$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/EL2WUu51Cpa2oHHntqxjhLYtaIU.roa File: EL2WUu51Cpa2oHHntqxjhLYtaIU.roa (raw, json) Hash identifier: 54aMr+QHa8bJ/gG4iZIiTF+sV6Q4vXRoy1ggNK+CR2k= Subject key identifier: 10:BD:96:52:EE:75:0A:96:B6:A0:71:E7:B6:AC:63:84:B6:2D:68:85 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 108B Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/EL2WUu51Cpa2oHHntqxjhLYtaIU.roa Signing time: Fri 22 Aug 2025 08:57:53 +0000 ROA not before: Fri 22 Aug 2025 08:57:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18424 IP address blocks: 2404:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4235 (0x108b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Aug 22 08:57:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=10BD9652EE750A96B6A071E7B6AC6384B62D6885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:dd:2b:e9:23:45:18:76:d2:11:b9:03:cc: 7f:87:6a:ab:15:6b:c9:7e:1d:f5:c2:fd:ce:91:3c: 3b:8a:7a:3a:61:98:54:80:e4:48:37:65:88:9a:19: 63:b9:52:1a:23:69:e5:e0:55:4c:ab:c8:42:cc:ad: f8:d9:37:a9:63:b9:00:69:a5:f5:09:e0:8e:62:5e: 75:c5:af:80:c1:a8:16:68:89:85:ef:1c:1f:da:e4: ef:40:67:07:ea:15:1c:aa:df:9a:42:f0:b2:59:21: 83:96:e7:33:e8:c9:c8:bf:01:b3:be:62:2a:a8:15: 2d:77:3f:d1:c4:97:f3:39:16:84:3f:a1:d2:50:8b: 38:53:72:70:f6:c7:a6:0e:17:e7:3e:c1:65:b3:cd: 16:25:db:4c:50:dd:71:f4:66:a3:f0:b1:bf:6f:1c: da:be:5d:7f:7d:e5:6f:15:37:bc:29:cf:1c:7c:a7: a6:4e:80:59:05:3b:35:f1:da:70:60:0b:f5:b4:17: 84:fe:4f:c3:84:a5:ed:85:5a:ff:40:c0:26:fa:00: c5:8e:c0:33:c1:64:68:63:ad:05:2b:e6:a4:c6:3e: e1:cb:60:d2:eb:c9:7b:50:d6:86:64:19:a8:27:b1: ab:05:d7:28:b0:82:43:ad:4f:fa:a7:db:fa:ac:50: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BD:96:52:EE:75:0A:96:B6:A0:71:E7:B6:AC:63:84:B6:2D:68:85 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/EL2WUu51Cpa2oHHntqxjhLYtaIU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:8cc0::/32 Signature Algorithm: sha256WithRSAEncryption 44:24:cc:95:b1:05:a2:40:be:e3:90:9c:2d:d0:96:f9:43:93: 75:02:d9:91:69:be:1f:22:01:70:e1:b5:9b:c0:93:e1:d8:c3: f4:20:8f:8d:44:c3:6c:f6:c7:3b:b1:c2:ff:ba:56:90:25:79: f2:15:e6:4c:92:2e:a3:59:70:0a:7b:ba:a5:f2:b7:9f:6a:c7: e3:ea:4c:b0:5e:0b:c9:40:85:46:26:ac:be:e3:cc:86:dc:8a: c8:1e:8b:23:07:18:68:dc:f7:bb:cc:6b:b2:24:4a:21:b6:40: 4e:bf:a7:fb:66:5c:eb:2b:7e:97:df:1b:eb:5c:b6:a2:71:e1: 5d:42:f4:9d:f6:ff:af:e2:c2:2d:b5:7b:89:30:b3:e1:6a:fb: ae:59:cf:6b:bf:7c:57:19:5f:89:e8:0e:d4:de:24:29:0c:e4: 56:1f:35:d6:fb:29:2e:ed:5d:01:d9:46:49:c5:7c:a6:b3:86: da:89:6a:97:8f:9a:65:e1:27:f9:41:b9:68:91:00:4c:94:42: bf:c6:95:65:b3:65:3d:38:60:58:08:01:f8:8d:79:9c:7d:5c: 81:48:74:53:b9:4c:b0:b2:6e:0b:29:de:5e:c8:06:57:30:be: 87:65:8c:99:cf:28:e0:13:1c:e8:88:58:de:12:8e:08:b8:24: 33:db:fd:ed -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICEIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTA4MjIw ODU3NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDEwQkQ5NjUyRUU3NTBB OTZCNkEwNzFFN0I2QUM2Mzg0QjYyRDY4ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT0t0r6SNFGHbSEbkDzH+HaqsVa8l+HfXC/c6RPDuKejphmFSA 5Eg3ZYiaGWO5UhojaeXgVUyryELMrfjZN6ljuQBppfUJ4I5iXnXFr4DBqBZoiYXv HB/a5O9AZwfqFRyq35pC8LJZIYOW5zPoyci/AbO+YiqoFS13P9HEl/M5FoQ/odJQ izhTcnD2x6YOF+c+wWWzzRYl20xQ3XH0ZqPwsb9vHNq+XX995W8VN7wpzxx8p6ZO gFkFOzXx2nBgC/W0F4T+T8OEpe2FWv9AwCb6AMWOwDPBZGhjrQUr5qTGPuHLYNLr yXtQ1oZkGagnsasF1yiwgkOtT/qn2/qsUEA5AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUEL2WUu51Cpa2oHHntqxjhLYtaIUwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL0VMMldVdTUxQ3BhMm9ISG50cXhqaExZ dGFJVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBIzAMA0G CSqGSIb3DQEBCwUAA4IBAQBEJMyVsQWiQL7jkJwt0Jb5Q5N1AtmRab4fIgFw4bWb wJPh2MP0II+NRMNs9sc7scL/ulaQJXnyFeZMki6jWXAKe7ql8refasfj6kywXgvJ QIVGJqy+48yG3IrIHosjBxho3Pe7zGuyJEohtkBOv6f7ZlzrK36X3xvrXLaiceFd QvSd9v+v4sIttXuJMLPhavuuWc9rv3xXGV+J6A7U3iQpDORWHzXW+yku7V0B2UZJ xXyms4baiWqXj5pl4Sf5QblokQBMlEK/xpVls2U9OGBYCAH4jXmcfVyBSHRTuUyw sm4LKd5eyAZXML6HZYyZzyjgExzoiFjeEo4IuCQz2/3t -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:47 2025 by rpki-client