$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/iPoo0ktszpmhyLPzkQOFIIZjAic.roa File: iPoo0ktszpmhyLPzkQOFIIZjAic.roa (raw, json) Hash identifier: pvkh0DEez03l71f2+mRTXwaKSeZgV1EuEJ9H2z8Muk8= Subject key identifier: 88:FA:28:D2:4B:6C:CE:99:A1:C8:B3:F3:91:03:85:20:86:63:02:27 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E7D Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/iPoo0ktszpmhyLPzkQOFIIZjAic.roa Signing time: Fri 22 Aug 2025 09:03:19 +0000 ROA not before: Fri 22 Aug 2025 09:03:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 61.56.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3709 (0xe7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=88FA28D24B6CCE99A1C8B3F39103852086630227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:b7:72:3d:10:55:cf:45:a9:55:25:48:8d: a9:39:3f:dd:d8:bd:fc:6d:50:b1:bb:70:f0:8a:13: 1f:69:57:86:74:62:f8:f8:76:7d:e2:9e:f8:e3:58: e2:b6:c3:f3:e4:24:6d:69:1d:45:14:8d:1f:95:5b: 0a:ca:35:6d:7f:4e:20:75:97:8d:ee:5f:50:86:08: c3:3c:4d:7f:87:58:45:6d:ff:9b:cf:c6:c3:e2:87: 77:a9:fc:09:b4:84:a0:dd:f2:dc:88:59:4e:ef:7e: f1:56:90:d6:ec:5a:50:4a:4a:b2:45:a2:fe:21:95: bc:d0:64:c9:37:ee:ca:39:88:31:46:48:0a:81:4a: c8:26:8f:e2:28:3e:9a:a5:3e:b1:00:92:12:59:59: be:fc:60:f4:a7:b9:9b:66:a3:86:19:6c:87:9a:0b: 4c:2d:fd:f6:d9:2f:65:1a:16:3c:6b:68:dd:1c:69: ad:c4:b5:82:02:bc:b0:61:78:bf:a7:21:75:45:37: 4c:41:43:4e:13:1a:34:00:93:bd:61:1d:56:9f:26: 6b:7b:74:04:60:38:47:7d:07:b1:79:35:a3:41:be: e9:a6:4d:01:b2:e3:fd:82:7a:90:44:9c:9f:5d:95: cb:c5:5c:06:32:4d:cc:de:69:79:a5:9f:76:e6:cd: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FA:28:D2:4B:6C:CE:99:A1:C8:B3:F3:91:03:85:20:86:63:02:27 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/iPoo0ktszpmhyLPzkQOFIIZjAic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.64.0/20 Signature Algorithm: sha256WithRSAEncryption 03:58:b4:7c:63:bc:f6:57:b9:bb:02:c7:f3:ac:df:4c:77:5e: 31:c8:cb:61:03:20:be:f1:73:81:ed:b6:be:94:5a:20:97:ef: 72:e8:f5:02:79:cb:23:ef:28:65:14:32:14:55:f6:ab:1d:8a: 96:a9:7d:3a:1a:0f:9d:0d:c5:3d:41:8a:ce:9a:8b:c2:13:ac: 98:73:78:53:76:70:6f:45:f6:35:f2:42:a6:81:3d:28:d3:18: b0:52:0b:fe:62:a8:36:d8:9f:6f:9b:b6:05:db:e2:24:23:ad: ec:74:a9:b6:e2:3f:56:e3:33:ca:39:5e:e4:89:4b:26:dd:a4: e1:f0:f3:bb:11:c3:15:18:fa:36:10:f7:ea:e5:d2:88:6a:46: 30:43:14:81:84:15:5f:04:93:ce:66:af:9c:3d:0e:b6:2f:c5: 22:eb:39:72:71:ca:9f:b2:40:0b:aa:d6:a6:a1:0a:a4:91:84: 82:53:7f:7d:38:ba:93:db:e2:05:9f:0f:be:5b:78:97:5e:b4: b4:fc:6c:d7:22:ef:0a:9e:9e:0f:4c:bc:e0:fc:0a:69:9e:42: 0f:e7:72:9e:95:80:3b:66:82:8c:68:91:e8:cf:8a:c9:04:b5: 44:ac:45:d2:91:8c:7f:03:ed:da:5a:0e:18:54:a7:4d:bc:eb: b7:12:af:4c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4RkEyOEQyNEI2Q0NF OTlBMUM4QjNGMzkxMDM4NTIwODY2MzAyMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3FLdyPRBVz0WpVSVIjak5P93YvfxtULG7cPCKEx9pV4Z0Yvj4 dn3invjjWOK2w/PkJG1pHUUUjR+VWwrKNW1/TiB1l43uX1CGCMM8TX+HWEVt/5vP xsPih3ep/Am0hKDd8tyIWU7vfvFWkNbsWlBKSrJFov4hlbzQZMk37so5iDFGSAqB Ssgmj+IoPpqlPrEAkhJZWb78YPSnuZtmo4YZbIeaC0wt/fbZL2UaFjxraN0caa3E tYICvLBheL+nIXVFN0xBQ04TGjQAk71hHVafJmt7dARgOEd9B7F5NaNBvummTQGy 4/2CepBEnJ9dlcvFXAYyTczeaXmln3bmzYmPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiPoo0ktszpmhyLPzkQOFIIZjAicwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2lQb28wa3RzenBtaHlMUHpr UU9GSUlaakFpYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OEAwDQYJKoZIhvcNAQELBQADggEBAANYtHxjvPZXubsCx/Os30x3XjHIy2EDIL7x c4Httr6UWiCX73Lo9QJ5yyPvKGUUMhRV9qsdipapfToaD50NxT1Bis6ai8ITrJhz eFN2cG9F9jXyQqaBPSjTGLBSC/5iqDbYn2+btgXb4iQjrex0qbbiP1bjM8o5XuSJ SybdpOHw87sRwxUY+jYQ9+rl0ohqRjBDFIGEFV8Ek85mr5w9DrYvxSLrOXJxyp+y QAuq1qahCqSRhIJTf304upPb4gWfD75beJdetLT8bNci7wqeng9MvOD8CmmeQg/n cp6VgDtmgoxokejPiskEtUSsRdKRjH8D7dpaDhhUp02867cSr0w= -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:26 2025 by rpki-client