$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/XCK7X-4GBUxdIRHybw7nM5iuFFo.roa File: XCK7X-4GBUxdIRHybw7nM5iuFFo.roa (raw, json) Hash identifier: ka00t7Job96IFhkMnjXf5WnVTotjpmwnRnp4fcZFRXE= Subject key identifier: 5C:22:BB:5F:EE:06:05:4C:5D:21:11:F2:6F:0E:E7:33:98:AE:14:5A Certificate issuer: /CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B Certificate serial: 1371 Authority key identifier: 0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/XCK7X-4GBUxdIRHybw7nM5iuFFo.roa Signing time: Fri 22 Aug 2025 09:03:34 +0000 ROA not before: Fri 22 Aug 2025 09:03:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131659 IP address blocks: 103.124.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4977 (0x1371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D677394A7AE27B8B455EFAE93A9A65CFE142D6B Validity Not Before: Aug 22 09:03:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C22BB5FEE06054C5D2111F26F0EE73398AE145A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:90:2f:c0:a6:c1:e9:89:36:68:e2:ec:32: b9:1e:ff:00:ba:f6:df:3d:e3:9a:80:4f:dc:50:3e: 01:56:e9:cc:7f:d6:52:0d:ae:94:f2:44:36:86:0c: b7:03:a0:e9:4e:38:57:b3:e4:08:1f:5f:67:bb:94: 89:84:85:4d:8e:32:64:5a:99:fb:10:54:50:54:59: 9d:f0:6a:d0:50:49:fd:28:24:83:1a:9c:93:c5:9b: c5:a8:dd:58:ff:a9:f0:aa:bd:9b:de:8a:19:2b:84: c1:d2:40:33:75:ec:e3:c1:0c:03:61:2e:bc:7d:ba: 03:d1:4c:39:d6:62:65:21:98:37:64:7b:06:75:4b: 86:23:6c:59:28:72:96:e4:23:67:a7:c8:0d:ca:44: b7:cf:41:01:56:9c:c9:5b:2f:58:6c:7c:fc:14:a9: 74:84:c2:e2:e3:eb:c5:64:67:12:93:6a:86:54:16: ec:f7:32:7c:56:b3:8b:ec:80:d9:ec:a5:d6:9f:08: bd:5f:08:84:85:11:00:db:b1:99:06:ed:a9:ca:9a: 12:9d:62:26:c1:dc:25:67:6f:b8:d3:48:e1:d2:bf: 38:f7:13:de:2f:c3:63:17:57:98:d0:be:38:28:31: fc:1b:9d:6b:99:91:1b:c0:dc:fc:93:fc:5f:6b:63: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:22:BB:5F:EE:06:05:4C:5D:21:11:F2:6F:0E:E7:33:98:AE:14:5A X509v3 Authority Key Identifier: keyid:0D:67:73:94:A7:AE:27:B8:B4:55:EF:AE:93:A9:A6:5C:FE:14:2D:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWdzlKeuJ7i0Ve-uk6mmXP4ULWs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TOPCHINA/XCK7X-4GBUxdIRHybw7nM5iuFFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:b3:86:aa:6d:43:09:ee:bc:ef:cc:77:5c:59:b5:c4:49:18: 5e:8d:e3:c1:a8:66:66:af:61:3c:29:22:bc:dd:fe:01:a7:13: 9c:7c:2f:d4:02:dc:5a:68:ed:39:61:78:81:49:46:88:da:ae: fd:f5:fe:e6:f0:ab:2b:32:42:f5:51:a0:bf:89:14:2b:6b:74: 52:48:22:9e:40:4b:6d:27:04:8b:10:9b:a8:a7:3a:22:6c:ab: 23:32:ef:f1:8b:64:fe:eb:83:23:87:a2:a5:df:db:80:e9:25: 39:84:b5:93:96:05:b9:09:a5:e0:80:36:85:de:62:21:3f:7b: 68:2c:50:db:2f:87:cc:62:b9:06:51:5c:1d:e1:a6:b9:3f:0d: 55:12:ee:1d:f3:cd:77:a4:ca:71:d5:fd:87:28:d0:98:64:4d: 75:07:58:95:23:97:2b:2a:8a:c2:7c:4f:66:9c:0e:4b:05:52: dc:d6:d2:3d:2c:37:19:75:90:82:61:7a:89:d6:9d:10:83:0e: af:10:de:31:cd:ba:be:cf:ee:01:63:a9:fa:d8:c3:54:64:5b: c8:7f:0a:59:13:8e:b2:18:75:38:35:05:ae:d5:3e:73:58:76: 88:39:4f:81:99:d6:23:2c:64:a9:f2:1f:59:cb:bf:b2:13:78: d8:c4:0f:2e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ2 NzczOTRBN0FFMjdCOEI0NTVFRkFFOTNBOUE2NUNGRTE0MkQ2QjAeFw0yNTA4MjIw OTAzMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDMjJCQjVGRUUwNjA1 NEM1RDIxMTFGMjZGMEVFNzMzOThBRTE0NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWMpAvwKbB6Yk2aOLsMrke/wC69t8945qAT9xQPgFW6cx/1lIN rpTyRDaGDLcDoOlOOFez5AgfX2e7lImEhU2OMmRamfsQVFBUWZ3watBQSf0oJIMa nJPFm8Wo3Vj/qfCqvZveihkrhMHSQDN17OPBDANhLrx9ugPRTDnWYmUhmDdkewZ1 S4YjbFkocpbkI2enyA3KRLfPQQFWnMlbL1hsfPwUqXSEwuLj68VkZxKTaoZUFuz3 MnxWs4vsgNnspdafCL1fCISFEQDbsZkG7anKmhKdYibB3CVnb7jTSOHSvzj3E94v w2MXV5jQvjgoMfwbnWuZkRvA3PyT/F9rY+SFAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUXCK7X+4GBUxdIRHybw7nM5iuFFowHwYDVR0jBBgwFoAUDWdzlKeuJ7i0Ve+u k6mmXP4ULWswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVE9QQ0hJ TkEvRFdkemxLZXVKN2kwVmUtdWs2bW1YUDRVTFdzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9EV2R6bEtldUo3aTBWZS11azZtbVhQNFVMV3MuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UT1BDSElOQS9YQ0s3WC00R0JVeGRJ Ukh5Ync3bk01aXVGRm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3z8MA0GCSqGSIb3DQEBCwUAA4IBAQBas4aqbUMJ7rzvzHdcWbXESRhejePB qGZmr2E8KSK83f4BpxOcfC/UAtxaaO05YXiBSUaI2q799f7m8KsrMkL1UaC/iRQr a3RSSCKeQEttJwSLEJuopzoibKsjMu/xi2T+64Mjh6Kl39uA6SU5hLWTlgW5CaXg gDaF3mIhP3toLFDbL4fMYrkGUVwd4aa5Pw1VEu4d8813pMpx1f2HKNCYZE11B1iV I5crKorCfE9mnA5LBVLc1tI9LDcZdZCCYXqJ1p0Qgw6vEN4xzbq+z+4BY6n62MNU ZFvIfwpZE46yGHU4NQWu1T5zWHaIOU+BmdYjLGSp8h9Zy7+yE3jYxA8u -----END CERTIFICATE-----Generated at Wed Nov 5 22:30:20 2025 by rpki-client