$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/j6baL7t5hK3svrfJxGjQDKsrbPY.roa File: j6baL7t5hK3svrfJxGjQDKsrbPY.roa (raw, json) Hash identifier: IEFJRuKzBvcacWn5IHZm2SbQX6LZUKvsnCwYft1Mg9Y= Subject key identifier: 8F:A6:DA:2F:BB:79:84:AD:EC:BE:B7:C9:C4:68:D0:0C:AB:2B:6C:F6 Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0DC8 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/j6baL7t5hK3svrfJxGjQDKsrbPY.roa Signing time: Fri 22 Aug 2025 09:03:14 +0000 ROA not before: Fri 22 Aug 2025 09:03:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 396982 IP address blocks: 103.123.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3528 (0xdc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Aug 22 09:03:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8FA6DA2FBB7984ADECBEB7C9C468D00CAB2B6CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:ec:a2:bc:56:9a:79:32:7e:fa:cb:61:ee: f6:32:98:1c:c4:a9:28:cc:80:6b:3f:1d:b7:32:f5: 54:dc:7c:6d:79:f5:b7:56:6b:a2:72:a0:0a:7a:ee: 2f:ce:2c:68:f1:0a:7b:bb:29:25:80:dd:e7:1e:0d: f4:d4:c9:cf:ff:6b:e4:52:63:a5:70:9a:a0:13:ed: 96:c2:13:3f:7a:25:47:57:0d:77:42:03:e3:69:15: 7a:b6:0c:12:99:3a:4b:87:1e:50:7a:db:df:fc:4e: 25:06:9e:9c:a5:ee:3f:f2:3c:f2:bc:35:e6:ed:c3: fc:36:a8:e8:a8:93:04:04:a2:b6:75:04:e7:37:15: 82:de:8b:8c:2b:2a:59:11:60:ff:47:d9:68:31:91: 2a:21:ab:99:0d:b8:39:d1:35:82:91:81:97:5d:00: 90:54:80:93:87:d9:af:fc:cb:82:fe:2f:59:b1:82: b1:cb:b9:14:89:10:ec:fd:c4:b8:8e:e5:d1:ef:6b: 5a:2c:45:d0:86:2f:ff:e1:c5:0b:be:92:18:5d:22: 91:cc:1f:8d:84:10:b6:45:24:77:99:9e:f1:79:14: f8:5b:aa:8d:66:3a:43:35:5e:93:cc:99:e1:00:8b: 78:f5:37:eb:67:5d:38:9e:98:31:fd:ff:e5:4e:37: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A6:DA:2F:BB:79:84:AD:EC:BE:B7:C9:C4:68:D0:0C:AB:2B:6C:F6 X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/j6baL7t5hK3svrfJxGjQDKsrbPY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.131.0/24 Signature Algorithm: sha256WithRSAEncryption 25:09:5f:4e:79:71:32:42:40:58:c4:38:70:97:20:49:35:c1: 5f:39:30:f5:68:1f:9c:da:0a:af:bc:5b:62:65:9e:54:bc:1d: ba:06:a3:03:49:94:2c:3f:41:6e:42:09:6d:53:7d:47:aa:89: 9e:df:91:a5:25:7e:4c:8d:0a:6c:a3:72:cb:43:21:cf:85:6e: bb:68:a3:f6:64:4d:97:6f:f0:dd:0e:ff:12:4b:37:c7:f8:a9: fb:35:87:58:06:8a:1f:ac:24:8f:35:3e:29:ce:04:61:f0:8f: 9c:40:85:77:8b:2b:7a:5e:0f:d8:e0:bf:77:fd:ed:b7:a7:30: 54:95:f4:d3:98:78:77:84:84:3a:82:5d:c7:9c:ad:42:39:2d: db:5c:fe:06:b9:95:cf:2c:17:46:d7:d8:c9:ed:af:da:36:f1: fd:18:a7:7c:a5:3d:b5:c3:0c:e1:41:04:f0:1e:62:9c:fd:ef: 79:92:b8:20:ef:e1:fd:b4:53:3f:26:30:db:92:ca:76:a0:a9: d1:9a:21:12:52:0a:83:88:bf:09:0d:95:b5:07:d1:3e:42:90: 51:33:71:b2:a7:36:50:94:a5:7f:5e:2f:ac:50:a6:5f:62:31: de:1e:2a:32:b9:c4:2e:77:b4:cf:94:db:e5:32:7e:b9:6c:6d: 78:4e:3a:21 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yNTA4MjIw OTAzMTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGQTZEQTJGQkI3OTg0 QURFQ0JFQjdDOUM0NjhEMDBDQUIyQjZDRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPYuyivFaaeTJ++sth7vYymBzEqSjMgGs/Hbcy9VTcfG159bdW a6JyoAp67i/OLGjxCnu7KSWA3eceDfTUyc//a+RSY6VwmqAT7ZbCEz96JUdXDXdC A+NpFXq2DBKZOkuHHlB629/8TiUGnpyl7j/yPPK8Nebtw/w2qOiokwQEorZ1BOc3 FYLei4wrKlkRYP9H2WgxkSohq5kNuDnRNYKRgZddAJBUgJOH2a/8y4L+L1mxgrHL uRSJEOz9xLiO5dHva1osRdCGL//hxQu+khhdIpHMH42EELZFJHeZnvF5FPhbqo1m OkM1XpPMmeEAi3j1N+tnXTiemDH9/+VONxnRAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUj6baL7t5hK3svrfJxGjQDKsrbPYwHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vajZiYUw3dDVoSzNzdnJm SnhHalFES3NyYlBZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd7gzANBgkqhkiG9w0BAQsFAAOCAQEAJQlfTnlxMkJAWMQ4cJcgSTXBXzkw9Wgf nNoKr7xbYmWeVLwdugajA0mULD9BbkIJbVN9R6qJnt+RpSV+TI0KbKNyy0Mhz4Vu u2ij9mRNl2/w3Q7/Eks3x/ip+zWHWAaKH6wkjzU+Kc4EYfCPnECFd4srel4P2OC/ d/3tt6cwVJX005h4d4SEOoJdx5ytQjkt21z+BrmVzywXRtfYye2v2jbx/RinfKU9 tcMM4UEE8B5inP3veZK4IO/h/bRTPyYw25LKdqCp0ZohElIKg4i/CQ2VtQfRPkKQ UTNxsqc2UJSlf14vrFCmX2Ix3h4qMrnELne0z5Tb5TJ+uWxteE46IQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:57:36 2025 by rpki-client