$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa File: Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa (raw, json) Hash identifier: JjaxhGDKNMZXk/TKhNWt5kJUpn3zb31YCa4uXdlOF84= Subject key identifier: 62:ED:A4:94:F9:09:9B:88:15:24:9E:A9:ED:31:EE:0D:94:07:83:85 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 145B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa Signing time: Fri 22 Aug 2025 09:00:19 +0000 ROA not before: Fri 22 Aug 2025 09:00:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9311 IP address blocks: 203.79.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5211 (0x145b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=62EDA494F9099B8815249EA9ED31EE0D94078385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:ee:9f:6a:a8:95:60:51:59:86:e3:f9:a6: 1e:d2:a1:2b:80:65:28:66:4e:8a:c0:8f:b3:fd:da: 98:d4:eb:b3:ca:0e:d9:60:2f:c1:5c:22:ab:f2:53: 54:8b:30:df:d3:f9:ac:fb:26:c8:58:08:95:e9:c5: 30:ad:b5:6f:9f:b8:b6:26:cd:76:1a:4a:6e:c6:fe: 8f:fa:88:61:5e:30:10:d4:9f:82:92:50:c7:25:19: 7b:20:f0:57:c9:67:68:59:44:cb:ed:da:ec:11:13: 82:61:f0:e0:11:0c:b3:d3:2d:f0:c6:e2:ed:25:75: c7:e3:47:27:f3:86:b2:8b:fc:48:b5:93:95:dd:8d: 6b:10:f0:aa:51:67:a4:1b:ab:30:dd:f7:d3:70:aa: 6a:8f:af:96:f8:d2:c0:2e:30:10:c5:20:9c:c0:81: 83:33:95:a6:1d:7c:42:81:b9:0d:d5:3b:ac:c3:a2: eb:cf:2c:e8:e5:d8:c0:cc:06:1a:aa:67:bc:db:62: 19:55:7e:9f:b7:08:5c:2b:1b:33:1f:13:25:4d:61: 85:4b:26:1b:f8:78:6b:9a:7d:30:f5:4a:86:df:08: 25:a5:3a:a9:2d:6e:cd:9a:ac:76:71:5b:44:6e:eb: f2:93:f7:5a:86:e3:76:4f:58:2e:7e:ff:1f:f1:01: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:ED:A4:94:F9:09:9B:88:15:24:9E:A9:ED:31:EE:0D:94:07:83:85 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Yu2klPkJm4gVJJ6p7THuDZQHg4U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.235.0/24 Signature Algorithm: sha256WithRSAEncryption 12:42:6a:34:91:0d:34:9c:90:a9:e0:41:55:84:06:03:bd:2a: 22:b9:aa:ec:2f:b3:c0:38:f9:4b:4c:83:97:23:15:0a:54:74: df:c3:54:71:ea:6b:db:5d:f3:af:b4:db:f3:bf:e4:d2:d5:2f: 25:f2:39:25:9c:d5:36:5c:93:fe:9f:27:7c:ca:a6:1c:70:d1: df:d6:4a:cb:6f:38:42:5d:e3:50:c3:31:ac:63:65:c6:65:95: 43:58:0c:dd:9c:c3:a0:5e:d3:50:26:42:d8:10:ca:8c:aa:ef: 26:7c:45:2f:d2:4a:0d:2f:b9:8c:bf:6b:e9:44:34:29:80:8f: 0d:a6:00:96:f3:cc:9e:d6:07:b9:0c:da:52:2e:23:b9:38:33: d5:47:97:6c:23:30:d8:64:b3:80:1f:ec:fd:f9:d0:f7:d1:05: c0:c0:64:44:6f:11:70:59:64:d1:5a:08:47:b1:3d:7c:a5:64: 2d:7c:25:5e:c0:d1:5a:64:78:4e:58:2d:36:a5:9b:d7:f2:fd: 46:39:f4:b2:42:2b:08:21:76:ec:dd:dd:56:34:24:f4:fd:b0: 15:39:05:03:29:86:e2:92:f3:5a:bb:a6:98:45:0b:71:b2:74: b4:6e:46:36:1d:c2:36:97:ab:58:9d:29:54:a1:9b:1a:5c:c0: df:00:f9:91 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYyRURBNDk0RjkwOTlC ODgxNTI0OUVBOUVEMzFFRTBEOTQwNzgzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5yu6faqiVYFFZhuP5ph7SoSuAZShmTorAj7P92pjU67PKDtlg L8FcIqvyU1SLMN/T+az7JshYCJXpxTCttW+fuLYmzXYaSm7G/o/6iGFeMBDUn4KS UMclGXsg8FfJZ2hZRMvt2uwRE4Jh8OARDLPTLfDG4u0ldcfjRyfzhrKL/Ei1k5Xd jWsQ8KpRZ6QbqzDd99NwqmqPr5b40sAuMBDFIJzAgYMzlaYdfEKBuQ3VO6zDouvP LOjl2MDMBhqqZ7zbYhlVfp+3CFwrGzMfEyVNYYVLJhv4eGuafTD1SobfCCWlOqkt bs2arHZxW0Ru6/KT91qG43ZPWC5+/x/xAciLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUYu2klPkJm4gVJJ6p7THuDZQHg4UwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1l1MmtsUGtKbTRnVkpKNnA3VEh1RFpR SGc0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLT+swDQYJ KoZIhvcNAQELBQADggEBABJCajSRDTSckKngQVWEBgO9KiK5quwvs8A4+UtMg5cj FQpUdN/DVHHqa9td86+02/O/5NLVLyXyOSWc1TZck/6fJ3zKphxw0d/WSstvOEJd 41DDMaxjZcZllUNYDN2cw6Be01AmQtgQyoyq7yZ8RS/SSg0vuYy/a+lENCmAjw2m AJbzzJ7WB7kM2lIuI7k4M9VHl2wjMNhks4Af7P350PfRBcDAZERvEXBZZNFaCEex PXylZC18JV7A0VpkeE5YLTalm9fy/UY59LJCKwghduzd3VY0JPT9sBU5BQMphuKS 81q7pphFC3GydLRuRjYdwjaXq1idKVShmxpcwN8A+ZE= -----END CERTIFICATE-----Generated at Sat Sep 6 13:41:58 2025 by rpki-client