$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/dKmCCrXytM2gc_0v8-Blh3wmRHI.roa File: dKmCCrXytM2gc_0v8-Blh3wmRHI.roa (raw, json) Hash identifier: WjzHHqk0d9pJ5OFTdbuFtpZFi99Ma58ezcDOXUVgowo= Subject key identifier: 74:A9:82:0A:B5:F2:B4:CD:A0:73:FD:2F:F3:E0:65:87:7C:26:44:72 Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0E25 Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/dKmCCrXytM2gc_0v8-Blh3wmRHI.roa Signing time: Fri 22 Aug 2025 08:51:58 +0000 ROA not before: Fri 22 Aug 2025 08:51:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 61.65.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3621 (0xe25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Aug 22 08:51:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=74A9820AB5F2B4CDA073FD2FF3E065877C264472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:f0:ed:02:ab:e0:d3:bf:7c:7f:b2:b5:24: ad:51:d0:d0:b4:90:06:17:03:47:f0:c6:48:29:73: ef:2e:f2:e3:c3:69:98:19:11:e4:a3:2c:95:b3:37: 8a:bf:c0:e7:6a:42:1b:50:00:cb:01:65:d3:89:12: ec:1d:62:2c:84:d9:05:3c:09:37:db:ed:a0:ff:25: 2f:48:71:95:4f:ba:53:c6:6d:16:63:bb:c2:41:47: e4:f4:27:e1:1b:73:9c:46:3f:33:45:a9:72:4b:c7: 0c:68:80:a5:16:f2:38:87:b4:0b:9d:d7:0e:34:8e: c0:47:f9:dd:28:56:d6:98:47:2b:b2:65:29:17:ea: ce:a8:92:54:7b:c5:fe:bf:73:1d:6e:f0:64:57:88: 01:12:54:72:96:a1:52:6a:dd:83:31:c5:ea:95:54: 2f:b9:99:4c:cb:4d:4e:cc:54:28:15:ff:79:d9:51: 9c:af:83:c0:75:1d:85:e4:3d:a4:72:ed:51:6e:0e: 90:9f:d9:c5:f5:fd:e0:a9:c4:b4:0d:ac:32:12:e9: 1b:53:08:c0:af:7c:a7:cb:e0:fb:39:14:75:1c:1d: f6:6b:9c:2b:af:00:02:5b:5d:7a:74:31:79:95:9c: 79:47:cf:1a:f1:a7:5c:c1:5c:86:fb:ef:21:0a:0c: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A9:82:0A:B5:F2:B4:CD:A0:73:FD:2F:F3:E0:65:87:7C:26:44:72 X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/dKmCCrXytM2gc_0v8-Blh3wmRHI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.65.240.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:6d:71:f2:9a:d6:81:ae:50:b9:04:8e:a0:02:d4:ce:5e:ef: 1c:05:db:c0:98:a9:55:65:fd:50:f9:ed:9b:28:b1:4d:3d:9b: f9:51:86:0f:df:18:44:0e:d9:cf:33:b4:ff:c7:ab:bc:76:37: b1:30:bf:0c:20:a0:30:79:a9:17:15:14:a4:cf:b6:2f:d1:00: 2d:3f:d2:63:de:e5:b6:74:36:da:27:f1:09:06:e9:e8:cf:b1: 7d:5a:50:82:8d:6e:31:3a:93:41:9b:ce:df:fa:c3:2b:57:3d: 6e:aa:0a:d6:c2:76:95:29:94:62:e3:66:20:8b:f3:36:6d:58: 8e:45:6d:5a:a8:49:8a:9e:2e:90:5c:5e:0c:b5:9d:bb:51:83: 54:e9:6a:99:57:02:6d:b9:8b:65:5a:52:87:23:05:a6:0f:6d: 89:ee:00:7a:aa:7f:2b:84:77:5b:3f:8f:10:c4:ca:0f:6f:ff: 2a:87:13:d0:e9:7c:91:5f:53:ac:1c:20:6d:bb:62:4f:ce:5e: 01:b0:9d:b0:ce:80:f8:e3:8a:13:ff:98:3a:88:b2:30:8f:04: 1b:9d:d6:d7:14:12:1a:74:2f:92:c3:46:d9:12:6c:6c:f5:24: 61:da:2a:33:fd:fd:3d:90:2b:aa:f3:f1:b0:a6:4d:d8:00:c1: ba:6f:55:5c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNTA4MjIw ODUxNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc0QTk4MjBBQjVGMkI0 Q0RBMDczRkQyRkYzRTA2NTg3N0MyNjQ0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+M/DtAqvg0798f7K1JK1R0NC0kAYXA0fwxkgpc+8u8uPDaZgZ EeSjLJWzN4q/wOdqQhtQAMsBZdOJEuwdYiyE2QU8CTfb7aD/JS9IcZVPulPGbRZj u8JBR+T0J+Ebc5xGPzNFqXJLxwxogKUW8jiHtAud1w40jsBH+d0oVtaYRyuyZSkX 6s6oklR7xf6/cx1u8GRXiAESVHKWoVJq3YMxxeqVVC+5mUzLTU7MVCgV/3nZUZyv g8B1HYXkPaRy7VFuDpCf2cX1/eCpxLQNrDIS6RtTCMCvfKfL4Ps5FHUcHfZrnCuv AAJbXXp0MXmVnHlHzxrxp1zBXIb77yEKDCTLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUdKmCCrXytM2gc/0v8+Blh3wmRHIwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9kS21DQ3JYeXRNMmdj XzB2OC1CbGgzd21SSEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQEPUHwMA0GCSqGSIb3DQEBCwUAA4IBAQAcbXHymtaBrlC5BI6gAtTOXu8cBdvA mKlVZf1Q+e2bKLFNPZv5UYYP3xhEDtnPM7T/x6u8djexML8MIKAweakXFRSkz7Yv 0QAtP9Jj3uW2dDbaJ/EJBunoz7F9WlCCjW4xOpNBm87f+sMrVz1uqgrWwnaVKZRi 42Ygi/M2bViORW1aqEmKni6QXF4MtZ27UYNU6WqZVwJtuYtlWlKHIwWmD22J7gB6 qn8rhHdbP48QxMoPb/8qhxPQ6XyRX1OsHCBtu2JPzl4BsJ2wzoD444oT/5g6iLIw jwQbndbXFBIadC+Sw0bZEmxs9SRh2ioz/f09kCuq8/Gwpk3YAMG6b1Vc -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:50 2025 by rpki-client