$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/jDkDAIoqgp6yGjAkc73AHt0sSOA.roa File: jDkDAIoqgp6yGjAkc73AHt0sSOA.roa (raw, json) Hash identifier: oHl3qTG4MSRZSMTWLx3M33ZuqbNakRAqnIQ1PDxQjdE= Subject key identifier: 8C:39:03:00:8A:2A:82:9E:B2:1A:30:24:73:BD:C0:1E:DD:2C:48:E0 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E8F Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/jDkDAIoqgp6yGjAkc73AHt0sSOA.roa Signing time: Fri 22 Aug 2025 09:03:22 +0000 ROA not before: Fri 22 Aug 2025 09:03:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 61.247.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3727 (0xe8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8C3903008A2A829EB21A302473BDC01EDD2C48E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:72:8a:44:46:96:9c:0d:0a:b3:f3:ec:91: de:30:2b:2f:f2:2c:e3:95:51:c3:bc:01:a7:47:0a: 0e:0d:63:a1:84:3d:f6:ba:f3:8f:9c:18:9c:64:40: c7:3b:0c:d1:83:d7:2c:48:26:6f:f3:8b:88:82:3c: ac:b3:07:08:93:9b:b0:cd:d7:64:c6:1e:af:d3:80: 29:95:6e:e0:63:37:c6:de:9a:f6:1f:47:88:c7:8c: b5:98:1e:12:5f:56:63:54:80:c6:80:1d:0b:6a:14: 61:ff:b3:dc:13:24:6e:80:28:5d:a3:1c:64:81:1b: 5e:33:7d:20:6c:7d:53:98:86:80:c8:d0:24:d1:f7: 6b:9d:5c:c5:5b:e4:dc:0f:01:82:4c:58:78:b0:06: 7b:ef:3f:2d:47:53:3f:ce:db:26:83:fe:34:d9:f9: 9c:88:52:25:7c:b2:e5:5a:0b:92:f7:16:c8:8e:45: 07:eb:90:3a:68:08:c6:59:7e:63:b1:fb:45:14:89: b9:56:77:3e:99:4e:01:49:d2:8b:de:a5:eb:64:d3: 2a:c8:7a:74:9d:7c:1d:ca:92:c1:72:a5:29:90:97: ad:ba:5d:fc:58:b3:be:69:d6:db:e4:3e:c9:4b:57: 19:dc:26:8a:bf:19:b2:18:5d:05:c0:cb:28:4d:25: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:03:00:8A:2A:82:9E:B2:1A:30:24:73:BD:C0:1E:DD:2C:48:E0 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/jDkDAIoqgp6yGjAkc73AHt0sSOA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.247.160.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:ef:80:20:ad:4b:b3:6e:87:87:b9:07:f1:1c:db:77:eb:bc: e6:79:47:bc:31:21:5f:71:26:80:2d:1a:ae:ba:9f:6b:55:c5: 43:d6:48:08:48:2c:11:a1:57:71:e6:fe:ae:b9:29:88:72:a9: cf:05:9d:f3:b6:ba:13:3a:00:16:93:e9:1e:4b:a1:64:e3:9d: f3:bd:aa:b1:c6:b7:2f:cc:f5:49:ab:76:45:c2:c6:34:ee:1d: 3f:ee:5b:9a:b6:7f:68:2b:10:60:73:50:e1:63:0b:1e:08:f8: d5:63:98:5e:f5:fc:81:28:5a:c7:85:cb:87:a2:4f:1b:f2:ef: 74:81:eb:57:ab:51:b2:aa:10:e6:5a:7f:73:b4:04:fa:8b:76: 5d:77:f0:b4:d1:41:05:01:13:6b:da:aa:b9:0f:0c:43:98:1a: ba:9a:75:ad:2a:cf:79:4a:3d:77:da:f2:1d:a0:7a:98:fb:a4: 62:8c:3d:6c:ba:2a:3f:08:1b:07:8b:ac:54:22:95:1f:6d:09: b0:99:19:f4:1e:30:9d:1c:cf:e7:5b:b3:49:15:bd:0a:07:0d: 8c:af:29:42:7f:5a:b5:e0:a7:ed:7f:76:90:11:48:9b:91:13: e4:93:cc:1f:77:2f:2b:43:56:bf:fe:e6:99:c3:ac:a1:13:3e: 9e:6f:ba:0a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhDMzkwMzAwOEEyQTgy OUVCMjFBMzAyNDczQkRDMDFFREQyQzQ4RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC093KKREaWnA0Ks/Pskd4wKy/yLOOVUcO8AadHCg4NY6GEPfa6 84+cGJxkQMc7DNGD1yxIJm/zi4iCPKyzBwiTm7DN12TGHq/TgCmVbuBjN8bemvYf R4jHjLWYHhJfVmNUgMaAHQtqFGH/s9wTJG6AKF2jHGSBG14zfSBsfVOYhoDI0CTR 92udXMVb5NwPAYJMWHiwBnvvPy1HUz/O2yaD/jTZ+ZyIUiV8suVaC5L3FsiORQfr kDpoCMZZfmOx+0UUiblWdz6ZTgFJ0ovepetk0yrIenSdfB3KksFypSmQl626XfxY s75p1tvkPslLVxncJoq/GbIYXQXAyyhNJdw3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjDkDAIoqgp6yGjAkc73AHt0sSOAwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2pEa0RBSW9xZ3A2eUdqQWtj NzNBSHQwc1NPQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 96AwDQYJKoZIhvcNAQELBQADggEBAI3vgCCtS7Nuh4e5B/Ec23frvOZ5R7wxIV9x JoAtGq66n2tVxUPWSAhILBGhV3Hm/q65KYhyqc8FnfO2uhM6ABaT6R5LoWTjnfO9 qrHGty/M9UmrdkXCxjTuHT/uW5q2f2grEGBzUOFjCx4I+NVjmF71/IEoWseFy4ei Txvy73SB61erUbKqEOZaf3O0BPqLdl138LTRQQUBE2vaqrkPDEOYGrqada0qz3lK PXfa8h2gepj7pGKMPWy6Kj8IGweLrFQilR9tCbCZGfQeMJ0cz+dbs0kVvQoHDYyv KUJ/WrXgp+1/dpARSJuRE+STzB93LytDVr/+5pnDrKETPp5vugo= -----END CERTIFICATE-----Generated at Mon Aug 25 01:21:02 2025 by rpki-client