$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/Sy2atNqXSn9EGYpA4qQnLWHwDHQ.roa File: Sy2atNqXSn9EGYpA4qQnLWHwDHQ.roa (raw, json) Hash identifier: xi8t6PoTkQyMILrACfZcFbmirQHI/0KF2ei24fRgowo= Subject key identifier: 4B:2D:9A:B4:DA:97:4A:7F:44:19:8A:40:E2:A4:27:2D:61:F0:0C:74 Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0DD7 Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/Sy2atNqXSn9EGYpA4qQnLWHwDHQ.roa Signing time: Fri 22 Aug 2025 08:55:12 +0000 ROA not before: Fri 22 Aug 2025 08:55:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4783 IP address blocks: 210.63.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3543 (0xdd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: Aug 22 08:55:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4B2D9AB4DA974A7F44198A40E2A4272D61F00C74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:3d:2d:cd:d1:70:f5:d2:1c:6b:b1:35:f6: d6:7a:bd:0a:ab:20:50:ac:b2:23:9d:72:22:20:47: e0:57:11:79:05:5a:b5:60:fd:0b:b2:72:d3:25:6b: 97:69:01:07:ee:dd:d5:98:76:d8:d0:c7:43:77:5c: 60:58:2d:90:11:98:10:2f:f2:6f:9e:46:24:1f:28: 97:37:79:6d:7f:99:fe:a4:9e:75:aa:43:ab:4b:5c: a0:3c:58:d3:46:31:ba:ed:24:f9:db:00:17:c2:e3: e3:e6:4c:48:04:a8:d9:31:ca:7e:57:97:65:b5:2e: a8:dc:e0:3c:39:9a:e7:ac:eb:e1:a0:aa:ad:29:67: 41:b1:a9:7a:41:a9:6f:0d:b5:cb:2a:94:9d:e4:a1: 17:c2:49:71:cc:9f:4f:2e:1b:72:95:cf:49:7b:41: 5b:0b:a6:6a:61:9c:61:2b:ce:34:01:3e:ac:4b:d6: 79:93:af:eb:3f:8f:37:a6:53:57:87:3a:64:7a:ef: 92:f4:79:bf:43:e0:6a:29:98:d7:28:f8:19:b0:0e: 90:a4:4d:be:f0:99:e2:1c:db:c5:03:e3:06:92:02: b4:ba:9f:25:0c:5b:12:95:c1:4f:77:db:55:af:ca: f6:12:c8:45:0b:e0:8b:7b:eb:ee:20:7e:83:15:09: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:9A:B4:DA:97:4A:7F:44:19:8A:40:E2:A4:27:2D:61:F0:0C:74 X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/Sy2atNqXSn9EGYpA4qQnLWHwDHQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:93:7d:b7:36:75:9c:de:c8:cc:65:56:ad:1d:c5:e5:21:84: 0c:b5:8f:b8:d2:75:63:21:e3:2f:a4:a3:9e:7a:d8:1f:ab:b4: 5d:ea:30:ef:90:eb:90:47:e7:33:1e:05:54:57:25:45:d1:38: fd:d6:0e:da:5a:52:84:30:0c:bd:df:af:ae:3d:02:4e:30:5f: 16:b3:9b:c6:43:7b:b3:bf:0b:ee:36:da:4b:1a:a7:88:7b:90: 0f:f0:36:86:33:2e:99:3d:5a:d3:10:c5:68:76:11:75:23:2d: 60:8b:45:12:fb:ef:b6:56:97:ee:af:31:46:90:44:4b:9d:08: a8:fe:24:12:bd:f2:85:3d:fb:8b:c5:7b:95:18:01:9a:ab:e9: 8e:23:28:37:3a:7b:38:a6:6b:cf:71:4e:21:19:bc:a5:23:95: ea:0e:33:51:dc:92:1e:cb:02:68:2e:12:0c:83:96:80:64:fb: fe:e2:a1:91:14:d4:c4:c7:d6:9b:ae:6e:84:78:d6:75:70:94: f9:9b:9c:02:20:a7:3a:fd:ec:19:f5:07:77:80:d1:d0:37:31: f4:3b:16:54:39:5f:5a:ed:33:06:f8:5a:d2:e5:ce:3a:29:b3: 61:ff:d6:42:e1:5f:fb:51:bf:20:66:1b:48:0d:df:f5:18:8f: 55:31:55:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yNTA4MjIw ODU1MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRCMkQ5QUI0REE5NzRB N0Y0NDE5OEE0MEUyQTQyNzJENjFGMDBDNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+Jz0tzdFw9dIca7E19tZ6vQqrIFCssiOdciIgR+BXEXkFWrVg /QuyctMla5dpAQfu3dWYdtjQx0N3XGBYLZARmBAv8m+eRiQfKJc3eW1/mf6knnWq Q6tLXKA8WNNGMbrtJPnbABfC4+PmTEgEqNkxyn5Xl2W1Lqjc4Dw5mues6+Ggqq0p Z0GxqXpBqW8NtcsqlJ3koRfCSXHMn08uG3KVz0l7QVsLpmphnGErzjQBPqxL1nmT r+s/jzemU1eHOmR675L0eb9D4GopmNco+BmwDpCkTb7wmeIc28UD4waSArS6nyUM WxKVwU9321WvyvYSyEUL4It76+4gfoMVCW93AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSy2atNqXSn9EGYpA4qQnLWHwDHQwHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVUL1N5MmF0TnFYU245RUdZcEE0 cVFuTFdId0RIUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS PyAwDQYJKoZIhvcNAQELBQADggEBAF+Tfbc2dZzeyMxlVq0dxeUhhAy1j7jSdWMh 4y+ko5562B+rtF3qMO+Q65BH5zMeBVRXJUXROP3WDtpaUoQwDL3fr649Ak4wXxaz m8ZDe7O/C+422ksap4h7kA/wNoYzLpk9WtMQxWh2EXUjLWCLRRL777ZWl+6vMUaQ REudCKj+JBK98oU9+4vFe5UYAZqr6Y4jKDc6ezima89xTiEZvKUjleoOM1Hckh7L AmguEgyDloBk+/7ioZEU1MTH1puuboR41nVwlPmbnAIgpzr97Bn1B3eA0dA3MfQ7 FlQ5X1rtMwb4WtLlzjops2H/1kLhX/tRvyBmG0gN3/UYj1UxVQ0= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:14 2025 by rpki-client