$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUJIN/yO6s-cqgEyut_V1N3aQCUs5opAc.roa File: yO6s-cqgEyut_V1N3aQCUs5opAc.roa (raw, json) Hash identifier: 1+NCc1MzIPr6lEulml17q42F6ajTD5Sr+9ZcfPYuaw0= Subject key identifier: C8:EE:AC:F9:CA:A0:13:2B:AD:FD:5D:4D:DD:A4:02:52:CE:68:A4:07 Certificate issuer: /CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF Certificate serial: 0328 Authority key identifier: 3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/yO6s-cqgEyut_V1N3aQCUs5opAc.roa Signing time: Fri 22 Aug 2025 08:44:16 +0000 ROA not before: Fri 22 Aug 2025 08:44:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7538 IP address blocks: 103.24.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C2AD8671B3753265286D32E46BF06FDF52D0FEF Validity Not Before: Aug 22 08:44:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C8EEACF9CAA0132BADFD5D4DDDA40252CE68A407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:43:5b:dd:e4:1c:84:74:6e:90:a9:ef:60:61: 45:e0:77:bd:dd:32:f0:7d:53:a7:cd:56:cc:73:74: 55:15:f5:f8:4d:31:9d:fd:96:49:23:e4:be:a8:84: de:8b:f3:95:84:55:db:07:11:66:0d:59:88:5e:c9: 2a:3b:d6:4e:2d:92:56:e6:39:9b:e6:87:8f:31:ca: 85:1e:28:b1:b2:eb:05:f1:54:36:dc:8d:85:4c:2a: b5:ff:0d:ab:e5:f5:f7:cf:ee:26:1d:e6:7c:83:a4: bd:65:43:e4:bc:28:e8:94:f6:f5:17:9a:b5:45:ad: 14:e6:da:a6:7f:92:bc:3c:ba:bb:e1:32:47:19:9f: 95:ee:68:41:4d:fa:f7:be:04:b5:b5:e8:f6:5b:98: 9c:75:23:67:da:43:85:c0:78:31:77:95:7f:94:69: 94:13:46:20:1b:6d:08:39:57:be:6e:59:ae:8c:b5: 10:e9:90:42:a8:97:19:87:c4:b6:8b:21:a7:c0:8c: 52:f5:7f:55:ae:c3:58:32:c0:83:40:a4:16:9c:bf: 15:3d:4a:6f:5d:1b:d0:39:84:71:8a:21:1b:fb:3f: 3d:e1:10:b5:e5:8b:98:7b:ea:5d:85:09:e1:86:e4: 92:80:d6:a4:60:c6:05:74:28:44:7f:02:a2:cb:bc: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:AC:F9:CA:A0:13:2B:AD:FD:5D:4D:DD:A4:02:52:CE:68:A4:07 X509v3 Authority Key Identifier: keyid:3C:2A:D8:67:1B:37:53:26:52:86:D3:2E:46:BF:06:FD:F5:2D:0F:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/PCrYZxs3UyZShtMuRr8G_fUtD-8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCrYZxs3UyZShtMuRr8G_fUtD-8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUJIN/yO6s-cqgEyut_V1N3aQCUs5opAc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.24.54.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:9e:26:25:86:61:bc:a2:7e:63:ca:3f:7a:69:04:23:1b:aa: 79:71:d0:cb:8e:9f:a9:e0:da:e7:c1:9d:e3:4b:7c:e5:eb:6b: d3:a5:ff:bf:9f:0f:e2:13:48:4c:4b:33:ca:95:f6:ee:d9:a8: d5:48:5f:e6:7a:05:1a:33:33:50:6e:2a:ac:07:af:59:61:ad: b1:9b:f7:9f:fc:e4:1a:92:98:1a:a9:d9:63:1b:37:a2:02:6a: 22:15:4f:87:a0:2d:c5:78:73:e6:90:26:60:d6:d5:06:94:bb: f6:d4:5b:6e:cb:e8:83:90:f3:8d:3b:3d:86:51:cd:9b:71:af: 9b:81:55:42:cc:94:cc:4b:23:bb:50:5f:80:5c:da:5a:f6:54: 71:e2:12:42:d7:69:85:e1:ba:be:57:47:37:be:8f:6e:fe:41: 60:41:b5:1e:87:27:81:54:fa:6f:e1:82:d3:ce:f6:6d:ed:b9: cf:88:5f:1e:f9:05:b8:a9:05:15:80:e4:2b:0c:5e:98:8b:4a: fd:67:b2:fc:22:a7:1b:81:f3:af:d6:76:e0:27:57:5b:f9:ea: d0:34:bd:ad:9e:b6:c8:fb:42:96:64:f7:eb:ce:81:76:d9:7c: 5c:a4:d3:7e:f6:30:50:ac:04:18:4d:ca:ba:89:58:36:c5:09: 27:ac:35:f0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0My QUQ4NjcxQjM3NTMyNjUyODZEMzJFNDZCRjA2RkRGNTJEMEZFRjAeFw0yNTA4MjIw ODQ0MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM4RUVBQ0Y5Q0FBMDEz MkJBREZENUQ0REREQTQwMjUyQ0U2OEE0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCSQ1vd5ByEdG6Qqe9gYUXgd73dMvB9U6fNVsxzdFUV9fhNMZ39 lkkj5L6ohN6L85WEVdsHEWYNWYheySo71k4tklbmOZvmh48xyoUeKLGy6wXxVDbc jYVMKrX/Davl9ffP7iYd5nyDpL1lQ+S8KOiU9vUXmrVFrRTm2qZ/krw8urvhMkcZ n5XuaEFN+ve+BLW16PZbmJx1I2faQ4XAeDF3lX+UaZQTRiAbbQg5V75uWa6MtRDp kEKolxmHxLaLIafAjFL1f1Wuw1gywINApBacvxU9Sm9dG9A5hHGKIRv7Pz3hELXl i5h76l2FCeGG5JKA1qRgxgV0KER/AqLLvL43AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUyO6s+cqgEyut/V1N3aQCUs5opAcwHwYDVR0jBBgwFoAUPCrYZxs3UyZShtMu Rr8G/fUtD+8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVKSU4v UENyWVp4czNVeVpTaHRNdVJyOEdfZlV0RC04LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9QQ3JZWnhzM1V5WlNodE11UnI4R19mVXRELTguY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUpJTi95TzZzLWNxZ0V5dXRfVjFOM2FR Q1VzNW9wQWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxg2 MA0GCSqGSIb3DQEBCwUAA4IBAQAaniYlhmG8on5jyj96aQQjG6p5cdDLjp+p4Nrn wZ3jS3zl62vTpf+/nw/iE0hMSzPKlfbu2ajVSF/megUaMzNQbiqsB69ZYa2xm/ef /OQakpgaqdljGzeiAmoiFU+HoC3FeHPmkCZg1tUGlLv21Ftuy+iDkPONOz2GUc2b ca+bgVVCzJTMSyO7UF+AXNpa9lRx4hJC12mF4bq+V0c3vo9u/kFgQbUehyeBVPpv 4YLTzvZt7bnPiF8e+QW4qQUVgOQrDF6Yi0r9Z7L8IqcbgfOv1nbgJ1db+erQNL2t nrbI+0KWZPfrzoF22XxcpNN+9jBQrAQYTcq6iVg2xQknrDXw -----END CERTIFICATE-----Generated at Sun Aug 24 11:46:43 2025 by rpki-client