$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/yiGKFLuUmGsRGKB_3PU0DdIunrM.roa File: yiGKFLuUmGsRGKB_3PU0DdIunrM.roa (raw, json) Hash identifier: 5gb0RhIG6Fi8br15VjfRZjbg6xtpSFr+i883cxmilU8= Subject key identifier: CA:21:8A:14:BB:94:98:6B:11:18:A0:7F:DC:F5:34:0D:D2:2E:9E:B3 Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Certificate serial: 0DEF Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/yiGKFLuUmGsRGKB_3PU0DdIunrM.roa Signing time: Fri 22 Aug 2025 09:03:58 +0000 ROA not before: Fri 22 Aug 2025 09:03:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131149 IP address blocks: 103.123.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 02:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3567 (0xdef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Validity Not Before: Aug 22 09:03:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA218A14BB94986B1118A07FDCF5340DD22E9EB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:5d:72:35:95:19:55:28:83:6a:08:51:27: cb:74:17:20:0f:a0:de:dd:63:3e:12:83:69:47:4a: cd:58:97:e7:50:88:39:28:ed:94:be:ba:7b:e7:5c: 25:ef:34:91:e9:d5:41:67:9b:6a:19:e9:51:12:76: ec:c7:8a:b7:c0:a5:cb:e8:76:28:27:9a:21:e0:7b: 69:32:4e:99:4a:63:37:40:2a:1f:49:ba:c2:94:d7: 70:68:08:4d:9b:79:47:49:7f:85:8d:e3:b8:43:e6: b4:a4:d3:96:82:c3:1c:9b:16:20:0e:e4:b8:ae:ca: 3b:7b:60:2c:ef:f1:5f:66:f0:09:6f:19:52:ab:61: 7c:9e:7a:9f:fc:b3:5c:42:44:00:79:7f:81:d7:e1: c6:f2:e2:40:35:2e:2d:d2:3e:f6:40:05:87:ad:a4: 0e:07:70:b0:88:85:0c:cb:c6:4a:4c:05:c5:9e:c6: 56:d3:b3:f4:ab:2f:0f:39:15:ef:4c:d7:24:2d:21: 3c:87:aa:01:17:fb:59:e2:d0:ea:c0:ef:b7:7c:e0: bd:54:e8:26:dc:27:41:00:56:4e:72:82:9c:e0:c3: ab:cb:47:2f:08:d0:15:23:5b:4c:a7:f5:6e:42:5b: 91:be:95:4d:02:08:58:4a:79:6e:08:34:95:f7:dd: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:21:8A:14:BB:94:98:6B:11:18:A0:7F:DC:F5:34:0D:D2:2E:9E:B3 X509v3 Authority Key Identifier: keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/yiGKFLuUmGsRGKB_3PU0DdIunrM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.192.0/22 Signature Algorithm: sha256WithRSAEncryption 56:20:9e:b0:17:e5:61:46:fb:ab:a0:72:8f:41:d0:4e:8c:be: dd:17:4c:28:f8:0a:ad:93:9f:98:2e:27:5f:4f:7b:a2:0a:ae: e3:9a:0c:59:54:d6:8f:54:f4:38:13:4c:40:32:93:d8:12:7f: 1d:c5:49:1f:f3:bb:93:25:51:49:df:b8:d5:b2:4e:2e:2f:0f: ed:f1:99:86:6c:3e:84:d4:c5:e5:22:f6:e4:74:59:ca:ba:e0: cb:22:05:a4:27:14:24:f8:82:5f:f1:f2:35:d9:78:cf:82:3d: b5:9d:11:eb:fc:7d:09:b4:f6:ef:71:a2:6f:66:bc:0a:5a:61: ba:9e:e4:7f:b2:22:8f:3f:13:2b:3b:94:44:80:82:67:8a:59: 9c:5a:3e:3a:6c:b1:68:ee:d0:4f:b4:47:fb:5e:55:e6:7f:85: 06:7a:c0:fe:c9:62:16:d0:1c:92:26:44:0b:73:e7:5a:c6:54: e9:6f:c3:85:80:70:3a:dd:48:1f:e1:79:80:65:20:d5:63:70: a0:dc:bf:e3:6c:78:4a:27:63:35:4c:e3:0a:ee:b1:94:e3:6f: dd:9d:1a:46:9e:96:39:d5:aa:8e:10:cc:01:bf:41:f1:bb:9a: 57:b3:29:db:a3:5d:6f:65:89:92:31:80:82:da:e9:a2:6c:59: a4:67:09:b3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yNTA4MjIw OTAzNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBMjE4QTE0QkI5NDk4 NkIxMTE4QTA3RkRDRjUzNDBERDIyRTlFQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Rl1yNZUZVSiDaghRJ8t0FyAPoN7dYz4Sg2lHSs1Yl+dQiDko 7ZS+unvnXCXvNJHp1UFnm2oZ6VESduzHirfApcvodignmiHge2kyTplKYzdAKh9J usKU13BoCE2beUdJf4WN47hD5rSk05aCwxybFiAO5Liuyjt7YCzv8V9m8AlvGVKr YXyeep/8s1xCRAB5f4HX4cby4kA1Li3SPvZABYetpA4HcLCIhQzLxkpMBcWexlbT s/SrLw85Fe9M1yQtITyHqgEX+1ni0OrA77d84L1U6CbcJ0EAVk5ygpzgw6vLRy8I 0BUjW0yn9W5CW5G+lU0CCFhKeW4INJX33fanAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUyiGKFLuUmGsRGKB/3PU0DdIunrMwHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi95aUdLRkx1VW1Hc1JH S0JfM1BVMERkSXVuck0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3vAMA0GCSqGSIb3DQEBCwUAA4IBAQBWIJ6wF+VhRvuroHKPQdBOjL7dF0wo +Aqtk5+YLidfT3uiCq7jmgxZVNaPVPQ4E0xAMpPYEn8dxUkf87uTJVFJ37jVsk4u Lw/t8ZmGbD6E1MXlIvbkdFnKuuDLIgWkJxQk+IJf8fI12XjPgj21nRHr/H0JtPbv caJvZrwKWmG6nuR/siKPPxMrO5REgIJnilmcWj46bLFo7tBPtEf7XlXmf4UGesD+ yWIW0BySJkQLc+daxlTpb8OFgHA63Ugf4XmAZSDVY3Cg3L/jbHhKJ2M1TOMK7rGU 42/dnRpGnpY51aqOEMwBv0Hxu5pXsynbo11vZYmSMYCC2umibFmkZwmz -----END CERTIFICATE-----Generated at Mon Nov 3 23:14:31 2025 by rpki-client