$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/yl7s30wuYnqSXzYxOvJVrJJQuzA.roa File: yl7s30wuYnqSXzYxOvJVrJJQuzA.roa (raw, json) Hash identifier: APju7khdPg0fQ+9/BQRTZlNYbWKrn8c04PIMwllLkqU= Subject key identifier: CA:5E:EC:DF:4C:2E:62:7A:92:5F:36:31:3A:F2:55:AC:92:50:BB:30 Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0DC2 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/yl7s30wuYnqSXzYxOvJVrJJQuzA.roa Signing time: Fri 22 Aug 2025 08:56:41 +0000 ROA not before: Fri 22 Aug 2025 08:56:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 180.92.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3522 (0xdc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Aug 22 08:56:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA5EECDF4C2E627A925F36313AF255AC9250BB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:5d:0a:63:57:46:6e:9a:10:27:a4:99:6b: 86:b3:62:45:3d:ee:75:53:ef:79:6b:b7:e8:25:00: a0:b8:0d:11:ac:aa:53:ef:29:60:2a:68:62:bd:58: 1c:0b:2c:92:d8:ec:b0:ff:66:cc:88:8c:0d:2f:4e: f5:c9:af:52:47:cc:93:fe:e6:bc:11:2c:23:b3:53: c1:19:3b:59:37:b4:ac:21:2a:9d:df:2d:7a:ca:dd: e7:91:cc:22:3c:40:72:17:3c:d9:2f:85:96:e0:43: 77:07:ba:cc:50:1f:1a:21:92:bd:c3:87:6b:f0:51: 11:20:28:7c:14:03:66:9f:22:3f:76:c3:c7:4e:1b: e7:1c:25:24:24:1b:c7:07:09:dc:1e:af:08:a1:20: 6c:c5:88:11:3c:97:9a:0a:94:42:c2:27:8e:72:c8: a5:03:f1:bc:44:93:57:f8:7e:df:04:fe:a2:f3:25: 18:2a:46:31:df:22:0f:ea:13:90:f5:3e:2d:8c:a4: b4:b0:4c:ba:3b:74:e4:1b:4e:13:0c:60:72:4e:9d: 96:12:b3:d4:e3:2a:6f:7d:a9:73:41:9f:a3:a7:b6: d8:2f:55:c9:cb:9b:71:a5:33:ff:29:0e:a6:95:9d: 2e:5f:f4:f9:12:37:eb:24:83:d7:4e:0d:3f:44:44: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5E:EC:DF:4C:2E:62:7A:92:5F:36:31:3A:F2:55:AC:92:50:BB:30 X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/yl7s30wuYnqSXzYxOvJVrJJQuzA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.92.0.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:23:17:db:7d:8d:aa:93:7e:f8:db:5c:0b:f9:9c:9c:8d:99: ad:20:90:83:02:c6:78:7b:e7:b3:11:fb:19:52:d2:31:ef:b6: 45:b7:7d:10:5a:aa:e8:42:2c:f1:a8:fe:b7:6f:ff:a8:5f:16: 27:50:58:97:7c:92:a5:25:30:60:50:dd:5a:0d:6f:a8:45:fa: 08:68:7d:c7:f4:d7:3a:23:12:b6:32:7b:3c:16:91:47:5a:65: 3f:5b:5b:dd:27:95:22:9f:f0:78:e5:9d:da:05:d3:fa:48:17: 9d:08:61:8b:06:c6:dd:d5:22:ca:1b:16:a2:d3:cf:bb:d8:c5: a7:b3:b4:7c:b4:b4:22:85:2d:c3:32:5e:37:01:de:64:84:dc: 53:da:9e:77:c3:56:c9:9f:ad:21:22:e8:83:97:37:61:ea:05: 3d:c0:96:39:16:29:75:a7:39:78:ce:a3:20:8a:5b:06:c0:6c: da:40:a4:58:13:d1:2b:d8:bd:c5:b1:ad:4a:ca:6e:e3:34:55: d1:af:cb:b2:97:cd:cb:d4:8f:99:bc:30:46:bc:4f:3f:ad:88: 75:28:e1:b8:4a:36:2a:59:5a:f9:e6:c4:b1:0d:ce:63:41:c8: 28:ea:fe:91:f5:21:bd:fa:fb:27:d7:32:ca:21:b5:52:9a:ed: fd:a7:a1:f7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNTA4MjIw ODU2NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBNUVFQ0RGNEMyRTYy N0E5MjVGMzYzMTNBRjI1NUFDOTI1MEJCMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLEl0KY1dGbpoQJ6SZa4azYkU97nVT73lrt+glAKC4DRGsqlPv KWAqaGK9WBwLLJLY7LD/ZsyIjA0vTvXJr1JHzJP+5rwRLCOzU8EZO1k3tKwhKp3f LXrK3eeRzCI8QHIXPNkvhZbgQ3cHusxQHxohkr3Dh2vwUREgKHwUA2afIj92w8dO G+ccJSQkG8cHCdwerwihIGzFiBE8l5oKlELCJ45yyKUD8bxEk1f4ft8E/qLzJRgq RjHfIg/qE5D1Pi2MpLSwTLo7dOQbThMMYHJOnZYSs9TjKm99qXNBn6OnttgvVcnL m3GlM/8pDqaVnS5f9PkSN+skg9dODT9ERPctAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUyl7s30wuYnqSXzYxOvJVrJJQuzAwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYveWw3czMwd3VZbnFTWHpZ eE92SlZySkpRdXpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BLRcADANBgkqhkiG9w0BAQsFAAOCAQEACiMX232NqpN++NtcC/mcnI2ZrSCQgwLG eHvnsxH7GVLSMe+2Rbd9EFqq6EIs8aj+t2//qF8WJ1BYl3ySpSUwYFDdWg1vqEX6 CGh9x/TXOiMStjJ7PBaRR1plP1tb3SeVIp/weOWd2gXT+kgXnQhhiwbG3dUiyhsW otPPu9jFp7O0fLS0IoUtwzJeNwHeZITcU9qed8NWyZ+tISLog5c3YeoFPcCWORYp dac5eM6jIIpbBsBs2kCkWBPRK9i9xbGtSspu4zRV0a/LspfNy9SPmbwwRrxPP62I dSjhuEo2Klla+ebEsQ3OY0HIKOr+kfUhvfr7J9cyyiG1Uprt/aeh9w== -----END CERTIFICATE-----Generated at Wed Nov 5 04:40:39 2025 by rpki-client