$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/FLAncUewSF6hei4RPk49VjC_PQg.roa File: FLAncUewSF6hei4RPk49VjC_PQg.roa (raw, json) Hash identifier: 8fZqIG/MMfhI6s+b0ATJTXxQ4tAwF4sO0Th4u13XmXk= Subject key identifier: 14:B0:27:71:47:B0:48:5E:A1:7A:2E:11:3E:4E:3D:56:30:BF:3D:08 Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 1415 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/FLAncUewSF6hei4RPk49VjC_PQg.roa Signing time: Fri 22 Aug 2025 08:58:56 +0000 ROA not before: Fri 22 Aug 2025 08:58:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131636 IP address blocks: 2403:b9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5141 (0x1415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Aug 22 08:58:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=14B0277147B0485EA17A2E113E4E3D5630BF3D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:0c:a3:7c:1c:1c:6b:cb:8d:ed:67:fa:90: 99:75:bb:14:4b:f8:7f:86:4e:d6:ea:c9:85:c1:e0: a7:67:7d:29:b6:92:31:95:f2:3d:ba:1a:fa:1b:27: 21:51:81:39:9d:ba:f0:75:50:b6:67:81:de:91:87: ad:bb:00:5e:6e:ca:8f:b9:f4:26:d8:8a:99:d1:d5: 3d:e7:2c:51:b7:62:84:ad:f7:d6:70:1a:f8:c8:28: 21:c6:72:e1:3a:02:7e:6a:4c:95:db:87:c0:35:31: 59:fd:b8:4e:9e:4b:e4:64:28:9d:1f:33:37:ca:24: 31:a0:19:4d:be:f4:fc:2d:97:bc:0c:36:68:b8:5a: 72:c0:1e:fa:0d:a3:ff:8b:91:b4:a3:53:b1:3e:16: 4d:85:c1:66:f5:0a:fb:41:83:2d:4a:d1:f9:94:ef: a0:50:4b:f3:22:12:63:f8:3d:38:d3:87:c3:17:f5: 73:86:65:9d:a5:9e:6e:b5:70:7c:7b:1d:88:a2:1c: 12:7b:13:9f:15:64:0a:12:0a:38:f5:8f:80:0b:99: 1b:74:8d:e6:07:d6:71:d5:20:4f:54:ff:2b:7b:89: b6:3d:df:cc:9e:92:4a:76:4a:9b:d6:08:c5:22:5b: fc:6a:2e:28:3a:3d:d1:03:4a:ba:72:04:3a:86:35: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:27:71:47:B0:48:5E:A1:7A:2E:11:3E:4E:3D:56:30:BF:3D:08 X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/FLAncUewSF6hei4RPk49VjC_PQg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:b9c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:81:9d:28:e5:f5:9d:3d:d3:ec:7a:49:9f:0c:7e:58:96:42: ca:1b:e3:fd:81:86:7f:09:59:34:b9:17:2c:ca:37:fa:17:75: de:a0:16:68:00:f1:54:72:96:d4:43:69:1a:a1:27:78:dd:f5: f2:42:24:06:2f:d8:5b:f4:30:3f:0d:9b:a7:da:bd:19:4f:b6: 09:64:22:84:df:5d:26:96:55:6a:93:15:19:d6:f8:d8:c9:05: 4e:e2:e8:dd:8e:75:ef:82:be:ec:1d:7d:34:cf:7f:d3:7c:31: d1:3f:36:c3:b2:ba:40:6d:c2:73:b2:12:5d:bf:34:70:6b:91: 66:ad:3b:9e:80:be:5e:bb:0c:25:de:77:e6:43:4f:54:1d:ff: df:b5:31:95:ec:29:84:d4:7a:c2:d9:14:62:ab:d3:49:b3:14: 8b:41:59:d6:51:df:0b:a7:cc:72:7c:e8:bf:d2:3a:de:9b:a4: a6:9a:96:14:a6:22:5b:bc:b5:50:78:b7:ec:d3:71:1d:9f:07: e8:c8:b6:ea:c7:d8:d8:a3:a5:d2:e6:34:1a:d5:7d:e2:02:fc: 38:40:89:5f:88:b9:ad:0a:7c:58:cb:19:95:f6:dd:c7:59:fc: b9:78:cd:8b:f6:de:d3:cf:7b:cf:5d:37:b9:1a:97:7b:b5:6b: 7b:da:72:e4 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNTA4MjIw ODU4NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE0QjAyNzcxNDdCMDQ4 NUVBMTdBMkUxMTNFNEUzRDU2MzBCRjNEMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH1QyjfBwca8uN7Wf6kJl1uxRL+H+GTtbqyYXB4KdnfSm2kjGV 8j26GvobJyFRgTmduvB1ULZngd6Rh627AF5uyo+59CbYipnR1T3nLFG3YoSt99Zw GvjIKCHGcuE6An5qTJXbh8A1MVn9uE6eS+RkKJ0fMzfKJDGgGU2+9Pwtl7wMNmi4 WnLAHvoNo/+LkbSjU7E+Fk2FwWb1CvtBgy1K0fmU76BQS/MiEmP4PTjTh8MX9XOG ZZ2lnm61cHx7HYiiHBJ7E58VZAoSCjj1j4ALmRt0jeYH1nHVIE9U/yt7ibY938ye kkp2SpvWCMUiW/xqLig6PdEDSrpyBDqGNQx5AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUFLAncUewSF6hei4RPk49VjC/PQgwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9GTEFuY1Vld1NGNmhlaTRSUGs0 OVZqQ19QUWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAO5 wDANBgkqhkiG9w0BAQsFAAOCAQEAToGdKOX1nT3T7HpJnwx+WJZCyhvj/YGGfwlZ NLkXLMo3+hd13qAWaADxVHKW1ENpGqEneN318kIkBi/YW/QwPw2bp9q9GU+2CWQi hN9dJpZVapMVGdb42MkFTuLo3Y5174K+7B19NM9/03wx0T82w7K6QG3Cc7ISXb80 cGuRZq07noC+XrsMJd535kNPVB3/37UxlewphNR6wtkUYqvTSbMUi0FZ1lHfC6fM cnzov9I63pukppqWFKYiW7y1UHi37NNxHZ8H6Mi26sfY2KOl0uY0GtV94gL8OECJ X4i5rQp8WMsZlfbdx1n8uXjNi/be0897z103uRqXe7Vre9py5A== -----END CERTIFICATE-----Generated at Wed Oct 29 08:37:47 2025 by rpki-client