$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/d03wrFU0BzyI3PI4HZaLvmmuTDA.roa File: d03wrFU0BzyI3PI4HZaLvmmuTDA.roa (raw, json) Hash identifier: h0sYgOEkGZa7UnH37AKu5Vwhi7y52FmpysovU04DvvM= Subject key identifier: 77:4D:F0:AC:55:34:07:3C:88:DC:F2:38:1D:96:8B:BE:69:AE:4C:30 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E6B Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/d03wrFU0BzyI3PI4HZaLvmmuTDA.roa Signing time: Fri 22 Aug 2025 08:58:15 +0000 ROA not before: Fri 22 Aug 2025 08:58:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 61.58.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3691 (0xe6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=774DF0AC5534073C88DCF2381D968BBE69AE4C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:29:b5:a1:87:da:b5:07:68:4b:91:32:ae: a0:45:dc:64:fb:03:bd:e0:0e:ec:1f:a8:17:5b:a3: c9:2a:40:7a:93:81:f8:63:22:1b:13:a8:92:6b:31: 84:23:ce:c8:77:39:7f:db:ff:48:b4:45:70:1e:b6: 81:78:13:36:b9:6e:34:22:ec:a3:e9:92:94:3f:d7: f8:dc:1b:7b:6b:09:92:de:87:8a:45:8f:26:5d:42: b9:d8:3d:49:04:b9:57:0d:e4:7f:54:95:0d:f3:a4: f4:15:9e:d9:a9:2d:b2:c8:be:a7:ca:9e:e5:b7:3b: c5:05:6e:5b:35:5a:86:66:44:56:e3:42:7b:24:e2: 1e:18:51:68:4a:e3:24:7c:14:f8:92:82:0f:f5:7a: 9d:7d:91:67:44:96:0e:07:8f:34:6b:19:05:db:94: f7:89:07:8d:93:52:2b:6c:62:0c:2f:d2:67:9d:39: 5e:70:a2:7f:37:04:d5:f2:8c:d4:68:80:3b:c7:27: 6a:3f:31:ef:f1:a6:fa:fc:c1:09:ea:76:9b:10:c2: 44:ea:69:60:3f:39:84:a8:0e:0c:77:94:0d:81:9a: ac:6e:df:fc:3d:7e:07:3e:e3:1e:02:c2:56:dc:4e: 47:69:21:8d:80:af:88:40:2e:ca:56:cb:1b:6a:f3: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4D:F0:AC:55:34:07:3C:88:DC:F2:38:1D:96:8B:BE:69:AE:4C:30 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/d03wrFU0BzyI3PI4HZaLvmmuTDA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.64.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:79:23:7e:36:0e:b5:58:45:24:ca:12:5d:a7:6b:92:9d:4c: a1:27:3a:aa:39:b2:8f:94:17:85:01:26:f7:ab:35:7e:58:35: a9:5f:74:57:63:a2:82:36:5c:fe:7e:e5:90:6f:c0:09:9c:f6: fc:2f:3f:ec:82:f1:6f:c9:81:20:a2:d3:c3:62:ab:ea:7d:4d: cf:b6:bb:84:60:0c:2b:9f:88:ce:06:01:a1:8d:c1:91:f2:35: fd:9e:a8:cf:5d:f1:d0:0f:31:b8:eb:cc:86:94:01:c0:a3:e8: e4:04:1d:92:ce:29:64:41:d8:80:e3:45:77:90:97:eb:9f:0f: da:58:ff:17:ed:fe:4c:a1:0a:c1:20:a1:ae:7b:b5:bf:aa:87: bb:d2:02:9f:41:ee:48:0e:be:4e:91:0a:5e:e2:fa:33:bd:66: 06:b7:16:c0:7c:fd:68:6b:f5:fe:a3:26:f5:f8:90:42:56:0d: 74:7d:e8:e9:1f:73:ba:a6:f5:7f:06:90:ae:b1:2e:25:50:f8: bb:ca:60:1f:a1:e5:82:57:d5:68:8a:f5:56:43:9a:90:8d:5b: da:4a:16:11:92:25:1a:44:79:7d:78:bf:68:8a:01:06:56:c7: 47:4f:96:31:1c:92:06:38:4e:68:e5:52:e8:db:8e:a8:ac:08: 8d:fd:9c:c2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc3NERGMEFDNTUzNDA3 M0M4OERDRjIzODFEOTY4QkJFNjlBRTRDMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8fim1oYfatQdoS5EyrqBF3GT7A73gDuwfqBdbo8kqQHqTgfhj IhsTqJJrMYQjzsh3OX/b/0i0RXAetoF4Eza5bjQi7KPpkpQ/1/jcG3trCZLeh4pF jyZdQrnYPUkEuVcN5H9UlQ3zpPQVntmpLbLIvqfKnuW3O8UFbls1WoZmRFbjQnsk 4h4YUWhK4yR8FPiSgg/1ep19kWdElg4HjzRrGQXblPeJB42TUitsYgwv0medOV5w on83BNXyjNRogDvHJ2o/Me/xpvr8wQnqdpsQwkTqaWA/OYSoDgx3lA2Bmqxu3/w9 fgc+4x4CwlbcTkdpIY2Ar4hALspWyxtq8zM1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUd03wrFU0BzyI3PI4HZaLvmmuTDAwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9kMDN3ckZVMEJ6eUkzUEk0SFph THZtbXVUREEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTpA MA0GCSqGSIb3DQEBCwUAA4IBAQCOeSN+Ng61WEUkyhJdp2uSnUyhJzqqObKPlBeF ASb3qzV+WDWpX3RXY6KCNlz+fuWQb8AJnPb8Lz/sgvFvyYEgotPDYqvqfU3PtruE YAwrn4jOBgGhjcGR8jX9nqjPXfHQDzG468yGlAHAo+jkBB2SzilkQdiA40V3kJfr nw/aWP8X7f5MoQrBIKGue7W/qoe70gKfQe5IDr5OkQpe4vozvWYGtxbAfP1oa/X+ oyb1+JBCVg10fejpH3O6pvV/BpCusS4lUPi7ymAfoeWCV9VoivVWQ5qQjVvaShYR kiUaRHl9eL9oigEGVsdHT5YxHJIGOE5o5VLo246orAiN/ZzC -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:18 2025 by rpki-client