$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/zwvF7qAGVI9iDuPvHEbVMYED6jM.roa File: zwvF7qAGVI9iDuPvHEbVMYED6jM.roa (raw, json) Hash identifier: POX+59lXParzpnAu6u90auBlrgE0GRxb6TuI4nVmnfk= Subject key identifier: CF:0B:C5:EE:A0:06:54:8F:62:0E:E3:EF:1C:46:D5:31:81:03:EA:33 Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274 Certificate serial: 021F Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/zwvF7qAGVI9iDuPvHEbVMYED6jM.roa Signing time: Fri 22 Aug 2025 09:01:10 +0000 ROA not before: Fri 22 Aug 2025 09:01:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 2401:55e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 02:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274 Validity Not Before: Aug 22 09:01:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CF0BC5EEA006548F620EE3EF1C46D5318103EA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8b:30:ff:e2:8b:6b:5e:2b:8e:0c:36:6a:fa: 3a:52:50:e5:4e:b2:e9:b6:71:9b:d7:1c:0d:01:61: 59:47:30:e4:a4:ac:98:6a:d2:8e:84:1a:da:ac:ef: 24:74:66:c7:76:b7:ca:11:b0:da:96:d7:5f:9d:83: 8a:2d:c2:c6:81:8a:af:c4:83:aa:9c:ce:a5:87:f6: ee:25:89:15:a7:3b:08:39:90:ea:61:37:67:c9:b9: f7:ee:5e:ca:71:69:35:0b:b8:e9:59:b9:2e:07:3a: b2:d1:ba:1a:c7:40:cf:49:89:0c:94:7f:ca:08:6b: 56:23:1e:ed:72:6d:db:50:77:68:45:fe:f0:df:01: 94:b2:fe:4c:41:94:b5:75:bc:06:ec:2e:41:b8:7d: 8a:39:24:e1:5d:62:34:28:a6:c1:9b:c2:41:46:ae: 6a:47:85:79:f5:29:84:1c:ba:09:8e:50:98:e7:4d: 56:09:a2:b7:5f:86:50:b8:c7:54:6f:e6:36:82:5b: 9f:50:cd:05:31:88:b1:1e:6f:84:29:ba:c1:05:08: 34:44:75:a7:cd:ec:8f:83:7d:f6:02:44:03:3b:b9: ba:60:36:40:c2:65:d1:05:ce:04:38:f3:92:b1:f5: d8:b5:3f:15:8d:fd:8a:6b:8b:db:7b:0f:f7:a9:5f: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0B:C5:EE:A0:06:54:8F:62:0E:E3:EF:1C:46:D5:31:81:03:EA:33 X509v3 Authority Key Identifier: keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/zwvF7qAGVI9iDuPvHEbVMYED6jM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:55e0::/32 Signature Algorithm: sha256WithRSAEncryption b3:f7:bb:0d:93:7c:c6:bc:43:b7:5e:17:43:8d:df:76:05:94: fe:f6:2d:ae:7f:87:b4:b7:54:2c:f9:f7:86:4b:d1:19:f1:6e: d7:fa:99:e1:49:55:36:15:99:ae:46:19:ba:e3:f6:c5:6d:9c: 69:bb:39:ab:f9:d4:d3:c0:06:de:09:5e:1c:db:22:3c:d3:e7: 79:19:a1:93:49:73:e3:b7:7c:93:e1:d0:90:92:74:4d:c5:0f: 21:95:2b:9f:96:d3:3b:b9:00:4d:03:43:4e:99:89:ba:62:6f: 4c:a0:bb:ce:b0:38:12:47:87:f3:cf:91:22:c2:f7:e5:3d:7e: ad:d2:d6:bf:d3:e7:c4:52:c0:ba:ca:11:78:f8:77:c9:40:31: a2:8f:a1:71:42:12:de:4f:fe:8f:5c:10:43:2a:43:9c:eb:c5: 03:c5:e3:60:51:96:f0:cb:6e:7e:cc:af:09:24:39:e5:2f:1a: 2b:cc:f4:d0:5d:cf:ab:de:da:64:77:b9:b4:69:4c:61:f1:c0: 00:f8:9b:3f:cb:94:d3:b9:48:94:41:65:ee:bf:81:98:83:f4: 79:dc:c8:f6:84:ab:dd:74:5b:37:3d:8a:2d:94:3a:31:d4:ee: 82:a6:a2:b1:20:da:3c:6b:d9:ac:d4:0a:38:2c:7d:d0:c0:9f: 83:b7:08:0b -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZG NkQwNkI0MDQ5Mzg2QTEwNkU1RUQyMjY1NkE5M0Q5RjM1NTI3NDAeFw0yNTA4MjIw OTAxMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENGMEJDNUVFQTAwNjU0 OEY2MjBFRTNFRjFDNDZENTMxODEwM0VBMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1izD/4otrXiuODDZq+jpSUOVOsum2cZvXHA0BYVlHMOSkrJhq 0o6EGtqs7yR0Zsd2t8oRsNqW11+dg4otwsaBiq/Eg6qczqWH9u4liRWnOwg5kOph N2fJuffuXspxaTULuOlZuS4HOrLRuhrHQM9JiQyUf8oIa1YjHu1ybdtQd2hF/vDf AZSy/kxBlLV1vAbsLkG4fYo5JOFdYjQopsGbwkFGrmpHhXn1KYQcugmOUJjnTVYJ ordfhlC4x1Rv5jaCW59QzQUxiLEeb4QpusEFCDREdafN7I+DffYCRAM7ubpgNkDC ZdEFzgQ485Kx9di1PxWN/Ypri9t7D/epX7r/AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUzwvF7qAGVI9iDuPvHEbVMYED6jMwHwYDVR0jBBgwFoAUhvbQa0BJOGoQbl7S JlapPZ81UnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkRBL2h2 YlFhMEJKT0dvUWJsN1NKbGFwUFo4MVVuUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev aHZiUWEwQkpPR29RYmw3U0psYXBQWjgxVW5RLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkRBL3p3dkY3cUFHVkk5aUR1UHZIRWJWTVlF RDZqTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAVXgMA0G CSqGSIb3DQEBCwUAA4IBAQCz97sNk3zGvEO3XhdDjd92BZT+9i2uf4e0t1Qs+feG S9EZ8W7X+pnhSVU2FZmuRhm64/bFbZxpuzmr+dTTwAbeCV4c2yI80+d5GaGTSXPj t3yT4dCQknRNxQ8hlSufltM7uQBNA0NOmYm6Ym9MoLvOsDgSR4fzz5EiwvflPX6t 0ta/0+fEUsC6yhF4+HfJQDGij6FxQhLeT/6PXBBDKkOc68UDxeNgUZbwy25+zK8J JDnlLxorzPTQXc+r3tpkd7m0aUxh8cAA+Js/y5TTuUiUQWXuv4GYg/R53Mj2hKvd dFs3PYotlDox1O6CpqKxINo8a9ms1Ao4LH3QwJ+DtwgL -----END CERTIFICATE-----Generated at Mon Nov 3 23:14:31 2025 by rpki-client