$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/fAvqcJePLbE6lDivhviBuoC2Y-o.roa File: fAvqcJePLbE6lDivhviBuoC2Y-o.roa (raw, json) Hash identifier: 2FqppnZlc8ZzofcCwbHjuYS2u/jDxDh09cDGWJCFHFI= Subject key identifier: 7C:0B:EA:70:97:8F:2D:B1:3A:94:38:AF:86:F8:81:BA:80:B6:63:EA Certificate issuer: /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Certificate serial: 022C Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/fAvqcJePLbE6lDivhviBuoC2Y-o.roa Signing time: Fri 22 Aug 2025 08:50:10 +0000 ROA not before: Fri 22 Aug 2025 08:50:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9923 IP address blocks: 2401:5f20:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 07:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Validity Not Before: Aug 22 08:50:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7C0BEA70978F2DB13A9438AF86F881BA80B663EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:2e:be:c4:69:d3:c7:9e:2a:5a:a8:3c:03: db:11:e8:cb:2c:51:95:d5:b2:45:51:78:a3:9d:02: 49:60:fd:7d:20:69:e7:fa:d5:bf:2d:1d:b8:cc:49: 89:75:bf:ff:ea:66:5e:71:7a:c8:ef:8c:2a:f5:b3: 03:31:c7:b3:1d:e3:35:cf:18:f4:ae:d1:12:58:f1: fe:82:a1:56:c9:0a:45:88:69:ae:51:e8:47:85:f2: fb:f3:2d:ec:30:c1:9d:ed:6c:ca:55:df:22:70:34: 45:1b:b9:41:8e:05:07:37:4f:4d:86:98:3e:86:d4: 94:4d:df:cc:63:50:67:08:fa:48:25:0b:99:27:49: 10:a0:90:37:00:fb:25:cb:fc:0b:01:e1:ce:ff:7a: a6:ca:7c:64:af:77:6b:64:5f:ad:66:08:de:4b:ba: 90:f8:b8:f2:63:29:1b:ef:dd:e8:eb:16:50:04:1e: 7f:99:01:9a:4f:aa:cb:84:42:28:d0:e3:f9:d2:f9: d3:ba:9c:00:90:b8:2d:81:e4:6d:e3:52:cd:94:f6: 6d:43:04:ae:d7:25:96:5d:a4:11:d2:48:7c:50:63: d0:20:b0:12:78:68:3c:61:80:e8:04:f0:af:f1:0a: d8:b1:69:f9:79:b6:10:7b:ec:1a:b1:b6:7c:76:69: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0B:EA:70:97:8F:2D:B1:3A:94:38:AF:86:F8:81:BA:80:B6:63:EA X509v3 Authority Key Identifier: keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/fAvqcJePLbE6lDivhviBuoC2Y-o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5f20:1000::/36 Signature Algorithm: sha256WithRSAEncryption 6d:f2:8f:19:39:32:cd:d9:6c:e2:1c:77:af:5a:58:ab:2c:21: 50:6b:76:1e:29:7e:a9:81:21:d7:3d:a5:13:39:f2:1a:97:0f: e0:7f:f5:f1:11:8e:f5:11:36:7a:7e:45:82:39:85:6d:69:47: fb:0e:a3:3f:ba:85:20:b7:56:52:62:0b:b2:76:9c:fc:0d:e1: ee:05:3e:18:73:df:4b:6e:bd:33:ff:f2:15:af:67:69:3e:7a: ab:82:00:22:4c:35:f3:62:24:4f:e3:d5:c8:1e:73:cd:30:af: 9f:06:9f:87:ce:af:cd:11:7e:1f:dd:23:65:b1:e4:44:ca:a1: 3a:e7:50:9b:77:b4:e2:43:8f:a9:98:e7:6e:c6:e2:de:72:5f: cc:db:37:19:2f:ed:39:5a:60:55:3e:76:10:b3:24:63:d8:18: 42:7c:62:69:b7:c5:33:c9:84:64:32:f5:33:6e:6a:73:36:aa: c2:88:47:e0:08:3f:ed:ef:c2:e2:29:02:9b:5a:22:a3:b2:7d: 04:6b:17:a2:48:9b:00:f2:f9:25:88:61:82:aa:ef:af:76:9e: 9b:49:4d:fc:19:93:4a:b4:2f:d9:db:de:a9:0b:37:ae:2b:5d: 3f:ab:7b:c5:0a:d3:75:1b:78:0f:17:c8:82:d2:99:62:cb:e9: 26:46:de:70 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVG RjkwMzA2QjQ3QTdERTAzMDdGMEUzMzVCNERDN0YyN0RFQTRGQjAeFw0yNTA4MjIw ODUwMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDMEJFQTcwOTc4RjJE QjEzQTk0MzhBRjg2Rjg4MUJBODBCNjYzRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZNC6+xGnTx54qWqg8A9sR6MssUZXVskVReKOdAklg/X0gaef6 1b8tHbjMSYl1v//qZl5xesjvjCr1swMxx7Md4zXPGPSu0RJY8f6CoVbJCkWIaa5R 6EeF8vvzLewwwZ3tbMpV3yJwNEUbuUGOBQc3T02GmD6G1JRN38xjUGcI+kglC5kn SRCgkDcA+yXL/AsB4c7/eqbKfGSvd2tkX61mCN5LupD4uPJjKRvv3ejrFlAEHn+Z AZpPqsuEQijQ4/nS+dO6nACQuC2B5G3jUs2U9m1DBK7XJZZdpBHSSHxQY9AgsBJ4 aDxhgOgE8K/xCtixafl5thB77Bqxtnx2aTC3AgMBAAGjggH4MIIB9DAdBgNVHQ4E FgQUfAvqcJePLbE6lDivhviBuoC2Y+owHwYDVR0jBBgwFoAUNf+QMGtHp94DB/Dj NbTcfyfepPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJSklD T0xURC9OZi1RTUd0SHA5NERCX0RqTmJUY2Z5ZmVwUHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL05mLVFNR3RIcDk0REJfRGpOYlRjZnlmZXBQcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NISUpJQ09MVEQvZkF2cWNKZVBM YkU2bERpdmh2aUJ1b0MyWS1vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQC AAIwCAMGBCQBXyAQMA0GCSqGSIb3DQEBCwUAA4IBAQBt8o8ZOTLN2WziHHevWlir LCFQa3YeKX6pgSHXPaUTOfIalw/gf/XxEY71ETZ6fkWCOYVtaUf7DqM/uoUgt1ZS Yguydpz8DeHuBT4Yc99Lbr0z//IVr2dpPnqrggAiTDXzYiRP49XIHnPNMK+fBp+H zq/NEX4f3SNlseREyqE651Cbd7TiQ4+pmOduxuLecl/M2zcZL+05WmBVPnYQsyRj 2BhCfGJpt8UzyYRkMvUzbmpzNqrCiEfgCD/t78LiKQKbWiKjsn0EaxeiSJsA8vkl iGGCqu+vdp6bSU38GZNKtC/Z296pCzeuK10/q3vFCtN1G3gPF8iC0pliy+kmRt5w -----END CERTIFICATE-----Generated at Tue Oct 28 04:27:55 2025 by rpki-client