$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/ZdLWKqa6EMDwN-qhiwZAqcqMqa8.roa File: ZdLWKqa6EMDwN-qhiwZAqcqMqa8.roa (raw, json) Hash identifier: KtWez8aYs/D8TDbUZc3TAt+qv5rrFnpRTQ++93BL604= Subject key identifier: 65:D2:D6:2A:A6:BA:10:C0:F0:37:EA:A1:8B:06:40:A9:CA:8C:A9:AF Certificate issuer: /CN=98A5C390143149481DE79BC17BB62DBA2271F61F Certificate serial: 04E6 Authority key identifier: 98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/ZdLWKqa6EMDwN-qhiwZAqcqMqa8.roa Signing time: Fri 22 Aug 2025 08:56:34 +0000 ROA not before: Fri 22 Aug 2025 08:56:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.159.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98A5C390143149481DE79BC17BB62DBA2271F61F Validity Not Before: Aug 22 08:56:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=65D2D62AA6BA10C0F037EAA18B0640A9CA8CA9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:37:d5:8e:ed:81:de:40:70:26:b2:7b:8d: 8c:96:15:ff:79:0c:17:d1:c3:8a:b7:4c:fc:f0:1f: ac:f7:89:f6:d8:19:16:c4:6f:7b:2b:6d:9e:38:0f: ab:42:bc:65:ee:56:2a:9a:c2:af:bf:1c:b3:77:26: b6:f2:65:95:6d:8b:a5:43:f3:67:af:c6:eb:0b:8d: 8f:f3:0c:08:10:5f:2f:65:41:d6:59:78:88:81:18: b8:91:76:19:f0:b1:a5:da:d7:69:95:c9:51:db:b3: 7d:dd:a8:e1:64:40:a8:24:a2:03:ba:7c:96:65:c9: ab:ec:56:9e:b5:43:91:f7:8d:11:bd:95:b5:45:fe: 65:5e:a3:44:5c:6c:0b:21:ad:42:7b:d3:cc:3d:52: 60:46:0c:69:c2:6f:b8:57:b4:cd:f3:d3:3f:08:72: 5e:f0:bb:d3:cc:96:c1:b7:2f:38:30:af:12:94:cb: eb:f4:2f:b8:47:f4:25:7a:b7:33:9a:9c:23:92:31: 57:1e:51:c4:bc:7d:70:94:0b:5a:20:36:0a:40:91: 27:76:38:59:ed:c9:df:29:0f:d6:8a:99:32:6f:5f: 52:c4:ce:eb:59:25:8e:9e:82:f9:78:fe:9c:9c:fa: da:aa:af:4a:8b:79:a2:f9:39:8b:84:e2:96:ef:a3: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D2:D6:2A:A6:BA:10:C0:F0:37:EA:A1:8B:06:40:A9:CA:8C:A9:AF X509v3 Authority Key Identifier: keyid:98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/ZdLWKqa6EMDwN-qhiwZAqcqMqa8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.120.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:0f:f5:ab:27:c8:a8:93:da:b6:27:af:ff:b8:b2:31:85:de: 8c:e5:19:09:3c:5f:ae:25:3d:09:d5:13:e6:3b:ea:91:4a:37: 5a:61:df:53:e3:9b:09:e7:f0:b2:ea:9f:38:d7:5a:d4:86:4b: d8:fc:18:15:c1:62:fd:78:79:29:bc:09:64:09:ab:cf:9d:2f: ed:87:80:66:1e:d8:6f:35:83:d7:e7:98:1a:23:82:fb:80:bf: cc:f5:ac:a0:b5:9e:26:f1:b3:35:e3:e1:8a:a2:b8:0f:0f:6c: 90:21:26:0c:e0:07:85:4a:1c:e8:c2:11:44:6f:ec:a2:6a:36: 65:d9:29:61:bc:e3:83:8e:78:32:b0:b6:70:7f:06:7b:79:7c: 2e:21:39:27:cc:d7:bd:7e:60:c2:ad:3d:bf:bf:5c:c2:77:15: c3:54:d4:6e:f7:bd:65:21:24:88:41:fd:64:b6:f8:97:71:fe: 24:1d:5c:9f:2e:8a:fa:c7:07:a8:5f:84:67:7c:f5:f0:f8:0c: a4:ae:f9:28:5f:bf:42:2d:6b:55:5a:14:7f:db:e8:7c:27:84: 38:56:2e:e9:51:7e:14:c0:78:25:c3:1a:5a:55:a9:da:5a:af: a9:55:3a:e2:13:8c:c2:50:9c:aa:2d:67:cd:39:89:8b:85:70: 89:14:11:a0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOThB NUMzOTAxNDMxNDk0ODFERTc5QkMxN0JCNjJEQkEyMjcxRjYxRjAeFw0yNTA4MjIw ODU2MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1RDJENjJBQTZCQTEw QzBGMDM3RUFBMThCMDY0MEE5Q0E4Q0E5QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN7DfVju2B3kBwJrJ7jYyWFf95DBfRw4q3TPzwH6z3ifbYGRbE b3srbZ44D6tCvGXuViqawq+/HLN3JrbyZZVti6VD82evxusLjY/zDAgQXy9lQdZZ eIiBGLiRdhnwsaXa12mVyVHbs33dqOFkQKgkogO6fJZlyavsVp61Q5H3jRG9lbVF /mVeo0RcbAshrUJ708w9UmBGDGnCb7hXtM3z0z8Icl7wu9PMlsG3LzgwrxKUy+v0 L7hH9CV6tzOanCOSMVceUcS8fXCUC1ogNgpAkSd2OFntyd8pD9aKmTJvX1LEzutZ JY6egvl4/pyc+tqqr0qLeaL5OYuE4pbvo/JHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUZdLWKqa6EMDwN+qhiwZAqcqMqa8wHwYDVR0jBBgwFoAUmKXDkBQxSUgd55vB e7YtuiJx9h8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTVlTRU5T RS9tS1hEa0JReFNVZ2Q1NXZCZTdZdHVpSng5aDguY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL21LWERrQlF4U1VnZDU1dkJlN1l0dWlKeDloOC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01ZU0VOU0UvWmRMV0txYTZFTUR3Ti1x aGl3WkFxY3FNcWE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWefeDANBgkqhkiG9w0BAQsFAAOCAQEAXQ/1qyfIqJPatiev/7iyMYXejOUZCTxf riU9CdUT5jvqkUo3WmHfU+ObCefwsuqfONda1IZL2PwYFcFi/Xh5KbwJZAmrz50v 7YeAZh7YbzWD1+eYGiOC+4C/zPWsoLWeJvGzNePhiqK4Dw9skCEmDOAHhUoc6MIR RG/somo2ZdkpYbzjg454MrC2cH8Ge3l8LiE5J8zXvX5gwq09v79cwncVw1TUbve9 ZSEkiEH9ZLb4l3H+JB1cny6K+scHqF+EZ3z18PgMpK75KF+/Qi1rVVoUf9vofCeE OFYu6VF+FMB4JcMaWlWp2lqvqVU64hOMwlCcqi1nzTmJi4VwiRQRoA== -----END CERTIFICATE-----Generated at Sun Aug 24 11:17:57 2025 by rpki-client