$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/ZC-1-bUYiRTgbhBNulcQWEL-rzg.roa File: ZC-1-bUYiRTgbhBNulcQWEL-rzg.roa (raw, json) Hash identifier: eoyZ4/6DkZACQYHcmCubsLmd+Um3IWuAVwo2AZUcDmI= Subject key identifier: 64:2F:B5:F9:B5:18:89:14:E0:6E:10:4D:BA:57:10:58:42:FE:AF:38 Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0D7D Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/ZC-1-bUYiRTgbhBNulcQWEL-rzg.roa Signing time: Fri 23 May 2025 07:36:42 +0000 ROA not before: Fri 23 May 2025 07:36:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4783 IP address blocks: 210.63.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3453 (0xd7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: May 23 07:36:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=642FB5F9B5188914E06E104DBA57105842FEAF38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:23:78:8c:b2:a2:40:f2:ac:ea:81:b0:83:30: 34:ee:f0:ff:b3:46:3b:1d:4a:ec:bd:54:3c:1e:ec: ab:19:d8:d9:3c:95:37:78:c2:99:e5:02:86:48:a2: 22:0a:37:25:54:59:53:19:20:5f:fd:13:14:d2:81: 1c:36:b7:d9:0b:76:fb:c6:67:4b:79:35:66:cf:65: d2:54:30:d6:e8:99:2d:01:e3:c3:5d:e7:f7:85:fe: ef:b4:0a:ec:df:f9:4a:88:75:16:60:87:a6:d3:6b: ef:81:df:db:95:57:5d:71:d8:5a:19:42:24:c4:1e: dd:9c:e4:93:7b:92:ea:3f:7e:78:07:29:6b:a9:5c: b5:aa:a8:23:5e:d3:52:37:93:4b:06:57:10:39:22: 60:b8:4a:84:7a:4a:ea:9d:38:2d:90:f1:05:aa:01: ef:6c:e3:eb:74:f1:d9:2a:65:9f:40:f0:06:fe:47: 18:cf:cb:37:dc:e6:59:65:6d:c0:c3:fb:c7:f2:8b: 74:78:35:dd:e9:bd:4f:dc:c1:ae:9e:32:2e:e6:82: 86:1d:33:95:07:73:19:b1:94:cb:82:e7:b9:76:8b: ec:7e:e5:9e:15:27:23:6a:2b:b6:b2:09:24:f2:ba: 39:96:42:c1:aa:ad:8f:3c:09:41:99:00:ab:ef:0a: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2F:B5:F9:B5:18:89:14:E0:6E:10:4D:BA:57:10:58:42:FE:AF:38 X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/ZC-1-bUYiRTgbhBNulcQWEL-rzg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.0.0/19 Signature Algorithm: sha256WithRSAEncryption 73:90:4d:5b:95:47:c3:db:93:8d:a6:91:30:fa:b8:5a:e8:af: 55:0c:79:ab:11:ba:44:16:ad:e7:b7:39:b5:32:5d:d6:07:0f: 6c:98:6b:5a:4b:8d:da:6c:3c:87:4a:eb:2d:3e:11:ac:f6:7f: 61:f8:9b:c6:4f:cc:49:33:dc:6f:1c:af:d2:65:2b:30:93:92: bc:1e:ba:ad:bc:f8:a0:3b:15:4c:64:01:23:0c:4e:dd:df:b8: 86:66:4c:c6:f5:9a:ce:19:cd:63:69:b4:8d:ef:db:6b:a2:21: 0c:ec:40:38:3c:57:08:5e:da:52:41:30:31:b8:28:4b:9f:3c: 38:24:58:03:83:49:12:00:40:15:7f:78:5d:ab:1f:6f:2f:66: 7b:80:ef:44:f3:2b:9c:d9:8b:85:31:1e:9a:5b:0b:04:10:f5: 5e:0b:27:8b:8f:e2:ba:eb:67:6a:70:36:d1:7c:69:9a:4e:2b: 97:27:2c:86:2f:e8:3c:e3:c3:a9:ad:79:fc:3f:7e:1c:21:06: 4d:50:5a:5c:b2:f5:2a:e6:86:1c:79:e9:94:99:80:a6:cf:b0: 90:e9:82:52:af:45:5a:04:cd:f8:86:a6:44:f5:f2:db:b0:6d: 4d:20:16:b3:5f:e2:83:79:f5:b5:0c:ea:5e:45:72:0b:04:5c: 22:50:47:4e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yNTA1MjMw NzM2NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0MkZCNUY5QjUxODg5 MTRFMDZFMTA0REJBNTcxMDU4NDJGRUFGMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5I3iMsqJA8qzqgbCDMDTu8P+zRjsdSuy9VDwe7KsZ2Nk8lTd4 wpnlAoZIoiIKNyVUWVMZIF/9ExTSgRw2t9kLdvvGZ0t5NWbPZdJUMNbomS0B48Nd 5/eF/u+0Cuzf+UqIdRZgh6bTa++B39uVV11x2FoZQiTEHt2c5JN7kuo/fngHKWup XLWqqCNe01I3k0sGVxA5ImC4SoR6SuqdOC2Q8QWqAe9s4+t08dkqZZ9A8Ab+RxjP yzfc5lllbcDD+8fyi3R4Nd3pvU/cwa6eMi7mgoYdM5UHcxmxlMuC57l2i+x+5Z4V JyNqK7ayCSTyujmWQsGqrY88CUGZAKvvCixFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZC+1+bUYiRTgbhBNulcQWEL+rzgwHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVUL1pDLTEtYlVZaVJUZ2JoQk51 bGNRV0VMLXJ6Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS PwAwDQYJKoZIhvcNAQELBQADggEBAHOQTVuVR8Pbk42mkTD6uFror1UMeasRukQW ree3ObUyXdYHD2yYa1pLjdpsPIdK6y0+Eaz2f2H4m8ZPzEkz3G8cr9JlKzCTkrwe uq28+KA7FUxkASMMTt3fuIZmTMb1ms4ZzWNptI3v22uiIQzsQDg8Vwhe2lJBMDG4 KEufPDgkWAODSRIAQBV/eF2rH28vZnuA70TzK5zZi4UxHppbCwQQ9V4LJ4uP4rrr Z2pwNtF8aZpOK5cnLIYv6Dzjw6mtefw/fhwhBk1QWlyy9Srmhhx56ZSZgKbPsJDp glKvRVoEzfiGpkT18tuwbU0gFrNf4oN59bUM6l5FcgsEXCJQR04= -----END CERTIFICATE-----Generated at Wed Jun 4 00:06:03 2025 by rpki-client