$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/rqi1cENeFksOHgUFlFV7RYQC--o.roa File: rqi1cENeFksOHgUFlFV7RYQC--o.roa (raw, json) Hash identifier: OjxX+4GOowYnqqY3vsK/VOxT5uZApY/loD2xU3JP8b8= Subject key identifier: AE:A8:B5:70:43:5E:16:4B:0E:1E:05:05:94:55:7B:45:84:02:FB:EA Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Certificate serial: 0DD4 Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/rqi1cENeFksOHgUFlFV7RYQC--o.roa Signing time: Fri 22 Aug 2025 08:52:48 +0000 ROA not before: Fri 22 Aug 2025 08:52:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17416 IP address blocks: 2405:4d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Validity Not Before: Aug 22 08:52:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AEA8B570435E164B0E1E050594557B458402FBEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:2e:79:b1:27:d8:ce:69:c0:7d:fa:a6:5b: fb:96:8e:fb:80:de:94:1d:6c:03:2c:14:49:eb:bf: 83:67:de:49:fb:8f:0e:cc:4a:40:3b:b6:f0:ab:7e: 6c:45:f4:3e:df:3d:4c:71:f4:84:fb:68:86:3a:a6: 04:0f:b1:24:9f:03:ef:e1:bb:82:1c:16:e6:c4:11: 07:24:94:77:38:d2:3a:85:05:df:25:48:bb:7a:d9: 66:55:69:8d:6c:71:2a:3f:12:3b:78:cf:30:1d:35: c6:75:13:d9:24:39:79:ff:36:8e:ef:82:34:9d:19: 7b:7a:5b:ae:57:0a:5c:bc:3f:29:0a:7c:1a:a2:b9: b5:d4:5a:d4:77:8d:0b:33:4c:70:b7:00:1d:7a:30: d1:1a:ae:f9:38:ab:e3:91:37:ca:3b:dd:21:69:26: a5:b5:97:5a:95:66:78:12:72:e5:4d:9e:6c:1f:4f: 5b:b3:43:f3:d3:d6:3d:9e:0f:b7:a5:4a:f1:17:2f: df:42:a4:2e:50:e5:2b:54:b1:fd:46:86:b5:e5:a9: 6a:48:c4:78:86:67:3e:00:56:2c:53:a1:9b:82:b9: 10:b1:53:31:e8:e6:bd:69:91:c1:07:32:09:b4:1e: c2:c2:a2:24:c0:7a:37:14:df:f2:bb:e6:32:a2:84: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A8:B5:70:43:5E:16:4B:0E:1E:05:05:94:55:7B:45:84:02:FB:EA X509v3 Authority Key Identifier: keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/rqi1cENeFksOHgUFlFV7RYQC--o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:4d00::/32 Signature Algorithm: sha256WithRSAEncryption 5f:98:b7:71:9f:7c:28:33:07:ad:bf:65:d2:fd:6d:4c:c4:7a: dc:d2:13:64:b9:c7:6f:cb:11:6d:f7:c1:99:94:62:24:15:b3: 05:dd:be:7f:0d:6d:63:81:8b:f7:cb:15:7b:1d:fb:3d:e8:49: 21:a6:e0:37:cc:8c:54:4e:be:70:ba:bd:f1:9d:06:79:28:44: 54:23:ca:45:25:a1:79:1a:b3:ba:32:29:69:7d:2c:d9:94:36: 6a:2d:62:b4:67:b4:0d:62:80:6b:f1:f4:e9:85:3c:2c:95:9c: 9d:b9:65:6e:a9:9b:ad:d2:76:21:ff:06:7b:19:e8:23:80:3a: d2:b5:cf:e1:f7:ca:07:24:70:d7:57:c7:96:46:10:87:a4:cf: df:09:19:ad:47:5d:5a:03:a6:86:f1:cf:92:91:fe:b4:c6:13: c9:b2:64:9b:40:a3:3a:8b:88:f1:95:dd:40:27:34:a1:ba:9c: 50:63:2c:6e:27:5c:79:13:dc:f9:e4:4a:2d:7a:f0:55:cd:cf: 31:ae:b2:0c:4b:69:7f:88:99:a1:40:8c:9f:53:9e:f7:f6:a4: 5c:28:08:c1:a3:ce:f2:5a:06:d8:76:f1:34:9c:f7:1a:0c:04: 19:89:b9:e7:ab:ce:23:71:a7:33:20:1d:76:15:74:61:a6:61: 0f:91:06:9c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yNTA4MjIw ODUyNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFFQThCNTcwNDM1RTE2 NEIwRTFFMDUwNTk0NTU3QjQ1ODQwMkZCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDSi55sSfYzmnAffqmW/uWjvuA3pQdbAMsFEnrv4Nn3kn7jw7M SkA7tvCrfmxF9D7fPUxx9IT7aIY6pgQPsSSfA+/hu4IcFubEEQcklHc40jqFBd8l SLt62WZVaY1scSo/Ejt4zzAdNcZ1E9kkOXn/No7vgjSdGXt6W65XCly8PykKfBqi ubXUWtR3jQszTHC3AB16MNEarvk4q+ORN8o73SFpJqW1l1qVZngScuVNnmwfT1uz Q/PT1j2eD7elSvEXL99CpC5Q5StUsf1GhrXlqWpIxHiGZz4AVixToZuCuRCxUzHo 5r1pkcEHMgm0HsLCoiTAejcU3/K75jKihO0ZAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUrqi1cENeFksOHgUFlFV7RYQC++owHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9ycWkxY0VOZUZrc09IZ1VGbEZW N1JZUUMtLW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAVN ADANBgkqhkiG9w0BAQsFAAOCAQEAX5i3cZ98KDMHrb9l0v1tTMR63NITZLnHb8sR bffBmZRiJBWzBd2+fw1tY4GL98sVex37PehJIabgN8yMVE6+cLq98Z0GeShEVCPK RSWheRqzujIpaX0s2ZQ2ai1itGe0DWKAa/H06YU8LJWcnbllbqmbrdJ2If8Gexno I4A60rXP4ffKByRw11fHlkYQh6TP3wkZrUddWgOmhvHPkpH+tMYTybJkm0CjOouI 8ZXdQCc0obqcUGMsbidceRPc+eRKLXrwVc3PMa6yDEtpf4iZoUCMn1Oe9/akXCgI waPO8loG2HbxNJz3GgwEGYm556vOI3GnMyAddhV0YaZhD5EGnA== -----END CERTIFICATE-----Generated at Fri Oct 24 07:06:02 2025 by rpki-client