$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6v9yrLqMCroNVNyF9cAidpSoWfA.roa File: 6v9yrLqMCroNVNyF9cAidpSoWfA.roa (raw, json) Hash identifier: hGywZicXU6ksSW7Mq2OE4nGpIp9+JZpL5D7nUs79rBE= Subject key identifier: EA:FF:72:AC:BA:8C:0A:BA:0D:54:DC:85:F5:C0:22:76:94:A8:59:F0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1462 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6v9yrLqMCroNVNyF9cAidpSoWfA.roa Signing time: Fri 22 Aug 2025 09:00:21 +0000 ROA not before: Fri 22 Aug 2025 09:00:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 222.156.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5218 (0x1462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EAFF72ACBA8C0ABA0D54DC85F5C0227694A859F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:e4:05:7b:58:e9:e1:9e:ff:26:7a:f9:05: cb:86:98:a8:d7:43:15:bc:09:7d:49:fa:3c:28:01: c5:72:2b:af:cc:54:08:e2:de:31:80:23:ab:00:2b: 92:59:43:fd:4a:36:e1:df:46:8c:de:59:5a:21:41: 1f:e0:af:ce:d0:8f:19:23:8b:e2:b0:74:54:7a:3d: 45:e2:91:f4:4f:5c:9a:bb:79:7b:01:e2:48:0c:b5: 16:57:48:cc:e7:3d:03:fb:8d:c3:36:c8:fd:80:64: 84:b9:15:92:24:92:95:60:43:1a:2c:28:f3:35:ad: 07:89:bd:2c:46:53:c6:d0:af:ba:fe:d8:42:df:57: b1:e8:60:72:c3:18:db:e3:fd:c3:15:27:e1:75:ac: eb:e2:44:29:42:d4:53:65:d5:6b:2d:36:22:4a:80: c0:04:6b:d0:da:bc:0f:f5:49:b3:46:73:d6:f6:01: 5d:fe:e7:25:a4:95:5c:27:ca:f7:93:bc:c6:71:56: e9:20:16:f7:59:ce:04:37:51:22:0e:d9:eb:79:38: aa:b9:35:01:3b:ed:34:09:43:40:cb:78:a0:8f:eb: 2c:1f:cd:54:de:c0:92:d0:11:87:be:d0:74:52:f7: 73:1c:ec:ec:43:13:35:8c:d0:3f:5f:55:39:b4:db: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FF:72:AC:BA:8C:0A:BA:0D:54:DC:85:F5:C0:22:76:94:A8:59:F0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6v9yrLqMCroNVNyF9cAidpSoWfA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.246.0/24 Signature Algorithm: sha256WithRSAEncryption 35:6f:61:4f:a1:83:96:5a:aa:9f:ab:cb:3f:5a:91:e4:88:8e: df:dd:7b:a4:35:ae:96:f6:8c:0a:19:85:ee:dc:41:68:fc:df: 92:cb:79:3d:5e:2c:03:fd:63:ce:aa:21:15:4b:f0:28:07:d2: b3:7c:99:b7:d7:1b:a0:0f:0f:50:35:7f:a7:02:6a:60:ac:82: 51:b3:06:c3:df:9c:c0:16:15:b6:0d:59:0b:88:19:c5:01:07: 47:01:7e:48:e1:d8:4f:72:cb:fb:0e:be:36:4a:df:24:15:d9: 78:9f:0e:26:41:7c:09:91:d9:e8:7b:ca:fb:39:02:dd:14:98: ba:c2:25:a2:c7:7f:a2:bb:b9:1c:21:9c:b6:dc:d9:1b:65:ea: b5:81:cd:12:39:37:48:49:d0:26:7b:d8:fd:03:e3:0a:f1:d6: 73:50:b7:ab:57:d9:91:65:b3:9d:68:9d:cb:9c:b3:1f:49:c2: a1:d3:cd:a7:74:d4:0a:73:35:64:ed:2d:7f:76:32:42:42:60: 08:f0:b4:9a:5f:e2:22:1d:38:9f:51:20:87:bd:ca:7d:9b:fc: ba:33:18:93:70:4f:cb:04:21:f5:be:e2:3a:2d:9e:a2:c6:eb: f0:93:e2:01:35:d1:50:d9:bc:cb:e7:93:87:53:b7:c3:0c:bd: fd:81:df:32 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBRkY3MkFDQkE4QzBB QkEwRDU0REM4NUY1QzAyMjc2OTRBODU5RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpuuQFe1jp4Z7/Jnr5BcuGmKjXQxW8CX1J+jwoAcVyK6/MVAji 3jGAI6sAK5JZQ/1KNuHfRozeWVohQR/gr87Qjxkji+KwdFR6PUXikfRPXJq7eXsB 4kgMtRZXSMznPQP7jcM2yP2AZIS5FZIkkpVgQxosKPM1rQeJvSxGU8bQr7r+2ELf V7HoYHLDGNvj/cMVJ+F1rOviRClC1FNl1WstNiJKgMAEa9DavA/1SbNGc9b2AV3+ 5yWklVwnyveTvMZxVukgFvdZzgQ3USIO2et5OKq5NQE77TQJQ0DLeKCP6ywfzVTe wJLQEYe+0HRS93Mc7OxDEzWM0D9fVTm028uVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU6v9yrLqMCroNVNyF9cAidpSoWfAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZ2OXlyTHFNQ3JvTlZOeUY5Y0FpZHBT b1dmQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADenPYwDQYJ KoZIhvcNAQELBQADggEBADVvYU+hg5Zaqp+ryz9akeSIjt/de6Q1rpb2jAoZhe7c QWj835LLeT1eLAP9Y86qIRVL8CgH0rN8mbfXG6APD1A1f6cCamCsglGzBsPfnMAW FbYNWQuIGcUBB0cBfkjh2E9yy/sOvjZK3yQV2XifDiZBfAmR2eh7yvs5At0UmLrC JaLHf6K7uRwhnLbc2Rtl6rWBzRI5N0hJ0CZ72P0D4wrx1nNQt6tX2ZFls51oncuc sx9JwqHTzad01ApzNWTtLX92MkJCYAjwtJpf4iIdOJ9RIIe9yn2b/LozGJNwT8sE IfW+4jotnqLG6/CT4gE10VDZvMvnk4dTt8MMvf2B3zI= -----END CERTIFICATE-----Generated at Sun Aug 24 14:21:40 2025 by rpki-client