$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa File: QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa (raw, json) Hash identifier: sZx62NF8N0pZ7GaciJ0XxrcEmAPUZ0z3MWg5+LjW4/A= Subject key identifier: 40:E4:DD:45:F2:F0:7B:2E:DD:53:CE:4A:CA:1C:6F:A9:FF:CD:FD:1B Certificate issuer: /CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C Certificate serial: 01AC Authority key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa Signing time: Fri 22 Aug 2025 09:03:41 +0000 ROA not before: Fri 22 Aug 2025 09:03:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63898 IP address blocks: 2406:b4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C Validity Not Before: Aug 22 09:03:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=40E4DD45F2F07B2EDD53CE4ACA1C6FA9FFCDFD1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:38:2c:39:d5:cf:71:97:0e:ec:96:e5:41: 4d:e1:df:cb:5f:97:4b:ff:83:d8:99:37:cc:c3:14: 74:79:a9:37:30:ad:f3:4a:9d:7e:ce:14:cd:27:92: aa:78:ee:ce:6f:98:71:82:33:c6:46:0e:bf:6f:31: 65:4f:49:3f:0b:04:2e:70:83:a8:4a:2c:8a:a4:7f: c5:57:31:ee:36:eb:2a:b3:96:ef:6b:94:fa:ea:6d: 1b:18:3d:55:65:b6:69:22:1f:f4:eb:7d:8e:9c:e8: 99:3c:4e:7e:93:4f:d5:ac:a3:82:fd:1a:72:bc:2f: b5:5b:51:2d:49:cf:34:73:99:04:13:f5:b7:49:6f: 51:3a:8f:f2:20:1a:66:7a:53:18:cd:0b:25:d9:bf: 9a:82:c8:5b:7e:a5:3e:18:ce:e0:5c:21:e6:b0:12: 98:0f:71:47:3a:2d:0f:36:0f:6f:3f:13:ba:bb:b0: cc:4e:55:6a:3f:de:c9:9a:b3:0d:71:ac:d1:ca:cb: ad:88:bb:f1:22:e8:ca:27:57:6b:96:96:7b:09:85: da:e0:0d:b2:f2:30:3f:f1:c6:70:da:4b:4c:5d:eb: 4a:97:a3:14:b0:20:17:79:20:67:46:87:d2:07:05: c4:1c:39:c8:bf:ea:2d:3f:ab:e9:ec:75:67:23:c1: 32:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:DD:45:F2:F0:7B:2E:DD:53:CE:4A:CA:1C:6F:A9:FF:CD:FD:1B X509v3 Authority Key Identifier: keyid:B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/QOTdRfLwey7dU85Kyhxvqf_N_Rs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:b4c0::/32 Signature Algorithm: sha256WithRSAEncryption 89:cc:e3:d8:dd:29:5c:f1:ed:25:16:ca:c7:0f:34:d0:8c:a3: bf:14:a2:96:3b:e5:f1:2f:7d:91:42:2c:c9:3b:63:ae:75:32: f8:89:a9:67:20:d9:de:37:24:d8:37:79:23:20:89:e8:73:94: a0:75:0d:2d:60:40:2e:9c:bc:8d:58:8f:74:3f:19:c4:65:3b: 4a:0b:a0:47:9b:41:47:6e:7e:ce:86:b3:ba:ae:68:0e:93:df: fb:3a:6d:00:28:88:da:b8:98:59:38:17:3a:81:e6:25:b7:69: 01:81:4a:93:1f:fd:1b:ff:da:ea:5e:35:0f:cf:b4:ce:b5:03: c6:2d:b2:b0:1c:e2:69:dd:14:ef:cb:a1:b5:e7:4a:ee:3b:99: 82:28:d4:10:89:b0:13:48:79:cd:66:7c:20:c9:9f:0e:b2:36: 55:4a:ff:f4:b6:b6:87:5d:65:ba:e1:6d:a2:46:73:8a:0b:5e: f4:cf:d9:29:7d:17:62:46:ad:9c:06:6b:b5:ea:5f:81:7b:b2: e3:1f:bc:aa:ab:a7:55:b8:04:7e:c1:d0:38:1b:83:73:3c:8c: b4:3e:95:f0:df:f4:f0:d4:61:cb:02:49:54:bb:cb:30:25:f7: 12:c3:36:93:b4:8d:ee:33:38:da:29:cf:5b:b1:42:11:af:e5: 0c:25:dd:cf -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjMy OURBOTI2OEZDRkQ1NEQ5RjM4QTAxRUQwQ0Y3MDkyQkI2OTAwQzAeFw0yNTA4MjIw OTAzNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwRTRERDQ1RjJGMDdC MkVERDUzQ0U0QUNBMUM2RkE5RkZDREZEMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrrjgsOdXPcZcO7JblQU3h38tfl0v/g9iZN8zDFHR5qTcwrfNK nX7OFM0nkqp47s5vmHGCM8ZGDr9vMWVPST8LBC5wg6hKLIqkf8VXMe426yqzlu9r lPrqbRsYPVVltmkiH/TrfY6c6Jk8Tn6TT9Wso4L9GnK8L7VbUS1JzzRzmQQT9bdJ b1E6j/IgGmZ6UxjNCyXZv5qCyFt+pT4YzuBcIeawEpgPcUc6LQ82D28/E7q7sMxO VWo/3smasw1xrNHKy62Iu/Ei6MonV2uWlnsJhdrgDbLyMD/xxnDaS0xd60qXoxSw IBd5IGdGh9IHBcQcOci/6i0/q+nsdWcjwTI/AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQOTdRfLwey7dU85Kyhxvqf/N/RswHwYDVR0jBBgwFoAUsynakmj8/VTZ84oB 7Qz3CSu2kAwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTQ1lC RVIvc3luYWttajhfVlRaODRvQjdRejNDU3Uya0F3LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9zeW5ha21qOF9WVFo4NG9CN1F6M0NTdTJrQXcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OU1NDWUJFUi9RT1RkUmZMd2V5N2RV ODVLeWh4dnFmX05fUnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAa0wDANBgkqhkiG9w0BAQsFAAOCAQEAiczj2N0pXPHtJRbKxw800IyjvxSi ljvl8S99kUIsyTtjrnUy+ImpZyDZ3jck2Dd5IyCJ6HOUoHUNLWBALpy8jViPdD8Z xGU7SgugR5tBR25+zoazuq5oDpPf+zptACiI2riYWTgXOoHmJbdpAYFKkx/9G//a 6l41D8+0zrUDxi2ysBziad0U78uhtedK7juZgijUEImwE0h5zWZ8IMmfDrI2VUr/ 9La2h11luuFtokZzigte9M/ZKX0XYkatnAZrtepfgXuy4x+8qqunVbgEfsHQOBuD czyMtD6V8N/08NRhywJJVLvLMCX3EsM2k7SN7jM42inPW7FCEa/lDCXdzw== -----END CERTIFICATE-----Generated at Thu Sep 18 00:53:18 2025 by rpki-client