$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/3eyCRO9MGIEJUMjXT6q1FLnoGZg.roa File: 3eyCRO9MGIEJUMjXT6q1FLnoGZg.roa (raw, json) Hash identifier: dXwofn4csuDbYTn+L91lXkFkMsAbaw9LjV5StgdJeGw= Subject key identifier: DD:EC:82:44:EF:4C:18:81:09:50:C8:D7:4F:AA:B5:14:B9:E8:19:98 Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0E1F Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/3eyCRO9MGIEJUMjXT6q1FLnoGZg.roa Signing time: Fri 22 Aug 2025 08:51:57 +0000 ROA not before: Fri 22 Aug 2025 08:51:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 61.65.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3615 (0xe1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Aug 22 08:51:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DDEC8244EF4C18810950C8D74FAAB514B9E81998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:e3:93:3b:78:ad:71:ad:af:3c:19:3d:40: 11:fa:47:a8:d1:89:40:03:be:e8:55:1a:fc:5d:e3: 2f:1b:f3:f3:d3:a2:c8:0d:45:2d:7e:70:d7:de:46: 00:50:72:cd:e3:0e:90:af:77:c1:b1:64:3a:cc:66: e9:0b:67:3a:18:da:24:19:a4:93:67:91:ac:f7:5f: 62:75:93:c7:05:11:ca:77:aa:db:73:42:9f:2d:d6: be:57:73:0e:f4:55:bd:0f:0a:d4:0d:11:53:5f:71: 9f:17:b4:39:19:6d:61:e7:0a:d5:b0:e4:4e:ac:30: 20:f3:1a:f7:48:d0:75:5b:c8:f4:9d:32:e5:6c:0e: 1c:62:31:87:f0:8c:94:23:89:46:df:d7:f1:bc:74: 78:fc:3a:b2:0e:fd:49:d8:d5:b7:a0:34:e8:b3:e9: 3c:85:24:9d:7d:57:62:df:d2:4d:bf:b8:62:b1:79: 5f:9a:e3:60:96:1f:29:61:98:93:23:15:49:99:eb: 5b:61:01:06:82:69:d4:f0:a2:d0:66:79:2e:5d:74: b4:93:7e:3a:7b:a1:d0:73:1b:d5:f4:d8:47:5a:93: 06:f1:7e:c7:0e:28:c6:b4:98:7a:d1:7e:4f:15:f6: 43:61:d9:bf:40:d8:ec:0a:8e:fd:f2:b3:e1:ae:f8: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EC:82:44:EF:4C:18:81:09:50:C8:D7:4F:AA:B5:14:B9:E8:19:98 X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/3eyCRO9MGIEJUMjXT6q1FLnoGZg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.65.236.0/22 Signature Algorithm: sha256WithRSAEncryption b9:70:23:37:ef:33:7c:6b:23:46:ac:cc:9d:33:a1:3b:78:86: fe:a7:e9:63:64:30:ac:0d:d2:73:be:62:55:1f:0f:97:93:a7: b7:c6:8b:3b:52:32:93:95:1a:33:a8:04:cb:f3:b2:fd:94:b1: c9:b1:a5:3d:d8:7c:ca:c7:5e:96:35:e2:70:27:bf:c4:f5:ce: 15:0d:78:96:06:01:0c:e7:d1:18:57:4d:6a:0e:85:fe:98:63: 46:a3:72:bf:ac:3c:8c:e5:ba:37:dc:34:73:0a:b8:12:eb:7b: 8c:72:b5:62:5c:88:4f:54:7d:3e:9a:ca:8c:66:d9:17:7b:72: d9:9d:64:50:af:95:e4:b4:e7:9e:fd:d7:0c:db:18:8a:99:29: 37:a6:f5:de:75:ab:55:e6:07:97:9e:fc:c5:69:01:68:81:4e: 27:93:cf:8c:a0:41:39:f4:8a:60:fe:91:5b:b5:61:08:62:2f: dd:a4:23:d9:57:23:03:90:0f:26:d4:a7:6e:a4:a8:aa:7f:fc: 02:5f:28:b0:12:ca:20:6f:5c:96:06:0c:16:b3:01:01:30:e4: 7d:d5:71:b9:6d:63:4a:6e:42:dc:b2:21:62:0f:23:d7:39:0c: 0b:c3:10:e0:2a:9b:5f:fd:d5:2b:a9:04:f3:c1:a9:88:83:8e: fd:b1:63:e8 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNTA4MjIw ODUxNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERERUM4MjQ0RUY0QzE4 ODEwOTUwQzhENzRGQUFCNTE0QjlFODE5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIy+OTO3itca2vPBk9QBH6R6jRiUADvuhVGvxd4y8b8/PTosgN RS1+cNfeRgBQcs3jDpCvd8GxZDrMZukLZzoY2iQZpJNnkaz3X2J1k8cFEcp3qttz Qp8t1r5Xcw70Vb0PCtQNEVNfcZ8XtDkZbWHnCtWw5E6sMCDzGvdI0HVbyPSdMuVs DhxiMYfwjJQjiUbf1/G8dHj8OrIO/UnY1begNOiz6TyFJJ19V2Lf0k2/uGKxeV+a 42CWHylhmJMjFUmZ61thAQaCadTwotBmeS5ddLSTfjp7odBzG9X02EdakwbxfscO KMa0mHrRfk8V9kNh2b9A2OwKjv3ys+Gu+PCdAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU3eyCRO9MGIEJUMjXT6q1FLnoGZgwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy8zZXlDUk85TUdJRUpV TWpYVDZxMUZMbm9HWmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCPUHsMA0GCSqGSIb3DQEBCwUAA4IBAQC5cCM37zN8ayNGrMydM6E7eIb+p+lj ZDCsDdJzvmJVHw+Xk6e3xos7UjKTlRozqATL87L9lLHJsaU92HzKx16WNeJwJ7/E 9c4VDXiWBgEM59EYV01qDoX+mGNGo3K/rDyM5bo33DRzCrgS63uMcrViXIhPVH0+ msqMZtkXe3LZnWRQr5XktOee/dcM2xiKmSk3pvXedatV5geXnvzFaQFogU4nk8+M oEE59Ipg/pFbtWEIYi/dpCPZVyMDkA8m1KdupKiqf/wCXyiwEsogb1yWBgwWswEB MOR91XG5bWNKbkLcsiFiDyPXOQwLwxDgKptf/dUrqQTzwamIg479sWPo -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:19 2025 by rpki-client