$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/I-3wj0xS0sz4_kUuqGYbyUZPGuA.roa File: I-3wj0xS0sz4_kUuqGYbyUZPGuA.roa (raw, json) Hash identifier: dbmAAFrpg6OQk55wqHeW93p1GMEP6F5tP1+OSiBqt6w= Subject key identifier: 23:ED:F0:8F:4C:52:D2:CC:F8:FE:45:2E:A8:66:1B:C9:46:4F:1A:E0 Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0DB3 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/I-3wj0xS0sz4_kUuqGYbyUZPGuA.roa Signing time: Fri 22 Aug 2025 09:00:57 +0000 ROA not before: Fri 22 Aug 2025 09:00:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9264 IP address blocks: 2403:c240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3507 (0xdb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: Aug 22 09:00:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=23EDF08F4C52D2CCF8FE452EA8661BC9464F1AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:24:13:34:d7:81:ac:8b:79:f1:80:be:c7: a3:81:e0:fd:ff:79:6e:32:28:80:23:14:41:18:76: 45:f3:c3:1e:a5:fe:d5:a2:46:e3:ad:1e:f1:79:b0: ea:64:22:85:c6:16:58:5f:dd:8e:fc:5b:60:36:ef: 4d:bf:a1:c1:bf:3e:3a:e4:30:c3:21:f3:26:f0:a1: c8:4e:5c:56:ca:8d:b0:9a:b7:40:3d:56:69:be:82: ad:41:58:41:a5:49:2d:2e:af:22:9d:41:68:b1:fd: a3:14:c0:a1:cb:b6:23:ec:ca:eb:4c:e0:22:47:37: ef:6d:e2:41:34:73:f5:43:52:8a:ce:69:13:29:b6: 97:95:6b:e4:a3:12:18:33:43:4a:2e:6f:91:ea:55: d4:e1:83:fb:58:62:14:e4:08:5c:18:16:eb:c8:45: 4b:10:ba:2f:45:35:e4:29:fe:0e:ef:66:81:dd:19: f0:68:e3:5a:6b:40:e0:79:1a:73:95:19:ee:bf:26: e9:d4:0b:bb:6d:a4:44:12:b9:20:60:13:88:97:1e: ab:db:24:6a:9e:e2:63:7b:dd:e6:fa:c6:b7:b5:f3: bd:79:d2:41:12:de:ce:7a:fe:4f:f1:a5:a5:c7:b4: 6e:0f:c1:7c:cd:92:de:59:9e:f5:b0:da:19:92:b1: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:ED:F0:8F:4C:52:D2:CC:F8:FE:45:2E:A8:66:1B:C9:46:4F:1A:E0 X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/I-3wj0xS0sz4_kUuqGYbyUZPGuA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:c240::/32 Signature Algorithm: sha256WithRSAEncryption 35:e0:d8:13:ac:f2:28:69:29:10:7a:11:b3:44:13:5c:9c:b5: cb:fe:f3:c5:10:d4:db:bf:d0:7a:0d:41:56:06:e0:bb:b1:d4: d2:ae:44:dc:61:e4:59:ec:55:78:a0:f3:1f:4f:16:cf:44:9f: d1:43:4d:59:ee:92:f8:79:0c:63:82:ba:5a:c2:58:40:ca:a8: 16:7a:ad:fb:af:b3:9a:3d:d3:3c:2b:a0:f8:9d:02:8b:8f:a8: 8f:8d:4b:e7:2f:f7:9b:23:cc:cc:bc:36:b1:65:cf:e8:00:3a: 94:cd:05:2d:d3:5f:01:3f:52:e0:fc:f0:7a:a0:95:ed:04:ab: f4:5b:94:76:13:99:d2:70:3a:14:49:6e:20:65:2c:b9:3b:d4: 3a:c5:4a:90:28:5f:ab:36:4c:12:60:57:d9:50:f3:59:95:01: be:2b:d3:8f:34:ab:0f:08:88:64:c9:d0:b1:8a:23:31:3c:fd: 70:7e:cc:6d:a0:7b:8e:8b:7a:11:23:01:c6:1b:e5:9c:50:05: 50:2b:a8:be:77:6b:d6:b1:c9:ad:a3:51:01:01:8f:ca:97:85: f1:20:56:fc:68:fb:03:ea:05:01:d8:19:3c:e3:57:d1:e9:89: 53:0c:f1:4f:67:21:c2:64:eb:aa:53:aa:3c:0a:f4:b5:74:8d: 43:18:87:dc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNTA4MjIw OTAwNTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzRURGMDhGNEM1MkQy Q0NGOEZFNDUyRUE4NjYxQkM5NDY0RjFBRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFayQTNNeBrIt58YC+x6OB4P3/eW4yKIAjFEEYdkXzwx6l/tWi RuOtHvF5sOpkIoXGFlhf3Y78W2A2702/ocG/PjrkMMMh8ybwochOXFbKjbCat0A9 Vmm+gq1BWEGlSS0uryKdQWix/aMUwKHLtiPsyutM4CJHN+9t4kE0c/VDUorOaRMp tpeVa+SjEhgzQ0oub5HqVdThg/tYYhTkCFwYFuvIRUsQui9FNeQp/g7vZoHdGfBo 41prQOB5GnOVGe6/JunUC7ttpEQSuSBgE4iXHqvbJGqe4mN73eb6xre187150kES 3s56/k/xpaXHtG4PwXzNkt5ZnvWw2hmSsbVJAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUI+3wj0xS0sz4/kUuqGYbyUZPGuAwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC9JLTN3ajB4UzBzejRfa1V1cUdZ YnlVWlBHdUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAPC QDANBgkqhkiG9w0BAQsFAAOCAQEANeDYE6zyKGkpEHoRs0QTXJy1y/7zxRDU27/Q eg1BVgbgu7HU0q5E3GHkWexVeKDzH08Wz0Sf0UNNWe6S+HkMY4K6WsJYQMqoFnqt +6+zmj3TPCug+J0Ci4+oj41L5y/3myPMzLw2sWXP6AA6lM0FLdNfAT9S4PzweqCV 7QSr9FuUdhOZ0nA6FEluIGUsuTvUOsVKkChfqzZMEmBX2VDzWZUBvivTjzSrDwiI ZMnQsYojMTz9cH7MbaB7jot6ESMBxhvlnFAFUCuovndr1rHJraNRAQGPypeF8SBW /Gj7A+oFAdgZPONX0emJUwzxT2chwmTrqlOqPAr0tXSNQxiH3A== -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:53 2025 by rpki-client