$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/TzJSzzeHobsqjOVM2qxVNeoa5eU.roa File: TzJSzzeHobsqjOVM2qxVNeoa5eU.roa (raw, json) Hash identifier: zbasWfcpWfJ3KYupuO6sUOxYNCE7ltFbGRA9Wvb9hDk= Subject key identifier: 4F:32:52:CF:37:87:A1:BB:2A:8C:E5:4C:DA:AC:55:35:EA:1A:E5:E5 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E76 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/TzJSzzeHobsqjOVM2qxVNeoa5eU.roa Signing time: Fri 22 Aug 2025 09:03:17 +0000 ROA not before: Fri 22 Aug 2025 09:03:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 61.56.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3702 (0xe76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4F3252CF3787A1BB2A8CE54CDAAC5535EA1AE5E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:65:89:78:51:05:17:3e:2e:ef:30:a7:dd: 39:6e:06:85:83:cb:77:be:6e:6b:29:38:59:e1:5a: 56:d8:a2:15:6d:0c:e7:90:83:3c:c4:37:29:13:5f: 6e:b3:98:e0:c0:82:a8:64:15:ff:b1:50:1b:2b:ac: 65:67:a2:79:a9:b4:8d:7e:eb:f5:b4:c8:ec:cf:cb: be:df:f2:00:51:a3:4f:d0:b7:38:5d:d9:bb:20:27: 2b:bd:08:75:30:42:b6:89:4a:ab:6a:81:12:31:5c: fe:e1:b7:cc:10:e8:a3:dd:63:4a:2a:f3:a1:da:80: 17:98:c7:a7:a4:66:15:96:52:e8:d2:11:40:32:dc: 66:48:33:a2:9d:cb:c3:4b:9e:a0:4c:df:00:84:dd: 86:17:6a:41:a8:6f:f8:7c:44:54:f8:65:b7:6d:67: 83:47:ff:43:69:a4:cd:c5:84:c6:29:cd:a9:9e:2a: 3e:e1:f6:04:b9:6a:4c:b4:53:2c:ab:4c:ac:73:14: 03:72:5b:10:88:77:1b:11:22:58:31:99:42:fc:4b: 73:9d:93:28:35:6c:99:6d:1e:57:24:64:46:e9:32: 27:05:ba:a4:32:41:a0:04:7e:2e:87:7a:5b:ed:4f: 22:92:da:22:41:08:45:6b:7d:e6:d0:bb:17:6a:13: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:32:52:CF:37:87:A1:BB:2A:8C:E5:4C:DA:AC:55:35:EA:1A:E5:E5 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/TzJSzzeHobsqjOVM2qxVNeoa5eU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.84.0/24 Signature Algorithm: sha256WithRSAEncryption 08:54:0a:b4:a3:37:4c:09:30:d9:5f:6e:af:ed:f2:97:2e:f0: 41:d9:ff:31:3d:13:a7:00:0d:1d:5c:d6:17:89:ce:4f:68:e1: cb:f8:76:b2:51:a5:e5:96:c1:cd:3a:b9:2a:b3:82:bd:2e:e1: 75:92:cb:a5:cc:39:58:09:08:0c:04:1b:26:12:b5:8e:f8:47: 9f:66:fb:5c:ea:ef:46:e5:64:c4:c3:dc:0f:f9:d7:07:6f:5f: c5:1b:bd:bc:be:91:4a:59:ec:35:f5:cd:17:5f:33:87:53:14: a2:39:9d:e5:49:86:fd:96:1b:55:5b:d4:2e:86:04:08:8d:cc: 65:da:d3:e3:fc:4e:b6:6b:01:df:1b:74:0b:5f:97:25:ba:c8: 7b:0c:be:cb:44:3d:80:4c:82:ae:3a:ec:a9:e6:c7:02:64:a8: c0:7b:c0:b9:c1:71:e6:6a:99:d7:a4:90:be:3e:dc:60:ff:04: 27:d4:ff:e0:c4:6e:04:e3:df:98:0b:3f:e2:de:8e:31:63:54: 0e:fd:e6:ba:56:da:6f:ab:3b:04:6d:48:8d:87:38:84:d8:86: 67:4e:fc:0f:da:38:64:9f:99:82:16:be:5b:bb:58:f3:64:ce: d3:12:c7:9c:03:a3:6c:f1:a2:25:28:03:c2:e1:5b:8e:2a:78: 73:77:2d:b4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDnYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRGMzI1MkNGMzc4N0Ex QkIyQThDRTU0Q0RBQUM1NTM1RUExQUU1RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI8GWJeFEFFz4u7zCn3TluBoWDy3e+bmspOFnhWlbYohVtDOeQ gzzENykTX26zmODAgqhkFf+xUBsrrGVnonmptI1+6/W0yOzPy77f8gBRo0/Qtzhd 2bsgJyu9CHUwQraJSqtqgRIxXP7ht8wQ6KPdY0oq86HagBeYx6ekZhWWUujSEUAy 3GZIM6Kdy8NLnqBM3wCE3YYXakGob/h8RFT4ZbdtZ4NH/0NppM3FhMYpzameKj7h 9gS5aky0UyyrTKxzFANyWxCIdxsRIlgxmUL8S3Odkyg1bJltHlckZEbpMicFuqQy QaAEfi6HelvtTyKS2iJBCEVrfebQuxdqEy0hAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUTzJSzzeHobsqjOVM2qxVNeoa5eUwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1R6SlN6emVIb2JzcWpPVk0y cXhWTmVvYTVlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 OFQwDQYJKoZIhvcNAQELBQADggEBAAhUCrSjN0wJMNlfbq/t8pcu8EHZ/zE9E6cA DR1c1heJzk9o4cv4drJRpeWWwc06uSqzgr0u4XWSy6XMOVgJCAwEGyYStY74R59m +1zq70blZMTD3A/51wdvX8Ubvby+kUpZ7DX1zRdfM4dTFKI5neVJhv2WG1Vb1C6G BAiNzGXa0+P8TrZrAd8bdAtflyW6yHsMvstEPYBMgq467KnmxwJkqMB7wLnBceZq mdekkL4+3GD/BCfU/+DEbgTj35gLP+LejjFjVA795rpW2m+rOwRtSI2HOITYhmdO /A/aOGSfmYIWvlu7WPNkztMSx5wDo2zxoiUoA8LhW44qeHN3LbQ= -----END CERTIFICATE-----Generated at Mon Aug 25 01:21:03 2025 by rpki-client