$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/02-3sE6_sPZ6uuhJnSRfHZJslTM.roa File: 02-3sE6_sPZ6uuhJnSRfHZJslTM.roa (raw, json) Hash identifier: ZCwN1HAOhShyHkRDDr0AVo40r3QSQt831oQGjJ8UsG4= Subject key identifier: D3:6F:B7:B0:4E:BF:B0:F6:7A:BA:E8:49:9D:24:5F:1D:92:6C:95:33 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0E1A Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/02-3sE6_sPZ6uuhJnSRfHZJslTM.roa Signing time: Fri 22 Aug 2025 08:51:03 +0000 ROA not before: Fri 22 Aug 2025 08:51:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18182 IP address blocks: 61.62.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3610 (0xe1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 22 08:51:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D36FB7B04EBFB0F67ABAE8499D245F1D926C9533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:23:20:b8:5d:2d:e0:6b:ca:26:22:50:50:bc: 81:44:a9:bd:c8:d3:19:f1:e9:cd:30:59:f8:ba:58: 6f:36:b2:63:1b:b1:66:65:03:39:9a:33:52:3c:2f: 3a:2d:cc:56:87:f4:df:ce:a1:70:09:e3:61:52:d7: 19:18:30:e7:9d:45:91:f5:86:4c:1a:05:24:89:19: 59:05:5b:d9:73:46:4c:09:cc:e0:81:d3:d5:3d:3a: c0:29:c4:25:cb:c7:b6:0f:dc:5d:8d:3f:69:df:c6: c5:ad:43:6f:51:30:9d:ba:64:1b:b3:67:d5:2a:63: eb:ef:0d:6a:81:76:1f:95:08:e3:ae:d3:c5:18:22: 88:4f:64:b7:7c:de:df:87:8c:d6:90:ee:32:1a:d0: d9:14:b1:a4:46:2a:46:06:cc:6d:82:04:cc:33:f0: 09:d2:05:a1:05:c9:9e:c9:cb:f5:51:a4:d4:59:ba: 67:0d:4d:1f:d3:9c:da:63:31:e3:82:8a:6f:3a:02: 93:f8:9f:75:04:64:a0:ef:a0:d7:3e:bb:9d:5c:f1: 1a:e5:83:9d:26:8d:9a:eb:ac:67:77:50:93:c4:f1: fd:d7:d0:0c:38:51:94:01:23:82:c3:42:37:00:d7: c9:70:b4:e1:61:31:ea:7e:73:b2:f4:13:2e:e3:6e: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6F:B7:B0:4E:BF:B0:F6:7A:BA:E8:49:9D:24:5F:1D:92:6C:95:33 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/02-3sE6_sPZ6uuhJnSRfHZJslTM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.62.0.0/16 Signature Algorithm: sha256WithRSAEncryption 60:85:9e:a2:c6:2d:71:6d:5d:23:4c:97:e6:b2:c0:7f:bd:a8: 72:53:90:02:bb:cd:5d:6d:7e:f4:2c:db:de:40:c8:f8:d3:05: 4f:76:e7:ce:65:6c:90:fa:a1:27:a3:8b:8c:b6:37:9d:38:a6: ce:1c:bd:8f:4e:97:b7:38:b1:a8:4d:43:18:95:43:c1:b1:69: f2:17:3b:cf:9b:1e:b8:45:fe:51:50:e7:db:45:44:3a:d6:77: 28:8e:ee:18:f7:fe:39:8f:c4:08:5b:98:bf:94:3e:03:d0:8f: 64:29:0d:76:f8:0d:21:98:ef:aa:7c:5f:f6:86:af:ce:09:22: c8:da:2b:24:3f:e6:8f:ff:a3:af:8b:f1:e7:c3:4a:9e:e6:82: 78:a7:5d:66:6d:9b:cc:b3:fb:73:2a:26:17:04:06:37:dd:fd: 63:bc:8c:e3:0b:97:d8:0d:49:85:2c:f9:33:dd:51:d9:dd:eb: 84:83:95:6d:d5:eb:c4:d3:1e:92:c2:b0:ad:04:91:e0:6a:8c: 26:6d:07:6a:ba:d6:ce:d8:5c:9f:97:b4:54:fd:d6:35:40:14: e7:50:c0:fe:ec:f9:59:55:fb:6f:21:46:0f:d4:fa:9f:63:f6: f1:55:53:f1:dc:9a:31:ee:70:34:d7:65:01:31:55:7a:9f:e4: 20:f6:eb:be -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTA4MjIw ODUxMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQzNkZCN0IwNEVCRkIw RjY3QUJBRTg0OTlEMjQ1RjFEOTI2Qzk1MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnIyC4XS3ga8omIlBQvIFEqb3I0xnx6c0wWfi6WG82smMbsWZl AzmaM1I8LzotzFaH9N/OoXAJ42FS1xkYMOedRZH1hkwaBSSJGVkFW9lzRkwJzOCB 09U9OsApxCXLx7YP3F2NP2nfxsWtQ29RMJ26ZBuzZ9UqY+vvDWqBdh+VCOOu08UY IohPZLd83t+HjNaQ7jIa0NkUsaRGKkYGzG2CBMwz8AnSBaEFyZ7Jy/VRpNRZumcN TR/TnNpjMeOCim86ApP4n3UEZKDvoNc+u51c8Rrlg50mjZrrrGd3UJPE8f3X0Aw4 UZQBI4LDQjcA18lwtOFhMep+c7L0Ey7jbl/pAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU02+3sE6/sPZ6uuhJnSRfHZJslTMwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC8wMi0zc0U2X3NQWjZ1dWhKblNS ZkhaSnNsVE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPT4w DQYJKoZIhvcNAQELBQADggEBAGCFnqLGLXFtXSNMl+aywH+9qHJTkAK7zV1tfvQs 295AyPjTBU92585lbJD6oSeji4y2N504ps4cvY9Ol7c4sahNQxiVQ8GxafIXO8+b HrhF/lFQ59tFRDrWdyiO7hj3/jmPxAhbmL+UPgPQj2QpDXb4DSGY76p8X/aGr84J IsjaKyQ/5o//o6+L8efDSp7mgninXWZtm8yz+3MqJhcEBjfd/WO8jOMLl9gNSYUs +TPdUdnd64SDlW3V68TTHpLCsK0EkeBqjCZtB2q61s7YXJ+XtFT91jVAFOdQwP7s +VlV+28hRg/U+p9j9vFVU/HcmjHucDTXZQExVXqf5CD2674= -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:24 2025 by rpki-client