$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/RTt8vto0G8iR2icKuoup6dAshGs.roa File: RTt8vto0G8iR2icKuoup6dAshGs.roa (raw, json) Hash identifier: krAOuc27mA9L81ZtBOE31+HSMXUD+cjTnhJqJyuerok= Subject key identifier: 45:3B:7C:BE:DA:34:1B:C8:91:DA:27:0A:BA:8B:A9:E9:D0:2C:84:6B Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0DB6 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/RTt8vto0G8iR2icKuoup6dAshGs.roa Signing time: Fri 22 Aug 2025 08:56:05 +0000 ROA not before: Fri 22 Aug 2025 08:56:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18411 IP address blocks: 61.56.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 22 08:56:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=453B7CBEDA341BC891DA270ABA8BA9E9D02C846B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:52:3f:eb:58:d2:ea:47:be:6b:3b:33:57: 55:1b:4f:fb:9b:dc:31:75:38:0f:19:19:c5:43:fa: 5a:e3:66:30:32:ca:bf:a9:28:b6:6d:96:2c:22:c1: 7c:ef:91:67:1c:24:0a:d6:e2:a8:70:2a:0d:37:c9: 41:11:c3:b3:8d:59:04:df:08:8c:e6:8c:77:e2:3d: f6:19:41:8b:6b:29:ba:e3:8a:97:92:ba:78:3c:0c: db:3d:7d:2b:36:b0:6a:f7:9d:46:d9:4d:e0:c1:3b: 87:ae:f0:e3:48:17:26:1a:c5:49:22:3d:ad:5d:a2: ab:c4:c0:91:61:58:04:dc:df:4c:84:7c:fa:f2:51: 27:8d:2b:be:d4:26:59:9b:9b:78:50:79:0c:33:57: a5:71:5d:6b:96:ce:ab:f5:ed:88:34:58:25:55:9c: 4e:5e:3f:47:1f:38:b1:c0:94:be:77:03:db:b5:03: 72:f7:ca:34:2b:84:c6:b5:32:a7:be:f8:3a:bd:75: 9e:b7:a5:fc:0e:1d:58:70:a1:c5:9f:cc:a8:e2:44: 55:fa:f5:93:f1:2f:db:00:6c:16:f8:b9:22:b9:64: 10:a5:f2:78:51:f4:9b:01:dd:f6:3a:10:98:11:0e: 83:0c:84:61:8e:ac:78:bc:5d:bd:51:79:4e:20:e9: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3B:7C:BE:DA:34:1B:C8:91:DA:27:0A:BA:8B:A9:E9:D0:2C:84:6B X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/RTt8vto0G8iR2icKuoup6dAshGs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.16.0/20 Signature Algorithm: sha256WithRSAEncryption 36:50:3e:ff:e0:0a:e9:62:12:fb:ad:6b:b4:d7:de:65:73:62: 79:ea:de:ba:b8:b2:8c:fa:b3:5b:1d:4f:b7:ab:27:29:e4:ba: 7d:b6:4d:ed:ad:45:12:99:5d:03:47:79:43:56:8f:18:d2:f5: ea:2c:f1:b5:76:9e:45:7c:56:a2:91:a8:63:f1:63:9d:6e:b1: 95:79:fe:fa:36:42:b0:78:92:90:af:2c:d2:5e:0a:d6:be:1a: d7:90:67:5a:9d:73:77:0e:0d:3d:03:77:af:21:14:fe:24:77: 37:40:70:b5:cc:5a:d0:dc:27:9e:7e:f0:8f:74:b2:fa:34:8d: 81:29:17:1c:8b:86:1e:4e:8f:b2:9a:3a:85:97:1e:f8:10:86: 5a:79:84:be:b9:d1:10:1c:4b:38:de:49:51:22:fe:ab:92:b2: d6:a3:49:d7:0b:38:57:6c:a5:ef:38:9c:83:c1:46:03:9b:ce: 94:b6:f8:b3:6e:76:31:d8:b6:22:f4:78:50:5c:51:1e:38:03: 7d:27:87:91:27:c6:35:85:47:15:f3:15:80:34:2b:24:7d:e9: de:73:19:5b:92:ef:a4:8f:5e:fd:b3:90:3a:8d:27:46:ad:f8: 7f:97:d7:2b:9b:03:94:a8:4f:61:e4:44:da:fc:5b:29:8d:27: e3:7a:c0:bb -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNTA4MjIw ODU2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ1M0I3Q0JFREEzNDFC Qzg5MURBMjcwQUJBOEJBOUU5RDAyQzg0NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfrlI/61jS6ke+azszV1UbT/ub3DF1OA8ZGcVD+lrjZjAyyr+p KLZtliwiwXzvkWccJArW4qhwKg03yUERw7ONWQTfCIzmjHfiPfYZQYtrKbrjipeS ung8DNs9fSs2sGr3nUbZTeDBO4eu8ONIFyYaxUkiPa1doqvEwJFhWATc30yEfPry USeNK77UJlmbm3hQeQwzV6VxXWuWzqv17Yg0WCVVnE5eP0cfOLHAlL53A9u1A3L3 yjQrhMa1Mqe++Dq9dZ63pfwOHVhwocWfzKjiRFX69ZPxL9sAbBb4uSK5ZBCl8nhR 9JsB3fY6EJgRDoMMhGGOrHi8Xb1ReU4g6RuZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURTt8vto0G8iR2icKuoup6dAshGswHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9SVHQ4dnRvMEc4aVIyaWNLdW91 cDZkQXNoR3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTgQ MA0GCSqGSIb3DQEBCwUAA4IBAQA2UD7/4ArpYhL7rWu0195lc2J56t66uLKM+rNb HU+3qycp5Lp9tk3trUUSmV0DR3lDVo8Y0vXqLPG1dp5FfFaikahj8WOdbrGVef76 NkKweJKQryzSXgrWvhrXkGdanXN3Dg09A3evIRT+JHc3QHC1zFrQ3CeefvCPdLL6 NI2BKRcci4YeTo+ymjqFlx74EIZaeYS+udEQHEs43klRIv6rkrLWo0nXCzhXbKXv OJyDwUYDm86UtvizbnYx2LYi9HhQXFEeOAN9J4eRJ8Y1hUcV8xWANCskfenecxlb ku+kj179s5A6jSdGrfh/l9crmwOUqE9h5ETa/FspjSfjesC7 -----END CERTIFICATE-----Generated at Wed Nov 5 17:14:35 2025 by rpki-client