$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/DsNvx9zfaquK26P5h6DwvPHgUS4.roa File: DsNvx9zfaquK26P5h6DwvPHgUS4.roa (raw, json) Hash identifier: AuuRyAEKpoHJ69oM8oLbWzuc+DZUHuieDZ6hbMB27+Y= Subject key identifier: 0E:C3:6F:C7:DC:DF:6A:AB:8A:DB:A3:F9:87:A0:F0:BC:F1:E0:51:2E Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Certificate serial: 03D7 Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/DsNvx9zfaquK26P5h6DwvPHgUS4.roa Signing time: Fri 22 Aug 2025 08:56:56 +0000 ROA not before: Fri 22 Aug 2025 08:56:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63893 IP address blocks: 103.180.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Validity Not Before: Aug 22 08:56:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0EC36FC7DCDF6AAB8ADBA3F987A0F0BCF1E0512E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:a9:ce:c2:76:3c:e2:b3:1f:84:b6:3a:c4: 85:91:36:d7:11:f7:77:f5:a3:ab:12:b8:09:20:05: de:0c:8b:94:a3:3b:0d:61:ba:c5:6f:b6:1f:f0:56: 98:c5:f9:1d:8a:51:19:47:d0:1a:42:86:92:69:5c: f9:59:81:90:5b:f9:38:60:82:59:a4:5c:84:c6:fe: f7:be:a5:9e:e0:48:8a:3d:66:9b:26:10:2f:3e:91: 9e:34:f4:9c:a4:6b:0e:09:7c:3e:94:80:d1:e9:b3: 5c:88:54:44:03:0e:4b:4a:3b:ea:42:9a:19:2a:da: 95:5c:68:80:d5:f9:e1:0a:e6:6e:ff:da:63:aa:82: 9a:b6:2f:18:c5:19:fd:e7:44:be:db:79:d5:ee:f1: 08:58:36:62:52:14:6d:21:f4:de:17:46:37:3a:77: ea:f9:3e:85:04:4d:ee:f2:89:96:5f:ab:d0:d4:84: 09:11:5b:6b:ce:d7:8b:e6:4a:e9:4d:8a:bc:45:42: 2f:2b:e1:5f:c6:10:d3:82:14:a2:7a:6f:34:cf:f4: 62:b4:9c:1a:fb:e6:25:42:b2:a9:70:a9:d3:2d:82: 00:e9:71:e5:bf:70:7d:1e:b4:45:0a:36:7f:ce:ae: ba:d7:5b:b0:bf:73:59:22:f2:21:6e:c0:c4:60:5f: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C3:6F:C7:DC:DF:6A:AB:8A:DB:A3:F9:87:A0:F0:BC:F1:E0:51:2E X509v3 Authority Key Identifier: keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/DsNvx9zfaquK26P5h6DwvPHgUS4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.180.16.0/23 Signature Algorithm: sha256WithRSAEncryption ac:c4:51:03:ac:2b:95:7a:01:db:29:ae:ec:d0:8a:76:d5:07: 6f:5f:84:4c:6b:42:0e:7e:2b:bd:19:cc:98:4e:4d:50:3e:b2: 95:7f:8c:df:43:9c:45:7b:ce:67:5d:72:ee:ff:ea:76:9e:2e: a3:a0:c5:31:c3:21:b5:45:2b:21:23:e4:e4:cf:b8:d8:0b:8c: 2c:20:06:01:9c:d6:02:92:8f:49:75:a5:64:2b:f3:d0:7e:44: 83:17:90:58:8e:0e:50:06:33:5a:7f:2c:b9:65:f1:a5:20:f3: 68:4d:9e:d6:e0:0f:33:4b:74:c5:67:02:65:c2:35:fe:4e:c2: 3a:b3:6f:cc:2a:d1:86:28:b0:c6:b6:42:70:06:5b:f2:89:2c: f4:73:62:68:fb:bf:2d:cd:09:95:f0:0d:1a:90:c4:b5:c6:2a: 9e:96:35:83:03:7c:31:aa:67:a6:b3:11:d4:60:8b:4b:92:59: ba:d6:83:9f:95:cf:02:c7:98:78:6c:5a:89:7c:2b:c0:d9:e3: 5d:cb:9f:17:66:97:07:73:24:a2:9d:e2:2d:1e:cb:61:20:5b: bc:93:f9:c1:91:ba:62:17:4c:f8:9e:dd:af:ac:b4:c6:1e:25: 39:81:01:9e:af:5c:1e:fd:25:11:cc:1d:58:13:60:b5:f8:a9: b2:05:83:58 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yNTA4MjIw ODU2NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBFQzM2RkM3RENERjZB QUI4QURCQTNGOTg3QTBGMEJDRjFFMDUxMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoqanOwnY84rMfhLY6xIWRNtcR93f1o6sSuAkgBd4Mi5SjOw1h usVvth/wVpjF+R2KURlH0BpChpJpXPlZgZBb+ThgglmkXITG/ve+pZ7gSIo9Zpsm EC8+kZ409Jykaw4JfD6UgNHps1yIVEQDDktKO+pCmhkq2pVcaIDV+eEK5m7/2mOq gpq2LxjFGf3nRL7bedXu8QhYNmJSFG0h9N4XRjc6d+r5PoUETe7yiZZfq9DUhAkR W2vO14vmSulNirxFQi8r4V/GENOCFKJ6bzTP9GK0nBr75iVCsqlwqdMtggDpceW/ cH0etEUKNn/OrrrXW7C/c1ki8iFuwMRgXz6bAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUDsNvx9zfaquK26P5h6DwvPHgUS4wHwYDVR0jBBgwFoAUPOusQFclHIqquVTc IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvRHNOdng5emZh cXVLMjZQNWg2RHd2UEhnVVM0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWe0EDANBgkqhkiG9w0BAQsFAAOCAQEArMRRA6wrlXoB2ymu7NCKdtUH b1+ETGtCDn4rvRnMmE5NUD6ylX+M30OcRXvOZ11y7v/qdp4uo6DFMcMhtUUrISPk 5M+42AuMLCAGAZzWApKPSXWlZCvz0H5EgxeQWI4OUAYzWn8suWXxpSDzaE2e1uAP M0t0xWcCZcI1/k7COrNvzCrRhiiwxrZCcAZb8oks9HNiaPu/Lc0JlfANGpDEtcYq npY1gwN8MapnprMR1GCLS5JZutaDn5XPAseYeGxaiXwrwNnjXcufF2aXB3Mkop3i LR7LYSBbvJP5wZG6YhdM+J7dr6y0xh4lOYEBnq9cHv0lEcwdWBNgtfipsgWDWA== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:57 2025 by rpki-client