$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/YmZFwJiqrjyJPxv4AcsQNRb5E74.roa File: YmZFwJiqrjyJPxv4AcsQNRb5E74.roa (raw, json) Hash identifier: AlT71l3oz5P9Frb6cbMmIpj586gqCX6OvLivUwFPEhA= Subject key identifier: 62:66:45:C0:98:AA:AE:3C:89:3F:1B:F8:01:CB:10:35:16:F9:13:BE Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0DC3 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/YmZFwJiqrjyJPxv4AcsQNRb5E74.roa Signing time: Fri 22 Aug 2025 08:49:51 +0000 ROA not before: Fri 22 Aug 2025 08:49:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17420 IP address blocks: 203.65.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3523 (0xdc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Aug 22 08:49:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=626645C098AAAE3C893F1BF801CB103516F913BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:fe:60:60:86:45:a0:c2:4d:d5:e5:24:f6: 17:20:93:92:94:eb:83:c1:50:da:8c:74:d0:16:68: ee:27:d6:1a:96:0b:84:65:39:77:7a:34:f0:8d:41: 97:eb:e2:72:d8:d5:1e:3b:bc:4b:88:63:90:c3:06: 71:bc:d2:17:29:bf:a0:1f:13:fa:dd:b7:92:1d:fb: bb:01:6f:df:e9:ff:ce:4e:90:a3:ab:dd:48:25:85: f6:72:84:5c:a0:0f:d8:62:32:59:98:89:ac:66:27: 1a:0e:5a:3b:52:42:a7:f2:d9:7b:fe:09:27:da:c7: 14:d1:bb:b2:6b:9b:e0:54:44:29:5e:7d:a6:9e:72: 68:86:7c:1e:49:42:30:09:32:08:57:15:97:62:ff: 59:0d:58:7c:5a:f3:cb:d2:ad:27:86:06:1a:18:29: df:85:33:0d:d1:2d:b3:0f:a1:62:15:36:3c:2b:88: 5a:00:d5:1b:bb:3e:2a:9a:29:56:95:e4:8d:9c:05: 6e:6d:a5:1d:4c:4b:6a:0b:9e:56:06:04:35:8a:52: ff:aa:45:eb:42:e7:59:6b:49:dc:91:67:91:48:02: 8c:9b:d8:2a:fb:10:c5:55:30:70:b9:d9:1e:40:92: ea:21:ff:80:dd:62:f6:0a:a2:71:70:5a:a0:2f:51: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:66:45:C0:98:AA:AE:3C:89:3F:1B:F8:01:CB:10:35:16:F9:13:BE X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/YmZFwJiqrjyJPxv4AcsQNRb5E74.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.65.192.0/19 Signature Algorithm: sha256WithRSAEncryption 8d:7c:5e:ee:06:0d:9d:dc:42:a5:4e:81:90:65:f9:cf:8b:cd: 4e:32:35:19:f4:07:99:76:86:7a:3a:af:e7:1d:31:95:fb:7f: 97:32:7f:9b:dd:cd:8d:99:dd:eb:9c:dd:fa:85:36:b0:ea:6c: 34:c2:68:03:5b:0e:00:43:c2:23:6d:d7:30:cd:fd:03:41:9a: 8f:24:df:81:53:0d:0f:1f:14:12:f2:8e:a0:6c:55:25:20:8e: e9:8f:19:45:0d:6d:21:2f:c3:53:4d:b3:cb:39:1b:60:35:d7: 1e:85:b1:52:a3:26:28:8d:15:ba:9c:06:26:5c:70:69:c0:27: bc:90:b9:99:8b:5b:c6:42:10:50:82:c2:18:5d:c1:0c:c2:6f: b3:ee:9a:e8:b3:aa:39:38:1e:68:13:1d:36:48:39:16:86:ad: 3a:4f:d5:fa:a1:06:42:32:a3:d8:12:31:80:ae:11:2c:80:76: ac:d5:bb:fc:b2:b4:39:5b:65:7f:07:bd:72:4c:5c:e2:9c:58: f4:05:68:f6:f3:99:b0:ee:f5:6f:b4:30:16:b6:20:0f:86:0f: 46:2d:8c:aa:2b:9b:34:60:a7:3c:31:2f:43:f9:96:12:7f:29: 87:e0:48:a6:09:06:b5:27:1d:d8:e9:54:56:9e:f0:a8:45:f0: a2:76:ee:90 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTA4MjIw ODQ5NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYyNjY0NUMwOThBQUFF M0M4OTNGMUJGODAxQ0IxMDM1MTZGOTEzQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCj1P5gYIZFoMJN1eUk9hcgk5KU64PBUNqMdNAWaO4n1hqWC4Rl OXd6NPCNQZfr4nLY1R47vEuIY5DDBnG80hcpv6AfE/rdt5Id+7sBb9/p/85OkKOr 3UglhfZyhFygD9hiMlmYiaxmJxoOWjtSQqfy2Xv+CSfaxxTRu7Jrm+BURClefaae cmiGfB5JQjAJMghXFZdi/1kNWHxa88vSrSeGBhoYKd+FMw3RLbMPoWIVNjwriFoA 1Ru7PiqaKVaV5I2cBW5tpR1MS2oLnlYGBDWKUv+qRetC51lrSdyRZ5FIAoyb2Cr7 EMVVMHC52R5Akuoh/4DdYvYKonFwWqAvUR5HAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUYmZFwJiqrjyJPxv4AcsQNRb5E74wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9ZbVpGd0ppcXJqeUpQeHY0QWNz UU5SYjVFNzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFy0HA MA0GCSqGSIb3DQEBCwUAA4IBAQCNfF7uBg2d3EKlToGQZfnPi81OMjUZ9AeZdoZ6 Oq/nHTGV+3+XMn+b3c2Nmd3rnN36hTaw6mw0wmgDWw4AQ8Ijbdcwzf0DQZqPJN+B Uw0PHxQS8o6gbFUlII7pjxlFDW0hL8NTTbPLORtgNdcehbFSoyYojRW6nAYmXHBp wCe8kLmZi1vGQhBQgsIYXcEMwm+z7pros6o5OB5oEx02SDkWhq06T9X6oQZCMqPY EjGArhEsgHas1bv8srQ5W2V/B71yTFzinFj0BWj285mw7vVvtDAWtiAPhg9GLYyq K5s0YKc8MS9D+ZYSfymH4EimCQa1Jx3Y6VRWnvCoRfCidu6Q -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:47 2025 by rpki-client