$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/-7U4M2fxz5QWvhGTnzYLpmTQuSo.roa File: -7U4M2fxz5QWvhGTnzYLpmTQuSo.roa (raw, json) Hash identifier: 3vYDspRZsnx6F1t7RW12PxC5jtfjhwZ8Zvq/dha8vmM= Subject key identifier: FB:B5:38:33:67:F1:CF:94:16:BE:11:93:9F:36:0B:A6:64:D0:B9:2A Certificate issuer: /CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C Certificate serial: 01AD Authority key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/-7U4M2fxz5QWvhGTnzYLpmTQuSo.roa Signing time: Fri 22 Aug 2025 09:03:41 +0000 ROA not before: Fri 22 Aug 2025 09:03:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63898 IP address blocks: 103.158.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C Validity Not Before: Aug 22 09:03:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=FBB5383367F1CF9416BE11939F360BA664D0B92A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:2d:a8:66:57:fe:a4:0b:08:b7:ca:ac:17: b4:61:68:c3:03:24:8c:92:8f:61:dd:ff:45:7e:2b: 86:72:7b:af:69:0a:bf:55:61:ac:42:00:db:fb:13: ef:a2:d2:7b:44:93:f8:1b:e5:41:a2:74:41:01:50: 57:94:0f:92:2d:f1:05:36:c7:32:43:a6:e1:04:61: f7:d0:a0:3f:64:2f:fe:0d:a3:a4:90:21:4a:68:c0: 1d:3b:3a:dc:7e:c1:5d:d9:97:63:f7:51:53:c4:38: 99:50:91:f9:b7:03:29:44:fd:7f:2b:80:7e:2e:27: 31:d1:93:b3:3e:1b:e0:f6:a1:c5:6a:05:63:5c:22: 50:c5:5d:88:16:d1:03:c6:c9:06:f6:50:a7:d0:a8: 77:33:1c:cd:89:36:f7:fc:87:f3:40:fc:89:3c:f9: 27:24:a0:6d:56:b0:21:ca:54:a1:25:9e:f6:0a:8b: 07:7e:8e:68:0c:df:17:a3:b9:50:5c:a0:d8:11:3e: 72:74:0f:d6:65:49:26:30:ec:dd:88:bc:e7:ce:06: a3:2d:36:1a:e7:e1:90:a0:6e:76:87:1c:3a:d6:e8: 69:7c:b5:8c:50:d9:a2:84:51:d3:cd:1a:78:7a:45: ec:90:87:87:ae:e9:00:83:47:18:47:30:49:d2:47: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:38:33:67:F1:CF:94:16:BE:11:93:9F:36:0B:A6:64:D0:B9:2A X509v3 Authority Key Identifier: keyid:B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/-7U4M2fxz5QWvhGTnzYLpmTQuSo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.158.78.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:d3:be:4d:0e:0a:9f:0e:12:d0:19:2c:0c:5f:9d:a4:c9:f1: e1:71:d6:fe:f4:88:93:34:fa:e9:23:e8:5f:fd:1b:66:5f:3d: ac:14:a7:9f:b3:37:c0:cc:b1:c5:db:a2:ff:29:55:7d:2e:aa: 50:01:b5:e8:21:d1:e7:6a:8d:54:92:1e:d5:0d:6d:38:77:d1: da:bc:ff:94:da:22:31:28:e6:f8:2e:b5:3f:06:50:71:d9:ce: 5b:b0:e9:a3:e0:03:d0:b5:cd:fd:81:fc:d0:ab:87:d9:78:8e: e7:30:72:0f:38:d1:a7:d2:d5:81:09:ba:9c:e4:50:93:9b:dc: d9:ea:c5:ac:42:0d:13:ec:ce:23:e7:32:e4:ae:2e:12:a8:14: 78:83:ec:bd:67:dc:b1:15:51:8e:b6:77:df:eb:c2:9c:33:1e: 7c:00:b9:84:22:d3:f0:e7:38:ca:85:3c:47:54:05:20:e3:5f: 81:66:a3:3d:52:96:9e:08:ba:7f:cc:99:3d:09:69:3a:c3:d4: 67:7f:cb:5b:95:9c:15:a7:95:88:37:e7:9c:4a:c3:e6:84:56: a8:e0:a9:2d:cf:e9:9c:f3:b0:9e:c3:0e:ab:03:84:b9:21:06: 25:81:7f:7a:ad:4e:ef:13:ce:35:6b:ee:db:8c:bd:f3:37:d6: 1b:be:5a:3a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjMy OURBOTI2OEZDRkQ1NEQ5RjM4QTAxRUQwQ0Y3MDkyQkI2OTAwQzAeFw0yNTA4MjIw OTAzNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZCQjUzODMzNjdGMUNG OTQxNkJFMTE5MzlGMzYwQkE2NjREMEI5MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfcS2oZlf+pAsIt8qsF7RhaMMDJIySj2Hd/0V+K4Zye69pCr9V YaxCANv7E++i0ntEk/gb5UGidEEBUFeUD5It8QU2xzJDpuEEYffQoD9kL/4No6SQ IUpowB07Otx+wV3Zl2P3UVPEOJlQkfm3AylE/X8rgH4uJzHRk7M+G+D2ocVqBWNc IlDFXYgW0QPGyQb2UKfQqHczHM2JNvf8h/NA/Ik8+SckoG1WsCHKVKElnvYKiwd+ jmgM3xejuVBcoNgRPnJ0D9ZlSSYw7N2IvOfOBqMtNhrn4ZCgbnaHHDrW6Gl8tYxQ 2aKEUdPNGnh6ReyQh4eu6QCDRxhHMEnSR82dAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU+7U4M2fxz5QWvhGTnzYLpmTQuSowHwYDVR0jBBgwFoAUsynakmj8/VTZ84oB 7Qz3CSu2kAwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTQ1lC RVIvc3luYWttajhfVlRaODRvQjdRejNDU3Uya0F3LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9zeW5ha21qOF9WVFo4NG9CN1F6M0NTdTJrQXcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OU1NDWUJFUi8tN1U0TTJmeHo1UVd2 aEdUbnpZTHBtVFF1U28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ55OMA0GCSqGSIb3DQEBCwUAA4IBAQAd075NDgqfDhLQGSwMX52kyfHhcdb+ 9IiTNPrpI+hf/RtmXz2sFKefszfAzLHF26L/KVV9LqpQAbXoIdHnao1Ukh7VDW04 d9HavP+U2iIxKOb4LrU/BlBx2c5bsOmj4APQtc39gfzQq4fZeI7nMHIPONGn0tWB Cbqc5FCTm9zZ6sWsQg0T7M4j5zLkri4SqBR4g+y9Z9yxFVGOtnff68KcMx58ALmE ItPw5zjKhTxHVAUg41+BZqM9UpaeCLp/zJk9CWk6w9Rnf8tblZwVp5WIN+ecSsPm hFao4Kktz+mc87Ceww6rA4S5IQYlgX96rU7vE841a+7bjL3zN9Ybvlo6 -----END CERTIFICATE-----Generated at Thu Sep 18 00:53:27 2025 by rpki-client