$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/FYcm3-BAzLarrqeCYV2whY0U-zo.roa File: FYcm3-BAzLarrqeCYV2whY0U-zo.roa (raw, json) Hash identifier: BaTk+IlRTMk3VliwXqlPH52YkxVtp5DBAOqd4jq6OiU= Subject key identifier: 15:87:26:DF:E0:40:CC:B6:AB:AE:A7:82:61:5D:B0:85:8D:14:FB:3A Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B Certificate serial: 0D85 Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/FYcm3-BAzLarrqeCYV2whY0U-zo.roa Signing time: Fri 22 Aug 2025 08:56:36 +0000 ROA not before: Fri 22 Aug 2025 08:56:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 396982 IP address blocks: 2403:8640::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 02:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3461 (0xd85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B Validity Not Before: Aug 22 08:56:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=158726DFE040CCB6ABAEA782615DB0858D14FB3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:92:66:ae:ee:58:0e:5f:02:99:51:25:4a: cf:a3:b2:be:66:24:ad:8a:e0:ca:31:81:59:4c:e9: 23:20:5d:cd:24:51:0c:6c:a0:89:a5:cb:cc:62:5d: c8:01:ef:7c:91:6e:8e:2d:e7:04:c4:95:05:96:60: ee:e9:6a:da:51:61:36:36:99:0f:98:a3:ce:ba:2c: 82:77:d4:6d:90:2d:3a:bf:b7:39:76:ee:53:df:a7: 04:36:41:3d:f0:4b:4f:1f:68:b0:f1:e4:9d:dd:0e: f8:e0:9b:5b:12:91:d3:96:ca:88:24:e6:db:d2:1d: a6:ed:af:10:89:55:c8:f2:c1:f4:69:8d:14:42:f0: 47:a3:ba:03:2d:bc:62:ea:b3:ee:2c:5e:bc:11:d0: 4e:30:de:ea:12:24:cb:0c:c4:b6:ed:7e:22:b2:fa: 6a:2b:c2:a6:6c:e6:aa:03:a1:ba:35:11:40:6a:f9: 42:9c:3b:1e:07:dc:a6:69:26:87:10:79:37:97:65: 45:0b:96:32:b9:e6:9a:8a:aa:34:07:7f:5e:e1:b8: e1:00:35:9f:e8:24:7c:6a:54:6f:00:cb:2b:6c:1b: 90:fd:77:91:cf:4e:4c:fd:a6:d9:0e:a7:2d:bc:27: df:80:4f:65:1c:2a:c5:c1:cc:ae:a7:42:55:57:a5: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:87:26:DF:E0:40:CC:B6:AB:AE:A7:82:61:5D:B0:85:8D:14:FB:3A X509v3 Authority Key Identifier: keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/FYcm3-BAzLarrqeCYV2whY0U-zo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:8640::/32 Signature Algorithm: sha256WithRSAEncryption 91:77:ad:71:21:a2:7e:c5:5b:e2:a3:00:68:b8:8a:86:67:1e: 45:3f:1f:aa:33:f7:85:20:9f:75:1d:67:26:8d:d3:68:70:cd: 1a:92:40:5b:56:b5:f0:c9:2e:e4:a2:a7:ad:5b:aa:68:1a:d4: 34:9c:8d:ec:9c:c7:65:d9:de:f7:ad:b0:84:c5:97:ea:da:19: 4c:6b:63:02:06:1f:e9:49:fb:66:46:7b:43:f0:00:73:86:7a: fd:2b:3b:4a:72:9a:ff:ab:3f:d7:68:26:07:b1:9d:a2:f5:7e: b2:4f:cc:6a:ff:fa:16:5f:b1:69:da:9e:b9:9e:bc:84:ca:0b: fa:20:4d:2c:c4:cd:b0:e3:43:fc:cf:6f:d8:f4:6e:64:fe:36: b2:4a:16:b6:49:d6:b3:42:93:50:5c:aa:c0:6f:4c:9a:10:44: 86:0b:1c:ba:fe:d2:ce:b6:3e:f7:9b:0b:ed:bf:6e:23:be:bb: 02:6b:08:6f:f1:7f:70:48:ff:0d:47:c3:34:3c:c3:7e:11:2d: 4b:7b:f9:dc:b5:43:21:82:40:c8:0d:3c:6f:8a:61:d3:78:22: dc:8a:51:81:f3:f5:88:25:29:45:ed:84:7c:fa:43:c4:dd:32: 75:00:5c:41:47:5b:66:c6:89:1d:bd:39:d9:71:40:ce:41:10: e8:d8:15:31 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICDYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDY0 MEQ5ODhFQzgxNDZCQTQzMDU5NjAxMjEyMkQxQTFDRkMxQzM2QjAeFw0yNTA4MjIw ODU2MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE1ODcyNkRGRTA0MEND QjZBQkFFQTc4MjYxNURCMDg1OEQxNEZCM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO5ZJmru5YDl8CmVElSs+jsr5mJK2K4MoxgVlM6SMgXc0kUQxs oImly8xiXcgB73yRbo4t5wTElQWWYO7patpRYTY2mQ+Yo866LIJ31G2QLTq/tzl2 7lPfpwQ2QT3wS08faLDx5J3dDvjgm1sSkdOWyogk5tvSHabtrxCJVcjywfRpjRRC 8EejugMtvGLqs+4sXrwR0E4w3uoSJMsMxLbtfiKy+morwqZs5qoDobo1EUBq+UKc Ox4H3KZpJocQeTeXZUULljK55pqKqjQHf17huOEANZ/oJHxqVG8AyytsG5D9d5HP Tkz9ptkOpy28J9+AT2UcKsXBzK6nQlVXpS/FAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUFYcm3+BAzLarrqeCYV2whY0U+zowHwYDVR0jBBgwFoAURkDZiOyBRrpDBZYB ISLRoc/Bw2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVS L1JrRFppT3lCUnJwREJaWUJJU0xSb2NfQncycy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUmtEWmlPeUJScnBEQlpZQklTTFJvY19CdzJzLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVSL0ZZY20zLUJBekxhcnJxZUNZ VjJ3aFkwVS16by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk A4ZAMA0GCSqGSIb3DQEBCwUAA4IBAQCRd61xIaJ+xVviowBouIqGZx5FPx+qM/eF IJ91HWcmjdNocM0akkBbVrXwyS7koqetW6poGtQ0nI3snMdl2d73rbCExZfq2hlM a2MCBh/pSftmRntD8ABzhnr9KztKcpr/qz/XaCYHsZ2i9X6yT8xq//oWX7Fp2p65 nryEygv6IE0sxM2w40P8z2/Y9G5k/jaySha2SdazQpNQXKrAb0yaEESGCxy6/tLO tj73mwvtv24jvrsCawhv8X9wSP8NR8M0PMN+ES1Le/nctUMhgkDIDTxvimHTeCLc ilGB8/WIJSlF7YR8+kPE3TJ1AFxBR1tmxokdvTnZcUDOQRDo2BUx -----END CERTIFICATE-----Generated at Mon Nov 3 21:53:42 2025 by rpki-client