$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINENET/BkRewyC1Wr96NVssMnvGtfrP2WI.roa File: BkRewyC1Wr96NVssMnvGtfrP2WI.roa (raw, json) Hash identifier: NRjXX2JvXso0YSYYzsk0/2OS89bLjjcjgFhWcmsKtxo= Subject key identifier: 06:44:5E:C3:20:B5:5A:BF:7A:35:5B:2C:32:7B:C6:B5:FA:CF:D9:62 Certificate issuer: /CN=45542320685E62421C114DBA65B8F5705A774845 Certificate serial: 0294 Authority key identifier: 45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/BkRewyC1Wr96NVssMnvGtfrP2WI.roa Signing time: Fri 22 Aug 2025 09:01:02 +0000 ROA not before: Fri 22 Aug 2025 09:01:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150770 IP address blocks: 2400:fe60::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45542320685E62421C114DBA65B8F5705A774845 Validity Not Before: Aug 22 09:01:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=06445EC320B55ABF7A355B2C327BC6B5FACFD962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:bc:56:c2:02:63:25:a1:bf:5c:70:bd:45: 81:0a:cc:fc:cb:da:1b:ae:09:4c:0a:84:49:a1:e0: d1:25:94:70:ed:83:d1:53:12:9d:20:c6:e4:a8:51: 40:d0:7e:07:0e:7e:c3:9a:d6:93:5a:40:5a:40:37: 52:9d:ec:61:ec:77:fc:d2:6d:58:c6:2d:5f:d1:9e: ab:7e:b5:01:bc:6a:52:62:4d:de:7f:f5:b9:be:62: 62:03:6f:c7:be:90:c0:db:5b:10:cc:fd:46:71:60: 77:aa:ea:c3:82:01:37:9a:1b:fe:7e:bb:df:6a:63: 41:dd:7c:97:57:a9:4f:23:55:a3:68:37:d0:b3:00: 07:dc:5a:3c:3e:2f:f6:34:62:93:21:09:82:d8:06: 42:d9:4c:fa:38:32:17:cd:8d:55:60:f8:0e:2f:ad: cc:09:44:d5:74:fa:3e:55:9c:31:75:44:88:a3:e1: 93:20:d9:a4:74:55:f2:9a:01:3d:e6:a5:42:7c:3f: a2:41:a3:4f:92:59:48:04:f6:f5:62:50:9b:70:8e: bc:86:bd:32:44:ff:64:d9:ce:68:25:ed:7c:9e:4c: 40:41:9e:76:3b:e8:7b:4f:ef:5e:0e:24:b9:4b:88: 30:15:66:25:a2:e7:22:6b:51:c7:7e:bd:c5:0b:d5: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:5E:C3:20:B5:5A:BF:7A:35:5B:2C:32:7B:C6:B5:FA:CF:D9:62 X509v3 Authority Key Identifier: keyid:45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/BkRewyC1Wr96NVssMnvGtfrP2WI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:fe60::/32 Signature Algorithm: sha256WithRSAEncryption 4b:67:e3:6e:e9:56:5b:18:0b:92:b6:33:55:d7:1a:5c:0f:cd: 28:66:a2:11:a6:14:01:6b:c4:08:f9:80:e2:f0:33:a3:f5:52: df:e3:45:18:c7:f7:e7:bb:84:00:16:cd:61:cc:85:4b:55:2d: f1:5d:20:55:1a:12:15:bd:ea:6c:a1:65:2b:92:4d:c9:19:c4: d1:c1:24:b1:21:e9:12:88:58:3a:e0:db:03:9b:bc:52:32:03: 85:2d:a8:5a:8c:40:b7:83:73:a3:b5:75:8e:40:27:12:f1:45: d4:a2:76:d0:d0:36:30:d3:75:8e:b8:ad:70:05:1e:cb:fc:bf: 05:88:42:0b:5c:61:b4:06:8d:b7:a8:ba:65:f4:da:a6:fd:73: c8:66:94:26:f0:cc:8c:f8:bb:40:2a:6a:29:45:fd:b7:0c:f0: aa:e2:c7:3f:17:b7:76:6d:89:65:83:15:38:44:b4:3c:dc:81: ec:48:6d:0a:83:6a:bf:c5:99:41:68:52:e2:a3:85:c2:92:7b: 77:65:fc:26:7d:2e:6d:5e:4c:5a:b4:d1:e8:99:5d:6f:89:09: 51:3c:ef:f7:a9:1c:97:85:82:4e:ec:a9:36:5e:09:01:6a:e1: 73:d5:96:d5:1f:06:5a:8c:22:a1:e0:ae:5c:e6:92:b9:11:25: 78:f6:68:0c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICApQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU1 NDIzMjA2ODVFNjI0MjFDMTE0REJBNjVCOEY1NzA1QTc3NDg0NTAeFw0yNTA4MjIw OTAxMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA2NDQ1RUMzMjBCNTVB QkY3QTM1NUIyQzMyN0JDNkI1RkFDRkQ5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD87xWwgJjJaG/XHC9RYEKzPzL2huuCUwKhEmh4NEllHDtg9FT Ep0gxuSoUUDQfgcOfsOa1pNaQFpAN1Kd7GHsd/zSbVjGLV/Rnqt+tQG8alJiTd5/ 9bm+YmIDb8e+kMDbWxDM/UZxYHeq6sOCATeaG/5+u99qY0HdfJdXqU8jVaNoN9Cz AAfcWjw+L/Y0YpMhCYLYBkLZTPo4MhfNjVVg+A4vrcwJRNV0+j5VnDF1RIij4ZMg 2aR0VfKaAT3mpUJ8P6JBo0+SWUgE9vViUJtwjryGvTJE/2TZzmgl7XyeTEBBnnY7 6HtP714OJLlLiDAVZiWi5yJrUcd+vcUL1fKxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUBkRewyC1Wr96NVssMnvGtfrP2WIwHwYDVR0jBBgwFoAURVQjIGheYkIcEU26 Zbj1cFp3SEUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkVO RVQvUlZRaklHaGVZa0ljRVUyNlpiajFjRnAzU0VVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9SVlFqSUdoZVlrSWNFVTI2WmJqMWNGcDNTRVUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSElORU5FVC9Ca1Jld3lDMVdyOTZO VnNzTW52R3RmclAyV0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAD+YDANBgkqhkiG9w0BAQsFAAOCAQEAS2fjbulWWxgLkrYzVdcaXA/NKGai EaYUAWvECPmA4vAzo/VS3+NFGMf357uEABbNYcyFS1Ut8V0gVRoSFb3qbKFlK5JN yRnE0cEksSHpEohYOuDbA5u8UjIDhS2oWoxAt4Nzo7V1jkAnEvFF1KJ20NA2MNN1 jritcAUey/y/BYhCC1xhtAaNt6i6ZfTapv1zyGaUJvDMjPi7QCpqKUX9twzwquLH Pxe3dm2JZYMVOES0PNyB7EhtCoNqv8WZQWhS4qOFwpJ7d2X8Jn0ubV5MWrTR6Jld b4kJUTzv96kcl4WCTuypNl4JAWrhc9WW1R8GWowioeCuXOaSuRElePZoDA== -----END CERTIFICATE-----Generated at Wed Oct 29 05:03:37 2025 by rpki-client