$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/zm9gKmZb6KfnFyrKYKIc4PgQC7M.roa File: zm9gKmZb6KfnFyrKYKIc4PgQC7M.roa (raw, json) Hash identifier: FJwcfRwK6UNlGbv9CEB4JIOMvZera7ZwqDxMaoGo5dU= Subject key identifier: CE:6F:60:2A:66:5B:E8:A7:E7:17:2A:CA:60:A2:1C:E0:F8:10:0B:B3 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 109D Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zm9gKmZb6KfnFyrKYKIc4PgQC7M.roa Signing time: Fri 22 Aug 2025 08:55:39 +0000 ROA not before: Fri 22 Aug 2025 08:55:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 1659 IP address blocks: 2001:288::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 07:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4253 (0x109d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CE6F602A665BE8A7E7172ACA60A21CE0F8100BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:b8:cb:d7:5d:46:35:7b:1d:62:29:29:a4: 7b:58:e0:89:9e:bb:48:2e:c6:5d:c1:44:69:bb:99: d3:db:bd:15:1f:96:c4:19:ad:f9:b4:2a:41:c5:57: c0:ce:ec:11:7e:11:dd:01:d3:23:15:e5:61:62:02: a4:d2:94:d1:38:c5:0a:ca:eb:67:5f:71:b2:5c:79: 06:ee:95:ee:2a:db:00:94:3a:0f:db:63:ed:7b:ef: 21:b8:e7:9e:37:80:37:bb:fa:1c:0f:09:de:01:c6: 50:a7:a6:d1:61:74:36:77:3e:6e:09:14:f5:78:f4: 3f:69:73:6f:62:36:89:6b:ed:fa:d6:7a:52:37:59: d1:8b:89:6f:f9:24:b7:63:a4:19:89:8c:80:38:db: 1c:29:14:31:ab:78:39:43:95:bd:76:36:31:71:cd: ed:8b:79:67:1b:7e:42:1d:9b:59:9c:2e:cf:07:29: f1:83:5a:61:9e:c0:41:7f:67:d9:11:4e:46:4b:48: d0:74:42:72:26:64:c2:ed:8b:66:09:f0:0b:b2:ef: 22:7a:19:81:f1:80:2e:eb:54:dd:e1:09:6c:67:26: 85:c4:32:b0:4f:ad:33:72:08:35:ae:9a:69:e5:b4: 34:00:ac:d9:94:c9:f5:3f:f0:69:e7:dc:22:59:fb: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:60:2A:66:5B:E8:A7:E7:17:2A:CA:60:A2:1C:E0:F8:10:0B:B3 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zm9gKmZb6KfnFyrKYKIc4PgQC7M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:288::/32 Signature Algorithm: sha256WithRSAEncryption 5e:d7:95:76:3f:b0:dd:01:f9:8c:88:c4:46:b4:66:40:4f:f8: c5:a1:42:8d:f1:33:13:b9:8b:e7:11:5c:5e:12:9b:b6:98:47: 6a:ac:9e:d7:17:9d:06:ce:8a:9b:35:31:63:4e:2c:a3:03:ac: 79:0d:55:7b:33:bb:0c:68:02:7b:f7:de:86:1a:a8:31:25:fd: 50:20:51:09:ad:76:d1:ef:a1:a1:6a:06:28:e9:bb:9a:d8:04: a4:e0:42:a1:73:84:b7:3f:ed:d7:fb:50:8e:9f:26:33:e0:47: ed:f1:ee:a6:c4:fb:cc:75:6f:81:cb:61:f3:ae:26:75:0c:da: aa:62:1f:3b:f5:a4:93:9c:5a:27:04:5d:15:78:e2:05:69:a4: 83:a5:43:35:e0:82:7d:81:77:86:3c:1d:a7:78:f1:c4:ea:88: 68:15:a1:7b:cd:f4:bc:da:be:36:d0:36:f4:46:61:29:a5:20: 53:f0:1e:50:55:52:3b:13:20:ea:3a:53:d0:c8:5e:e3:f1:4b: 32:14:9b:b8:69:60:aa:5e:08:e5:15:8f:22:cf:63:3e:df:4b: 66:f7:b7:76:7e:47:b7:12:22:4b:dc:9a:3c:cd:09:9d:39:36: fd:c9:0e:33:93:91:40:0d:92:97:6d:be:ad:af:af:23:31:ac: 29:73:76:9c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENFNkY2MDJBNjY1QkU4 QTdFNzE3MkFDQTYwQTIxQ0UwRjgxMDBCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2ubjL111GNXsdYikppHtY4Imeu0guxl3BRGm7mdPbvRUflsQZ rfm0KkHFV8DO7BF+Ed0B0yMV5WFiAqTSlNE4xQrK62dfcbJceQbule4q2wCUOg/b Y+177yG45543gDe7+hwPCd4BxlCnptFhdDZ3Pm4JFPV49D9pc29iNolr7frWelI3 WdGLiW/5JLdjpBmJjIA42xwpFDGreDlDlb12NjFxze2LeWcbfkIdm1mcLs8HKfGD WmGewEF/Z9kRTkZLSNB0QnImZMLti2YJ8Auy7yJ6GYHxgC7rVN3hCWxnJoXEMrBP rTNyCDWummnltDQArNmUyfU/8Gnn3CJZ+xTTAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUzm9gKmZb6KfnFyrKYKIc4PgQC7MwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC96bTlnS21aYjZLZm5GeXJLWUtJ YzRQZ1FDN00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEC iDANBgkqhkiG9w0BAQsFAAOCAQEAXteVdj+w3QH5jIjERrRmQE/4xaFCjfEzE7mL 5xFcXhKbtphHaqye1xedBs6KmzUxY04sowOseQ1VezO7DGgCe/fehhqoMSX9UCBR Ca120e+hoWoGKOm7mtgEpOBCoXOEtz/t1/tQjp8mM+BH7fHupsT7zHVvgcth864m dQzaqmIfO/Wkk5xaJwRdFXjiBWmkg6VDNeCCfYF3hjwdp3jxxOqIaBWhe830vNq+ NtA29EZhKaUgU/AeUFVSOxMg6jpT0Mhe4/FLMhSbuGlgql4I5RWPIs9jPt9LZve3 dn5HtxIiS9yaPM0JnTk2/ckOM5ORQA2Sl22+ra+vIzGsKXN2nA== -----END CERTIFICATE-----Generated at Sat Oct 25 06:48:37 2025 by rpki-client