$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ALgcElpbRlWHeixD2jzKDHQoT6c.roa File: ALgcElpbRlWHeixD2jzKDHQoT6c.roa (raw, json) Hash identifier: s46o61zq2I8YO9yS7G3rHpQ3BOsJCkV+XSduQYXtVbw= Subject key identifier: 00:B8:1C:12:5A:5B:46:55:87:7A:2C:43:DA:3C:CA:0C:74:28:4F:A7 Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0DC0 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ALgcElpbRlWHeixD2jzKDHQoT6c.roa Signing time: Fri 22 Aug 2025 08:56:40 +0000 ROA not before: Fri 22 Aug 2025 08:56:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 103.130.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Aug 22 08:56:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=00B81C125A5B4655877A2C43DA3CCA0C74284FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:d6:ea:6e:b4:20:8c:54:3b:4f:c2:b9:b4: d4:48:51:52:bd:1d:6b:68:46:0f:b0:11:0c:00:01: 5e:37:fb:1e:f5:9c:27:16:78:3f:8f:20:7e:57:6a: 67:d5:a0:fc:01:dd:e2:e4:4a:d6:83:b4:35:55:96: e6:91:e6:68:18:1e:0f:9b:4c:ee:e2:38:75:66:c8: f5:23:f7:0d:e4:9b:f9:c0:ad:9e:1f:04:05:7e:68: b6:e2:34:80:50:39:5e:49:a4:c1:e6:66:32:99:de: f3:d4:8d:f3:cd:87:ed:17:a0:e7:01:d0:19:d2:28: c9:0e:77:2e:5d:1d:0d:15:a7:5b:9a:e4:5f:c0:41: 80:90:5b:f4:f0:8b:bb:36:0d:f1:2b:46:22:7c:1f: 6c:34:f8:3f:80:96:30:ad:a7:bc:03:e1:33:71:3d: a1:2e:23:f8:1a:0f:cf:6a:73:7f:ae:c9:ad:a0:b7: 37:eb:ca:97:9b:6d:e0:89:d9:19:00:7d:41:57:e0: bd:86:1c:70:d2:d4:59:74:ff:45:97:54:79:1a:c4: d7:4b:91:3e:71:31:d1:1d:75:47:3c:25:b8:60:07: 96:b5:fe:a8:71:c8:82:d1:a5:ba:b8:22:88:c3:cb: bc:94:41:0f:da:59:79:5b:4f:67:28:3f:bd:70:c0: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:1C:12:5A:5B:46:55:87:7A:2C:43:DA:3C:CA:0C:74:28:4F:A7 X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ALgcElpbRlWHeixD2jzKDHQoT6c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.40.0/22 Signature Algorithm: sha256WithRSAEncryption 72:62:10:8a:b1:85:a3:96:4e:9a:82:07:c6:eb:3b:3d:da:63: 3d:18:53:6c:b9:de:5f:fe:35:15:1a:4b:35:e7:0b:1b:51:c4: bf:e2:2c:5d:3a:aa:c7:7b:4c:d3:7e:3a:a7:31:eb:64:10:68: 03:c7:3c:90:b8:e9:61:78:e3:56:e1:36:93:8b:9b:fc:47:45: a8:69:8f:cf:72:8b:f0:94:87:92:85:8a:e2:94:4a:be:1c:b9: dc:f6:b5:8c:d2:0b:56:bc:b4:0f:8c:13:12:bc:a1:ca:98:9a: 76:10:b8:7f:6d:54:76:b5:e9:88:ff:86:7d:38:59:8d:d6:61: b7:f9:61:8d:72:72:2d:99:b6:00:c5:23:e2:6c:eb:83:d3:71: 0c:75:55:36:1e:8d:0d:07:38:1f:e8:b9:59:f0:0d:bb:d1:c4: 3a:51:60:e3:18:b5:05:64:7e:aa:8b:26:bd:86:35:a9:8e:91: d4:48:89:92:ea:28:0e:b3:15:8e:c0:03:c4:c7:99:8f:61:2c: 3b:eb:85:5b:1b:42:ea:61:46:a3:39:12:0a:55:40:74:4a:ec: 28:7c:b7:ab:27:a5:32:78:26:ca:39:05:3a:e6:b1:ca:6c:17: ac:9e:58:f7:47:31:be:d0:30:e2:ea:1f:85:91:1a:33:9a:51: 1c:2c:92:e4 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNTA4MjIw ODU2NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAwQjgxQzEyNUE1QjQ2 NTU4NzdBMkM0M0RBM0NDQTBDNzQyODRGQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCPdbqbrQgjFQ7T8K5tNRIUVK9HWtoRg+wEQwAAV43+x71nCcW eD+PIH5XamfVoPwB3eLkStaDtDVVluaR5mgYHg+bTO7iOHVmyPUj9w3km/nArZ4f BAV+aLbiNIBQOV5JpMHmZjKZ3vPUjfPNh+0XoOcB0BnSKMkOdy5dHQ0Vp1ua5F/A QYCQW/Twi7s2DfErRiJ8H2w0+D+AljCtp7wD4TNxPaEuI/gaD89qc3+uya2gtzfr ypebbeCJ2RkAfUFX4L2GHHDS1Fl0/0WXVHkaxNdLkT5xMdEddUc8JbhgB5a1/qhx yILRpbq4IojDy7yUQQ/aWXlbT2coP71wwFGFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUALgcElpbRlWHeixD2jzKDHQoT6cwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvQUxnY0VscGJSbFdIZWl4 RDJqektESFFvVDZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmeCKDANBgkqhkiG9w0BAQsFAAOCAQEAcmIQirGFo5ZOmoIHxus7PdpjPRhTbLne X/41FRpLNecLG1HEv+IsXTqqx3tM0346pzHrZBBoA8c8kLjpYXjjVuE2k4ub/EdF qGmPz3KL8JSHkoWK4pRKvhy53Pa1jNILVry0D4wTEryhypiadhC4f21UdrXpiP+G fThZjdZht/lhjXJyLZm2AMUj4mzrg9NxDHVVNh6NDQc4H+i5WfANu9HEOlFg4xi1 BWR+qosmvYY1qY6R1EiJkuooDrMVjsADxMeZj2EsO+uFWxtC6mFGozkSClVAdErs KHy3qyelMngmyjkFOuaxymwXrJ5Y90cxvtAw4uofhZEaM5pRHCyS5A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:22:11 2025 by rpki-client