$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tB2SCRr9zTP6aiBQyloaMBOnDn4.roa File: tB2SCRr9zTP6aiBQyloaMBOnDn4.roa (raw, json) Hash identifier: zRSQ2+xzHA2rRWcKYdnROqcAzyhVX+4nYUd+CzkRBGA= Subject key identifier: B4:1D:92:09:1A:FD:CD:33:FA:6A:20:50:CA:5A:1A:30:13:A7:0E:7E Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E81 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tB2SCRr9zTP6aiBQyloaMBOnDn4.roa Signing time: Fri 22 Aug 2025 09:03:20 +0000 ROA not before: Fri 22 Aug 2025 09:03:20 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 61.56.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3713 (0xe81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B41D92091AFDCD33FA6A2050CA5A1A3013A70E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:2f:bf:36:91:c4:b2:34:65:d9:d3:66:7f: 03:d6:37:0c:5f:cf:5d:e1:cc:2a:25:f9:be:08:cd: 0b:67:01:89:96:e8:90:0f:4a:95:95:84:2d:a7:ad: ec:e4:d7:2d:57:61:20:23:e9:a2:ae:a4:c6:b0:f4: 53:4a:56:c6:62:ea:d6:c8:31:a8:c3:a3:ee:d0:0f: dc:4d:b1:b1:96:32:95:ec:b8:22:ee:f5:76:7f:33: 82:aa:4d:7f:48:70:26:55:bf:10:92:0d:f2:c1:51: 68:53:50:8f:c4:43:da:fc:95:80:d9:99:9e:7b:b1: 56:af:d0:7d:d1:83:cd:af:2f:3c:35:11:e1:e1:fb: 7d:12:1d:eb:82:79:19:99:b4:68:2d:5a:c2:ad:f4: 03:3a:fe:a0:c6:7d:26:50:20:f0:4b:0d:d1:52:60: d1:e8:a7:cb:e4:72:8c:dd:3c:68:17:69:1f:13:4b: e4:51:12:cb:bf:b0:26:28:7f:49:ec:8b:88:8f:59: 76:8c:43:24:df:af:3e:e6:e2:98:00:35:b6:57:8c: b1:9e:a4:a9:c4:ae:cb:65:23:5c:87:38:89:fb:93: 34:8f:f5:06:c4:c2:08:66:c4:7a:57:37:fa:78:61: 19:9a:be:3d:ef:60:19:90:4b:ce:43:44:d1:ee:03: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1D:92:09:1A:FD:CD:33:FA:6A:20:50:CA:5A:1A:30:13:A7:0E:7E X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tB2SCRr9zTP6aiBQyloaMBOnDn4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.64.0/20 Signature Algorithm: sha256WithRSAEncryption 61:f3:32:79:bd:cd:0b:f1:f3:3d:51:3e:1e:ab:9d:88:b4:a0: 09:d7:07:35:32:8a:a3:4f:7d:20:5d:2c:85:81:95:85:13:00: 9e:3a:ee:1b:71:c6:d0:58:21:64:7c:81:0a:ba:94:ff:90:cf: 78:c4:53:72:55:28:c9:1c:0d:8a:7a:ab:38:04:36:6c:be:2d: 99:51:b9:62:94:d9:85:70:af:d4:0a:4b:d3:97:77:28:52:b3: 48:99:55:84:c0:17:2d:cc:ce:25:4f:1d:f6:a2:ac:0b:dd:5b: ae:9b:34:da:5e:44:b8:ff:0c:21:92:e2:cf:1a:a1:23:a9:25: 90:cd:72:88:ae:d4:d2:d8:0c:d3:a3:c6:70:a7:4b:37:1e:87: d7:cd:da:8c:01:f8:df:cc:74:b7:ca:f4:64:92:08:65:6f:79: a4:18:ec:a4:e7:47:b2:8e:95:57:a7:75:2c:5d:88:29:52:b6: 62:ca:bc:1f:fb:a7:cb:11:b6:66:70:22:2b:8a:22:ba:1b:d8: 62:db:7e:35:49:56:0a:28:8b:26:a7:82:2b:ad:58:37:9e:8a: 4d:ee:18:58:3d:af:aa:22:15:12:10:53:98:c8:c9:9c:e7:a0: 29:90:d0:78:4f:c9:e5:97:37:77:c8:c0:74:3d:97:be:dd:8a: 85:20:ef:3f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI0MUQ5MjA5MUFGRENE MzNGQTZBMjA1MENBNUExQTMwMTNBNzBFN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDShy+/NpHEsjRl2dNmfwPWNwxfz13hzCol+b4IzQtnAYmW6JAP SpWVhC2nrezk1y1XYSAj6aKupMaw9FNKVsZi6tbIMajDo+7QD9xNsbGWMpXsuCLu 9XZ/M4KqTX9IcCZVvxCSDfLBUWhTUI/EQ9r8lYDZmZ57sVav0H3Rg82vLzw1EeHh +30SHeuCeRmZtGgtWsKt9AM6/qDGfSZQIPBLDdFSYNHop8vkcozdPGgXaR8TS+RR Esu/sCYof0nsi4iPWXaMQyTfrz7m4pgANbZXjLGepKnErstlI1yHOIn7kzSP9QbE wghmxHpXN/p4YRmavj3vYBmQS85DRNHuA9MTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtB2SCRr9zTP6aiBQyloaMBOnDn4wHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3RCMlNDUnI5elRQNmFpQlF5 bG9hTUJPbkRuNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OEAwDQYJKoZIhvcNAQELBQADggEBAGHzMnm9zQvx8z1RPh6rnYi0oAnXBzUyiqNP fSBdLIWBlYUTAJ467htxxtBYIWR8gQq6lP+Qz3jEU3JVKMkcDYp6qzgENmy+LZlR uWKU2YVwr9QKS9OXdyhSs0iZVYTAFy3MziVPHfairAvdW66bNNpeRLj/DCGS4s8a oSOpJZDNcoiu1NLYDNOjxnCnSzceh9fN2owB+N/MdLfK9GSSCGVveaQY7KTnR7KO lVendSxdiClStmLKvB/7p8sRtmZwIiuKIrob2GLbfjVJVgooiyangiutWDeeik3u GFg9r6oiFRIQU5jIyZznoCmQ0HhPyeWXN3fIwHQ9l77dioUg7z8= -----END CERTIFICATE-----Generated at Mon Aug 25 01:21:03 2025 by rpki-client