$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lXHfla8_yXv5slrSPc5TFAO3bPw.roa File: lXHfla8_yXv5slrSPc5TFAO3bPw.roa (raw, json) Hash identifier: pPlsQrYDAVc7R/POm1fLSDYbO5v/DghFong6Qm6wnIM= Subject key identifier: 95:71:DF:95:AF:3F:C9:7B:F9:B2:5A:D2:3D:CE:53:14:03:B7:6C:FC Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E78 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lXHfla8_yXv5slrSPc5TFAO3bPw.roa Signing time: Fri 22 Aug 2025 09:03:18 +0000 ROA not before: Fri 22 Aug 2025 09:03:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 113.21.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3704 (0xe78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9571DF95AF3FC97BF9B25AD23DCE531403B76CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:55:ef:4a:9c:3b:0e:b7:0c:38:78:fa:54: 25:5a:73:80:7a:cc:bc:f7:04:0e:e3:77:de:49:32: c1:88:d7:f8:f1:f7:ab:5b:c5:8f:94:bc:d2:27:c0: 1c:32:d9:f1:25:d3:84:eb:07:40:f3:1c:a0:21:48: 72:84:f4:18:43:c6:a3:89:a2:97:20:93:13:1f:db: 75:a4:e6:8c:b6:e3:97:a9:b4:6d:68:7d:06:52:ee: b0:3b:c1:66:ee:d5:60:67:be:17:bc:53:2f:ec:a7: 5d:20:92:7c:dd:46:bd:39:5d:80:6a:4b:63:2a:76: 6d:1d:12:97:24:14:7d:8b:07:19:d5:73:e3:61:3f: a8:61:3c:82:3d:62:69:b7:3c:3a:ed:a5:af:74:2e: 5f:5e:78:4b:4c:56:e3:aa:44:d3:15:fb:8e:04:ae: 83:9c:39:f6:8f:31:ac:42:26:dc:86:8c:cd:d5:2c: cb:d8:5b:66:db:95:0a:90:a7:4b:e2:28:85:b2:58: 0a:3a:2b:81:db:6d:ba:d0:ee:da:36:aa:71:4e:e0: 75:ca:1e:09:cf:04:0b:d5:a6:d6:74:20:b8:dd:50: d7:d6:f9:51:bb:32:cb:bc:df:22:e9:15:dc:7c:ad: 33:73:7e:c4:54:df:a8:45:a5:3f:c2:a3:16:75:2e: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:71:DF:95:AF:3F:C9:7B:F9:B2:5A:D2:3D:CE:53:14:03:B7:6C:FC X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lXHfla8_yXv5slrSPc5TFAO3bPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.173.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:b4:e4:fd:2b:ee:33:aa:9f:7d:e4:a7:62:88:77:57:ce:30: 5c:bd:3d:13:36:5a:bd:43:d7:b0:e3:dc:ae:74:ae:47:35:d6: 65:c5:0a:e7:8e:7a:01:8b:fa:cf:a1:15:43:62:52:5b:b3:ef: e4:b3:2a:51:1d:df:b2:40:91:da:1d:c1:06:47:59:c6:65:25: 53:b6:40:f1:b8:d0:5d:7e:9c:16:81:10:29:d4:59:29:6f:52: 25:c2:d4:6a:98:93:ed:36:2f:29:55:d1:7b:9c:49:c4:cb:0a: b6:ba:6d:c3:92:2f:70:ba:4d:45:b5:72:58:16:47:ba:1c:fa: c2:5f:a3:57:d9:bb:21:de:90:b6:e5:d4:0e:91:14:cc:20:db: 14:0d:7c:8a:b9:4e:95:da:5f:28:4c:b3:9b:a3:66:31:4d:15: 6d:8a:c0:7a:cc:bf:ae:c2:57:02:25:8c:62:3f:bc:e8:e8:8c: 47:4c:62:1e:28:62:e9:43:73:70:1d:a6:6a:a2:5d:6f:36:2d: 0e:88:3c:de:70:ff:f2:0a:ad:e2:f4:91:97:6b:ef:90:65:94: bf:bb:96:b1:9d:e9:b1:a2:d1:56:dd:c7:e9:2f:ed:b6:8b:54: b6:3c:c8:ab:c7:ae:9d:26:9b:cd:5f:08:20:6b:cb:e9:3e:01: dd:d2:bf:d5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDngwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1NzFERjk1QUYzRkM5 N0JGOUIyNUFEMjNEQ0U1MzE0MDNCNzZDRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCys1XvSpw7DrcMOHj6VCVac4B6zLz3BA7jd95JMsGI1/jx96tb xY+UvNInwBwy2fEl04TrB0DzHKAhSHKE9BhDxqOJopcgkxMf23Wk5oy245eptG1o fQZS7rA7wWbu1WBnvhe8Uy/sp10gknzdRr05XYBqS2Mqdm0dEpckFH2LBxnVc+Nh P6hhPII9Ymm3PDrtpa90Ll9eeEtMVuOqRNMV+44EroOcOfaPMaxCJtyGjM3VLMvY W2bblQqQp0viKIWyWAo6K4HbbbrQ7to2qnFO4HXKHgnPBAvVptZ0ILjdUNfW+VG7 Msu83yLpFdx8rTNzfsRU36hFpT/CoxZ1LsLdAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUlXHfla8/yXv5slrSPc5TFAO3bPwwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2xYSGZsYThfeVh2NXNsclNQ YzVURkFPM2JQdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABx Fa0wDQYJKoZIhvcNAQELBQADggEBAHq05P0r7jOqn33kp2KId1fOMFy9PRM2Wr1D 17Dj3K50rkc11mXFCueOegGL+s+hFUNiUluz7+SzKlEd37JAkdodwQZHWcZlJVO2 QPG40F1+nBaBECnUWSlvUiXC1GqYk+02LylV0XucScTLCra6bcOSL3C6TUW1clgW R7oc+sJfo1fZuyHekLbl1A6RFMwg2xQNfIq5TpXaXyhMs5ujZjFNFW2KwHrMv67C VwIljGI/vOjojEdMYh4oYulDc3AdpmqiXW82LQ6IPN5w//IKreL0kZdr75BllL+7 lrGd6bGi0Vbdx+kv7baLVLY8yKvHrp0mm81fCCBry+k+Ad3Sv9U= -----END CERTIFICATE-----Generated at Wed Nov 5 17:57:23 2025 by rpki-client