$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/ZEcCEsoPtjJT_n9n3cVMFtwU1nY.roa File: ZEcCEsoPtjJT_n9n3cVMFtwU1nY.roa (raw, json) Hash identifier: P0iSWfzHJipR2VYoInobAYOzS4kUaVfWPLn6CM3FS+M= Subject key identifier: 64:47:02:12:CA:0F:B6:32:53:FE:7F:67:DD:C5:4C:16:DC:14:D6:76 Certificate issuer: /CN=75BD930C745D23E9EA585C04D6B99F95A96322E5 Certificate serial: 0D3A Authority key identifier: 75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/ZEcCEsoPtjJT_n9n3cVMFtwU1nY.roa Signing time: Fri 22 Aug 2025 08:58:38 +0000 ROA not before: Fri 22 Aug 2025 08:58:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131143 IP address blocks: 175.184.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75BD930C745D23E9EA585C04D6B99F95A96322E5 Validity Not Before: Aug 22 08:58:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=64470212CA0FB63253FE7F67DDC54C16DC14D676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:a8:9a:05:39:ec:9a:1a:04:2f:37:5d:70: a4:53:2b:d3:27:d9:f0:ba:01:62:47:3b:01:d1:0e: a3:0a:3c:5a:35:71:5f:93:7f:a7:a5:a9:19:d0:86: 83:e4:1e:52:c7:80:1d:74:ec:b7:d3:77:bc:42:92: f5:ac:9c:7d:28:5c:6c:19:92:e2:90:67:1e:88:72: b0:31:72:48:08:37:cc:a7:e5:e1:3c:ef:a7:74:57: 4e:95:4e:bb:cd:db:f7:53:de:d4:25:86:78:f7:00: c0:06:61:97:6e:e8:a1:84:18:dd:6b:25:ed:af:02: b1:20:03:1d:7f:b8:e0:09:04:69:39:6e:97:7d:40: 49:cb:4c:52:b8:14:79:25:24:c0:be:7e:2f:77:82: 8b:d4:ee:e0:2e:9b:3d:aa:cd:ef:73:ed:1b:59:d6: ac:09:ce:6b:8d:38:88:43:61:2e:c7:fb:82:56:ac: 0c:34:bd:08:5e:d1:de:a8:bc:36:2e:6f:71:a2:45: 3f:5e:80:71:bc:ce:31:9b:ea:a9:14:f0:a0:2d:46: 51:f0:d0:46:39:90:85:b3:50:20:7e:d3:20:cd:1e: be:a1:9b:65:23:fb:6c:8a:ee:42:1f:18:f2:4f:d9: 29:68:f6:91:bf:f6:4d:58:ad:07:6f:dc:08:d2:03: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:47:02:12:CA:0F:B6:32:53:FE:7F:67:DD:C5:4C:16:DC:14:D6:76 X509v3 Authority Key Identifier: keyid:75:BD:93:0C:74:5D:23:E9:EA:58:5C:04:D6:B9:9F:95:A9:63:22:E5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/db2TDHRdI-nqWFwE1rmflaljIuU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/db2TDHRdI-nqWFwE1rmflaljIuU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATRUST/ZEcCEsoPtjJT_n9n3cVMFtwU1nY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.184.240.0/21 Signature Algorithm: sha256WithRSAEncryption 27:79:26:a7:bb:88:55:f8:10:86:2f:2f:82:51:38:dc:c2:ea: 07:b6:6e:61:f8:f5:45:f4:f9:a6:aa:28:8e:44:ac:7a:7d:b9: cc:64:f3:ad:60:27:f7:8d:49:33:95:a6:bc:24:ae:6b:8e:78: b1:ab:7b:6f:26:b9:78:f3:1c:10:70:6b:98:fa:0d:df:2b:ce: 56:79:1f:75:70:5f:ed:f5:e9:c6:7b:a0:6c:3a:a4:83:11:33: 6d:de:0a:4f:06:81:6f:85:eb:23:d9:7b:ce:15:5d:e6:03:45: ed:b6:fa:2c:ef:7d:f5:1f:34:89:3d:55:a1:68:04:34:c5:b4: 78:42:6b:2e:d5:ee:f1:95:0f:be:64:86:d1:a8:f7:fe:bf:16: 23:6d:39:87:55:7f:15:70:78:ac:60:84:98:33:b4:57:8d:f1: 93:0d:7a:d0:b6:7f:08:ce:15:fe:ae:89:ae:8e:87:3a:e0:b4: 7f:84:5d:97:ef:21:74:ba:f2:0c:52:95:30:27:7b:e9:d2:54: f7:cc:9e:85:bf:93:e6:f3:ab:69:bb:85:3d:4e:e9:30:60:ca: 11:ee:c9:2f:26:57:29:fe:21:15:41:5a:cf:81:24:9e:d7:c4: a4:9e:c2:de:85:a3:27:d6:78:bd:4a:bb:83:91:52:1b:8f:f3: 9c:ae:fe:f9 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC RDkzMEM3NDVEMjNFOUVBNTg1QzA0RDZCOTlGOTVBOTYzMjJFNTAeFw0yNTA4MjIw ODU4MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY0NDcwMjEyQ0EwRkI2 MzI1M0ZFN0Y2N0REQzU0QzE2REMxNEQ2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbuaiaBTnsmhoELzddcKRTK9Mn2fC6AWJHOwHRDqMKPFo1cV+T f6elqRnQhoPkHlLHgB107LfTd7xCkvWsnH0oXGwZkuKQZx6IcrAxckgIN8yn5eE8 76d0V06VTrvN2/dT3tQlhnj3AMAGYZdu6KGEGN1rJe2vArEgAx1/uOAJBGk5bpd9 QEnLTFK4FHklJMC+fi93govU7uAumz2qze9z7RtZ1qwJzmuNOIhDYS7H+4JWrAw0 vQhe0d6ovDYub3GiRT9egHG8zjGb6qkU8KAtRlHw0EY5kIWzUCB+0yDNHr6hm2Uj +2yK7kIfGPJP2Slo9pG/9k1YrQdv3AjSA4EDAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUZEcCEsoPtjJT/n9n3cVMFtwU1nYwHwYDVR0jBBgwFoAUdb2TDHRdI+nqWFwE 1rmflaljIuUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU UlVTVC9kYjJUREhSZEktbnFXRndFMXJtZmxhbGpJdVUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2RiMlRESFJkSS1ucVdGd0Uxcm1mbGFsakl1VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NISU5BVFJVU1QvWkVjQ0Vzb1B0 akpUX245bjNjVk1GdHdVMW5ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA6+48DANBgkqhkiG9w0BAQsFAAOCAQEAJ3kmp7uIVfgQhi8vglE43MLq B7ZuYfj1RfT5pqoojkSsen25zGTzrWAn941JM5WmvCSua454sat7bya5ePMcEHBr mPoN3yvOVnkfdXBf7fXpxnugbDqkgxEzbd4KTwaBb4XrI9l7zhVd5gNF7bb6LO99 9R80iT1VoWgENMW0eEJrLtXu8ZUPvmSG0aj3/r8WI205h1V/FXB4rGCEmDO0V43x kw160LZ/CM4V/q6Jro6HOuC0f4Rdl+8hdLryDFKVMCd76dJU98yehb+T5vOrabuF PU7pMGDKEe7JLyZXKf4hFUFaz4EkntfEpJ7C3oWjJ9Z4vUq7g5FSG4/znK7++Q== -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:19 2025 by rpki-client