$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/1kRYpZuKM6z78NbnhHv79fJRmBI.roa File: 1kRYpZuKM6z78NbnhHv79fJRmBI.roa (raw, json) Hash identifier: 9taA7wtcMFAaeCJDfa+2OmXrTuwrPed79pzeqLGoU3o= Subject key identifier: D6:44:58:A5:9B:8A:33:AC:FB:F0:D6:E7:84:7B:FB:F5:F2:51:98:12 Certificate issuer: /CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11 Certificate serial: 0FF1 Authority key identifier: 67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/1kRYpZuKM6z78NbnhHv79fJRmBI.roa Signing time: Fri 22 Aug 2025 09:01:44 +0000 ROA not before: Fri 22 Aug 2025 09:01:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 2404:a3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 12:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4081 (0xff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67782BDA48257463ADCDA6D72F2EE41B5FD94A11 Validity Not Before: Aug 22 09:01:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D64458A59B8A33ACFBF0D6E7847BFBF5F2519812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:19:e7:8b:3e:43:53:18:a1:b2:5f:c5:51: b8:a1:d9:a7:70:89:e1:cb:f4:d8:4f:66:9e:f3:3c: 72:0c:cc:a6:68:f5:a1:ec:5b:58:ec:5f:9a:c2:59: 51:bf:58:82:e3:c3:3b:5d:09:80:22:36:22:df:fb: 1e:7c:55:33:6f:40:c6:ac:b8:f1:2f:6e:cc:1d:7a: 70:fc:23:e5:93:24:c3:80:bc:66:f7:eb:6e:6d:3a: cc:02:11:f5:e7:e3:fc:8a:0c:c0:c4:16:c0:16:ac: bd:a5:ab:15:00:94:95:b2:2e:02:ee:df:88:04:87: 15:fd:bf:7a:fa:be:12:72:5e:ba:31:2b:36:38:40: 96:da:1f:3b:3d:8a:bf:1c:8d:a0:b5:1a:3e:7e:c7: cb:b6:eb:53:5b:76:3f:70:37:e4:d0:83:75:6b:88: 20:b3:ba:e0:3c:12:22:7b:0d:85:66:9d:61:a9:cb: e2:28:b3:25:3e:fe:6d:37:54:32:fb:5a:4c:6a:bf: 8e:8a:71:f6:1d:d4:ff:37:1e:98:b1:56:36:05:99: 51:63:77:0e:d1:bc:55:0f:f8:65:74:cb:14:8c:42: 36:28:6f:e4:85:3a:68:72:e5:20:68:71:52:09:a9: 73:3e:15:d2:7c:7a:6a:66:bf:97:8d:25:c1:d0:5a: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:58:A5:9B:8A:33:AC:FB:F0:D6:E7:84:7B:FB:F5:F2:51:98:12 X509v3 Authority Key Identifier: keyid:67:78:2B:DA:48:25:74:63:AD:CD:A6:D7:2F:2E:E4:1B:5F:D9:4A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/Z3gr2kgldGOtzabXLy7kG1_ZShE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z3gr2kgldGOtzabXLy7kG1_ZShE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/1kRYpZuKM6z78NbnhHv79fJRmBI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:a3c0::/32 Signature Algorithm: sha256WithRSAEncryption af:58:94:95:a7:70:fe:1e:83:a1:27:de:07:e9:c9:82:3c:90: 17:0e:a4:d8:61:74:26:8b:95:ac:34:d3:20:35:27:fc:a1:50: ab:a7:11:28:b4:0a:11:68:37:ee:60:65:cc:17:48:21:0d:fc: 16:2f:28:7f:ff:09:27:6d:49:a3:ca:60:21:0d:46:d4:38:18: 2a:c5:4b:80:ff:9a:b9:c2:10:0b:9c:02:0b:5f:dc:f7:7b:82: ba:2e:2e:1f:51:62:f1:bc:4c:b6:6e:4b:9c:a6:ba:be:f6:9a: 06:55:5f:a2:7f:33:9b:2c:3c:4e:8a:ea:8e:3f:a3:2a:38:49: 51:cf:90:d1:e5:0f:46:ec:15:58:bb:f6:36:22:f2:00:78:d3: 5b:26:b6:0d:51:58:10:58:19:ff:e8:4e:90:ae:60:29:6a:68: ac:47:29:bc:eb:24:7e:42:0c:d8:35:b9:a6:47:42:47:34:63: a1:3c:78:6b:36:75:ef:62:cd:13:99:55:8b:2d:df:0a:6b:20: 8e:85:a2:9e:98:a9:52:bf:a3:62:99:df:a4:de:61:e0:8a:f2: fd:88:99:d4:80:56:47:ee:16:9c:94:fe:60:38:b8:cf:ba:d3: 08:0b:72:5a:81:43:95:61:20:c1:41:55:ca:76:ef:4c:77:9b: 8e:fa:d0:f7 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc3 ODJCREE0ODI1NzQ2M0FEQ0RBNkQ3MkYyRUU0MUI1RkQ5NEExMTAeFw0yNTA4MjIw OTAxNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ2NDQ1OEE1OUI4QTMz QUNGQkYwRDZFNzg0N0JGQkY1RjI1MTk4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOHxnniz5DUxihsl/FUbih2adwieHL9NhPZp7zPHIMzKZo9aHs W1jsX5rCWVG/WILjwztdCYAiNiLf+x58VTNvQMasuPEvbswdenD8I+WTJMOAvGb3 625tOswCEfXn4/yKDMDEFsAWrL2lqxUAlJWyLgLu34gEhxX9v3r6vhJyXroxKzY4 QJbaHzs9ir8cjaC1Gj5+x8u261Nbdj9wN+TQg3VriCCzuuA8EiJ7DYVmnWGpy+Io syU+/m03VDL7Wkxqv46KcfYd1P83HpixVjYFmVFjdw7RvFUP+GV0yxSMQjYob+SF Omhy5SBocVIJqXM+FdJ8empmv5eNJcHQWvvBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU1kRYpZuKM6z78NbnhHv79fJRmBIwHwYDVR0jBBgwFoAUZ3gr2kgldGOtzabX Ly7kG1/ZShEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9V RC9aM2dyMmtnbGRHT3R6YWJYTHk3a0cxX1pTaEUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1ozZ3Iya2dsZEdPdHphYlhMeTdrRzFfWlNoRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lNQ0xPVUQvMWtSWXBadUtNNno3OE5i bmhIdjc5ZkpSbUJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQEo8AwDQYJKoZIhvcNAQELBQADggEBAK9YlJWncP4eg6En3gfpyYI8kBcOpNhh dCaLlaw00yA1J/yhUKunESi0ChFoN+5gZcwXSCEN/BYvKH//CSdtSaPKYCENRtQ4 GCrFS4D/mrnCEAucAgtf3Pd7grouLh9RYvG8TLZuS5ymur72mgZVX6J/M5ssPE6K 6o4/oyo4SVHPkNHlD0bsFVi79jYi8gB401smtg1RWBBYGf/oTpCuYClqaKxHKbzr JH5CDNg1uaZHQkc0Y6E8eGs2de9izROZVYst3wprII6Fop6YqVK/o2KZ36TeYeCK 8v2ImdSAVkfuFpyU/mA4uM+60wgLclqBQ5VhIMFBVcp270x3m4760Pc= -----END CERTIFICATE-----Generated at Sat Oct 25 11:36:31 2025 by rpki-client