$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/dlnkppnZS-Yb41HFHeOtw78ae3A.roa File: dlnkppnZS-Yb41HFHeOtw78ae3A.roa (raw, json) Hash identifier: SUlbl93+tTxfj+B+JAzuITDisAy6sjSivICTnsyb840= Subject key identifier: 76:59:E4:A6:99:D9:4B:E6:1B:E3:51:C5:1D:E3:AD:C3:BF:1A:7B:70 Certificate issuer: /CN=99AE43A97D51C5A14E11287A98024C36A599377B Certificate serial: 02B0 Authority key identifier: 99:AE:43:A9:7D:51:C5:A1:4E:11:28:7A:98:02:4C:36:A5:99:37:7B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/dlnkppnZS-Yb41HFHeOtw78ae3A.roa Signing time: Wed 24 Sep 2025 15:49:40 +0000 ROA not before: Wed 24 Sep 2025 15:49:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152615 IP address blocks: 2401:caa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99AE43A97D51C5A14E11287A98024C36A599377B Validity Not Before: Sep 24 15:49:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7659E4A699D94BE61BE351C51DE3ADC3BF1A7B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:c5:3b:6e:6d:6f:e5:b7:d3:17:11:b1:45: a7:c6:eb:af:40:6b:6d:0c:8e:7a:ca:f4:62:d8:ef: ac:93:eb:a5:94:4b:72:13:ba:d0:26:8a:73:19:35: 95:fb:09:36:e2:4b:93:11:ab:e5:6c:67:74:40:c9: 6d:8c:e4:ad:b7:7c:66:0b:70:a3:e3:9f:1a:e2:ee: bc:b2:b9:99:6f:44:a3:d1:02:6c:ea:73:2e:b5:a6: a7:9e:9e:21:34:a5:c7:06:79:c4:c9:66:f9:5a:df: eb:5d:30:a5:69:09:17:1e:96:d3:6a:c7:d2:65:d1: 57:f6:be:9f:2c:1b:75:71:e4:a2:f6:ee:80:4c:f7: b0:d3:0a:fb:98:37:c3:0f:ec:a2:cb:8d:5b:32:99: 01:42:0f:11:05:1d:7e:b0:2b:fd:9a:ca:20:5e:5e: 7b:2d:17:14:6d:be:0e:e8:6a:4c:cf:f0:7d:cc:27: fd:74:96:75:0f:24:d9:fa:97:13:0b:70:22:6d:00: a5:3e:85:a7:c5:a5:b7:3b:b6:49:32:fc:1e:83:82: b9:68:3a:f4:e9:1c:94:6d:da:45:46:2e:9e:be:82: 90:d3:c8:38:6e:75:47:38:e6:db:86:ec:98:d9:43: 3a:da:65:b9:f0:07:c7:d6:e1:6b:cf:e6:5c:e9:91: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:59:E4:A6:99:D9:4B:E6:1B:E3:51:C5:1D:E3:AD:C3:BF:1A:7B:70 X509v3 Authority Key Identifier: keyid:99:AE:43:A9:7D:51:C5:A1:4E:11:28:7A:98:02:4C:36:A5:99:37:7B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/dlnkppnZS-Yb41HFHeOtw78ae3A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:caa0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:05:25:1a:d9:77:22:be:1a:51:df:db:d8:6a:d3:49:61:7e: 1f:7c:ff:23:37:3e:1b:a7:fc:31:52:7b:1b:eb:8b:3b:0f:da: b8:ec:ca:37:10:2d:3d:59:5b:13:2d:62:3d:a4:3a:b5:3b:1c: b9:9b:d9:32:06:f3:56:5c:db:83:d3:c5:18:36:3e:e0:0d:18: bb:84:1e:5a:82:8e:49:50:41:6c:df:e5:69:4d:ba:ea:2f:c7: c1:ed:f9:b4:d1:4f:08:39:74:03:3b:65:8c:5b:06:99:bb:b9: 9d:10:3b:ab:d5:e7:00:1c:af:e7:a4:7c:29:38:d5:97:0c:2f: a7:97:d7:78:46:e8:a4:4d:0d:cf:a6:9d:95:f4:64:72:21:09: a4:a5:a6:0c:8e:51:5a:ad:6f:8b:82:f4:26:ab:16:8b:93:e3: 99:30:8f:3f:b5:94:74:eb:5e:cd:6f:e7:e7:f8:58:0a:2c:3c: 4f:f7:ca:2a:ef:58:94:fc:4d:26:8c:91:3b:71:8e:c1:51:c1: 03:01:c5:00:51:d6:7d:87:cc:44:1e:f7:7f:6d:7a:bb:dc:56: 23:aa:48:01:20:63:25:a7:4b:10:18:12:4a:cc:ac:cb:3e:a9: b8:3e:31:12:15:ca:ae:21:e3:3c:9c:10:ca:75:ef:9e:8f:67: a8:c7:c6:ab -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICArAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTlB RTQzQTk3RDUxQzVBMTRFMTEyODdBOTgwMjRDMzZBNTk5Mzc3QjAeFw0yNTA5MjQx NTQ5NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc2NTlFNEE2OTlEOTRC RTYxQkUzNTFDNTFERTNBREMzQkYxQTdCNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA48U7bm1v5bfTFxGxRafG669Aa20MjnrK9GLY76yT66WUS3IT utAminMZNZX7CTbiS5MRq+VsZ3RAyW2M5K23fGYLcKPjnxri7ryyuZlvRKPRAmzq cy61pqeeniE0pccGecTJZvla3+tdMKVpCRceltNqx9Jl0Vf2vp8sG3Vx5KL27oBM 97DTCvuYN8MP7KLLjVsymQFCDxEFHX6wK/2ayiBeXnstFxRtvg7oakzP8H3MJ/10 lnUPJNn6lxMLcCJtAKU+hafFpbc7tkky/B6DgrloOvTpHJRt2kVGLp6+gpDTyDhu dUc45tuG7JjZQzraZbnwB8fW4WvP5lzpke7PAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUdlnkppnZS+Yb41HFHeOtw78ae3AwHwYDVR0jBBgwFoAUma5DqX1RxaFOESh6 mAJMNqWZN3swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVTU1Z VEVDSC9tYTVEcVgxUnhhRk9FU2g2bUFKTU5xV1pOM3MuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21hNURxWDFSeGFGT0VTaDZtQUpNTnFXWk4zcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVU1NWVRFQ0gvZGxua3BwblpT LVliNDFIRkhlT3R3NzhhZTNBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQByqAwDQYJKoZIhvcNAQELBQADggEBAI0FJRrZdyK+GlHf29hq00lh fh98/yM3Phun/DFSexvrizsP2rjsyjcQLT1ZWxMtYj2kOrU7HLmb2TIG81Zc24PT xRg2PuANGLuEHlqCjklQQWzf5WlNuuovx8Ht+bTRTwg5dAM7ZYxbBpm7uZ0QO6vV 5wAcr+ekfCk41ZcML6eX13hG6KRNDc+mnZX0ZHIhCaSlpgyOUVqtb4uC9CarFouT 45kwjz+1lHTrXs1v5+f4WAosPE/3yirvWJT8TSaMkTtxjsFRwQMBxQBR1n2HzEQe 939tervcViOqSAEgYyWnSxAYEkrMrMs+qbg+MRIVyq4h4zycEMp1756PZ6jHxqs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:37:54 2025 by rpki-client