$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa File: F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa (raw, json) Hash identifier: 5Csj3Msctv8AWFzq+4WwY3wNuBSGk30qiZW/qCo3GTo= Subject key identifier: 17:D3:C9:19:38:E7:85:4B:9A:46:C0:C5:5B:A9:06:B8:8B:30:AF:64 Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0E56 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa Signing time: Fri 22 Aug 2025 08:56:24 +0000 ROA not before: Fri 22 Aug 2025 08:56:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 203.121.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 22 08:56:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=17D3C91938E7854B9A46C0C55BA906B88B30AF64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:3d:50:49:18:c6:29:e3:16:4d:65:63:38: 28:e8:66:1b:41:67:c7:0a:12:2b:f7:15:f0:1e:56: c8:a3:06:f2:86:ab:fc:86:26:21:5b:5f:fd:ae:35: 89:cc:36:81:7f:5b:6c:01:b2:0f:78:35:67:d1:89: 7b:2e:47:48:97:cc:17:3e:c2:43:08:1b:4b:ba:54: 8e:de:dd:fe:c7:0a:5d:ef:08:8f:8a:16:51:70:98: 08:94:45:19:fd:de:88:6f:f8:f2:4c:79:17:03:81: 71:9d:c1:93:f8:0f:da:8a:84:7f:d8:99:18:4d:31: 30:27:0a:6c:58:ef:59:eb:7c:8a:ec:59:cc:ce:6d: db:ba:45:bc:f4:50:b4:8a:ea:0d:b8:eb:3b:a1:a3: 98:4d:30:17:63:4c:46:26:06:57:c1:d0:97:30:72: 7e:62:6f:19:17:58:a0:56:83:12:34:3c:99:14:af: 76:f2:3e:79:c9:66:24:29:73:9a:78:81:34:bf:c4: 2e:47:a8:f7:6b:8c:8f:d9:a9:ae:2b:57:15:28:4d: c7:95:63:2b:62:4b:fa:03:4a:88:77:45:d1:72:e7: 36:ad:2b:2a:ee:8d:1e:fa:c9:62:8a:6b:40:7d:be: f9:eb:c3:bf:06:88:b3:42:ef:71:08:a9:5c:a2:67: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D3:C9:19:38:E7:85:4B:9A:46:C0:C5:5B:A9:06:B8:8B:30:AF:64 X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/F9PJGTjnhUuaRsDFW6kGuIswr2Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption b6:18:65:cb:6e:f2:3d:26:6f:bd:d7:36:53:3c:47:f9:94:31: 6b:c2:da:72:47:04:f6:de:56:89:1a:ff:83:ed:5a:84:df:e3: e6:c6:c7:10:53:7d:a6:8e:2a:f5:26:08:78:54:b9:e6:af:7a: 29:86:03:a0:99:34:b5:ee:18:5d:32:31:ff:0b:82:0d:41:e0: 6c:c6:06:92:68:35:a3:2b:6f:96:42:75:ef:2b:0a:c5:1b:96: af:bc:60:76:1e:da:12:6f:db:6d:d2:59:50:5d:b8:f7:c3:c0: a0:7e:b3:2d:bf:f4:1b:68:8d:ec:38:3b:29:fd:e8:54:92:09: 0f:97:44:60:ba:71:8a:09:46:7b:9a:b1:f6:e3:1f:3a:a2:0b: 83:9d:1e:79:ee:d6:af:e2:31:e5:11:b8:b4:84:25:73:dd:ca: 82:6d:c2:e4:9b:6b:9a:c4:53:06:e1:dd:88:f9:41:a3:34:91: bb:e5:ab:cf:db:aa:e0:ea:73:29:7f:82:4d:80:27:f0:68:ce: ec:b5:76:16:58:c6:99:4b:34:cb:07:55:df:16:a5:20:de:b3: f6:e4:1f:fa:b0:73:0b:c9:71:a1:fa:a6:7a:ab:82:ac:bb:8a: 94:b6:bc:65:91:5a:7c:8f:7a:55:b7:91:15:e7:05:f2:68:03: 24:fd:e0:34 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw ODU2MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE3RDNDOTE5MzhFNzg1 NEI5QTQ2QzBDNTVCQTkwNkI4OEIzMEFGNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpJT1QSRjGKeMWTWVjOCjoZhtBZ8cKEiv3FfAeVsijBvKGq/yG JiFbX/2uNYnMNoF/W2wBsg94NWfRiXsuR0iXzBc+wkMIG0u6VI7e3f7HCl3vCI+K FlFwmAiURRn93ohv+PJMeRcDgXGdwZP4D9qKhH/YmRhNMTAnCmxY71nrfIrsWczO bdu6Rbz0ULSK6g246zuho5hNMBdjTEYmBlfB0Jcwcn5ibxkXWKBWgxI0PJkUr3by PnnJZiQpc5p4gTS/xC5HqPdrjI/Zqa4rVxUoTceVYytiS/oDSoh3RdFy5zatKyru jR76yWKKa0B9vvnrw78GiLNC73EIqVyiZyURAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUF9PJGTjnhUuaRsDFW6kGuIswr2QwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9GOVBKR1RqbmhVdWFSc0RGVzZr R3VJc3dyMlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy3nw MA0GCSqGSIb3DQEBCwUAA4IBAQC2GGXLbvI9Jm+91zZTPEf5lDFrwtpyRwT23laJ Gv+D7VqE3+PmxscQU32mjir1Jgh4VLnmr3ophgOgmTS17hhdMjH/C4INQeBsxgaS aDWjK2+WQnXvKwrFG5avvGB2HtoSb9tt0llQXbj3w8CgfrMtv/QbaI3sODsp/ehU kgkPl0RgunGKCUZ7mrH24x86oguDnR557tav4jHlEbi0hCVz3cqCbcLkm2uaxFMG 4d2I+UGjNJG75avP26rg6nMpf4JNgCfwaM7stXYWWMaZSzTLB1XfFqUg3rP25B/6 sHMLyXGh+qZ6q4Ksu4qUtrxlkVp8j3pVt5EV5wXyaAMk/eA0 -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:49 2025 by rpki-client