$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/mpXrCN35Sze_yC1H3HRHrkX2kHM.roa File: mpXrCN35Sze_yC1H3HRHrkX2kHM.roa (raw, json) Hash identifier: PFXdElVNdpaUlN3QlBV//LECETW1m5s1mWQZFwKXpm8= Subject key identifier: 9A:95:EB:08:DD:F9:4B:37:BF:C8:2D:47:DC:74:47:AE:45:F6:90:73 Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0DB9 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/mpXrCN35Sze_yC1H3HRHrkX2kHM.roa Signing time: Fri 22 Aug 2025 08:56:06 +0000 ROA not before: Fri 22 Aug 2025 08:56:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18411 IP address blocks: 61.56.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3513 (0xdb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 22 08:56:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9A95EB08DDF94B37BFC82D47DC7447AE45F69073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:6c:ed:bb:dc:7f:59:1e:f0:c5:d9:b4:0d: 30:2d:e7:ee:ff:b8:13:bd:dd:f8:9c:16:db:be:c5: 88:41:1d:3f:7d:02:9a:c8:cb:05:2a:41:01:20:f8: f6:79:f5:91:d1:b9:f7:95:18:cc:2f:7d:6b:b9:8d: ea:0e:6b:85:22:f2:84:4e:52:a3:87:ba:da:ed:1b: 67:73:fe:1a:62:66:64:84:2a:cd:90:c8:f5:9f:05: 07:e7:6d:c6:e2:52:31:2a:98:61:9b:0b:70:b3:da: e7:1b:a0:c8:95:b0:5d:49:48:96:b6:80:ff:67:31: 27:66:65:67:c4:08:4f:ac:ed:0c:05:b1:65:9b:e7: 02:65:07:ef:bb:ce:bd:86:2d:37:0a:fb:a0:36:db: 91:c1:2f:b1:9e:eb:13:96:b9:21:db:3f:93:5b:5f: 3f:95:7a:1a:a4:97:76:64:9b:15:f8:f9:70:d5:8d: 55:b9:31:51:29:fa:b5:86:98:cc:e3:91:40:50:44: cf:4f:ce:6e:d8:31:ed:ee:a2:71:da:18:a1:31:aa: f3:13:dc:25:d1:ef:15:34:6c:a2:f3:bf:d2:bd:2c: 43:34:48:09:89:35:f8:02:2d:fa:4b:00:ac:19:16: 48:9e:c2:c9:c7:7d:3f:9c:db:a2:12:d5:0d:2e:20: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:EB:08:DD:F9:4B:37:BF:C8:2D:47:DC:74:47:AE:45:F6:90:73 X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/mpXrCN35Sze_yC1H3HRHrkX2kHM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.25.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f2:50:b1:d3:6a:9e:1d:4d:9d:ec:61:83:4c:e7:ad:ca:66: d1:99:bb:eb:45:63:f5:6d:c1:9a:29:70:91:37:b3:a8:8e:9f: 0f:5b:77:8a:13:5e:91:b0:a6:42:16:17:94:3f:a5:06:6b:f6: 8a:f7:ea:df:9a:41:d7:b3:ac:06:06:ba:5d:17:98:e5:6b:74: 2a:df:47:c9:c0:21:04:03:61:07:b4:5d:4f:a5:ac:84:87:b4: 63:6b:76:b2:cb:85:1d:4b:fd:2c:63:ad:d4:2b:9c:dd:72:a2: d4:e7:26:c1:9a:02:28:95:5e:6c:f5:fe:f6:03:08:04:b8:c1: dd:78:8f:8c:10:44:20:a3:53:16:37:d6:35:19:99:ea:b5:25: fe:a9:a1:65:3b:f7:1e:19:6a:2e:51:01:98:8e:1c:29:70:21: 76:43:34:16:26:02:e6:0c:cd:61:e6:ad:1a:7e:88:26:80:0c: b0:b9:6a:9c:f0:77:07:3d:ea:2b:3d:28:82:8f:5c:b6:de:dd: b7:91:ce:e5:c7:4b:dd:7b:43:f5:30:d9:af:19:36:62:c8:44: 01:ad:39:20:3e:a8:bf:ee:1a:5f:67:73:19:0c:96:7f:da:5e: 7d:28:c4:b4:c6:60:c5:0b:d6:95:57:83:71:c9:bf:dc:52:98: db:37:b7:2a -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNTA4MjIw ODU2MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBOTVFQjA4RERGOTRC MzdCRkM4MkQ0N0RDNzQ0N0FFNDVGNjkwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgaWztu9x/WR7wxdm0DTAt5+7/uBO93ficFtu+xYhBHT99AprI ywUqQQEg+PZ59ZHRufeVGMwvfWu5jeoOa4Ui8oROUqOHutrtG2dz/hpiZmSEKs2Q yPWfBQfnbcbiUjEqmGGbC3Cz2ucboMiVsF1JSJa2gP9nMSdmZWfECE+s7QwFsWWb 5wJlB++7zr2GLTcK+6A225HBL7Ge6xOWuSHbP5NbXz+Vehqkl3ZkmxX4+XDVjVW5 MVEp+rWGmMzjkUBQRM9Pzm7YMe3uonHaGKExqvMT3CXR7xU0bKLzv9K9LEM0SAmJ NfgCLfpLAKwZFkiewsnHfT+c26IS1Q0uINU5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUmpXrCN35Sze/yC1H3HRHrkX2kHMwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9tcFhyQ04zNVN6ZV95QzFIM0hS SHJrWDJrSE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgZ MA0GCSqGSIb3DQEBCwUAA4IBAQAa8lCx02qeHU2d7GGDTOetymbRmbvrRWP1bcGa KXCRN7Oojp8PW3eKE16RsKZCFheUP6UGa/aK9+rfmkHXs6wGBrpdF5jla3Qq30fJ wCEEA2EHtF1PpayEh7Rja3ayy4UdS/0sY63UK5zdcqLU5ybBmgIolV5s9f72AwgE uMHdeI+MEEQgo1MWN9Y1GZnqtSX+qaFlO/ceGWouUQGYjhwpcCF2QzQWJgLmDM1h 5q0afogmgAywuWqc8HcHPeorPSiCj1y23t23kc7lx0vde0P1MNmvGTZiyEQBrTkg Pqi/7hpfZ3MZDJZ/2l59KMS0xmDFC9aVV4Nxyb/cUpjbN7cq -----END CERTIFICATE-----Generated at Sun Aug 24 09:20:37 2025 by rpki-client