$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa File: tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa (raw, json) Hash identifier: Y7G+AG2b8fGaiPrCf18XFNnHbbpuCoEv8RauRd/wso0= Subject key identifier: B6:09:C7:CD:77:8B:08:98:97:08:03:C9:FE:09:54:4E:FE:CE:1D:2F Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1474 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa Signing time: Fri 22 Aug 2025 08:51:32 +0000 ROA not before: Fri 22 Aug 2025 08:51:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131621 IP address blocks: 2001:dc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 05:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5236 (0x1474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B609C7CD778B0898970803C9FE09544EFECE1D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:76:83:f9:d4:43:58:3a:43:8a:93:2a:82: 03:d6:9a:a5:b1:3b:75:b4:92:0b:94:69:fc:4e:cb: db:b1:ea:25:1b:fc:95:6e:dd:43:c5:bd:25:c7:9f: 53:50:62:c7:f8:a0:c3:d7:8e:94:28:1b:cb:b2:c0: 0b:8e:6b:de:06:c2:65:02:9a:1a:e4:43:5a:b1:72: 78:d0:55:c5:c7:30:75:e2:fb:05:89:42:a2:07:ba: 7a:f7:12:7b:c3:51:8f:08:35:5c:10:4d:41:ac:9e: 60:71:62:39:de:af:55:04:52:18:e3:1c:b5:58:32: 20:44:23:00:3e:cc:bf:97:08:75:e5:fe:02:e3:ad: 67:e6:4a:e5:a7:bb:fb:02:58:6d:81:68:28:18:6f: 4e:c1:ec:0f:06:bc:f0:1f:a8:4d:35:07:8b:e8:93: fa:28:19:09:78:09:02:ba:07:43:72:88:73:02:15: 5f:be:81:29:8e:e7:f7:52:ee:26:d1:c3:0c:d0:c3: a1:13:d3:3b:3e:08:7b:98:ba:90:3e:f8:e9:41:fa: 90:04:38:f7:6f:ff:7e:40:fe:fa:a6:2a:10:40:7b: 49:bc:27:6f:29:d1:87:88:57:c4:a1:18:2f:9c:a9: 8e:e4:76:05:0e:90:6d:31:35:52:91:e9:ba:fe:1a: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:09:C7:CD:77:8B:08:98:97:08:03:C9:FE:09:54:4E:FE:CE:1D:2F X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:dc1::/32 Signature Algorithm: sha256WithRSAEncryption af:21:19:75:b5:4a:89:b4:cb:43:87:97:2d:87:3e:10:95:27: c0:44:f8:ca:7d:f4:13:cc:30:2d:c5:e9:e1:e2:c9:bd:ff:8f: 35:d4:7b:92:4c:ef:33:3f:15:c3:a0:35:27:05:9b:67:c3:03: e1:d8:11:14:5c:b3:7d:ca:6b:ad:ca:ad:f3:83:91:be:db:88: fc:24:80:95:00:83:51:97:71:08:a4:7b:92:26:22:b6:5b:47: 88:19:1c:fb:35:c7:42:c5:f3:8e:be:5f:94:66:96:7b:dc:fa: f1:43:cb:42:70:93:94:af:75:9f:27:07:46:24:f2:5a:a2:d8: af:71:2d:51:d8:54:db:5f:4e:d6:2d:b6:86:d4:b4:0d:21:23: a0:fb:39:d6:e2:d1:64:46:c9:fb:1d:d3:fc:fa:41:07:c2:44: 93:9c:78:cf:d5:60:66:f7:55:91:d0:ec:f7:8a:f7:5b:90:5f: e5:c6:c2:35:b0:fd:07:f7:49:50:b6:10:fd:a2:f7:df:ba:b4: 3b:0a:66:69:92:62:6c:e4:63:95:d5:fd:cb:f1:eb:e2:7d:c1: 5e:62:08:3d:03:d6:d6:48:a9:3a:26:6f:c5:60:f4:80:37:4a: c6:01:5f:fb:39:9c:ec:c0:df:0a:ce:45:a5:ce:08:90:f7:ab: 79:84:b8:e6 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI2MDlDN0NENzc4QjA4 OTg5NzA4MDNDOUZFMDk1NDRFRkVDRTFEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6LXaD+dRDWDpDipMqggPWmqWxO3W0kguUafxOy9ux6iUb/JVu 3UPFvSXHn1NQYsf4oMPXjpQoG8uywAuOa94GwmUCmhrkQ1qxcnjQVcXHMHXi+wWJ QqIHunr3EnvDUY8INVwQTUGsnmBxYjner1UEUhjjHLVYMiBEIwA+zL+XCHXl/gLj rWfmSuWnu/sCWG2BaCgYb07B7A8GvPAfqE01B4vok/ooGQl4CQK6B0NyiHMCFV++ gSmO5/dS7ibRwwzQw6ET0zs+CHuYupA++OlB+pAEOPdv/35A/vqmKhBAe0m8J28p 0YeIV8ShGC+cqY7kdgUOkG0xNVKR6br+GnsZAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUtgnHzXeLCJiXCAPJ/glUTv7OHS8wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy90Z25IelhlTENKaVhDQVBKX2ds VVR2N09IUzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEN wTANBgkqhkiG9w0BAQsFAAOCAQEAryEZdbVKibTLQ4eXLYc+EJUnwET4yn30E8ww LcXp4eLJvf+PNdR7kkzvMz8Vw6A1JwWbZ8MD4dgRFFyzfcprrcqt84ORvtuI/CSA lQCDUZdxCKR7kiYitltHiBkc+zXHQsXzjr5flGaWe9z68UPLQnCTlK91nycHRiTy WqLYr3EtUdhU219O1i22htS0DSEjoPs51uLRZEbJ+x3T/PpBB8JEk5x4z9VgZvdV kdDs94r3W5Bf5cbCNbD9B/dJULYQ/aL337q0OwpmaZJibORjldX9y/Hr4n3BXmII PQPW1kipOiZvxWD0gDdKxgFf+zmc7MDfCs5Fpc4IkPereYS45g== -----END CERTIFICATE-----Generated at Sat Sep 6 01:19:44 2025 by rpki-client