80:A7:44 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E85 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/_1MGSDDTIi7CHPlvLWFr-g-Ap0Q.roa Signing time: Fri 22 Aug 2025 09:03:21 +0000 ROA not before: Fri 22 Aug 2025 09:03:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 61.56.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3717 (0xe85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FF53064830D3222EC21CF96F2D616BFA0F80A744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:69:d3:e3:7c:24:c1:e7:5b:ef:9a:bb:29: 4f:47:11:bf:65:e1:77:ae:37:bf:13:0e:c5:0a:28: 81:1b:59:31:72:e9:2f:3e:7d:03:1b:64:d4:7c:7a: ac:6e:4f:b0:93:51:ba:77:0b:5a:43:84:cf:99:2a: 9b:71:9c:73:9b:e7:94:bf:1b:1c:d0:d8:a2:e4:16: 45:9f:b6:50:ad:f7:a6:ee:be:cf:8b:b8:ab:3c:ce: 29:55:b0:17:02:be:e8:b9:c2:8c:25:57:0f:b6:18: e6:d2:72:50:ad:b9:74:c2:43:45:d5:90:8c:49:ab: c1:5d:03:04:31:98:9a:0d:45:46:33:56:d0:18:1b: 4f:92:17:b7:89:f1:09:ff:d6:25:65:da:ed:2c:f8: 26:e7:a9:d5:73:93:a9:c2:69:78:f2:0f:74:6c:a7: 6f:26:d3:b7:38:92:ee:00:8a:d6:00:20:47:47:1c: 66:ad:b0:8b:af:c8:7c:c1:4c:30:e3:3b:3c:e7:0e: b6:c1:27:1a:0e:ad:4e:b7:55:e7:5b:11:8d:44:d0: 5f:27:d3:fb:e6:4f:79:f5:a4:0f:cb:30:a2:f7:d9: ea:cf:94:a3:ef:9f:04:58:a1:4c:7c:c3:66:fb:4f: c3:2c:c0:c6:10:4f:a5:14:b8:22:1e:d5:11:69:5f: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:53:06:48:30:D3:22:2E:C2:1C:F9:6F:2D:61:6B:FA:0F:80:A7:44 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/_1MGSDDTIi7CHPlvLWFr-g-Ap0Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.86.0/24 Signature Algorithm: sha256WithRSAEncryption bd:f6:a6:48:ee:1f:03:ac:91:46:e2:94:b3:be:f9:fa:a1:cf: cc:50:5c:c3:32:91:8d:7b:40:c3:39:33:d9:a6:9a:2b:da:2c: 5f:99:9b:88:8d:e8:36:2d:73:c9:c8:d9:1e:b1:1a:c8:3b:e5: df:19:e9:e1:87:3f:fe:26:09:3f:08:5e:14:3b:d3:0e:11:f9: 0b:4c:b0:19:1d:2d:0d:cb:eb:43:0e:20:5c:f4:e5:02:88:3a: 8c:3a:d8:01:50:7e:d2:2b:f0:53:a3:0a:39:3c:55:ee:ef:6b: ee:5a:e5:51:21:01:52:c1:94:e7:59:35:ae:66:ef:ca:4c:a6: ea:21:4b:0b:39:10:b8:12:6c:5d:ae:33:e8:4a:a4:0b:76:d7: 61:8b:d2:4f:fe:d4:86:5e:ee:2b:3f:17:f7:ed:61:84:95:9f: 01:9b:20:28:64:85:21:b9:47:54:dc:0b:35:0a:df:af:c4:a9: df:e5:c2:3d:27:1e:58:dd:4d:65:41:91:1d:b9:0a:60:59:fe: 04:21:db:b5:8b:9b:52:ed:39:14:e5:13:99:5b:d8:79:2a:c6: d9:97:88:91:1b:51:19:0d:96:e8:9a:0c:b2:ef:9b:97:cd:1a: d0:46:a4:a7:92:5f:00:6a:1c:98:5c:9e:ba:fe:4d:97:48:bb: 17:98:84:91 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDoUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZGNTMwNjQ4MzBEMzIy MkVDMjFDRjk2RjJENjE2QkZBMEY4MEE3NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC40WnT43wkwedb75q7KU9HEb9l4XeuN78TDsUKKIEbWTFy6S8+ fQMbZNR8eqxuT7CTUbp3C1pDhM+ZKptxnHOb55S/GxzQ2KLkFkWftlCt96buvs+L uKs8zilVsBcCvui5wowlVw+2GObSclCtuXTCQ0XVkIxJq8FdAwQxmJoNRUYzVtAY G0+SF7eJ8Qn/1iVl2u0s+CbnqdVzk6nCaXjyD3Rsp28m07c4ku4AitYAIEdHHGat sIuvyHzBTDDjOzznDrbBJxoOrU63VedbEY1E0F8n0/vmT3n1pA/LMKL32erPlKPv nwRYoUx8w2b7T8MswMYQT6UUuCIe1RFpXwwvAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/1MGSDDTIi7CHPlvLWFr+g+Ap0QwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL18xTUdTRERUSWk3Q0hQbHZM V0ZyLWctQXAwUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 OFYwDQYJKoZIhvcNAQELBQADggEBAL32pkjuHwOskUbilLO++fqhz8xQXMMykY17 QMM5M9mmmivaLF+Zm4iN6DYtc8nI2R6xGsg75d8Z6eGHP/4mCT8IXhQ70w4R+QtM sBkdLQ3L60MOIFz05QKIOow62AFQftIr8FOjCjk8Ve7va+5a5VEhAVLBlOdZNa5m 78pMpuohSws5ELgSbF2uM+hKpAt212GL0k/+1IZe7is/F/ftYYSVnwGbIChkhSG5 R1TcCzUK36/Eqd/lwj0nHljdTWVBkR25CmBZ/gQh27WLm1LtORTlE5lb2HkqxtmX iJEbURkNluiaDLLvm5fNGtBGpKeSXwBqHJhcnrr+TZdIuxeYhJE= -----END CERTIFICATE-----Generated at Wed Nov 5 17:58:09 2025 by rpki-client