$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/YQC29HfWE-aGDqVADjU2a3t15k4.roa File: YQC29HfWE-aGDqVADjU2a3t15k4.roa (raw, json) Hash identifier: 0Lch1heOBUZb3GWRcx+BzAkOQC5taYNtXAuOtTm7rYk= Subject key identifier: 61:00:B6:F4:77:D6:13:E6:86:0E:A5:40:0E:35:36:6B:7B:75:E6:4E Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 0552 Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/YQC29HfWE-aGDqVADjU2a3t15k4.roa Signing time: Fri 22 Aug 2025 08:49:40 +0000 ROA not before: Fri 22 Aug 2025 08:49:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 16509 IP address blocks: 160.25.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Aug 22 08:49:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6100B6F477D613E6860EA5400E35366B7B75E64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:26:30:ea:41:e3:ee:e1:5a:8d:7a:08:88: 1a:0d:2a:75:9b:81:e7:b2:07:b5:08:56:2d:52:13: ab:36:18:1d:7b:31:ab:18:53:d1:30:92:f4:32:71: 34:3d:a5:ad:8f:f5:59:c9:d2:16:54:7c:2a:4f:8d: cc:8d:82:b2:23:c3:88:df:f7:4c:40:22:3d:ca:ce: 3c:56:04:e3:bd:0b:25:ef:69:60:d4:c2:01:e8:f8: 8d:70:8c:28:bb:2a:aa:94:78:50:0c:3c:92:75:28: 33:e0:cd:88:d6:f4:a3:19:dd:38:8a:60:e1:dd:15: a5:1c:2f:99:2f:a1:51:79:ab:cf:3f:31:c0:55:a7: 10:48:9d:31:61:57:cf:4b:ac:df:d5:d6:9c:0d:cc: ee:ea:78:c9:45:c4:df:56:88:b1:e5:99:7b:7c:b3: 09:90:2a:56:7f:6c:34:3d:6b:e6:e5:3d:8e:54:e4: cb:8c:12:8d:e1:bc:e3:18:6a:de:3b:01:36:5d:90: 1d:7e:e3:fe:b7:6e:d2:db:40:db:f7:d3:14:37:ce: 91:b2:dc:65:e6:5e:36:ee:4f:e7:d2:12:5e:16:6e: ad:4c:64:29:f4:12:28:c8:11:79:ee:2c:75:ab:ef: 3a:a8:ce:15:49:58:fc:c7:4f:96:f0:87:14:8e:c3: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:00:B6:F4:77:D6:13:E6:86:0E:A5:40:0E:35:36:6B:7B:75:E6:4E X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/YQC29HfWE-aGDqVADjU2a3t15k4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.220.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:3c:c4:1c:5a:6d:6e:88:85:98:ea:47:61:17:35:13:a8:7f: fc:20:cf:e0:d3:29:ee:04:d9:a4:49:8a:80:98:a4:62:4c:f3: 23:c4:bb:0f:4b:b0:7a:9d:f1:3f:cf:e7:7b:30:33:30:3d:d6: 28:3e:52:f4:88:fd:bb:60:69:65:51:44:08:05:e4:ca:df:ed: 12:1b:a3:bc:13:74:09:1b:0b:1f:1e:cc:82:44:8b:ed:51:f0: 14:cd:1f:dd:3f:66:bd:fb:52:18:17:c4:df:2a:e8:a7:17:58: e6:3d:a5:22:f4:ff:8a:3b:9f:8a:01:ca:70:20:fa:19:a4:a1: 1e:5c:43:36:28:34:e6:96:a9:22:90:93:b9:73:71:10:ef:af: d2:09:f9:9e:ea:4a:6d:e3:13:a1:fe:fb:bf:40:43:70:1f:44: ad:62:23:6a:22:ef:0a:d7:0e:ac:7f:2f:af:1d:1c:c9:73:13: 05:16:55:82:4f:83:3a:ca:b8:97:f3:f2:65:2a:54:32:de:f8: 18:fa:64:38:76:32:af:09:ee:87:37:2d:1b:0e:e6:d0:28:80: c1:9a:d7:27:76:d6:c5:cb:a0:15:ce:02:b3:99:67:25:17:8a: e8:d5:9e:f0:7d:c0:30:13:d6:cf:5e:22:20:51:fc:30:87:95: c8:d7:cf:d0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDIy RTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVEMDAeFw0yNTA4MjIw ODQ5NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYxMDBCNkY0NzdENjEz RTY4NjBFQTU0MDBFMzUzNjZCN0I3NUU2NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyuyYw6kHj7uFajXoIiBoNKnWbgeeyB7UIVi1SE6s2GB17MasY U9EwkvQycTQ9pa2P9VnJ0hZUfCpPjcyNgrIjw4jf90xAIj3KzjxWBOO9CyXvaWDU wgHo+I1wjCi7KqqUeFAMPJJ1KDPgzYjW9KMZ3TiKYOHdFaUcL5kvoVF5q88/McBV pxBInTFhV89LrN/V1pwNzO7qeMlFxN9WiLHlmXt8swmQKlZ/bDQ9a+blPY5U5MuM Eo3hvOMYat47ATZdkB1+4/63btLbQNv30xQ3zpGy3GXmXjbuT+fSEl4Wbq1MZCn0 EijIEXnuLHWr7zqozhVJWPzHT5bwhxSOw6uHAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUYQC29HfWE+aGDqVADjU2a3t15k4wHwYDVR0jBBgwFoAUQi58ldh96a7rISoM TMsBdOZcpdAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9ZUUMyOUhmV0UtYUdE cVZBRGpVMmEzdDE1azQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBncMA0GCSqGSIb3DQEBCwUAA4IBAQCaPMQcWm1uiIWY6kdhFzUTqH/8IM/g 0ynuBNmkSYqAmKRiTPMjxLsPS7B6nfE/z+d7MDMwPdYoPlL0iP27YGllUUQIBeTK 3+0SG6O8E3QJGwsfHsyCRIvtUfAUzR/dP2a9+1IYF8TfKuinF1jmPaUi9P+KO5+K AcpwIPoZpKEeXEM2KDTmlqkikJO5c3EQ76/SCfme6kpt4xOh/vu/QENwH0StYiNq Iu8K1w6sfy+vHRzJcxMFFlWCT4M6yriX8/JlKlQy3vgY+mQ4djKvCe6HNy0bDubQ KIDBmtcndtbFy6AVzgKzmWclF4ro1Z7wfcAwE9bPXiIgUfwwh5XI18/Q -----END CERTIFICATE-----Generated at Tue Sep 9 17:42:21 2025 by rpki-client