$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/zKdyjqpkanGEln_y0ElAEmexrSo.roa File: zKdyjqpkanGEln_y0ElAEmexrSo.roa (raw, json) Hash identifier: 0MuxFzZGVqjiYVaoIiF2ra8e9iPy5wFomXe+dDQ9oI0= Subject key identifier: CC:A7:72:8E:AA:64:6A:71:84:96:7F:F2:D0:49:40:12:67:B1:AD:2A Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0E24 Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/zKdyjqpkanGEln_y0ElAEmexrSo.roa Signing time: Fri 22 Aug 2025 08:51:57 +0000 ROA not before: Fri 22 Aug 2025 08:51:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 116.50.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3620 (0xe24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Aug 22 08:51:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CCA7728EAA646A7184967FF2D049401267B1AD2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:64:5f:95:c6:29:4c:f9:bb:89:cc:3e:95: e7:2c:82:ae:fd:85:cc:fc:79:95:3c:34:0e:56:4a: ee:8e:5e:57:fb:90:24:85:b0:a1:f1:8c:35:23:c6: 06:86:31:03:78:72:4c:6c:d1:6a:9d:08:95:47:0a: 52:95:a2:70:1c:25:97:e5:99:64:f1:ff:64:5f:64: 10:81:fe:0c:5b:12:16:c9:b6:a2:b3:b0:8d:9d:fe: ea:88:11:d2:78:8b:4d:53:24:72:43:20:ce:ce:57: 7e:e2:4c:3b:e1:d9:a8:85:17:b6:43:0b:bb:0c:54: 34:e2:34:16:ad:00:df:87:ac:c1:c2:06:29:63:3c: 86:58:c9:52:70:04:d2:a4:d0:7b:6b:b7:36:0d:3c: df:6e:0a:0d:f9:ec:92:8c:38:c9:0f:df:09:4f:a3: a5:41:ed:20:e9:b5:38:6d:7d:db:21:53:ec:5a:b2: a1:3c:ea:36:e5:e3:fa:40:46:8c:5a:0e:9b:dd:c5: 31:d3:a4:3c:d4:ae:91:19:07:2a:0f:da:05:df:34: 23:ac:f3:5e:01:a5:31:52:6f:20:07:00:7d:d8:db: 2e:a2:33:34:dc:08:12:d5:b1:fd:9c:27:fa:72:9a: 45:e2:13:38:53:eb:57:e2:57:28:f3:a5:77:3a:69: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A7:72:8E:AA:64:6A:71:84:96:7F:F2:D0:49:40:12:67:B1:AD:2A X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/zKdyjqpkanGEln_y0ElAEmexrSo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 116.50.41.0/24 Signature Algorithm: sha256WithRSAEncryption bd:2f:13:6c:db:e0:10:70:d4:24:02:4b:22:cc:95:eb:65:85: ba:6f:6c:39:f5:b6:53:3b:b8:42:f5:0a:88:c1:f2:d3:38:d2: d8:64:a2:aa:a0:14:a7:6e:d6:04:dc:65:43:63:b8:32:6d:c1: 4d:13:e8:8b:51:17:4f:a2:49:27:3f:c4:45:b8:93:f7:0a:ef: 53:f4:90:70:4b:90:36:02:ff:35:8b:ef:15:00:d6:d7:60:88: b3:0b:5f:61:7a:06:a2:4e:03:29:c2:95:87:30:32:0b:75:84: 05:0b:01:4a:ae:89:a9:76:13:91:e0:78:4a:65:10:54:07:79: fd:c2:28:4d:72:b7:09:94:82:64:27:41:17:74:ee:2b:48:e5: c6:d9:63:0e:65:b7:9d:28:80:5d:77:a4:b9:f4:f8:30:ef:4b: df:31:64:c8:47:08:d7:ca:79:55:e6:52:cb:28:ee:c1:36:42: 84:5a:ea:16:3b:3d:e2:f8:e1:09:9d:94:f3:4b:42:fa:19:3c: 2c:3f:64:7f:4b:d2:03:56:18:da:19:80:72:a3:fe:6e:23:ea: c9:a6:40:fa:61:2e:33:90:64:62:93:04:f8:51:09:d5:32:65: 3a:ee:b8:00:dd:9a:b9:98:bf:db:45:a0:95:9c:64:f4:ee:ae: e0:0b:b1:aa -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNTA4MjIw ODUxNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENDQTc3MjhFQUE2NDZB NzE4NDk2N0ZGMkQwNDk0MDEyNjdCMUFEMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC/2RflcYpTPm7icw+lecsgq79hcz8eZU8NA5WSu6OXlf7kCSF sKHxjDUjxgaGMQN4ckxs0WqdCJVHClKVonAcJZflmWTx/2RfZBCB/gxbEhbJtqKz sI2d/uqIEdJ4i01TJHJDIM7OV37iTDvh2aiFF7ZDC7sMVDTiNBatAN+HrMHCBilj PIZYyVJwBNKk0HtrtzYNPN9uCg357JKMOMkP3wlPo6VB7SDptThtfdshU+xasqE8 6jbl4/pARoxaDpvdxTHTpDzUrpEZByoP2gXfNCOs814BpTFSbyAHAH3Y2y6iMzTc CBLVsf2cJ/pymkXiEzhT61fiVyjzpXc6aSDNAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzKdyjqpkanGEln/y0ElAEmexrSowHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy96S2R5anFwa2FuR0Vs bl95MEVsQUVtZXhyU28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAdDIpMA0GCSqGSIb3DQEBCwUAA4IBAQC9LxNs2+AQcNQkAksizJXrZYW6b2w5 9bZTO7hC9QqIwfLTONLYZKKqoBSnbtYE3GVDY7gybcFNE+iLURdPokknP8RFuJP3 Cu9T9JBwS5A2Av81i+8VANbXYIizC19hegaiTgMpwpWHMDILdYQFCwFKrompdhOR 4HhKZRBUB3n9wihNcrcJlIJkJ0EXdO4rSOXG2WMOZbedKIBdd6S59Pgw70vfMWTI RwjXynlV5lLLKO7BNkKEWuoWOz3i+OEJnZTzS0L6GTwsP2R/S9IDVhjaGYByo/5u I+rJpkD6YS4zkGRikwT4UQnVMmU67rgA3Zq5mL/bRaCVnGT07q7gC7Gq -----END CERTIFICATE-----Generated at Sun Aug 24 05:19:12 2025 by rpki-client