$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/z0dDfMyZipxFEkESnr-uh8lJNNs.roa File: z0dDfMyZipxFEkESnr-uh8lJNNs.roa (raw, json) Hash identifier: XCmeay7YrJW2bLHHiCNL646jqVs0jpzFNwuF2zt4rHs= Subject key identifier: CF:47:43:7C:CC:99:8A:9C:45:12:41:12:9E:BF:AE:87:C9:49:34:DB Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0E8A Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/z0dDfMyZipxFEkESnr-uh8lJNNs.roa Signing time: Fri 22 Aug 2025 09:03:22 +0000 ROA not before: Fri 22 Aug 2025 09:03:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9244 IP address blocks: 113.21.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3722 (0xe8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 22 09:03:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CF47437CCC998A9C451241129EBFAE87C94934DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:d9:f8:b8:bc:d9:23:e4:10:e2:b4:32:f7: 6b:d2:e7:48:8c:e6:e4:5d:39:b7:a9:a4:7c:a5:0f: f9:94:ad:14:5f:7f:0b:2d:f9:a6:67:bd:12:72:92: 48:9f:70:57:93:18:25:f1:44:44:3b:45:d1:35:b3: 27:07:a2:19:3a:e3:4b:f5:75:43:b1:72:e4:c3:09: 05:9c:cb:b0:66:c4:36:3c:a3:80:81:1a:8e:f4:f4: 72:d8:b4:60:4c:01:0c:07:05:62:29:41:2d:39:16: 44:cd:97:d4:35:38:b6:a6:c6:5e:17:6f:de:d8:16: 31:f1:f0:eb:8e:4a:7c:b0:b8:5d:83:4b:9e:b9:e7: 4c:b5:32:b9:18:6a:e0:32:26:27:b2:3c:59:04:a0: 20:49:b9:26:3f:a8:b6:cc:7d:22:da:37:aa:8f:fd: 1a:19:46:54:b3:2f:f8:12:ae:21:1b:a2:b3:01:8f: 32:72:cd:7f:44:fd:c5:b1:ab:c7:95:42:fd:75:21: b9:79:5b:e6:7b:d4:f7:c9:93:5b:ec:64:a2:62:65: 38:11:25:10:d4:11:cf:20:ad:8f:ad:2d:f8:70:44: 52:1d:89:a2:c5:4e:8c:99:56:09:ca:0f:1f:d3:f1: b4:21:99:94:1c:57:29:a5:2e:e6:79:b6:37:a8:44: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:47:43:7C:CC:99:8A:9C:45:12:41:12:9E:BF:AE:87:C9:49:34:DB X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/z0dDfMyZipxFEkESnr-uh8lJNNs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.188.0/22 Signature Algorithm: sha256WithRSAEncryption 24:ab:23:49:50:61:b8:c5:ed:04:96:a6:95:59:17:64:f1:6d: 5c:50:88:c4:3f:8f:d7:9c:77:7c:23:09:cf:2e:0b:c7:dd:01: ce:88:8a:7a:90:c0:aa:a6:95:02:5d:de:e9:05:31:7e:ab:a3: 9d:59:fd:5d:09:d0:63:89:31:3f:05:18:2e:72:86:6e:8d:a4: 1d:a5:dc:d8:61:3e:e0:c4:4b:80:e8:27:1f:68:77:8e:3f:3e: 29:51:c9:db:9b:03:ea:a4:71:19:5b:20:1b:c6:eb:a2:46:34: c3:9e:26:d1:19:85:a2:e5:61:43:df:31:77:e7:23:6b:93:74: 6c:35:f4:76:11:11:c9:01:63:dd:45:a8:3e:a1:c1:c9:32:8b: c6:ef:26:91:f2:47:68:76:32:99:a1:73:e8:0f:06:64:10:da: 37:20:45:73:ed:fb:93:e9:23:c3:45:be:83:c2:44:01:0c:3b: e4:bb:da:06:0e:00:f5:65:b8:eb:db:85:1b:03:51:c9:73:f9: c7:c1:65:a3:71:d1:06:08:95:5c:3e:81:c4:8b:c1:42:74:bc: 9e:77:c5:dd:2f:7a:a9:57:88:e7:41:71:13:36:92:41:2e:c8: 65:3f:f7:5c:6f:e4:27:84:2a:9e:1c:72:4c:af:f4:d4:df:98: af:45:bb:ff -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNTA4MjIw OTAzMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENGNDc0MzdDQ0M5OThB OUM0NTEyNDExMjlFQkZBRTg3Qzk0OTM0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoc9n4uLzZI+QQ4rQy92vS50iM5uRdObeppHylD/mUrRRffwst +aZnvRJykkifcFeTGCXxREQ7RdE1sycHohk640v1dUOxcuTDCQWcy7BmxDY8o4CB Go709HLYtGBMAQwHBWIpQS05FkTNl9Q1OLamxl4Xb97YFjHx8OuOSnywuF2DS565 50y1MrkYauAyJieyPFkEoCBJuSY/qLbMfSLaN6qP/RoZRlSzL/gSriEborMBjzJy zX9E/cWxq8eVQv11Ibl5W+Z71PfJk1vsZKJiZTgRJRDUEc8grY+tLfhwRFIdiaLF ToyZVgnKDx/T8bQhmZQcVymlLuZ5tjeoRBvFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUz0dDfMyZipxFEkESnr+uh8lJNNswHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3owZERmTXlaaXB4RkVrRVNu ci11aDhsSk5Ocy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJx FbwwDQYJKoZIhvcNAQELBQADggEBACSrI0lQYbjF7QSWppVZF2TxbVxQiMQ/j9ec d3wjCc8uC8fdAc6IinqQwKqmlQJd3ukFMX6ro51Z/V0J0GOJMT8FGC5yhm6NpB2l 3NhhPuDES4DoJx9od44/PilRydubA+qkcRlbIBvG66JGNMOeJtEZhaLlYUPfMXfn I2uTdGw19HYREckBY91FqD6hwckyi8bvJpHyR2h2Mpmhc+gPBmQQ2jcgRXPt+5Pp I8NFvoPCRAEMO+S72gYOAPVluOvbhRsDUclz+cfBZaNx0QYIlVw+gcSLwUJ0vJ53 xd0veqlXiOdBcRM2kkEuyGU/91xv5CeEKp4cckyv9NTfmK9Fu/8= -----END CERTIFICATE-----Generated at Mon Aug 25 01:28:35 2025 by rpki-client