$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/MNH8MnCQhK1FLW9t-s9D60gpHLQ.roa File: MNH8MnCQhK1FLW9t-s9D60gpHLQ.roa (raw, json) Hash identifier: BNoOFJKZu4btITbkiLy5wsI/UU5c9pwD6e7jYJBgKtE= Subject key identifier: 30:D1:FC:32:70:90:84:AD:45:2D:6F:6D:FA:CF:43:EB:48:29:1C:B4 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E7F Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/MNH8MnCQhK1FLW9t-s9D60gpHLQ.roa Signing time: Fri 22 Aug 2025 09:03:19 +0000 ROA not before: Fri 22 Aug 2025 09:03:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 210.67.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3711 (0xe7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=30D1FC32709084AD452D6F6DFACF43EB48291CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:3a:72:ac:7c:1f:44:d7:bd:91:10:8c:e0: af:fd:f3:0f:70:c8:dc:51:39:13:3d:43:89:ab:f6: 71:ce:4d:c7:75:4b:d5:08:4c:88:ed:8e:78:99:8c: fd:29:8e:f6:1e:33:1e:c1:86:27:7e:5f:99:ce:49: a5:f4:6d:8a:04:87:f9:85:81:e6:c7:b8:cc:db:a5: 55:2b:b7:5b:4e:3c:90:2a:7a:a0:c8:3f:44:e4:64: 6b:73:bd:70:4d:4b:19:83:ae:07:0a:c4:21:b5:4b: 51:23:95:b5:30:e0:22:f2:52:9e:72:78:af:d3:67: fd:99:69:13:65:e9:12:85:d5:b7:4c:8b:e4:e0:56: 68:df:d9:c1:d6:04:e1:9c:a6:81:49:ed:1a:0f:c1: c3:24:07:0f:04:c7:e9:48:21:de:28:14:92:51:cb: 55:32:0e:bc:eb:60:54:dd:a9:d4:46:d5:24:5a:72: 50:dc:69:79:f1:17:47:9c:0e:2b:60:ea:59:5e:dd: 25:93:50:85:be:86:d6:02:73:be:93:b2:8d:36:46: de:7e:d1:eb:da:a3:81:ec:56:f0:6d:8f:d2:26:a3: c3:26:13:24:2a:b8:c1:e3:59:c6:01:f2:80:a3:5c: 5a:dd:6c:0a:fa:8f:74:db:f5:3b:e9:b3:a2:00:49: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:FC:32:70:90:84:AD:45:2D:6F:6D:FA:CF:43:EB:48:29:1C:B4 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/MNH8MnCQhK1FLW9t-s9D60gpHLQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.96.0/20 Signature Algorithm: sha256WithRSAEncryption a2:57:04:e7:f9:46:44:50:27:5d:61:5b:05:8e:50:aa:8a:ff: 2d:9a:1b:e3:1b:bc:f3:b9:6c:73:60:40:94:29:34:8e:b6:ba: ed:bc:32:9f:c1:71:7d:c1:77:b4:fd:f7:d8:f8:c9:8a:03:38: 57:31:0b:19:d4:54:e8:07:e7:e7:67:c7:c0:50:b9:06:42:bb: f3:73:8a:f4:c7:d8:3c:ba:6d:79:32:5f:d7:48:d8:9e:5b:7c: d1:61:d8:f6:95:16:8a:0d:4f:5b:22:e7:ce:7f:ad:8c:ca:34: 67:50:31:af:e0:fd:ef:d2:35:b7:fd:2a:3c:2a:8f:a8:24:3c: ef:9a:e7:95:18:f7:91:b9:78:83:6e:33:4e:b6:42:7c:d3:a9: fd:a7:a9:de:7c:e6:d0:46:1b:aa:d0:b2:62:29:0c:a5:b1:bd: 0d:c7:2f:e9:ba:49:d4:a4:1b:24:7e:47:2f:94:cb:e2:c2:f7: 28:0d:c9:38:b5:a5:3c:45:16:62:c1:ae:10:bb:c7:a8:22:a5: 4b:01:36:0d:46:a3:d7:a1:95:4c:bf:72:6a:2e:9a:d8:5d:63: 30:d1:c0:b6:68:a5:83:59:73:d0:f6:3e:98:56:93:96:90:3b: bf:48:59:e6:88:26:6b:b6:4d:b7:46:3b:b3:33:0b:b9:2f:44: 13:51:b7:a3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMwRDFGQzMyNzA5MDg0 QUQ0NTJENkY2REZBQ0Y0M0VCNDgyOTFDQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzFzpyrHwfRNe9kRCM4K/98w9wyNxRORM9Q4mr9nHOTcd1S9UI TIjtjniZjP0pjvYeMx7Bhid+X5nOSaX0bYoEh/mFgebHuMzbpVUrt1tOPJAqeqDI P0TkZGtzvXBNSxmDrgcKxCG1S1EjlbUw4CLyUp5yeK/TZ/2ZaRNl6RKF1bdMi+Tg Vmjf2cHWBOGcpoFJ7RoPwcMkBw8Ex+lIId4oFJJRy1UyDrzrYFTdqdRG1SRaclDc aXnxF0ecDitg6lle3SWTUIW+htYCc76Tso02Rt5+0evao4HsVvBtj9Imo8MmEyQq uMHjWcYB8oCjXFrdbAr6j3Tb9Tvps6IASSJlAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMNH8MnCQhK1FLW9t+s9D60gpHLQwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL01OSDhNbkNRaEsxRkxXOXQt czlENjBncEhMUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS Q2AwDQYJKoZIhvcNAQELBQADggEBAKJXBOf5RkRQJ11hWwWOUKqK/y2aG+MbvPO5 bHNgQJQpNI62uu28Mp/BcX3Bd7T999j4yYoDOFcxCxnUVOgH5+dnx8BQuQZCu/Nz ivTH2Dy6bXkyX9dI2J5bfNFh2PaVFooNT1si585/rYzKNGdQMa/g/e/SNbf9Kjwq j6gkPO+a55UY95G5eINuM062QnzTqf2nqd585tBGG6rQsmIpDKWxvQ3HL+m6SdSk GyR+Ry+Uy+LC9ygNyTi1pTxFFmLBrhC7x6gipUsBNg1Go9ehlUy/cmoumthdYzDR wLZopYNZc9D2PphWk5aQO79IWeaIJmu2TbdGO7MzC7kvRBNRt6M= -----END CERTIFICATE-----Generated at Mon Aug 25 01:34:04 2025 by rpki-client