$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/6I-Ff9iRlo2G-Pg-odEtdwVV_0M.roa File: 6I-Ff9iRlo2G-Pg-odEtdwVV_0M.roa (raw, json) Hash identifier: 2X8j4tdHGu8yZowcoPwww7IklQabTy1cLRjctghTwv8= Subject key identifier: E8:8F:85:7F:D8:91:96:8D:86:F8:F8:3E:A1:D1:2D:77:05:55:FF:43 Certificate issuer: /CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C Certificate serial: 0D44 Authority key identifier: 8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/6I-Ff9iRlo2G-Pg-odEtdwVV_0M.roa Signing time: Fri 22 Aug 2025 08:56:21 +0000 ROA not before: Fri 22 Aug 2025 08:56:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131618 IP address blocks: 103.103.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C Validity Not Before: Aug 22 08:56:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E88F857FD891968D86F8F83EA1D12D770555FF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:64:46:56:49:a5:1a:55:02:8d:e2:64:01:bf: c3:42:79:a3:58:9a:3a:de:10:a3:42:1c:b6:09:c5: 04:e9:23:3c:6f:88:84:83:60:ae:53:f4:a2:d0:2d: f8:30:af:d6:2b:1d:0b:6b:30:ee:c6:e7:93:5a:9c: 8f:22:ae:a9:0f:b4:7b:7f:ca:c1:5c:0b:c6:2d:d1: 87:a9:87:fd:b1:c8:07:70:85:39:cb:84:b0:b4:8d: fd:55:34:93:68:cb:c8:c5:29:3a:e2:74:2e:9f:cf: 94:fa:9a:99:d1:65:04:d8:e4:67:1a:78:3e:78:bf: ac:b4:7d:90:ac:2b:5a:5f:76:ef:e4:3b:da:7a:07: ec:cf:b0:09:0c:60:cb:76:b8:76:b0:8d:ab:16:26: 6b:55:8e:af:c2:b9:28:51:f5:ec:43:00:cf:18:83: 66:6e:cd:33:76:31:6b:ff:26:6c:f3:cc:80:d4:9c: e3:83:de:46:bd:30:6f:63:01:ed:10:b1:cf:44:fc: ad:9a:b8:ec:b8:50:ac:d7:19:34:4c:02:a4:b6:e7: 3c:e2:16:d4:62:85:2f:0a:75:75:ec:01:1e:ec:a8: 3d:94:d9:76:1f:52:26:c6:91:50:07:e5:fa:d0:55: 56:90:04:05:1d:2e:50:1a:94:1f:b5:14:ba:43:00: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8F:85:7F:D8:91:96:8D:86:F8:F8:3E:A1:D1:2D:77:05:55:FF:43 X509v3 Authority Key Identifier: keyid:8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/6I-Ff9iRlo2G-Pg-odEtdwVV_0M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.103.80.0/22 Signature Algorithm: sha256WithRSAEncryption 06:2d:f4:45:f0:44:94:9f:36:74:be:8e:2b:c4:f3:57:08:3e: 74:9a:f4:89:56:57:5e:43:99:d0:be:fd:1b:79:49:8c:d5:3d: cf:a9:88:fa:0a:fe:18:aa:90:ec:f3:5f:83:a9:68:7f:6e:7e: ca:37:35:00:39:bb:64:65:0c:2e:5b:56:86:7d:90:82:c7:3f: 31:01:08:92:85:d2:f7:e8:d1:e1:ab:9f:96:c8:7d:07:b7:0f: 4e:38:d4:b8:7d:e9:1b:1f:b3:8e:5d:ce:b0:90:b5:bd:6a:a5: d2:6b:d1:a1:0f:f5:d9:83:ac:82:8b:ff:6a:af:2f:c6:bb:38: 9d:df:66:5c:c9:fa:9d:d8:2b:84:8a:65:fb:7a:a1:50:1a:b9: 90:35:9a:c2:62:6e:d0:c5:7b:1b:dd:df:00:fd:f7:ce:05:66: f0:58:c4:26:75:e2:0b:64:84:6e:98:d1:c3:55:69:dd:d1:cc: 9b:32:0a:df:3e:4f:94:43:ec:22:86:99:15:c7:8e:9e:94:10: c4:64:aa:7e:62:72:cb:de:35:1e:31:bd:cd:ab:d8:1d:b8:00: 6a:a6:ac:d6:13:90:63:6c:ed:5c:ed:b8:50:e5:ca:b3:b8:da: 7b:af:15:e4:44:94:c3:e3:a1:b5:77:60:13:db:e0:b1:e5:8e: 54:51:9e:f5 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEJE NjQ1Mjc4RkM0QTJBMjAwQkNEODA3MkYzQjNEQzc5MzEyNTM2QzAeFw0yNTA4MjIw ODU2MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU4OEY4NTdGRDg5MTk2 OEQ4NkY4RjgzRUExRDEyRDc3MDU1NUZGNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdZEZWSaUaVQKN4mQBv8NCeaNYmjreEKNCHLYJxQTpIzxviISD YK5T9KLQLfgwr9YrHQtrMO7G55NanI8irqkPtHt/ysFcC8Yt0Yeph/2xyAdwhTnL hLC0jf1VNJNoy8jFKTridC6fz5T6mpnRZQTY5GcaeD54v6y0fZCsK1pfdu/kO9p6 B+zPsAkMYMt2uHawjasWJmtVjq/CuShR9exDAM8Yg2ZuzTN2MWv/JmzzzIDUnOOD 3ka9MG9jAe0Qsc9E/K2auOy4UKzXGTRMAqS25zziFtRihS8KdXXsAR7sqD2U2XYf UibGkVAH5frQVVaQBAUdLlAalB+1FLpDAFyXAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU6I+Ff9iRlo2G+Pg+odEtdwVV/0MwHwYDVR0jBBgwFoAUi9ZFJ4/EoqIAvNgH Lzs9x5MSU2wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTC1O RVQvaTlaRko0X0VvcUlBdk5nSEx6czl4NU1TVTJ3LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9pOVpGSjRfRW9xSUF2TmdITHpzOXg1TVNVMncuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DQVJMLU5FVC82SS1GZjlpUmxvMkct UGctb2RFdGR3VlZfME0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ2dQMA0GCSqGSIb3DQEBCwUAA4IBAQAGLfRF8ESUnzZ0vo4rxPNXCD50mvSJ VldeQ5nQvv0beUmM1T3PqYj6Cv4YqpDs81+DqWh/bn7KNzUAObtkZQwuW1aGfZCC xz8xAQiShdL36NHhq5+WyH0Htw9OONS4fekbH7OOXc6wkLW9aqXSa9GhD/XZg6yC i/9qry/Guzid32Zcyfqd2CuEimX7eqFQGrmQNZrCYm7QxXsb3d8A/ffOBWbwWMQm deILZIRumNHDVWnd0cybMgrfPk+UQ+wihpkVx46elBDEZKp+YnLL3jUeMb3Nq9gd uABqpqzWE5BjbO1c7bhQ5cqzuNp7rxXkRJTD46G1d2AT2+Cx5Y5UUZ71 -----END CERTIFICATE-----Generated at Sun Aug 24 09:40:24 2025 by rpki-client