$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa File: ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa (raw, json) Hash identifier: 9y2XElXFqksBaCqCc2PlVjsjJ/Jxgt7xm35P0MIbn4Y= Subject key identifier: 38:D8:86:37:23:76:6B:95:F3:86:50:EC:FC:0D:BF:E5:EB:90:EE:E6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13A6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa Signing time: Fri 22 Aug 2025 08:59:33 +0000 ROA not before: Fri 22 Aug 2025 08:59:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9311 IP address blocks: 203.79.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5030 (0x13a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=38D8863723766B95F38650ECFC0DBFE5EB90EEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0b:97:f7:aa:06:a8:f7:f3:a1:f7:95:ac:01: 27:e9:a9:38:94:7e:39:a6:dd:d5:13:86:5f:25:b5: 3d:5f:e8:e7:36:92:94:e6:f9:3d:84:b7:9b:9d:91: bf:a4:6e:e1:f7:15:1a:d3:21:37:f7:7c:3f:eb:e9: 31:1d:32:a8:69:07:ab:71:80:ab:81:88:0f:bb:2c: d8:5d:d1:a8:01:c8:b3:82:f8:84:a0:14:b6:51:eb: 3a:e2:5e:4c:be:8e:aa:ed:9e:6b:09:78:bd:d5:f8: 36:6f:5d:6a:76:78:fd:54:02:3f:e7:79:49:89:70: 12:38:7c:d2:20:ec:73:44:08:42:85:da:b9:d1:f4: 7f:a5:46:3b:c5:09:7d:53:53:47:eb:aa:09:10:8f: 90:c4:8e:df:d6:25:fc:45:7a:be:38:9e:96:61:72: ed:52:cf:24:5e:c3:55:82:88:14:10:4f:ca:86:91: f2:3e:c7:d5:69:e0:e9:e0:d5:e9:d1:f9:b0:fa:b0: de:7f:10:77:6a:17:31:a1:04:1b:4c:6d:4d:2d:ea: f2:78:99:d2:94:59:68:6b:ea:66:db:03:25:7f:99: 0f:cd:2b:a8:46:4f:9f:db:3f:34:c0:6f:4e:28:0f: c8:31:cb:8e:cb:69:c4:1f:ed:7c:91:b7:a1:fd:0f: ac:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:86:37:23:76:6B:95:F3:86:50:EC:FC:0D:BF:E5:EB:90:EE:E6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ONiGNyN2a5XzhlDs_A2_5euQ7uY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.220.0/22 Signature Algorithm: sha256WithRSAEncryption 63:81:04:4a:bb:62:47:e1:f8:f5:96:63:3f:84:91:1c:a1:d8: 7d:45:23:aa:10:ab:4c:d6:2f:d8:b7:d1:d8:21:c8:13:a4:cb: 03:de:30:1d:84:dd:54:44:1a:ce:8f:ed:a2:32:40:ca:b4:29: 59:37:7c:b0:9e:53:42:65:ec:2f:3d:da:b6:94:29:94:89:de: 8c:57:10:cd:7b:80:77:9a:d1:0f:e3:a2:b7:70:db:18:9b:a1: a0:34:dc:4c:b0:bf:bd:78:72:20:86:2e:ba:87:97:4c:d8:ca: a6:3b:10:8b:c6:d6:89:d1:cc:98:47:6c:58:b5:88:33:21:12: 80:3c:70:70:9d:89:05:96:b1:42:55:d1:f7:26:5a:7a:49:e1: e0:bf:43:db:97:4b:76:31:58:0b:9d:7b:c6:33:31:19:7a:8b: 1a:3a:c9:38:4e:d7:e0:04:1d:1c:b5:42:19:a0:5f:e3:90:e9: b6:ec:ea:0b:9b:24:43:f0:02:03:f5:aa:8a:6a:ca:17:12:20: 01:f7:e1:3e:37:1a:4d:21:ed:60:a9:76:58:3e:f7:ea:d3:64: e0:66:14:94:ff:27:53:1c:54:b0:d0:02:69:3c:dc:05:cd:5d: dc:b0:08:d2:69:a2:14:07:1f:fa:bd:01:35:54:94:d9:c8:74: 9d:fc:8e:d4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM4RDg4NjM3MjM3NjZC OTVGMzg2NTBFQ0ZDMERCRkU1RUI5MEVFRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3C5f3qgao9/Oh95WsASfpqTiUfjmm3dUThl8ltT1f6Oc2kpTm +T2Et5udkb+kbuH3FRrTITf3fD/r6TEdMqhpB6txgKuBiA+7LNhd0agByLOC+ISg FLZR6zriXky+jqrtnmsJeL3V+DZvXWp2eP1UAj/neUmJcBI4fNIg7HNECEKF2rnR 9H+lRjvFCX1TU0frqgkQj5DEjt/WJfxFer44npZhcu1SzyRew1WCiBQQT8qGkfI+ x9Vp4Ong1enR+bD6sN5/EHdqFzGhBBtMbU0t6vJ4mdKUWWhr6mbbAyV/mQ/NK6hG T5/bPzTAb04oD8gxy47LacQf7XyRt6H9D6wZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUONiGNyN2a5XzhlDs/A2/5euQ7uYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL09OaUdOeU4yYTVYemhsRHNfQTJfNWV1 UTd1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLT9wwDQYJ KoZIhvcNAQELBQADggEBAGOBBEq7Ykfh+PWWYz+EkRyh2H1FI6oQq0zWL9i30dgh yBOkywPeMB2E3VREGs6P7aIyQMq0KVk3fLCeU0Jl7C892raUKZSJ3oxXEM17gHea 0Q/jordw2xiboaA03Eywv714ciCGLrqHl0zYyqY7EIvG1onRzJhHbFi1iDMhEoA8 cHCdiQWWsUJV0fcmWnpJ4eC/Q9uXS3YxWAude8YzMRl6ixo6yThO1+AEHRy1Qhmg X+OQ6bbs6gubJEPwAgP1qopqyhcSIAH34T43Gk0h7WCpdlg+9+rTZOBmFJT/J1Mc VLDQAmk83AXNXdywCNJpohQHH/q9ATVUlNnIdJ38jtQ= -----END CERTIFICATE-----Generated at Sat Sep 6 13:38:30 2025 by rpki-client