$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/OsdVV21631qt5rr96nmrRgclUas.roa File: OsdVV21631qt5rr96nmrRgclUas.roa (raw, json) Hash identifier: pTb6kcvGjpuCWdjNDxhE0r3asSaUxP8oxVvKNYFS0Hc= Subject key identifier: 3A:C7:55:57:6D:7A:DF:5A:AD:E6:BA:FD:EA:79:AB:46:07:25:51:AB Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Certificate serial: 02CB Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/OsdVV21631qt5rr96nmrRgclUas.roa Signing time: Fri 22 Aug 2025 08:58:40 +0000 ROA not before: Fri 22 Aug 2025 08:58:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63910 IP address blocks: 2400:f420::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Validity Not Before: Aug 22 08:58:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3AC755576D7ADF5AADE6BAFDEA79AB46072551AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:7d:df:a0:a1:05:e3:e4:80:40:d8:34:cd: 8f:fe:3c:f8:eb:db:a8:84:5f:97:0b:b6:b2:08:bf: 5b:b7:5d:71:9d:45:c7:2e:0d:f9:49:b3:28:74:23: 48:9a:db:30:ef:5e:ca:8b:b7:58:09:2b:23:0b:1c: 1f:19:b2:9e:a5:1f:2f:a0:82:66:e5:fd:ce:55:78: 7b:32:a7:f6:7a:76:9d:fe:96:d0:b8:1e:cc:96:82: f2:7e:82:3c:dd:a9:21:cf:74:4f:f0:6d:91:03:39: 1a:00:1d:2e:85:f7:4d:7e:d0:6c:31:d3:17:7f:f9: 00:b0:b6:59:90:3b:92:a2:ed:77:ca:56:65:f9:8b: 15:73:86:53:af:e0:4e:f2:6f:96:58:fd:bd:13:70: c3:e2:97:a8:c2:b3:93:c7:2c:0a:34:ea:8d:94:b2: 4b:b7:15:19:50:ca:5a:16:93:9d:06:29:ba:b3:87: 40:f3:93:29:f0:dd:11:8c:bc:c0:13:fe:7e:a4:b6: 61:db:ec:a8:f5:ba:5b:4b:de:fc:ea:e8:f5:88:22: 95:27:b6:04:5a:a3:17:a3:b4:93:2b:41:66:d5:39: 4c:77:c2:92:af:18:9c:8c:a0:f7:ad:9e:39:f3:5d: 40:ec:18:d5:d2:ca:eb:21:8a:2a:96:eb:78:2e:a2: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C7:55:57:6D:7A:DF:5A:AD:E6:BA:FD:EA:79:AB:46:07:25:51:AB X509v3 Authority Key Identifier: keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/OsdVV21631qt5rr96nmrRgclUas.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:f420::/32 Signature Algorithm: sha256WithRSAEncryption 17:85:f4:17:67:59:7c:c3:ad:33:be:4c:9c:70:dd:6f:c5:1f: 34:67:d2:db:76:25:f4:a9:24:75:20:d3:5e:82:3f:50:20:c9: f1:01:bc:8c:fd:a6:e0:72:98:3f:2d:58:73:5a:67:bd:2e:0d: c9:b2:68:69:14:e9:8e:20:52:e7:42:0e:e6:9c:66:14:0e:01: f7:c4:4d:4e:e5:db:ae:e8:b2:18:f7:fb:01:7f:08:35:53:e7: 9f:4a:62:ec:94:fe:96:0b:cd:24:42:37:a3:ba:dd:bd:60:ab: 47:88:1b:95:76:7c:3a:7d:5a:f4:d2:4e:c5:6d:a3:85:b3:ca: 38:81:43:f7:eb:46:e8:2c:6c:ba:d2:bf:7f:de:bd:f9:d3:5e: 7f:cb:4f:d2:84:2b:c7:c5:6b:37:55:31:16:e6:04:95:d5:b2: 4a:0a:6d:b6:0b:91:da:35:d3:ed:a2:6f:0c:4b:04:25:16:e8: 27:41:0f:72:9a:5a:0b:41:71:24:cf:91:50:54:c1:90:56:ac: d7:9e:25:95:86:17:44:07:b3:c9:62:cd:29:03:de:56:72:5c: 02:7c:28:7b:1f:c5:26:9f:43:73:d2:24:b6:f0:44:e3:2c:5f: db:7c:9d:d6:3a:8a:4d:9a:6d:6c:75:85:d3:cd:9c:e7:f7:1e: dd:08:18:79 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICAsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRB RjA0MDJGRUY1NkMzNEExOTJEMUQyMTg1RTZGQjU0NkFBNzAyQzAeFw0yNTA4MjIw ODU4NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNBQzc1NTU3NkQ3QURG NUFBREU2QkFGREVBNzlBQjQ2MDcyNTUxQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC54H3foKEF4+SAQNg0zY/+PPjr26iEX5cLtrIIv1u3XXGdRccu DflJsyh0I0ia2zDvXsqLt1gJKyMLHB8Zsp6lHy+ggmbl/c5VeHsyp/Z6dp3+ltC4 HsyWgvJ+gjzdqSHPdE/wbZEDORoAHS6F901+0Gwx0xd/+QCwtlmQO5Ki7XfKVmX5 ixVzhlOv4E7yb5ZY/b0TcMPil6jCs5PHLAo06o2Usku3FRlQyloWk50GKbqzh0Dz kynw3RGMvMAT/n6ktmHb7Kj1ultL3vzq6PWIIpUntgRaoxejtJMrQWbVOUx3wpKv GJyMoPetnjnzXUDsGNXSyushiiqW63guojHNAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUOsdVV21631qt5rr96nmrRgclUaswHwYDVR0jBBgwFoAUdK8EAv71bDShktHS GF5vtUaqcCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xBUksv ZEs4RUF2NzFiRFNoa3RIU0dGNXZ0VWFxY0N3LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9kSzhFQXY3MWJEU2hrdEhTR0Y1dnRVYXFjQ3cuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTEFSSy9Pc2RWVjIxNjMxcXQ1cnI5Nm5t clJnY2xVYXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAD0 IDANBgkqhkiG9w0BAQsFAAOCAQEAF4X0F2dZfMOtM75MnHDdb8UfNGfS23Yl9Kkk dSDTXoI/UCDJ8QG8jP2m4HKYPy1Yc1pnvS4NybJoaRTpjiBS50IO5pxmFA4B98RN TuXbruiyGPf7AX8INVPnn0pi7JT+lgvNJEI3o7rdvWCrR4gblXZ8On1a9NJOxW2j hbPKOIFD9+tG6CxsutK/f969+dNef8tP0oQrx8VrN1UxFuYEldWySgpttguR2jXT 7aJvDEsEJRboJ0EPcppaC0FxJM+RUFTBkFas154llYYXRAezyWLNKQPeVnJcAnwo ex/FJp9Dc9IktvBE4yxf23yd1jqKTZptbHWF082c5/ce3QgYeQ== -----END CERTIFICATE-----Generated at Sun Aug 24 07:42:30 2025 by rpki-client