$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/pzJy9coSmEodcw0_CUtKiYpWAAY.roa File: pzJy9coSmEodcw0_CUtKiYpWAAY.roa (raw, json) Hash identifier: gAT9Tx4aDFmLf9e3m2nL9sLbGWrhkJhczZyYdsaEHeo= Subject key identifier: A7:32:72:F5:CA:12:98:4A:1D:73:0D:3F:09:4B:4A:89:8A:56:00:06 Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517 Certificate serial: 028D Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/pzJy9coSmEodcw0_CUtKiYpWAAY.roa Signing time: Fri 22 Aug 2025 09:01:11 +0000 ROA not before: Fri 22 Aug 2025 09:01:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7538 IP address blocks: 103.198.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517 Validity Not Before: Aug 22 09:01:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A73272F5CA12984A1D730D3F094B4A898A560006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:13:17:c1:c3:be:0c:f0:41:19:e1:dc:9e: ee:e0:d6:50:cd:0f:00:83:f2:9d:64:5a:5b:f6:9a: 05:5d:65:b8:8b:98:ba:b1:23:cb:4c:04:c9:01:65: b5:31:45:ec:e8:00:28:76:d9:9f:b1:fa:ca:a7:ff: 54:2e:d1:f2:eb:2c:85:e1:ef:9b:c2:8d:85:5f:83: b7:c1:f6:9a:72:a1:01:2c:ea:c5:86:ef:5c:ce:6a: d1:7c:a3:ed:ad:40:12:7b:ab:c7:2a:bc:8e:01:b1: 54:90:d5:ee:b6:0b:1f:e1:78:5a:ac:84:7e:e3:bb: c3:48:67:1f:57:59:b7:b8:0d:ce:7a:5c:1d:43:d3: de:f1:d7:fc:70:0f:9e:fd:89:d9:78:6a:60:d6:c5: 3f:bf:52:1e:d3:28:e5:5a:83:19:02:47:0a:91:e0: ef:ab:67:f8:16:c9:0c:08:0a:f9:b8:cb:f7:d1:f1: d8:3c:9e:7e:79:86:c3:78:40:eb:68:1b:88:58:df: c0:b6:a1:87:93:c7:39:ce:40:f2:cc:c6:92:47:b1: 4f:92:cf:9b:19:d6:e2:5a:09:6d:98:3d:5d:65:e0: 9f:b3:9d:e8:20:ef:7f:b3:b3:c9:62:5d:ed:85:27: 6a:4e:cc:99:5e:21:1d:15:b1:7e:8b:c2:c2:fb:3e: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:32:72:F5:CA:12:98:4A:1D:73:0D:3F:09:4B:4A:89:8A:56:00:06 X509v3 Authority Key Identifier: keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/pzJy9coSmEodcw0_CUtKiYpWAAY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.198.152.0/23 Signature Algorithm: sha256WithRSAEncryption a9:02:47:40:be:eb:74:0b:5b:85:68:74:58:cc:50:a1:4f:07: 4a:70:9c:bf:54:96:b8:77:7e:86:d4:ac:65:f8:3e:92:4b:17: 67:a1:78:68:ba:61:93:97:e8:ba:6d:dc:65:7b:54:31:50:b1: e7:6a:d2:28:03:b2:2a:43:65:cb:fc:a1:da:16:99:75:24:ee: fa:7f:1a:2d:d2:aa:25:71:e5:65:a9:f7:c4:43:d4:51:44:fc: d1:f6:25:91:09:bf:6a:d3:3b:a5:74:ad:3d:ef:14:24:ed:18: f8:34:df:e3:fd:28:fd:00:3e:86:2a:4b:4f:df:5b:25:35:12: 61:66:56:50:34:2c:0c:4c:90:19:f4:b2:0e:a6:37:c7:37:c8: 26:36:f0:d3:41:8d:9d:42:e6:a6:f4:9a:b3:e7:84:36:06:ac: f3:03:95:ee:89:c0:70:96:77:84:10:14:cf:4b:74:c0:c4:fb: 89:ca:89:44:b8:21:26:8b:39:bf:8e:f3:8e:08:1a:72:44:cd: 6b:e6:b6:24:68:bc:d1:76:96:28:c5:f0:b7:56:e7:af:32:51: ed:f4:5c:1f:63:26:a6:fb:3d:a1:4e:f0:fa:a8:e8:f0:d1:0d: 8d:db:25:79:c9:62:f4:34:d6:c1:47:0e:1b:29:5e:4b:16:81: ea:bd:37:1e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y0 RTA2Mzg4NkFEMzUxRkY4MjI4MDVBRjhENTY5OTQ0QjhERTUxNzAeFw0yNTA4MjIw OTAxMTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE3MzI3MkY1Q0ExMjk4 NEExRDczMEQzRjA5NEI0QTg5OEE1NjAwMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiYRMXwcO+DPBBGeHcnu7g1lDNDwCD8p1kWlv2mgVdZbiLmLqx I8tMBMkBZbUxRezoACh22Z+x+sqn/1Qu0fLrLIXh75vCjYVfg7fB9ppyoQEs6sWG 71zOatF8o+2tQBJ7q8cqvI4BsVSQ1e62Cx/heFqshH7ju8NIZx9XWbe4Dc56XB1D 097x1/xwD579idl4amDWxT+/Uh7TKOVagxkCRwqR4O+rZ/gWyQwICvm4y/fR8dg8 nn55hsN4QOtoG4hY38C2oYeTxznOQPLMxpJHsU+Sz5sZ1uJaCW2YPV1l4J+znegg 73+zs8liXe2FJ2pOzJleIR0VsX6LwsL7PoGBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUpzJy9coSmEodcw0/CUtKiYpWAAYwHwYDVR0jBBgwFoAUP04GOIatNR/4IoBa +NVplEuN5RcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VDVU5F VC9QMDRHT0lhdE5SXzRJb0JhLU5WcGxFdU41UmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1AwNEdPSWF0TlJfNElvQmEtTlZwbEV1TjVSYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NFQ1VORVQvcHpKeTljb1NtRW9kY3cw X0NVdEtpWXBXQUFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWfGmDANBgkqhkiG9w0BAQsFAAOCAQEAqQJHQL7rdAtbhWh0WMxQoU8HSnCcv1SW uHd+htSsZfg+kksXZ6F4aLphk5foum3cZXtUMVCx52rSKAOyKkNly/yh2haZdSTu +n8aLdKqJXHlZan3xEPUUUT80fYlkQm/atM7pXStPe8UJO0Y+DTf4/0o/QA+hipL T99bJTUSYWZWUDQsDEyQGfSyDqY3xzfIJjbw00GNnULmpvSas+eENgas8wOV7onA cJZ3hBAUz0t0wMT7icqJRLghJos5v47zjggackTNa+a2JGi80XaWKMXwt1bnrzJR 7fRcH2Mmpvs9oU7w+qjo8NENjdslecli9DTWwUcOGyleSxaB6r03Hg== -----END CERTIFICATE-----Generated at Sun Aug 24 17:41:58 2025 by rpki-client