$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/Lq3J9jQNXoLHx_ehsdsOuUwmbPw.roa File: Lq3J9jQNXoLHx_ehsdsOuUwmbPw.roa (raw, json) Hash identifier: y1U+ir//kAGyan2tmalsOslVDhdW/x9HnAg8o2+mVYE= Subject key identifier: 2E:AD:C9:F6:34:0D:5E:82:C7:C7:F7:A1:B1:DB:0E:B9:4C:26:6C:FC Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0DB5 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/Lq3J9jQNXoLHx_ehsdsOuUwmbPw.roa Signing time: Fri 22 Aug 2025 08:56:05 +0000 ROA not before: Fri 22 Aug 2025 08:56:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18411 IP address blocks: 61.56.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 22 08:56:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2EADC9F6340D5E82C7C7F7A1B1DB0EB94C266CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:f1:12:b3:fa:d8:50:16:0b:ef:ed:9a:58: c0:23:a4:da:e3:6b:86:bc:47:ac:cf:cb:57:25:cb: d2:29:7a:a2:3b:75:79:5e:9f:62:a3:b5:83:f6:88: a9:1e:d2:3f:a6:4e:33:14:b8:64:04:12:57:dc:b2: 50:7c:66:02:85:3c:94:99:83:3a:9e:80:4c:99:89: 25:3c:80:2c:68:12:a9:ab:12:ec:d9:0a:ca:eb:b2: 31:4b:8e:06:92:29:5c:f5:76:91:15:70:16:4d:7b: b6:a7:c0:b6:42:6a:8c:79:d6:4b:3f:c1:47:8a:01: 02:21:03:d9:47:4f:6a:ce:b3:d0:19:4e:cc:85:70: 7f:0b:ec:c4:fc:4c:a7:c6:bf:e7:7b:e4:bf:aa:9e: d9:ac:5a:27:1c:b6:6d:d7:98:ec:0b:b5:0c:33:72: 29:0a:9d:fa:42:80:df:3d:c5:2d:05:c4:15:4b:87: 93:e0:ac:1a:9b:12:99:2a:4f:c4:29:79:4e:19:c8: 1e:b1:d5:16:d9:d2:68:c9:2c:c0:e3:8c:ac:14:ea: ef:16:10:d3:29:28:01:cc:e6:33:35:52:b4:dd:7a: 88:f6:fe:d1:c0:98:d6:7e:9a:4f:f3:98:23:58:1c: 70:fc:1c:e5:9e:3d:fd:db:88:72:2f:51:fa:cb:a3: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:C9:F6:34:0D:5E:82:C7:C7:F7:A1:B1:DB:0E:B9:4C:26:6C:FC X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/Lq3J9jQNXoLHx_ehsdsOuUwmbPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.18.0/24 Signature Algorithm: sha256WithRSAEncryption f4:f2:09:92:eb:64:63:56:03:73:4d:61:a3:bb:04:31:9e:2e: 38:67:04:c5:7b:c2:14:3c:af:db:46:ac:7a:aa:00:a4:a5:74: fc:ff:33:20:d4:cc:29:79:7f:81:67:88:19:1d:c5:ce:6c:5e: b6:f9:91:4e:f7:7e:a8:db:7e:2e:45:d7:e6:d0:1d:4b:f3:33: b4:4f:7b:97:71:56:be:11:ea:73:df:a5:aa:f6:06:bd:c1:b7: 85:bb:a2:f8:15:2d:12:33:45:2f:81:c5:38:23:a1:61:fe:fe: df:30:da:d3:95:03:56:9d:41:c8:5b:e6:93:46:e4:ae:74:b0: 63:00:62:a9:56:64:93:01:6e:fd:f4:4f:fc:19:64:36:b4:67: a4:d9:b2:73:3a:7c:84:7b:da:49:74:a8:47:1c:b0:90:3e:31: 98:4f:e2:88:51:af:ea:c6:f2:c8:8e:d4:ff:16:44:70:9f:15: 56:7c:63:84:c5:30:6a:a4:87:ee:1e:49:87:dc:38:df:ad:a5: cf:0a:56:77:00:de:fa:75:17:24:a6:94:f9:f5:b3:77:3e:7a: 8a:d8:16:9c:3e:58:ec:0d:29:9d:ce:d9:7e:1c:8c:d7:df:a6: 7c:a5:f5:7a:66:c7:64:f8:a2:20:8d:b0:cb:8e:58:a5:30:28: e4:c8:e5:dd -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNTA4MjIw ODU2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJFQURDOUY2MzQwRDVF ODJDN0M3RjdBMUIxREIwRUI5NEMyNjZDRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9vfESs/rYUBYL7+2aWMAjpNrja4a8R6zPy1cly9IpeqI7dXle n2KjtYP2iKke0j+mTjMUuGQEElfcslB8ZgKFPJSZgzqegEyZiSU8gCxoEqmrEuzZ CsrrsjFLjgaSKVz1dpEVcBZNe7anwLZCaox51ks/wUeKAQIhA9lHT2rOs9AZTsyF cH8L7MT8TKfGv+d75L+qntmsWicctm3XmOwLtQwzcikKnfpCgN89xS0FxBVLh5Pg rBqbEpkqT8QpeU4ZyB6x1RbZ0mjJLMDjjKwU6u8WENMpKAHM5jM1UrTdeoj2/tHA mNZ+mk/zmCNYHHD8HOWePf3biHIvUfrLo69BAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQULq3J9jQNXoLHx/ehsdsOuUwmbPwwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9McTNKOWpRTlhvTEh4X2Voc2Rz T3VVd21iUHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgS MA0GCSqGSIb3DQEBCwUAA4IBAQD08gmS62RjVgNzTWGjuwQxni44ZwTFe8IUPK/b Rqx6qgCkpXT8/zMg1MwpeX+BZ4gZHcXObF62+ZFO936o234uRdfm0B1L8zO0T3uX cVa+Eepz36Wq9ga9wbeFu6L4FS0SM0UvgcU4I6Fh/v7fMNrTlQNWnUHIW+aTRuSu dLBjAGKpVmSTAW799E/8GWQ2tGek2bJzOnyEe9pJdKhHHLCQPjGYT+KIUa/qxvLI jtT/FkRwnxVWfGOExTBqpIfuHkmH3DjfraXPClZ3AN76dRckppT59bN3PnqK2Bac PljsDSmdztl+HIzX36Z8pfV6Zsdk+KIgjbDLjlilMCjkyOXd -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:23 2025 by rpki-client