$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/UfKOZ2h5hVDq-J996AWvgJuf74k.roa File: UfKOZ2h5hVDq-J996AWvgJuf74k.roa (raw, json) Hash identifier: ReuDPJcG6dTbXoELLRs6cHJyN6jJYQ3PmHw4NoD0Z9M= Subject key identifier: 51:F2:8E:67:68:79:85:50:EA:F8:9F:7D:E8:05:AF:80:9B:9F:EF:89 Certificate issuer: /CN=43514F485EC01C9D0F311BEA61D93BD62C236992 Certificate serial: 037C Authority key identifier: 43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/UfKOZ2h5hVDq-J996AWvgJuf74k.roa Signing time: Wed 01 Oct 2025 15:51:13 +0000 ROA not before: Wed 01 Oct 2025 15:51:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 214030 IP address blocks: 2401:cd60::/40 maxlen: 40 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43514F485EC01C9D0F311BEA61D93BD62C236992 Validity Not Before: Oct 1 15:51:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=51F28E6768798550EAF89F7DE805AF809B9FEF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:1d:89:30:e1:da:9d:ca:c3:8e:f4:80:f4: 7e:29:58:b1:ab:99:ed:0e:c2:a1:f8:fb:f8:79:b9: ce:7f:71:a2:30:ca:ee:2b:cb:04:fc:25:8a:4b:52: 2a:bc:44:0a:b0:c2:05:21:ec:36:f3:4c:45:9f:52: ca:03:86:ef:9a:4d:6c:86:64:1c:d2:f7:17:98:ba: c0:56:42:ba:c8:c9:c2:c9:dd:62:a0:a2:36:02:45: 0e:46:c5:20:36:1a:35:03:6e:94:52:32:11:1e:96: 43:fd:82:13:dd:ff:35:a9:d8:52:c4:37:50:97:41: a3:b8:71:d4:d8:af:2d:eb:e1:e5:a9:58:41:8f:aa: 2e:0f:b6:8c:1c:7d:16:60:30:7b:04:43:04:4e:67: 27:da:f5:28:a0:a4:fa:46:f0:9f:fd:f9:80:d8:d7: 75:2a:08:3b:fb:20:0e:d7:b3:94:ba:14:ec:57:e2: 50:f7:84:77:a6:0c:73:1e:d3:01:74:9b:0d:bd:3a: 36:1b:ff:98:f7:b5:d3:55:c0:bd:85:c8:43:c4:f3: a1:cf:94:1e:aa:26:e4:52:70:b9:38:41:7b:94:2d: 45:c8:b5:e3:cf:13:e6:c4:8a:b9:54:05:5d:44:9a: c8:a8:2b:40:e5:58:7d:86:15:0d:84:fd:58:a8:a9: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F2:8E:67:68:79:85:50:EA:F8:9F:7D:E8:05:AF:80:9B:9F:EF:89 X509v3 Authority Key Identifier: keyid:43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/UfKOZ2h5hVDq-J996AWvgJuf74k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:cd60::/40 Signature Algorithm: sha256WithRSAEncryption 55:cd:2e:b8:79:a3:23:56:5b:42:2a:73:a4:19:66:99:5b:06: de:d3:f4:db:4f:35:08:00:13:a8:fb:22:30:10:e5:be:0e:79: cb:0c:19:a4:14:b6:1d:a1:79:8c:f3:fe:21:7d:bf:9c:a9:71: de:3e:44:f6:5d:49:66:cc:84:3a:4d:c7:1d:0e:9d:45:a1:2d: cf:7a:fd:db:23:bd:af:95:66:e1:79:6d:9a:51:70:11:5c:52: 17:87:06:91:d3:45:86:80:ef:fd:a8:e4:f6:e4:3e:72:b4:85: 08:fc:f2:71:17:6b:1d:b7:46:1c:e0:5a:81:fa:06:5a:74:66: d6:d0:4c:37:ca:18:48:82:7c:bb:0b:01:b7:de:c2:9a:d4:e9: 91:4f:97:7f:2f:4b:ab:52:0c:88:2b:d1:51:7c:27:a9:43:56: cd:e6:fb:cf:bb:e9:61:77:03:a8:9c:d5:1b:e9:dd:8e:dd:54: 64:09:c4:04:2c:65:a0:76:22:8d:d7:88:5c:23:ee:f4:c5:44: 2f:cb:de:a7:c0:9b:08:a0:1f:e4:62:c0:ec:23:c8:7d:89:e3: b4:bd:11:54:5c:70:8c:29:68:aa:fc:a8:9c:b8:b1:52:ab:28: e2:6a:52:4f:a4:34:54:8d:be:ab:31:ab:89:5c:dc:65:01:b4: 9f:a7:0e:63 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM1 MTRGNDg1RUMwMUM5RDBGMzExQkVBNjFEOTNCRDYyQzIzNjk5MjAeFw0yNTEwMDEx NTUxMTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUxRjI4RTY3Njg3OTg1 NTBFQUY4OUY3REU4MDVBRjgwOUI5RkVGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYex2JMOHancrDjvSA9H4pWLGrme0OwqH4+/h5uc5/caIwyu4r ywT8JYpLUiq8RAqwwgUh7DbzTEWfUsoDhu+aTWyGZBzS9xeYusBWQrrIycLJ3WKg ojYCRQ5GxSA2GjUDbpRSMhEelkP9ghPd/zWp2FLEN1CXQaO4cdTYry3r4eWpWEGP qi4PtowcfRZgMHsEQwROZyfa9SigpPpG8J/9+YDY13UqCDv7IA7Xs5S6FOxX4lD3 hHemDHMe0wF0mw29OjYb/5j3tdNVwL2FyEPE86HPlB6qJuRScLk4QXuULUXItePP E+bEirlUBV1EmsioK0DlWH2GFQ2E/VioqWR1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUUfKOZ2h5hVDq+J996AWvgJuf74kwHwYDVR0jBBgwFoAUQ1FPSF7AHJ0PMRvq Ydk71iwjaZIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSERE L1ExRlBTRjdBSEowUE1SdnFZZGs3MWl3amFaSS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUTFGUFNGN0FISjBQTVJ2cVlkazcxaXdqYVpJLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FUSEREL1VmS09aMmg1aFZEcS1KOTk2 QVd2Z0p1Zjc0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAk Ac1gADANBgkqhkiG9w0BAQsFAAOCAQEAVc0uuHmjI1ZbQipzpBlmmVsG3tP02081 CAATqPsiMBDlvg55ywwZpBS2HaF5jPP+IX2/nKlx3j5E9l1JZsyEOk3HHQ6dRaEt z3r92yO9r5Vm4XltmlFwEVxSF4cGkdNFhoDv/ajk9uQ+crSFCPzycRdrHbdGHOBa gfoGWnRm1tBMN8oYSIJ8uwsBt97CmtTpkU+Xfy9Lq1IMiCvRUXwnqUNWzeb7z7vp YXcDqJzVG+ndjt1UZAnEBCxloHYijdeIXCPu9MVEL8vep8CbCKAf5GLA7CPIfYnj tL0RVFxwjCloqvyonLixUqso4mpST6Q0VI2+qzGriVzcZQG0n6cOYw== -----END CERTIFICATE-----Generated at Mon Oct 20 11:19:26 2025 by rpki-client