$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa File: 4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa (raw, json) Hash identifier: rr8ai+tHPGty5BupOyE9DelxO6iE+XyM3irun6Qw408= Subject key identifier: E2:78:3D:AC:E9:D9:77:C4:1F:6B:6B:AB:A8:6B:52:B2:2E:FE:12:A6 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1464 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa Signing time: Fri 22 Aug 2025 08:51:28 +0000 ROA not before: Fri 22 Aug 2025 08:51:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18248 IP address blocks: 2407:3d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5220 (0x1464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E2783DACE9D977C41F6B6BABA86B52B22EFE12A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:ed:0c:8e:63:7a:2d:bb:9f:f3:af:ef:92: 74:c5:00:7d:84:7f:c3:8e:ab:44:4d:8d:a8:b2:ee: 0c:c0:10:76:1b:2c:d8:4f:a4:82:03:4e:51:03:cd: 8f:f7:f3:1f:d1:e1:7f:9d:4a:47:66:0b:34:23:37: 28:14:d7:3a:f8:4e:a8:dc:46:df:df:69:60:69:73: 93:3c:10:c8:e5:4b:36:72:68:d5:49:5d:49:dc:06: 01:f9:f8:c1:f6:b6:97:b9:68:8f:65:d6:7a:6f:31: e2:da:2e:d5:16:0f:12:8a:91:72:03:26:ed:08:62: d7:26:b6:fa:35:ea:61:07:34:41:85:db:a5:63:56: f2:0d:64:91:b5:5c:56:d1:3f:a6:ce:ed:b4:07:c2: 25:e0:76:2c:3d:9b:74:f5:90:f3:9a:f3:bb:5f:62: 27:f9:c8:f3:62:87:c6:2d:37:df:70:53:19:38:11: e3:af:10:b3:01:6a:b5:74:74:c9:85:a8:54:40:dc: 52:14:65:4d:d5:40:3c:6c:07:a5:0c:25:e7:7e:90: 4c:31:0b:db:89:53:24:f0:7f:1d:74:a9:5f:ca:d9: 4a:98:96:1c:aa:7c:cb:03:ca:23:3c:7c:e6:42:38: 93:ca:da:20:d9:29:67:94:f9:ac:a8:4e:4c:d1:82: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:78:3D:AC:E9:D9:77:C4:1F:6B:6B:AB:A8:6B:52:B2:2E:FE:12:A6 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:3d00::/32 Signature Algorithm: sha256WithRSAEncryption bc:24:44:59:7b:59:95:ab:e5:09:6b:39:be:b2:8c:c9:6d:87: 85:94:43:c8:df:a6:38:d0:1f:45:88:74:f2:da:79:8b:16:1c: 44:59:ea:d9:48:e4:3d:57:6d:d1:94:38:5d:b4:02:7e:db:5b: 0f:c5:0c:b1:31:ff:0e:58:a5:af:34:ec:af:a7:65:8c:66:8f: 5f:d1:f8:f6:88:19:9c:b8:7c:7e:66:65:bb:2b:48:ca:29:3f: 01:f0:96:fc:b4:96:9c:98:d7:b1:49:f7:a0:6a:8e:f2:45:00: 67:d0:48:43:58:66:08:58:fb:0c:c4:30:4f:8a:0a:cf:30:a1: 18:c4:88:ab:89:40:9a:b9:d8:a3:5f:48:52:5b:36:49:49:fc: 3c:9f:31:f8:74:d4:86:37:15:49:e2:e4:88:3e:00:c9:7d:c7: 8e:86:3f:29:a6:20:14:68:9e:a8:7d:55:64:66:e1:30:ba:e1: f5:61:d1:3f:59:98:bf:87:04:18:5c:20:51:fd:db:6b:79:8e: bc:13:eb:e1:ee:40:68:fd:06:0c:78:89:03:98:82:9c:54:c4: fe:bd:d9:c2:f9:c1:0e:d9:15:f2:e4:d0:62:60:f5:00:fd:02: f8:a7:6d:10:c4:a0:f0:13:2d:2e:be:c7:bf:43:48:31:d7:b7: 13:20:90:ff -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUyNzgzREFDRTlEOTc3 QzQxRjZCNkJBQkE4NkI1MkIyMkVGRTEyQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Le0MjmN6Lbuf86/vknTFAH2Ef8OOq0RNjaiy7gzAEHYbLNhP pIIDTlEDzY/38x/R4X+dSkdmCzQjNygU1zr4TqjcRt/faWBpc5M8EMjlSzZyaNVJ XUncBgH5+MH2tpe5aI9l1npvMeLaLtUWDxKKkXIDJu0IYtcmtvo16mEHNEGF26Vj VvINZJG1XFbRP6bO7bQHwiXgdiw9m3T1kPOa87tfYif5yPNih8YtN99wUxk4EeOv ELMBarV0dMmFqFRA3FIUZU3VQDxsB6UMJed+kEwxC9uJUyTwfx10qV/K2UqYlhyq fMsDyiM8fOZCOJPK2iDZKWeU+ayoTkzRgmK9AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU4ng9rOnZd8Qfa2urqGtSsi7+EqYwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy80bmc5ck9uWmQ4UWZhMnVycUd0 U3NpNy1FcVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAc9 ADANBgkqhkiG9w0BAQsFAAOCAQEAvCREWXtZlavlCWs5vrKMyW2HhZRDyN+mONAf RYh08tp5ixYcRFnq2UjkPVdt0ZQ4XbQCfttbD8UMsTH/DlilrzTsr6dljGaPX9H4 9ogZnLh8fmZluytIyik/AfCW/LSWnJjXsUn3oGqO8kUAZ9BIQ1hmCFj7DMQwT4oK zzChGMSIq4lAmrnYo19IUls2SUn8PJ8x+HTUhjcVSeLkiD4AyX3HjoY/KaYgFGie qH1VZGbhMLrh9WHRP1mYv4cEGFwgUf3ba3mOvBPr4e5AaP0GDHiJA5iCnFTE/r3Z wvnBDtkV8uTQYmD1AP0C+KdtEMSg8BMtLr7Hv0NIMde3EyCQ/w== -----END CERTIFICATE-----Generated at Fri Oct 24 06:45:44 2025 by rpki-client