$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa File: Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa (raw, json) Hash identifier: YqwlOGEcaAp5DCS0ajlmexYG+bj1rstuhn0f7Nk/oSY= Subject key identifier: 29:EE:82:80:D4:60:D2:93:07:16:33:FF:99:24:B2:01:8E:99:E3:55 Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 0551 Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa Signing time: Fri 22 Aug 2025 08:49:40 +0000 ROA not before: Fri 22 Aug 2025 08:49:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63909 IP address blocks: 160.25.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Aug 22 08:49:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=29EE8280D460D293071633FF9924B2018E99E355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:a3:ab:ef:07:8c:25:33:d3:61:e2:66:89: 7c:7d:02:80:39:a0:74:09:df:ae:a1:42:ab:a1:5b: 1e:f3:8f:75:32:a4:74:ad:60:e6:8c:ab:df:f9:6e: 79:65:90:02:96:a4:66:16:f5:dc:87:aa:e3:a8:7d: 95:9c:1e:c6:9d:72:cd:c2:6f:10:7b:84:7a:0b:ce: ba:59:1f:42:fa:38:96:50:d8:e8:05:6a:01:a1:7e: e4:e8:cf:5f:9b:f9:a6:1b:22:e2:a0:2b:db:a4:0a: 97:fa:98:32:ec:8a:b9:e4:ce:b3:d2:6e:d4:5c:19: 4b:2a:da:46:ce:36:d3:12:a8:81:d1:ee:28:91:60: 60:19:e2:02:64:d4:50:4a:44:1f:78:db:9d:df:f5: f9:d4:06:01:53:2a:a0:dd:77:f9:88:9f:5b:cc:fb: 87:74:88:db:62:cc:60:de:3a:69:29:07:16:85:6e: 09:11:8c:8b:ec:53:ab:b2:24:e1:a7:f9:1a:4a:8a: 02:a6:94:f1:46:f6:1f:e8:2e:2a:4a:11:ec:08:9e: 34:43:fa:76:3a:21:11:95:8a:3b:f7:79:3e:02:3d: 98:7c:33:09:39:00:de:e8:94:a9:03:b7:00:68:20: 88:11:72:ea:44:16:23:e1:54:80:de:80:c6:42:23: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EE:82:80:D4:60:D2:93:07:16:33:FF:99:24:B2:01:8E:99:E3:55 X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.221.0/24 Signature Algorithm: sha256WithRSAEncryption 77:95:7f:3e:ff:60:94:f5:96:6a:cd:78:ee:8c:60:3e:07:32: 47:61:ea:55:b6:89:69:c8:bf:42:90:da:09:3f:4d:01:75:0c: b4:41:66:56:d1:da:a4:f7:42:2d:e1:0d:58:0d:60:0e:f6:0b: e5:7d:85:82:26:61:29:b6:99:a4:3d:f3:a4:5b:66:e7:f8:2b: 95:b0:04:d9:d0:57:10:b9:e4:99:78:06:c5:ea:d5:51:e3:cd: 16:f1:0b:31:77:fd:b4:6a:fe:7a:e4:4e:0e:99:18:cd:be:6c: 8d:35:33:9f:60:bb:bc:7f:03:b0:3c:79:71:1c:d8:d7:c4:68: 45:e6:c5:f1:2d:81:68:8c:83:fe:e2:5b:66:3d:18:29:6f:93: e1:b3:29:e2:f2:bf:f3:49:54:33:ba:45:1a:ce:f7:8a:84:c7: 83:1c:50:cf:6a:4d:42:1a:80:c3:67:4b:de:5b:51:8a:21:91: 75:59:4e:73:53:93:9e:fa:6d:f5:f4:fa:eb:fe:51:62:e0:a8: a7:8a:b1:fc:4b:3d:e7:51:5d:ba:5e:49:a2:5e:bf:f0:4b:13: e7:38:37:0e:8b:cf:ca:05:ab:b9:78:8a:9b:44:49:92:dc:e7: 81:40:26:5f:9d:22:db:66:a4:51:89:8b:c4:e5:00:75:5d:20: 93:0f:7c:63 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDIy RTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVEMDAeFw0yNTA4MjIw ODQ5NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI5RUU4MjgwRDQ2MEQy OTMwNzE2MzNGRjk5MjRCMjAxOEU5OUUzNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqT6Or7weMJTPTYeJmiXx9AoA5oHQJ366hQquhWx7zj3UypHSt YOaMq9/5bnllkAKWpGYW9dyHquOofZWcHsadcs3CbxB7hHoLzrpZH0L6OJZQ2OgF agGhfuToz1+b+aYbIuKgK9ukCpf6mDLsirnkzrPSbtRcGUsq2kbONtMSqIHR7iiR YGAZ4gJk1FBKRB94253f9fnUBgFTKqDdd/mIn1vM+4d0iNtizGDeOmkpBxaFbgkR jIvsU6uyJOGn+RpKigKmlPFG9h/oLipKEewInjRD+nY6IRGVijv3eT4CPZh8Mwk5 AN7olKkDtwBoIIgRcupEFiPhVIDegMZCI36vAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUKe6CgNRg0pMHFjP/mSSyAY6Z41UwHwYDVR0jBBgwFoAUQi58ldh96a7rISoM TMsBdOZcpdAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9LZTZDZ05SZzBwTUhG alBfbVNTeUFZNlo0MVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBndMA0GCSqGSIb3DQEBCwUAA4IBAQB3lX8+/2CU9ZZqzXjujGA+BzJHYepV tolpyL9CkNoJP00BdQy0QWZW0dqk90It4Q1YDWAO9gvlfYWCJmEptpmkPfOkW2bn +CuVsATZ0FcQueSZeAbF6tVR480W8Qsxd/20av565E4OmRjNvmyNNTOfYLu8fwOw PHlxHNjXxGhF5sXxLYFojIP+4ltmPRgpb5Phsyni8r/zSVQzukUazveKhMeDHFDP ak1CGoDDZ0veW1GKIZF1WU5zU5Oe+m319Prr/lFi4KinirH8Sz3nUV26XkmiXr/w SxPnODcOi8/KBau5eIqbREmS3OeBQCZfnSLbZqRRiYvE5QB1XSCTD3xj -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:46 2025 by rpki-client