$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/6XWK2yZGWYhmov7b_2idV29WoKA.roa File: 6XWK2yZGWYhmov7b_2idV29WoKA.roa (raw, json) Hash identifier: lTe4vjsbmkZ/8H8IoZIwaB/Hr08eWMyJAZq/W0TMH+0= Subject key identifier: E9:75:8A:DB:26:46:59:88:66:A2:FE:DB:FF:68:9D:57:6F:56:A0:A0 Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0DB8 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/6XWK2yZGWYhmov7b_2idV29WoKA.roa Signing time: Fri 22 Aug 2025 08:56:05 +0000 ROA not before: Fri 22 Aug 2025 08:56:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18411 IP address blocks: 61.56.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3512 (0xdb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 22 08:56:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E9758ADB2646598866A2FEDBFF689D576F56A0A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:b1:33:72:a7:7d:94:07:3e:91:04:05:26: da:df:f4:26:23:1e:2d:49:ab:95:4a:15:a4:42:79: 0d:ca:99:9e:b2:4b:e1:b9:4e:50:99:ab:43:f0:16: 89:3f:1d:d5:26:6f:04:9e:64:43:3e:1e:04:35:8b: f2:32:0c:fb:61:d4:93:00:1f:1b:36:49:3e:8e:40: 2b:0e:e8:95:79:c8:20:b3:99:c2:ff:27:36:95:77: df:33:b3:4a:9f:cd:a1:fa:87:71:27:0d:8a:24:8f: 8d:b0:2a:64:02:63:3c:e0:d6:0a:39:02:7a:34:ff: 13:84:7b:d0:72:21:8d:a2:72:7f:70:f4:3e:b6:91: 43:88:57:7a:4d:a5:e7:bb:7a:a6:93:ca:69:d6:3c: 0d:1c:ab:2e:f1:06:6d:0e:d8:ab:73:9f:cf:ab:cf: b5:a5:5a:3c:4d:6f:a6:a4:2b:23:13:0b:2d:f3:16: 62:b9:61:33:88:b0:6e:f3:6a:92:bb:55:7f:cd:4b: 18:55:98:86:3d:8c:d1:97:b9:a0:fd:fc:1b:d3:24: 2b:c3:9f:d7:9a:1a:63:2c:6e:f9:be:b5:6d:57:86: 6c:d6:41:14:99:60:f7:5e:c8:5e:1d:13:7d:aa:31: e3:c9:fe:a4:36:cc:b1:b7:20:2a:0e:1c:c2:c7:8d: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:8A:DB:26:46:59:88:66:A2:FE:DB:FF:68:9D:57:6F:56:A0:A0 X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/6XWK2yZGWYhmov7b_2idV29WoKA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.24.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:63:70:67:7d:3a:e7:f4:55:ce:8b:4d:74:b9:a8:91:64:69: e8:4a:df:6b:e9:d8:46:f2:06:8b:79:1c:f7:ef:eb:b7:7e:09: 44:3b:e2:b4:76:96:14:53:70:af:58:d5:e1:89:dc:f2:ab:13: 1f:6a:dc:6c:6b:d5:c7:ee:07:bd:fb:18:b1:e6:b5:84:57:ec: 16:92:3a:5c:60:07:50:0f:ff:12:3f:13:8b:50:b5:92:ad:d7: 65:d8:08:12:ab:4e:c9:1f:7b:c9:96:66:a0:2b:bc:29:f1:79: 4c:06:01:a5:06:e8:8b:ca:3f:86:ae:a1:46:22:60:78:2f:64: 8b:a3:dd:56:7f:f8:4f:26:76:bd:81:0e:72:af:38:97:a5:0f: 73:4c:41:db:c5:28:7b:14:2f:04:e9:2c:96:36:b4:42:3c:1e: bf:c1:ca:ae:37:d4:b9:4f:01:dd:ff:95:f2:23:0c:c1:20:65: 1f:00:b5:9f:7c:31:76:74:61:9f:9b:73:27:ee:df:20:7e:e5: 16:74:3d:e2:f9:a5:c5:dd:db:2d:bf:b6:59:d3:28:34:cd:83: c9:ff:df:b6:a5:2d:b8:91:03:6b:38:59:2f:73:5a:86:d2:5b: bc:8e:9c:b8:c3:7b:18:b4:8a:92:b3:fa:a7:53:29:62:c8:c5: b9:6f:ad:f8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNTA4MjIw ODU2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU5NzU4QURCMjY0NjU5 ODg2NkEyRkVEQkZGNjg5RDU3NkY1NkEwQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ALEzcqd9lAc+kQQFJtrf9CYjHi1Jq5VKFaRCeQ3KmZ6yS+G5 TlCZq0PwFok/HdUmbwSeZEM+HgQ1i/IyDPth1JMAHxs2ST6OQCsO6JV5yCCzmcL/ JzaVd98zs0qfzaH6h3EnDYokj42wKmQCYzzg1go5Ano0/xOEe9ByIY2icn9w9D62 kUOIV3pNpee7eqaTymnWPA0cqy7xBm0O2Ktzn8+rz7WlWjxNb6akKyMTCy3zFmK5 YTOIsG7zapK7VX/NSxhVmIY9jNGXuaD9/BvTJCvDn9eaGmMsbvm+tW1XhmzWQRSZ YPdeyF4dE32qMePJ/qQ2zLG3ICoOHMLHjdaZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU6XWK2yZGWYhmov7b/2idV29WoKAwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy82WFdLMnlaR1dZaG1vdjdiXzJp ZFYyOVdvS0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgY MA0GCSqGSIb3DQEBCwUAA4IBAQCNY3BnfTrn9FXOi010uaiRZGnoSt9r6dhG8gaL eRz37+u3fglEO+K0dpYUU3CvWNXhidzyqxMfatxsa9XH7ge9+xix5rWEV+wWkjpc YAdQD/8SPxOLULWSrddl2AgSq07JH3vJlmagK7wp8XlMBgGlBuiLyj+GrqFGImB4 L2SLo91Wf/hPJna9gQ5yrziXpQ9zTEHbxSh7FC8E6SyWNrRCPB6/wcquN9S5TwHd /5XyIwzBIGUfALWffDF2dGGfm3Mn7t8gfuUWdD3i+aXF3dstv7ZZ0yg0zYPJ/9+2 pS24kQNrOFkvc1qG0lu8jpy4w3sYtIqSs/qnUyliyMW5b634 -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:23 2025 by rpki-client