$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/3i9iKBeZv8ngHVcHxCYns2T8TMs.roa File: 3i9iKBeZv8ngHVcHxCYns2T8TMs.roa (raw, json) Hash identifier: O/Cnu+z4Iybw2FTRPIx0OBJoOUBN2JkbXTyJM9r/J7g= Subject key identifier: DE:2F:62:28:17:99:BF:C9:E0:1D:57:07:C4:26:27:B3:64:FC:4C:CB Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0DB0 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/3i9iKBeZv8ngHVcHxCYns2T8TMs.roa Signing time: Fri 22 Aug 2025 09:00:57 +0000 ROA not before: Fri 22 Aug 2025 09:00:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9264 IP address blocks: 2400:4500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: Aug 22 09:00:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DE2F62281799BFC9E01D5707C42627B364FC4CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a0:46:f2:16:2b:a1:dc:b5:08:9c:ef:b6:72: aa:e1:47:ce:40:13:f6:22:24:10:f3:9f:5d:59:ee: 1f:39:4e:ea:a2:94:ab:15:bd:9a:03:1e:1e:5d:67: 3d:1c:61:d6:48:70:5c:b0:6e:28:f8:22:28:34:c3: 76:ff:c3:ab:a3:c4:d7:bd:c1:89:9a:03:5b:3f:4a: 36:12:10:65:2c:c1:85:4f:81:44:94:dc:49:da:9d: 30:56:75:d7:66:82:c7:2a:67:0c:91:46:eb:a8:56: da:46:74:b7:0b:9c:82:4c:4d:09:b9:77:a3:2f:f1: 51:c8:8e:6f:6a:e7:aa:88:19:1e:23:43:2e:3a:bc: 78:af:d2:7c:e5:d5:45:1f:68:4b:63:76:bd:10:74: 4d:25:3f:b8:80:63:7b:91:06:20:44:a9:e0:ba:0a: e3:3f:ac:82:7d:0f:9e:67:95:b2:79:d4:fb:1f:9e: 02:44:a0:86:28:d9:21:35:45:f7:c5:37:5d:a6:86: 45:8b:c1:e8:17:0c:ec:69:9b:fd:3a:ba:6a:fb:d9: 7b:79:be:df:35:da:bf:d7:2d:2d:54:a0:9d:16:78: 66:8d:3a:8f:73:b3:c2:6a:1d:4d:42:cc:7f:a0:25: 8c:ac:f6:eb:91:53:a8:52:b3:65:6f:5b:29:e8:36: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:62:28:17:99:BF:C9:E0:1D:57:07:C4:26:27:B3:64:FC:4C:CB X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/3i9iKBeZv8ngHVcHxCYns2T8TMs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:4500::/32 Signature Algorithm: sha256WithRSAEncryption 79:3c:f3:3d:49:21:0c:2f:67:5f:23:65:44:b6:32:a9:bb:2d: c4:f3:0b:4c:71:19:e4:d8:69:f1:48:bf:25:c8:7f:2c:7b:54: 13:b1:7c:4b:26:3d:ac:a2:dc:44:ce:3e:12:13:60:dd:ea:9c: 8a:ed:16:f9:f5:6c:d0:23:64:bb:f7:69:33:c8:9a:75:26:da: d1:20:20:7a:dd:e3:b2:05:55:d5:1c:03:e5:1f:2c:3e:58:75: 48:b0:1f:e6:a9:34:56:a0:c6:ef:bb:59:dc:ad:91:56:2c:1c: 36:ef:dd:d1:b8:55:b7:66:92:e9:d8:25:58:18:3b:06:67:81: f1:af:80:50:77:9c:85:73:69:93:4b:5f:47:b1:95:2b:1f:51: ba:59:23:ec:d3:54:ee:3c:3b:00:09:1c:cf:31:34:62:f1:2a: 93:0a:56:a7:bb:2c:33:f5:51:4e:61:f0:ee:4a:9b:18:1a:1c: c7:cf:9d:b7:35:57:49:57:10:af:4c:47:f3:59:50:62:4d:d0: b1:18:10:6d:cf:fa:a8:03:03:ac:df:fc:c9:42:1e:58:bd:8a: d7:a4:05:58:69:3f:69:8b:81:d1:7a:32:8e:1f:04:fe:6c:fe: 4e:f4:39:e4:5f:fc:01:f1:77:e3:3e:b9:03:1f:a8:cf:4c:44: 94:6c:c9:de -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNTA4MjIw OTAwNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERFMkY2MjI4MTc5OUJG QzlFMDFENTcwN0M0MjYyN0IzNjRGQzRDQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1oEbyFiuh3LUInO+2cqrhR85AE/YiJBDzn11Z7h85TuqilKsV vZoDHh5dZz0cYdZIcFywbij4Iig0w3b/w6ujxNe9wYmaA1s/SjYSEGUswYVPgUSU 3EnanTBWdddmgscqZwyRRuuoVtpGdLcLnIJMTQm5d6Mv8VHIjm9q56qIGR4jQy46 vHiv0nzl1UUfaEtjdr0QdE0lP7iAY3uRBiBEqeC6CuM/rIJ9D55nlbJ51PsfngJE oIYo2SE1RffFN12mhkWLwegXDOxpm/06umr72Xt5vt812r/XLS1UoJ0WeGaNOo9z s8JqHU1CzH+gJYys9uuRU6hSs2VvWynoNs2xAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU3i9iKBeZv8ngHVcHxCYns2T8TMswHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC8zaTlpS0JlWnY4bmdIVmNIeENZ bnMyVDhUTXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJABF ADANBgkqhkiG9w0BAQsFAAOCAQEAeTzzPUkhDC9nXyNlRLYyqbstxPMLTHEZ5Nhp 8Ui/Jch/LHtUE7F8SyY9rKLcRM4+EhNg3eqciu0W+fVs0CNku/dpM8iadSba0SAg et3jsgVV1RwD5R8sPlh1SLAf5qk0VqDG77tZ3K2RViwcNu/d0bhVt2aS6dglWBg7 BmeB8a+AUHechXNpk0tfR7GVKx9Rulkj7NNU7jw7AAkczzE0YvEqkwpWp7ssM/VR TmHw7kqbGBocx8+dtzVXSVcQr0xH81lQYk3QsRgQbc/6qAMDrN/8yUIeWL2K16QF WGk/aYuB0Xoyjh8E/mz+TvQ55F/8AfF34z65Ax+oz0xElGzJ3g== -----END CERTIFICATE-----Generated at Wed Oct 29 08:37:15 2025 by rpki-client