$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/lRinVz-FGZvx1OFiCxV2wODya2s.roa File: lRinVz-FGZvx1OFiCxV2wODya2s.roa (raw, json) Hash identifier: 5T1r6BR8VV729CmVl8n5/KDJdnNVxBeabn4hBIap4tI= Subject key identifier: 95:18:A7:57:3F:85:19:9B:F1:D4:E1:62:0B:15:76:C0:E0:F2:6B:6B Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0DD2 Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/lRinVz-FGZvx1OFiCxV2wODya2s.roa Signing time: Fri 22 Aug 2025 08:55:22 +0000 ROA not before: Fri 22 Aug 2025 08:55:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17408 IP address blocks: 2403:ad40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3538 (0xdd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Aug 22 08:55:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9518A7573F85199BF1D4E1620B1576C0E0F26B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:41:28:ed:98:67:24:b3:85:f8:23:6f:fb: eb:4a:06:98:f5:ce:68:30:ec:ef:73:ac:e9:b7:12: c4:94:c8:ad:d1:8f:90:5a:1b:51:11:26:59:7f:29: ab:84:f4:19:51:f9:0f:56:70:8b:5a:80:a4:1c:09: f6:8a:bf:17:fe:4f:c3:0b:f4:73:f0:79:f7:15:e1: 7c:3d:e7:1a:62:94:b0:e2:ab:e9:98:11:28:fb:7a: 1f:e1:58:ce:f3:33:5d:e2:1e:af:62:f0:50:74:65: ed:73:b1:20:0f:a7:d4:e9:e4:f7:b1:9a:89:d0:43: ac:b7:32:fb:c1:1e:07:89:35:ec:72:32:b5:a7:47: 8e:ef:9e:f7:b0:3e:6b:39:25:17:2d:d5:a3:df:0b: 4d:13:73:f1:8d:15:96:ad:0d:4b:84:4c:5a:a8:4c: a1:86:33:c6:9c:98:65:87:69:0d:17:eb:00:72:6a: 43:0b:08:bb:72:1f:c3:4e:5b:7d:a1:cc:29:a6:92: 20:3b:e0:a2:2e:6c:51:07:9a:0c:42:ac:67:6f:01: f3:1e:39:54:89:6c:51:7b:ea:20:4e:33:96:bf:51: d1:1d:1c:88:d4:b5:69:5e:08:fe:22:ee:a4:e4:81: 8c:29:12:cc:e7:a5:cb:e3:8c:75:de:3c:01:87:25: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:18:A7:57:3F:85:19:9B:F1:D4:E1:62:0B:15:76:C0:E0:F2:6B:6B X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/lRinVz-FGZvx1OFiCxV2wODya2s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:ad40::/32 Signature Algorithm: sha256WithRSAEncryption 78:ab:8c:7a:9d:3e:23:8e:80:08:7e:ab:3f:8b:28:6d:b2:76: 1b:00:b2:01:dc:39:aa:c5:67:b4:d3:60:54:df:f3:4c:a4:88: d8:10:ac:e5:a2:46:a5:83:16:7b:3b:0f:b3:b9:ac:db:61:b6: 1e:21:3d:df:29:f9:90:bf:2e:ca:ed:8b:70:9c:c1:b0:a1:41: 0a:9b:5d:a6:49:d8:f2:62:91:8d:ca:54:6b:a1:8f:fc:6c:2f: 79:ce:0b:35:b1:5d:b4:0b:a0:48:28:eb:a4:dd:52:9c:16:34: b7:04:3b:6b:ed:c7:7a:42:ac:14:7a:f9:e3:9a:97:08:1c:ae: d5:4f:fe:7b:7d:f4:48:3c:e3:1c:49:9c:8e:6d:01:79:37:ce: 1b:3f:01:44:e1:ae:06:47:94:e0:cf:09:d4:8b:75:9a:df:8b: 27:6b:82:83:8d:d3:96:3f:22:78:97:d7:c7:5c:44:09:9c:49: cc:0c:a1:d8:cf:4f:76:1a:41:dc:a6:07:74:43:f9:69:f9:dc: 54:00:0e:44:16:fd:13:e5:e9:16:ae:08:8c:41:f1:1f:ea:10: 93:b8:a1:e9:61:d5:ea:44:d5:43:84:59:d6:ad:52:14:f1:58: 81:2b:b2:69:96:4f:f6:53:ea:28:9a:57:81:c9:c6:af:65:be: 8f:3c:d1:6b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTA4MjIw ODU1MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1MThBNzU3M0Y4NTE5 OUJGMUQ0RTE2MjBCMTU3NkMwRTBGMjZCNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDev0Eo7ZhnJLOF+CNv++tKBpj1zmgw7O9zrOm3EsSUyK3Rj5Ba G1ERJll/KauE9BlR+Q9WcItagKQcCfaKvxf+T8ML9HPwefcV4Xw95xpilLDiq+mY ESj7eh/hWM7zM13iHq9i8FB0Ze1zsSAPp9Tp5PexmonQQ6y3MvvBHgeJNexyMrWn R47vnvewPms5JRct1aPfC00Tc/GNFZatDUuETFqoTKGGM8acmGWHaQ0X6wByakML CLtyH8NOW32hzCmmkiA74KIubFEHmgxCrGdvAfMeOVSJbFF76iBOM5a/UdEdHIjU tWleCP4i7qTkgYwpEsznpcvjjHXePAGHJeTPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUlRinVz+FGZvx1OFiCxV2wODya2swHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvbFJpblZ6LUZHWnZ4MU9G aUN4VjJ3T0R5YTJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQDrUAwDQYJKoZIhvcNAQELBQADggEBAHirjHqdPiOOgAh+qz+LKG2ydhsAsgHc OarFZ7TTYFTf80ykiNgQrOWiRqWDFns7D7O5rNthth4hPd8p+ZC/Lsrti3CcwbCh QQqbXaZJ2PJikY3KVGuhj/xsL3nOCzWxXbQLoEgo66TdUpwWNLcEO2vtx3pCrBR6 +eOalwgcrtVP/nt99Eg84xxJnI5tAXk3zhs/AUThrgZHlODPCdSLdZrfiydrgoON 05Y/IniX18dcRAmcScwModjPT3YaQdymB3RD+Wn53FQADkQW/RPl6RauCIxB8R/q EJO4oelh1epE1UOEWdatUhTxWIErsmmWT/ZT6iiaV4HJxq9lvo880Ws= -----END CERTIFICATE-----Generated at Sat Sep 6 17:00:49 2025 by rpki-client