$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/DR2DukQY8qyY5rWH2leFHpGYhCE.roa File: DR2DukQY8qyY5rWH2leFHpGYhCE.roa (raw, json) Hash identifier: lmDldo1DiQ9RvynogVmjoFQu2/tJB6dTCeqcCQCjMEg= Subject key identifier: 0D:1D:83:BA:44:18:F2:AC:98:E6:B5:87:DA:57:85:1E:91:98:84:21 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 5A7C Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/DR2DukQY8qyY5rWH2leFHpGYhCE.roa Signing time: Fri 22 Aug 2025 08:55:54 +0000 ROA not before: Fri 22 Aug 2025 08:55:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 103.131.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23164 (0x5a7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Aug 22 08:55:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0D1D83BA4418F2AC98E6B587DA57851E91988421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:f8:06:25:c6:f1:48:5b:af:12:c3:a3:d6: 9f:bd:d9:90:8f:32:17:a5:26:ce:01:5d:8e:10:39: c7:3f:bd:73:15:1a:04:cb:ce:39:25:06:4e:45:df: e1:a0:43:58:eb:12:ee:cc:17:1f:8a:93:0f:fe:5c: e9:28:2e:81:bf:1c:15:73:d2:5a:25:73:24:3e:15: 40:f3:f6:ce:8e:fb:8c:b0:75:f4:2f:86:1b:c6:b9: 65:35:2c:85:07:4f:5c:b5:ca:20:9e:9d:a5:34:32: 1c:ea:93:a0:6d:5a:f4:bb:7c:4b:c5:25:4e:ca:11: 20:bf:ef:14:b4:1e:35:ee:e6:20:ee:d4:b0:b2:51: 6e:e8:e6:27:07:d9:97:5c:05:62:9f:d6:ef:99:b4: 49:52:fc:df:80:08:1f:1b:14:56:98:4e:3a:8e:4f: 03:0b:f7:84:a4:32:6c:fe:84:ef:a7:e5:7e:d9:07: 51:ac:21:e9:28:dc:48:89:e0:91:01:31:91:ca:8b: c0:d3:b1:a0:12:dc:76:73:6b:7a:9c:2e:31:e6:46: fe:78:8e:32:2a:de:77:0c:ab:f2:79:d6:d6:42:5a: 44:a6:02:31:e8:e7:1e:a4:8a:06:2a:86:3d:a4:be: 63:a4:fa:60:b2:4a:ef:fb:8a:df:b9:2b:f4:74:12: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1D:83:BA:44:18:F2:AC:98:E6:B5:87:DA:57:85:1E:91:98:84:21 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/DR2DukQY8qyY5rWH2leFHpGYhCE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.131.172.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:70:d3:36:3d:94:f7:6f:36:31:dc:6d:39:89:19:76:42:bf: fd:9c:9c:9d:91:a0:83:d2:0c:b7:49:66:d8:69:14:ac:ef:21: f5:86:81:e7:b2:75:24:c4:d1:d6:49:11:8b:13:88:d2:69:79: 2b:b7:11:73:85:2e:cf:2e:5a:68:54:a6:9c:de:27:48:43:0c: 51:bc:11:0b:6c:80:04:c4:6d:ec:43:79:d9:11:1e:13:fd:9a: 41:3e:1f:5e:5c:10:30:cb:e6:f6:b6:86:3e:88:d2:c7:ff:d0: 23:4a:2c:3d:4a:f2:cc:54:30:e5:59:91:c0:ab:57:54:36:dd: c9:76:1b:66:75:5d:67:ba:1b:48:6c:f5:67:2d:21:66:3f:52: 92:e8:88:9e:02:4f:c0:a2:0d:65:2a:8f:a9:47:17:3a:e1:70: e9:86:a5:de:1b:18:eb:d5:fd:e2:e6:f2:0c:eb:41:f7:19:76: 6f:41:e4:42:65:80:f4:bd:bb:85:81:45:2f:29:46:81:46:e3: 85:21:7a:8f:d7:03:03:e6:74:03:d1:79:e7:c0:74:2f:86:a4: 77:31:c3:9c:2d:df:ad:ad:7d:b2:3d:64:37:51:63:fc:cf:d3: ad:ed:fe:6f:cc:70:c9:22:7c:71:57:66:da:0c:2b:f7:a4:00: 16:7c:ad:b7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNTA4MjIw ODU1NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBEMUQ4M0JBNDQxOEYy QUM5OEU2QjU4N0RBNTc4NTFFOTE5ODg0MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2LfgGJcbxSFuvEsOj1p+92ZCPMhelJs4BXY4QOcc/vXMVGgTL zjklBk5F3+GgQ1jrEu7MFx+Kkw/+XOkoLoG/HBVz0lolcyQ+FUDz9s6O+4ywdfQv hhvGuWU1LIUHT1y1yiCenaU0Mhzqk6BtWvS7fEvFJU7KESC/7xS0HjXu5iDu1LCy UW7o5icH2ZdcBWKf1u+ZtElS/N+ACB8bFFaYTjqOTwML94SkMmz+hO+n5X7ZB1Gs Ieko3EiJ4JEBMZHKi8DTsaAS3HZza3qcLjHmRv54jjIq3ncMq/J51tZCWkSmAjHo 5x6kigYqhj2kvmOk+mCySu/7it+5K/R0EozTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUDR2DukQY8qyY5rWH2leFHpGYhCEwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvRFIyRHVrUVk4cXlZNXJX SDJsZUZIcEdZaENFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmeDrDANBgkqhkiG9w0BAQsFAAOCAQEAGnDTNj2U9282MdxtOYkZdkK//ZycnZGg g9IMt0lm2GkUrO8h9YaB57J1JMTR1kkRixOI0ml5K7cRc4Uuzy5aaFSmnN4nSEMM UbwRC2yABMRt7EN52REeE/2aQT4fXlwQMMvm9raGPojSx//QI0osPUryzFQw5VmR wKtXVDbdyXYbZnVdZ7obSGz1Zy0hZj9SkuiIngJPwKINZSqPqUcXOuFw6Yal3hsY 69X94ubyDOtB9xl2b0HkQmWA9L27hYFFLylGgUbjhSF6j9cDA+Z0A9F558B0L4ak dzHDnC3fra19sj1kN1Fj/M/Tre3+b8xwySJ8cVdm2gwr96QAFnyttw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:43 2025 by rpki-client