$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/0IFvp-wF15u9DNTgoN-bRsrN4Mw.roa File: 0IFvp-wF15u9DNTgoN-bRsrN4Mw.roa (raw, json) Hash identifier: xUGSaEOkCBIY7tjJT6WK3545MRKE/wMraTOpaxsRcO8= Subject key identifier: D0:81:6F:A7:EC:05:D7:9B:BD:0C:D4:E0:A0:DF:9B:46:CA:CD:E0:CC Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 13DB Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0IFvp-wF15u9DNTgoN-bRsrN4Mw.roa Signing time: Fri 22 Aug 2025 08:59:49 +0000 ROA not before: Fri 22 Aug 2025 08:59:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 2404::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5083 (0x13db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D0816FA7EC05D79BBD0CD4E0A0DF9B46CACDE0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:08:92:19:31:8c:92:15:98:72:0e:ef:19: 27:3e:cf:f1:9e:52:81:5f:14:e3:73:ef:ed:b6:f6: 95:43:c1:e4:75:40:77:4b:dc:6c:4e:2b:0c:f5:50: d4:29:e3:e0:6a:f7:ed:a0:f8:15:a7:0f:62:d4:79: 0e:57:0c:97:61:39:e9:c4:9e:79:c9:c5:ba:eb:1f: 8f:9f:5f:1d:c9:a2:06:29:f4:3b:af:ca:66:f0:77: a7:a1:12:22:4e:d4:ed:de:e4:42:f5:0a:7f:36:2c: d0:b9:1a:73:12:ea:4f:8b:bf:04:da:f4:62:51:a4: 49:45:f9:0d:47:65:f6:8a:db:3d:de:cc:f4:2f:4e: ee:01:1c:5d:01:cb:01:92:13:d0:da:b5:03:e7:cf: 28:7e:9a:a1:13:b8:a2:51:75:9e:87:53:b1:eb:0e: 27:7f:72:06:62:68:fb:c0:26:d2:58:1c:47:ca:9c: fe:52:b1:07:e9:59:8a:9a:a1:66:11:4e:48:e2:30: da:8f:f6:3f:5c:cb:5d:03:33:2e:f4:59:de:a4:ba: 14:1d:91:c3:45:b7:6d:ac:eb:ae:22:60:17:2d:4a: 05:f1:fb:cd:81:f8:29:2c:56:3e:29:c2:8c:c4:19: c6:9b:1e:1f:d2:51:74:ad:4c:e2:f1:8c:1a:2c:52: 93:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:81:6F:A7:EC:05:D7:9B:BD:0C:D4:E0:A0:DF:9B:46:CA:CD:E0:CC X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0IFvp-wF15u9DNTgoN-bRsrN4Mw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404::/36 Signature Algorithm: sha256WithRSAEncryption a3:3f:6c:48:11:7a:24:b6:a8:c4:bd:78:68:9e:88:e7:0b:dc: 59:90:a9:99:3d:83:c2:73:79:74:56:5d:ea:6a:fb:32:76:52: 08:ad:e5:70:9a:b7:8d:68:18:e9:c6:47:36:7a:4a:5d:59:d3: 40:7b:28:07:f6:30:55:94:6f:23:a2:f5:c8:1c:31:f7:b6:b1: b7:c1:94:98:9f:d3:f2:7e:52:08:19:b3:c6:8f:d1:17:a4:e2: 68:6d:2f:c5:aa:d9:68:d7:ca:ba:54:5e:15:19:c2:a5:74:b3: e2:52:de:33:91:65:3c:3a:99:7e:fa:99:9c:a7:56:15:21:95: 05:c2:26:69:e0:8d:05:2c:1d:ff:2f:70:81:44:73:20:b8:e6: 35:22:75:f8:f9:f7:df:c1:02:d9:c5:f7:11:06:22:72:15:dd: f9:f2:09:f5:ac:f6:82:61:20:77:0d:a3:eb:88:da:04:38:dc: 32:e4:d7:bf:44:48:3c:fc:da:d2:c1:18:c3:2e:05:77:0d:73: f4:bd:ee:9c:36:dd:b4:19:8a:99:58:80:27:e1:bd:71:e5:d6: 24:f7:54:2d:87:61:c8:73:8d:35:c3:18:b1:1c:f5:7d:9d:09: 4e:02:a9:bd:60:67:f0:eb:b3:b2:90:91:7e:61:c6:bd:09:f8: 62:94:5e:ff -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICE9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwODE2RkE3RUMwNUQ3 OUJCRDBDRDRFMEEwREY5QjQ2Q0FDREUwQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCekQiSGTGMkhWYcg7vGSc+z/GeUoFfFONz7+229pVDweR1QHdL 3GxOKwz1UNQp4+Bq9+2g+BWnD2LUeQ5XDJdhOenEnnnJxbrrH4+fXx3JogYp9Duv ymbwd6ehEiJO1O3e5EL1Cn82LNC5GnMS6k+LvwTa9GJRpElF+Q1HZfaK2z3ezPQv Tu4BHF0BywGSE9DatQPnzyh+mqETuKJRdZ6HU7HrDid/cgZiaPvAJtJYHEfKnP5S sQfpWYqaoWYRTkjiMNqP9j9cy10DMy70Wd6kuhQdkcNFt22s664iYBctSgXx+82B +CksVj4pwozEGcabHh/SUXStTOLxjBosUpNrAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU0IFvp+wF15u9DNTgoN+bRsrN4MwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzBJRnZwLXdGMTV1OUROVGdvTi1iUnNy TjRNdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAADAN BgkqhkiG9w0BAQsFAAOCAQEAoz9sSBF6JLaoxL14aJ6I5wvcWZCpmT2DwnN5dFZd 6mr7MnZSCK3lcJq3jWgY6cZHNnpKXVnTQHsoB/YwVZRvI6L1yBwx97axt8GUmJ/T 8n5SCBmzxo/RF6TiaG0vxarZaNfKulReFRnCpXSz4lLeM5FlPDqZfvqZnKdWFSGV BcImaeCNBSwd/y9wgURzILjmNSJ1+Pn338EC2cX3EQYichXd+fIJ9az2gmEgdw2j 64jaBDjcMuTXv0RIPPza0sEYwy4Fdw1z9L3unDbdtBmKmViAJ+G9ceXWJPdULYdh yHONNcMYsRz1fZ0JTgKpvWBn8OuzspCRfmHGvQn4YpRe/w== -----END CERTIFICATE-----Generated at Sun Aug 24 14:24:05 2025 by rpki-client