$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZLSyPEY08KtlEuqHauLu9nqvXpI.roa File: ZLSyPEY08KtlEuqHauLu9nqvXpI.roa (raw, json) Hash identifier: FB2J0vZfqNAQluwYSjdZ+Ymo6nSGi+ENXIjykH4nVYA= Subject key identifier: 64:B4:B2:3C:46:34:F0:AB:65:12:EA:87:6A:E2:EE:F6:7A:AF:5E:92 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E6F Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZLSyPEY08KtlEuqHauLu9nqvXpI.roa Signing time: Fri 22 Aug 2025 08:58:16 +0000 ROA not before: Fri 22 Aug 2025 08:58:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131596 IP address blocks: 61.58.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3695 (0xe6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=64B4B23C4634F0AB6512EA876AE2EEF67AAF5E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:17:e1:d3:b2:0a:db:d1:b5:5f:c2:67:2d: 41:2c:36:d8:c8:eb:6f:f0:df:43:a0:c6:5e:93:35: 69:7d:d4:08:4f:a1:c5:77:d9:ca:e3:fd:50:64:90: 9f:1d:e8:d4:40:4a:0b:96:fe:48:78:90:e9:3b:77: 06:60:c4:62:2f:fa:55:cc:74:10:52:56:cf:03:55: 1a:82:13:b9:a6:9f:42:d2:58:d6:6b:a7:5f:24:0d: 75:91:c0:d0:85:4c:c5:43:0b:0f:56:6b:ee:17:68: 77:7c:e4:9d:b0:b2:7b:eb:bc:44:e0:43:86:3a:55: 95:a5:fb:b3:68:bf:b6:ee:fc:f4:0b:78:4c:83:db: 49:7a:96:f7:a4:68:b3:92:94:e3:50:fc:18:de:47: 24:d9:aa:2d:9b:7d:7c:54:e5:e7:4a:07:a2:b4:d1: 3c:a6:7a:a1:0f:ab:f9:3b:66:ed:68:6e:80:72:5e: e4:77:5e:e4:20:38:97:35:e3:8a:0a:e1:3d:56:d7: a5:6f:2c:32:9d:96:59:9a:da:fc:47:1c:d4:d1:4d: d3:ff:18:7c:f6:60:79:73:c3:40:44:2c:89:c1:40: eb:a3:02:de:c7:da:da:8a:62:b2:e8:04:30:78:82: cd:51:71:34:d5:a8:12:18:ea:57:ad:d7:11:8a:c7: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B4:B2:3C:46:34:F0:AB:65:12:EA:87:6A:E2:EE:F6:7A:AF:5E:92 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/ZLSyPEY08KtlEuqHauLu9nqvXpI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.80.0/20 Signature Algorithm: sha256WithRSAEncryption 00:09:bb:6a:91:9c:77:03:08:ab:32:24:2e:b1:d6:66:6b:f0: 86:c3:4f:c9:6f:fd:35:03:74:e8:c8:70:d7:2d:6a:1d:8e:7d: 9f:15:27:e4:66:09:dc:5d:30:4b:fb:65:f5:39:0c:40:d7:cc: 7d:dd:18:6c:0b:db:60:5c:dd:ee:9d:4e:8a:7b:4a:dd:29:90: 08:cf:d6:5d:76:b3:14:0b:d9:2c:de:1c:53:3e:5e:48:c3:67: 51:a6:bb:ee:9f:e1:3b:c3:0a:9a:80:84:26:9c:5e:4e:da:7b: 08:11:0f:9f:34:fa:f4:72:3f:7b:34:80:a2:10:d1:12:38:94: f1:8b:42:14:80:56:5a:23:b6:33:ae:94:5e:c2:47:0f:bc:80: 0e:49:d7:60:bb:9f:d0:da:8a:f7:72:30:f7:dd:1f:82:0a:91: 0b:76:b8:73:71:04:98:87:0d:46:4c:31:20:cf:b5:f6:3c:d7: 12:cc:9e:9c:51:58:e0:0d:c5:0d:d1:e6:3d:a3:0e:3d:48:c1: 19:3d:33:61:6f:83:27:ab:f4:3c:b5:cb:23:e3:0b:37:e5:c8: 74:7c:a0:46:7d:1c:cb:08:41:83:62:b6:4f:ac:d6:fb:4a:c4: 32:12:62:f8:ee:f5:fc:67:eb:d7:9f:a2:d9:b9:0d:28:e9:89: f0:4a:d6:8f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY0QjRCMjNDNDYzNEYw QUI2NTEyRUE4NzZBRTJFRUY2N0FBRjVFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAxhfh07IK29G1X8JnLUEsNtjI62/w30Ogxl6TNWl91AhPocV3 2crj/VBkkJ8d6NRASguW/kh4kOk7dwZgxGIv+lXMdBBSVs8DVRqCE7mmn0LSWNZr p18kDXWRwNCFTMVDCw9Wa+4XaHd85J2wsnvrvETgQ4Y6VZWl+7Nov7bu/PQLeEyD 20l6lvekaLOSlONQ/BjeRyTZqi2bfXxU5edKB6K00TymeqEPq/k7Zu1oboByXuR3 XuQgOJc144oK4T1W16VvLDKdllma2vxHHNTRTdP/GHz2YHlzw0BELInBQOujAt7H 2tqKYrLoBDB4gs1RcTTVqBIY6let1xGKxzqzAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUZLSyPEY08KtlEuqHauLu9nqvXpIwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9aTFN5UEVZMDhLdGxFdXFIYXVM dTlucXZYcEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTpQ MA0GCSqGSIb3DQEBCwUAA4IBAQAACbtqkZx3AwirMiQusdZma/CGw0/Jb/01A3To yHDXLWodjn2fFSfkZgncXTBL+2X1OQxA18x93RhsC9tgXN3unU6Ke0rdKZAIz9Zd drMUC9ks3hxTPl5Iw2dRprvun+E7wwqagIQmnF5O2nsIEQ+fNPr0cj97NICiENES OJTxi0IUgFZaI7YzrpRewkcPvIAOSddgu5/Q2or3cjD33R+CCpELdrhzcQSYhw1G TDEgz7X2PNcSzJ6cUVjgDcUN0eY9ow49SMEZPTNhb4Mnq/Q8tcsj4ws35ch0fKBG fRzLCEGDYrZPrNb7SsQyEmL47vX8Z+vXn6LZuQ0o6YnwStaP -----END CERTIFICATE-----Generated at Sun Aug 24 09:20:41 2025 by rpki-client