$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/IvfIGXc00GAvBFT9vUz8lRkh24A.roa File: IvfIGXc00GAvBFT9vUz8lRkh24A.roa (raw, json) Hash identifier: dDTT4OPBBSRASGFSbq/Hksr5HfYqc5WAgR9FGgcFVSo= Subject key identifier: 22:F7:C8:19:77:34:D0:60:2F:04:54:FD:BD:4C:FC:95:19:21:DB:80 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E8B Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/IvfIGXc00GAvBFT9vUz8lRkh24A.roa Signing time: Fri 22 Aug 2025 09:03:22 +0000 ROA not before: Fri 22 Aug 2025 09:03:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 61.56.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3723 (0xe8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=22F7C8197734D0602F0454FDBD4CFC951921DB80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:79:11:91:eb:24:3c:7f:c8:5d:38:75:ed: 7c:b3:d5:72:70:d0:28:19:81:67:3f:10:2e:95:fc: b0:9b:76:97:95:9d:ae:09:3f:d9:b0:93:02:5b:aa: 2c:97:54:7d:92:9d:bd:81:3e:62:43:de:33:1c:e9: dc:03:ca:94:56:32:fe:17:20:59:a0:f7:cc:07:55: 94:86:b0:18:19:e5:42:5a:9b:59:70:36:53:8d:82: 35:7e:1a:6b:68:ba:3f:82:ae:d3:9a:d8:6c:ff:df: 10:9a:18:63:06:73:44:63:42:a4:53:22:c0:07:5d: e5:8a:e7:00:e0:27:0b:73:06:98:40:c3:22:41:77: 45:5a:5c:eb:14:ba:9f:7b:c9:c7:70:fa:a2:21:8f: ab:b3:86:4f:ad:c3:ae:7f:45:f9:f2:dd:47:d1:2e: 09:b4:12:68:bd:57:d1:af:c6:d7:ac:d3:5b:7e:e2: 2b:95:4d:f4:d7:c9:9d:8b:30:93:fd:37:04:aa:f7: bc:f1:6e:c0:51:d8:23:7e:bb:e3:5f:54:14:4b:90: 65:b0:57:dc:01:5c:d1:a1:e3:d0:f3:bb:aa:25:9d: 0a:f0:4e:50:71:bf:e0:b2:97:da:ce:31:a8:d7:51: b8:9e:fe:06:ed:37:b6:70:15:eb:8e:4f:d4:6e:6c: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F7:C8:19:77:34:D0:60:2F:04:54:FD:BD:4C:FC:95:19:21:DB:80 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/IvfIGXc00GAvBFT9vUz8lRkh24A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.88.0/21 Signature Algorithm: sha256WithRSAEncryption 00:26:ad:ff:9c:3b:a7:72:67:d4:36:7f:f5:b3:b4:32:a8:93: 92:0d:ef:42:50:6d:6c:ab:44:4b:5d:89:75:01:a5:eb:74:72: e2:c8:8b:fa:17:6f:4f:00:e6:29:34:9b:05:89:c9:b2:f0:62: 6e:10:69:86:17:74:72:1b:69:56:d9:96:3a:bc:c8:87:51:cc: ad:e2:12:46:2e:5a:ff:bb:3a:60:40:77:15:a3:ae:22:37:f6: 9b:bb:f7:9e:0b:b6:0b:6c:6c:ac:d5:f8:79:df:66:85:90:85: 3e:7e:47:2e:01:49:28:29:0f:c7:6a:06:ec:60:54:e3:45:2d: 15:66:61:b7:f2:15:06:22:40:7a:1a:19:c9:19:47:ef:5b:a7: 86:5f:02:a8:a8:49:9d:8c:2b:55:cb:53:62:ea:d8:2a:f6:5c: 70:07:4e:33:39:db:80:21:d2:1e:57:83:da:5f:d2:40:36:66: d6:44:a0:0f:4d:80:93:3b:90:3e:c0:f9:cf:da:b3:e1:00:e9: c1:04:fc:23:f0:9f:4d:ca:be:95:db:c7:2a:32:d2:d2:6c:98: 27:f2:11:fa:69:3a:51:1e:99:60:42:c0:31:94:11:f4:10:b1: f5:b8:b1:64:6d:7f:ac:fe:01:bf:74:88:1d:8f:90:42:56:36: 80:ed:93:06 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyRjdDODE5NzczNEQw NjAyRjA0NTRGREJENENGQzk1MTkyMURCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd1nkRkeskPH/IXTh17Xyz1XJw0CgZgWc/EC6V/LCbdpeVna4J P9mwkwJbqiyXVH2Snb2BPmJD3jMc6dwDypRWMv4XIFmg98wHVZSGsBgZ5UJam1lw NlONgjV+Gmtouj+CrtOa2Gz/3xCaGGMGc0RjQqRTIsAHXeWK5wDgJwtzBphAwyJB d0VaXOsUup97ycdw+qIhj6uzhk+tw65/Rfny3UfRLgm0Emi9V9Gvxtes01t+4iuV TfTXyZ2LMJP9NwSq97zxbsBR2CN+u+NfVBRLkGWwV9wBXNGh49Dzu6olnQrwTlBx v+Cyl9rOMajXUbie/gbtN7ZwFeuOT9RubPilAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUIvfIGXc00GAvBFT9vUz8lRkh24AwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL0l2ZklHWGMwMEdBdkJGVDl2 VXo4bFJraDI0QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 OFgwDQYJKoZIhvcNAQELBQADggEBAAAmrf+cO6dyZ9Q2f/WztDKok5IN70JQbWyr REtdiXUBpet0cuLIi/oXb08A5ik0mwWJybLwYm4QaYYXdHIbaVbZljq8yIdRzK3i EkYuWv+7OmBAdxWjriI39pu7954LtgtsbKzV+HnfZoWQhT5+Ry4BSSgpD8dqBuxg VONFLRVmYbfyFQYiQHoaGckZR+9bp4ZfAqioSZ2MK1XLU2Lq2Cr2XHAHTjM524Ah 0h5Xg9pf0kA2ZtZEoA9NgJM7kD7A+c/as+EA6cEE/CPwn03KvpXbxyoy0tJsmCfy EfppOlEemWBCwDGUEfQQsfW4sWRtf6z+Ab90iB2PkEJWNoDtkwY= -----END CERTIFICATE-----Generated at Mon Aug 25 01:23:30 2025 by rpki-client