$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/DGCHCLoOOygF2ADsms7jOh3Egr0.roa File: DGCHCLoOOygF2ADsms7jOh3Egr0.roa (raw, json) Hash identifier: CnEKmku8KZ6SkB2EVKr5ZqB58e6c9EHII9iHP2BKdFM= Subject key identifier: 0C:60:87:08:BA:0E:3B:28:05:D8:00:EC:9A:CE:E3:3A:1D:C4:82:BD Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0FD6 Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/DGCHCLoOOygF2ADsms7jOh3Egr0.roa Signing time: Fri 22 Aug 2025 08:56:16 +0000 ROA not before: Fri 22 Aug 2025 08:56:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63897 IP address blocks: 103.135.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4054 (0xfd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Aug 22 08:56:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0C608708BA0E3B2805D800EC9ACEE33A1DC482BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:0d:e4:d1:ae:41:68:a0:e5:2c:b5:ca:25: 2b:4f:e8:df:b1:62:b8:95:4f:24:50:37:7d:bd:4b: 05:a3:24:5a:8b:1d:3b:15:9a:79:ee:34:fc:09:e8: 26:80:46:4c:06:2e:63:d0:c5:ac:53:51:ae:74:a5: bf:48:3b:e3:f8:3b:10:b1:ec:0c:46:e2:ab:f4:97: c4:60:f7:8e:c8:23:bc:87:41:67:27:e5:67:91:41: 62:32:1f:30:d7:7e:61:68:f4:99:6d:08:4c:28:17: d0:ca:2d:94:df:d9:42:b3:9a:ed:f8:c1:b4:05:de: a5:b5:b6:b8:3c:64:a4:90:51:5f:96:4f:7b:f8:11: 81:bd:cc:6b:1b:6c:5f:73:98:63:a2:0b:dc:75:3b: f4:ed:3c:0c:38:34:57:b8:4a:0b:b3:53:f3:29:d4: d2:b4:b8:2b:bd:3f:9c:50:55:07:35:99:de:30:35: 63:6a:5d:36:4e:7d:01:42:82:a5:db:8c:77:9b:65: 01:79:43:26:b5:03:76:a3:59:8b:ba:c7:0c:c9:3c: e0:c7:e9:9a:b0:d5:cf:e7:0d:e7:a8:22:56:59:7a: 4f:23:8f:10:37:91:54:55:10:e7:d9:2e:ea:39:e1: 3b:55:3a:5a:9d:43:05:f8:1b:93:0b:aa:e2:47:4f: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:60:87:08:BA:0E:3B:28:05:D8:00:EC:9A:CE:E3:3A:1D:C4:82:BD X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/DGCHCLoOOygF2ADsms7jOh3Egr0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.23.0/24 Signature Algorithm: sha256WithRSAEncryption 76:ab:bf:e6:f2:97:9c:70:63:eb:8a:d5:f1:d2:5f:94:ec:ce: fe:75:9a:60:c1:bf:e7:0a:7f:f9:15:38:89:2c:1e:d0:1f:43: cf:1e:a4:8e:28:6e:f6:38:0f:1e:40:a4:90:8e:07:35:1d:b6: 6d:7e:66:a4:e7:5b:3d:f0:dc:1b:c4:5e:f1:b4:9c:56:59:88: 3c:64:49:a9:c2:65:97:91:f8:6f:65:ae:b7:37:6e:b3:7b:f1: b6:6e:80:78:d7:27:d2:94:b5:0f:c3:dd:ad:d9:b6:2f:92:3d: 10:8e:36:54:88:61:d6:b2:3c:77:63:5b:50:2f:d8:98:ac:e2: b2:83:82:a7:c7:69:5e:d5:2b:7b:62:61:a2:87:52:c1:66:57: d5:42:0a:21:36:9e:d9:8a:66:e5:3e:b0:c2:7e:4f:b0:a1:f5: 56:04:83:a1:3a:4d:fc:af:cf:8b:16:24:34:f0:52:ff:39:17: 7e:74:b2:b0:77:67:a5:48:b2:95:7c:c6:d9:e9:41:c7:e3:c5: 0a:79:72:89:65:e3:e6:e1:30:93:d0:ca:3d:10:46:c5:31:ed: 26:b1:44:35:1f:a5:80:9f:60:42:25:26:ad:18:2e:53:9c:d2: e4:6f:30:31:2f:d6:63:8c:3b:10:62:f8:cd:39:a7:07:17:9d: c7:81:df:88 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICD9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTA4MjIw ODU2MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBDNjA4NzA4QkEwRTNC MjgwNUQ4MDBFQzlBQ0VFMzNBMURDNDgyQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgBg3k0a5BaKDlLLXKJStP6N+xYriVTyRQN329SwWjJFqLHTsV mnnuNPwJ6CaARkwGLmPQxaxTUa50pb9IO+P4OxCx7AxG4qv0l8Rg947II7yHQWcn 5WeRQWIyHzDXfmFo9JltCEwoF9DKLZTf2UKzmu34wbQF3qW1trg8ZKSQUV+WT3v4 EYG9zGsbbF9zmGOiC9x1O/TtPAw4NFe4SguzU/Mp1NK0uCu9P5xQVQc1md4wNWNq XTZOfQFCgqXbjHebZQF5Qya1A3ajWYu6xwzJPODH6Zqw1c/nDeeoIlZZek8jjxA3 kVRVEOfZLuo54TtVOlqdQwX4G5MLquJHT0CzAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUDGCHCLoOOygF2ADsms7jOh3Egr0wHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vREdDSENMb09P eWdGMkFEc21zN2pPaDNFZ3IwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGeHFzANBgkqhkiG9w0BAQsFAAOCAQEAdqu/5vKXnHBj64rV8dJflOzO /nWaYMG/5wp/+RU4iSwe0B9Dzx6kjihu9jgPHkCkkI4HNR22bX5mpOdbPfDcG8Re 8bScVlmIPGRJqcJll5H4b2Wutzdus3vxtm6AeNcn0pS1D8Pdrdm2L5I9EI42VIhh 1rI8d2NbUC/YmKzisoOCp8dpXtUre2JhoodSwWZX1UIKITae2Ypm5T6wwn5PsKH1 VgSDoTpN/K/PixYkNPBS/zkXfnSysHdnpUiylXzG2elBx+PFCnlyiWXj5uEwk9DK PRBGxTHtJrFENR+lgJ9gQiUmrRguU5zS5G8wMS/WY4w7EGL4zTmnBxedx4HfiA== -----END CERTIFICATE-----Generated at Mon Sep 8 10:36:48 2025 by rpki-client