$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TjYEur3CAERf7tLr_Z0l1MJhvVo.roa File: TjYEur3CAERf7tLr_Z0l1MJhvVo.roa (raw, json) Hash identifier: mH23Newr0XkDwl+aD99ks7Pp0P+sAVEFQh/7+94ENSY= Subject key identifier: 4E:36:04:BA:BD:C2:00:44:5F:EE:D2:EB:FD:9D:25:D4:C2:61:BD:5A Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0E60 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TjYEur3CAERf7tLr_Z0l1MJhvVo.roa Signing time: Fri 22 Aug 2025 08:56:27 +0000 ROA not before: Fri 22 Aug 2025 08:56:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 103.234.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3680 (0xe60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 22 08:56:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4E3604BABDC200445FEED2EBFD9D25D4C261BD5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:d0:bf:f9:26:b4:77:30:37:a2:33:bf:04: ee:35:02:79:3a:85:32:f8:02:59:fa:9a:60:9d:6b: 05:31:9e:5c:e4:b7:12:0a:5d:49:5d:b7:a8:9f:bf: cd:a1:e8:26:45:58:3f:3e:6a:e1:e8:93:ae:56:d8: a8:01:a1:c4:2b:7f:32:8a:14:d9:18:03:83:bf:cc: a8:ed:d4:38:16:2d:84:61:bc:6b:9f:7e:cd:9e:9b: df:cc:5c:98:99:2d:91:a8:a1:f5:1d:bb:77:2e:ad: 5c:ad:1e:96:f0:01:cf:9a:ad:ae:e2:d7:50:96:8a: 50:ee:03:cc:df:d0:75:d4:73:25:78:8e:a2:e7:cb: a7:2c:96:ac:04:33:f3:84:d6:18:d3:cd:f5:07:67: 31:c5:02:92:bd:71:f2:ef:4e:b0:94:43:1b:f9:97: 7f:3e:2e:25:20:d3:10:eb:a8:ce:28:5d:ff:f9:9b: 93:34:32:b4:1b:0f:b3:5b:2d:5b:58:98:e7:9f:7d: de:3d:76:bc:a1:00:60:55:b6:da:b1:a9:4b:81:dd: 68:bd:77:53:cc:c2:19:a5:49:03:98:55:91:b0:0c: d2:dd:7e:47:45:6c:61:7f:85:90:28:56:ca:30:bd: 22:7e:0b:b5:7b:32:45:78:87:7d:ef:6e:ac:f9:d8: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:36:04:BA:BD:C2:00:44:5F:EE:D2:EB:FD:9D:25:D4:C2:61:BD:5A X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TjYEur3CAERf7tLr_Z0l1MJhvVo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.204.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:69:47:84:06:58:59:ab:5d:f3:a0:2a:0e:f4:77:7d:4a:60: fe:59:73:32:b4:df:ac:8b:db:d2:21:d5:e5:5f:01:de:72:68: a6:0c:56:73:c8:3b:21:fd:87:c0:27:75:cd:bd:1c:5e:02:51: 47:60:4c:89:29:40:58:70:c4:df:58:e0:2e:6c:f4:6f:12:30: 97:bc:40:2e:c7:f2:55:59:92:ae:eb:b1:38:14:8f:7f:69:ed: 0d:1f:85:26:10:b8:d0:b4:d1:32:0a:8b:30:9a:d5:e1:a6:4c: b9:0e:fc:b2:f6:f7:2c:e3:29:ab:c8:2e:ce:5f:6d:ef:cf:a6: 71:22:89:49:a4:58:03:56:9a:d5:69:c8:27:1a:d3:32:22:e5: ee:30:87:d4:1c:a0:c4:f0:fa:f3:87:9d:e7:27:c9:c4:5d:a0: 39:9d:88:6b:08:46:d0:15:a8:52:9a:3e:8d:5e:5b:a5:a7:d0: 42:98:f2:fd:b0:f5:a6:56:71:9b:0e:63:2a:07:1a:da:c6:17: 70:ef:04:f2:7b:3d:69:d3:25:32:d0:a7:47:66:1b:d9:9a:6d: 69:3f:8c:7b:10:68:c3:81:be:04:30:9b:88:de:0a:74:45:52: 1c:40:ab:6a:92:a3:3d:1d:94:4e:04:bd:ff:4a:ab:59:2d:d5: be:a6:77:c8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw ODU2MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRFMzYwNEJBQkRDMjAw NDQ1RkVFRDJFQkZEOUQyNUQ0QzI2MUJENUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9KtC/+Sa0dzA3ojO/BO41Ank6hTL4Aln6mmCdawUxnlzktxIK XUldt6ifv82h6CZFWD8+auHok65W2KgBocQrfzKKFNkYA4O/zKjt1DgWLYRhvGuf fs2em9/MXJiZLZGoofUdu3curVytHpbwAc+ara7i11CWilDuA8zf0HXUcyV4jqLn y6cslqwEM/OE1hjTzfUHZzHFApK9cfLvTrCUQxv5l38+LiUg0xDrqM4oXf/5m5M0 MrQbD7NbLVtYmOeffd49dryhAGBVttqxqUuB3Wi9d1PMwhmlSQOYVZGwDNLdfkdF bGF/hZAoVsowvSJ+C7V7MkV4h33vbqz52NbdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUTjYEur3CAERf7tLr/Z0l1MJhvVowHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9UallFdXIzQ0FFUmY3dExyX1ow bDFNSmh2Vm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+rM MA0GCSqGSIb3DQEBCwUAA4IBAQAbaUeEBlhZq13zoCoO9Hd9SmD+WXMytN+si9vS IdXlXwHecmimDFZzyDsh/YfAJ3XNvRxeAlFHYEyJKUBYcMTfWOAubPRvEjCXvEAu x/JVWZKu67E4FI9/ae0NH4UmELjQtNEyCoswmtXhpky5Dvyy9vcs4ymryC7OX23v z6ZxIolJpFgDVprVacgnGtMyIuXuMIfUHKDE8Przh53nJ8nEXaA5nYhrCEbQFahS mj6NXlulp9BCmPL9sPWmVnGbDmMqBxraxhdw7wTyez1p0yUy0KdHZhvZmm1pP4x7 EGjDgb4EMJuI3gp0RVIcQKtqkqM9HZROBL3/SqtZLdW+pnfI -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:57 2025 by rpki-client