$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/Ry1KRSjuXm0CHivo_rmfumrYdbY.roa File: Ry1KRSjuXm0CHivo_rmfumrYdbY.roa (raw, json) Hash identifier: 4xSCAcyXKL7+pQOuk7IL2I2A/A9OgPoQcBTkr3YlYmg= Subject key identifier: 47:2D:4A:45:28:EE:5E:6D:02:1E:2B:E8:FE:B9:9F:BA:6A:D8:75:B6 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0E18 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/Ry1KRSjuXm0CHivo_rmfumrYdbY.roa Signing time: Fri 22 Aug 2025 08:51:02 +0000 ROA not before: Fri 22 Aug 2025 08:51:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 45474 IP address blocks: 27.105.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 22 08:51:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=472D4A4528EE5E6D021E2BE8FEB99FBA6AD875B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:4c:11:b9:ac:3a:0a:47:69:2b:a9:8e:4f: 9c:e7:9f:d7:e1:eb:4f:ac:42:3d:4e:85:44:d8:1a: 01:5d:69:ad:6b:ff:0e:f8:87:ce:7c:e1:86:b1:93: 10:26:cd:17:9a:aa:bd:1a:62:b7:1c:a4:d0:12:46: 2b:ac:71:27:f2:68:e7:3c:63:a0:5e:64:49:2d:06: 16:23:a9:54:b1:56:bc:68:59:b0:3d:51:1c:a3:3d: f3:59:a4:f9:de:d9:0a:43:5d:63:dc:7b:cd:4d:ae: 06:9b:0d:3d:e4:5a:05:d0:da:8e:af:dd:94:17:9d: ae:3b:b0:6f:a3:b1:ad:4d:ff:e5:6c:f7:49:4d:1e: d5:72:04:9d:55:5d:0e:69:42:5d:ba:72:64:20:a7: a6:89:41:d1:12:f3:e9:43:2c:cb:ad:60:30:ea:18: c7:18:ee:fe:d1:ad:e5:4f:33:9a:2d:36:eb:69:7c: 2e:40:67:06:6a:6e:53:3a:86:f2:d1:cb:83:23:97: dc:02:91:26:ed:5a:a4:6d:cc:3c:b1:fb:6f:76:c8: 8f:45:ed:39:1a:bc:9e:26:3c:a1:cc:a6:51:bf:2c: 3e:86:38:5b:97:45:e6:52:7c:90:41:ef:56:b0:3c: 0b:8f:09:de:5f:b5:ba:59:00:3e:17:0e:83:ca:8d: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:4A:45:28:EE:5E:6D:02:1E:2B:E8:FE:B9:9F:BA:6A:D8:75:B6 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/Ry1KRSjuXm0CHivo_rmfumrYdbY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.105.206.0/24 Signature Algorithm: sha256WithRSAEncryption 76:0f:a8:91:f9:f6:3e:96:04:ef:6d:2c:89:41:71:7f:6a:94: 0f:6c:7d:6d:1f:63:7c:5a:ee:df:94:d7:d8:9f:ef:42:75:8c: c3:68:0c:72:77:e0:a3:ef:d2:00:bf:da:32:f1:0e:c7:57:48: 40:54:95:96:f9:a7:07:bf:cc:c3:46:11:69:36:30:56:08:f8: 48:43:6e:95:ea:99:6c:58:c3:96:1f:8c:44:6b:f7:22:b3:33: af:69:82:36:33:93:47:46:08:9e:c8:db:df:40:82:cb:5f:90: d4:d4:bf:3b:32:41:c0:29:0a:2d:f3:9c:fd:7c:2c:d7:14:a2: c6:2c:44:69:71:54:f4:55:9e:cd:e8:d7:fa:3f:d8:d1:36:af: 76:48:d7:f4:86:0f:23:66:8c:2a:7d:87:55:37:50:d6:52:05: 68:b1:0c:c9:21:4a:1b:1e:67:b6:bc:fa:39:62:58:ac:e7:47: 9c:3f:18:04:d1:eb:e7:a7:25:72:d6:9e:ad:95:5f:2a:d6:f2: a0:51:23:75:86:27:c0:bf:15:58:8a:8d:05:92:1a:1c:5d:30: 95:af:57:c2:62:40:c6:40:11:b0:a7:60:2e:f7:12:b4:c0:c0: 04:f4:0b:20:55:d4:fc:67:dc:e9:91:d0:09:9d:fd:9b:a0:9a: a6:16:cb:c4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTA4MjIw ODUxMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ3MkQ0QTQ1MjhFRTVF NkQwMjFFMkJFOEZFQjk5RkJBNkFEODc1QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbP0wRuaw6CkdpK6mOT5znn9fh60+sQj1OhUTYGgFdaa1r/w74 h8584YaxkxAmzReaqr0aYrccpNASRiuscSfyaOc8Y6BeZEktBhYjqVSxVrxoWbA9 URyjPfNZpPne2QpDXWPce81NrgabDT3kWgXQ2o6v3ZQXna47sG+jsa1N/+Vs90lN HtVyBJ1VXQ5pQl26cmQgp6aJQdES8+lDLMutYDDqGMcY7v7RreVPM5otNutpfC5A ZwZqblM6hvLRy4Mjl9wCkSbtWqRtzDyx+292yI9F7TkavJ4mPKHMplG/LD6GOFuX ReZSfJBB71awPAuPCd5ftbpZAD4XDoPKjfYtAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQURy1KRSjuXm0CHivo/rmfumrYdbYwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9SeTFLUlNqdVhtMENIaXZvX3Jt ZnVtcllkYlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG2nO MA0GCSqGSIb3DQEBCwUAA4IBAQB2D6iR+fY+lgTvbSyJQXF/apQPbH1tH2N8Wu7f lNfYn+9CdYzDaAxyd+Cj79IAv9oy8Q7HV0hAVJWW+acHv8zDRhFpNjBWCPhIQ26V 6plsWMOWH4xEa/ciszOvaYI2M5NHRgieyNvfQILLX5DU1L87MkHAKQot85z9fCzX FKLGLERpcVT0VZ7N6Nf6P9jRNq92SNf0hg8jZowqfYdVN1DWUgVosQzJIUobHme2 vPo5Ylis50ecPxgE0evnpyVy1p6tlV8q1vKgUSN1hifAvxVYio0FkhocXTCVr1fC YkDGQBGwp2Au9xK0wMAE9AsgVdT8Z9zpkdAJnf2boJqmFsvE -----END CERTIFICATE-----Generated at Tue Nov 4 21:45:38 2025 by rpki-client