$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOIT/oySmI-ZKvW8JWwc1KyOXmsK8Ba0.roa File: oySmI-ZKvW8JWwc1KyOXmsK8Ba0.roa (raw, json) Hash identifier: mm0RwW+UylslMinzYkslw6nuaEUEkgLSMxQCYY31nSw= Subject key identifier: A3:24:A6:23:E6:4A:BD:6F:09:5B:07:35:2B:23:97:9A:C2:BC:05:AD Certificate issuer: /CN=092933FFCABD00A2F373D7682F2DE3C13BEFB745 Certificate serial: 0113 Authority key identifier: 09:29:33:FF:CA:BD:00:A2:F3:73:D7:68:2F:2D:E3:C1:3B:EF:B7:45 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSkz_8q9AKLzc9doLy3jwTvvt0U.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/oySmI-ZKvW8JWwc1KyOXmsK8Ba0.roa Signing time: Fri 22 Aug 2025 08:57:46 +0000 ROA not before: Fri 22 Aug 2025 08:57:46 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 103.160.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/CSkz_8q9AKLzc9doLy3jwTvvt0U.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/CSkz_8q9AKLzc9doLy3jwTvvt0U.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CSkz_8q9AKLzc9doLy3jwTvvt0U.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=092933FFCABD00A2F373D7682F2DE3C13BEFB745 Validity Not Before: Aug 22 08:57:46 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A324A623E64ABD6F095B07352B23979AC2BC05AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:ea:14:a5:46:92:61:36:e5:43:f3:51:be: ad:3e:9c:11:c5:a5:f9:b2:f6:7d:a6:a2:45:62:b0: 7e:9d:e3:c1:54:89:ae:6e:5a:c1:ea:0c:3a:96:27: 03:44:57:c6:f0:eb:52:31:98:0a:03:15:8d:f5:5e: bd:b4:dc:a2:b7:95:00:22:55:71:d6:49:ad:7d:cc: 15:2d:b9:49:1a:a5:16:28:ae:06:5e:5d:0b:8d:af: 71:ab:40:3b:ca:e5:93:f2:82:03:0c:a0:aa:18:26: 1b:fa:c5:8b:a3:ff:fc:25:9b:0f:9f:8e:4b:41:3d: 3a:fa:cd:8f:f7:22:03:81:1c:85:6f:aa:1c:f8:52: 30:1a:13:57:e2:67:62:a6:ae:d5:61:69:c5:41:13: 6d:0f:44:bd:0f:63:b7:37:45:e0:37:32:d9:87:e4: 01:e6:6d:c9:15:a5:3e:cf:7a:ea:4f:17:14:1e:61: 0b:03:73:ce:01:69:ad:15:b4:2f:1b:31:74:8a:70: ca:b7:42:cc:d1:c6:b4:60:87:83:b7:85:c2:77:b6: d9:3f:34:16:02:0b:ba:bf:dc:37:6c:4a:14:aa:0e: 01:34:b9:ed:86:20:3d:74:a6:1a:7a:93:c3:2e:14: 0c:ad:ac:0a:e1:e3:df:e3:3b:f4:d9:21:c0:1d:51: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:24:A6:23:E6:4A:BD:6F:09:5B:07:35:2B:23:97:9A:C2:BC:05:AD X509v3 Authority Key Identifier: keyid:09:29:33:FF:CA:BD:00:A2:F3:73:D7:68:2F:2D:E3:C1:3B:EF:B7:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/CSkz_8q9AKLzc9doLy3jwTvvt0U.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSkz_8q9AKLzc9doLy3jwTvvt0U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOIT/oySmI-ZKvW8JWwc1KyOXmsK8Ba0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.160.86.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:f2:a8:3b:55:2b:a8:99:34:19:df:ec:7d:0a:bd:cc:03:03: 8c:69:db:59:b8:da:a5:70:85:d3:8f:00:50:33:13:4b:c8:a6: ad:cd:b0:eb:9e:49:b1:f4:94:92:8d:73:b6:89:2f:9f:9a:c3: e5:cc:c9:1d:f6:49:32:cc:9b:4a:0b:ab:c3:ce:24:54:71:47: 01:33:6e:76:4a:9c:d5:81:f0:fd:51:dd:43:62:aa:8c:a3:9a: a8:74:cc:bd:63:7c:5c:10:97:79:2b:a5:5a:48:da:52:5d:69: 44:f1:19:8e:97:23:09:67:89:67:0a:c1:e9:42:77:9c:3b:03: 19:5b:fd:8a:6a:6a:25:59:42:64:0f:19:a2:d8:ca:76:57:e8: ea:0f:7c:6c:cd:ea:a3:8e:1e:88:86:21:f6:59:f4:ef:f1:fb: 3e:93:2b:22:bb:2f:49:2b:86:d9:d7:cc:81:c0:94:19:87:2c: 22:3e:d6:66:c5:5b:76:19:e0:25:b0:62:9d:be:78:15:01:59: f8:04:b7:e8:60:2d:f7:22:99:3f:d8:94:6f:ea:a4:bf:3f:76: bb:76:59:f1:bd:f4:f5:13:ee:9d:8d:fc:c7:cb:7d:e1:a6:cb: bf:fe:2c:6a:b0:11:77:27:f8:3a:4d:8c:2b:e7:0f:6e:7f:44: ca:1b:72:1b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICARMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDky OTMzRkZDQUJEMDBBMkYzNzNENzY4MkYyREUzQzEzQkVGQjc0NTAeFw0yNTA4MjIw ODU3NDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEzMjRBNjIzRTY0QUJE NkYwOTVCMDczNTJCMjM5NzlBQzJCQzA1QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6jOoUpUaSYTblQ/NRvq0+nBHFpfmy9n2mokVisH6d48FUia5u WsHqDDqWJwNEV8bw61IxmAoDFY31Xr203KK3lQAiVXHWSa19zBUtuUkapRYorgZe XQuNr3GrQDvK5ZPyggMMoKoYJhv6xYuj//wlmw+fjktBPTr6zY/3IgOBHIVvqhz4 UjAaE1fiZ2KmrtVhacVBE20PRL0PY7c3ReA3MtmH5AHmbckVpT7PeupPFxQeYQsD c84Baa0VtC8bMXSKcMq3QszRxrRgh4O3hcJ3ttk/NBYCC7q/3DdsShSqDgE0ue2G ID10php6k8MuFAytrArh49/jO/TZIcAdUbhdAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUoySmI+ZKvW8JWwc1KyOXmsK8Ba0wHwYDVR0jBBgwFoAUCSkz/8q9AKLzc9do Ly3jwTvvt0UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9JVC9D U2t6XzhxOUFLTHpjOWRvTHkzandUdnZ0MFUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0NTa3pfOHE5QUtMemM5ZG9MeTNqd1R2dnQwVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0RPSVQvb3lTbUktWkt2VzhKV3djMUt5T1ht c0s4QmEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWegVjAN BgkqhkiG9w0BAQsFAAOCAQEAfPKoO1UrqJk0Gd/sfQq9zAMDjGnbWbjapXCF048A UDMTS8imrc2w655JsfSUko1ztokvn5rD5czJHfZJMsybSgurw84kVHFHATNudkqc 1YHw/VHdQ2KqjKOaqHTMvWN8XBCXeSulWkjaUl1pRPEZjpcjCWeJZwrB6UJ3nDsD GVv9impqJVlCZA8ZotjKdlfo6g98bM3qo44eiIYh9ln07/H7PpMrIrsvSSuG2dfM gcCUGYcsIj7WZsVbdhngJbBinb54FQFZ+AS36GAt9yKZP9iUb+qkvz92u3ZZ8b30 9RPunY38x8t94abLv/4sarARdyf4Ok2MK+cPbn9EyhtyGw== -----END CERTIFICATE-----Generated at Wed Nov 5 17:28:50 2025 by rpki-client