$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9QTgxc2dTUMGxOGQzhU5xdkM2Tc.roa File: 9QTgxc2dTUMGxOGQzhU5xdkM2Tc.roa (raw, json) Hash identifier: 8BlG9J3GAd3XKaI8GTVC0cF1BYVWhCnWKVtVU6RHAoI= Subject key identifier: F5:04:E0:C5:CD:9D:4D:43:06:C4:E1:90:CE:15:39:C5:D9:0C:D9:37 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1421 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9QTgxc2dTUMGxOGQzhU5xdkM2Tc.roa Signing time: Fri 22 Aug 2025 09:00:06 +0000 ROA not before: Fri 22 Aug 2025 09:00:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 2404:0:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5153 (0x1421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F504E0C5CD9D4D4306C4E190CE1539C5D90CD937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:82:7a:cc:04:36:1f:f1:c9:e1:1a:c1:4c: d2:d7:26:f0:35:e2:e4:08:c3:9d:06:9e:2d:72:b2: da:76:ec:69:26:a0:31:8f:c9:b7:2f:e2:c2:9f:0b: ca:89:27:eb:58:dd:7b:f7:be:17:8b:32:39:70:2c: 8c:ed:58:36:2e:b0:c0:92:b0:6a:82:75:6c:22:f4: 34:be:6d:32:26:56:17:2b:d2:b2:07:5d:b8:5e:8f: 64:7d:78:88:30:c6:7f:13:6c:b9:75:16:7f:52:eb: a3:cb:c2:a2:2e:eb:df:f8:25:c9:51:93:b2:e7:bb: 4c:f6:72:56:57:21:ce:e6:67:d5:1b:08:15:d3:5d: e3:85:99:a2:02:46:84:8b:de:64:26:17:7f:0a:55: e0:8c:0a:a2:4b:cf:01:d2:26:9c:5a:f9:c0:5f:81: c8:d2:4d:61:5f:e8:ef:dd:2a:e3:50:ce:c9:07:d7: 7d:00:af:73:4d:83:db:b4:03:4c:88:82:8d:fc:8f: 2e:b7:53:ad:36:16:38:97:01:1e:92:d4:17:f9:aa: 51:80:97:ad:69:43:cc:a2:f1:40:b4:f7:78:a3:ab: 54:bd:7d:64:0f:35:19:f2:b0:8e:bb:8c:dc:f9:40: 7e:35:f5:e0:b4:cc:07:8c:12:81:e8:31:66:9e:cf: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:04:E0:C5:CD:9D:4D:43:06:C4:E1:90:CE:15:39:C5:D9:0C:D9:37 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9QTgxc2dTUMGxOGQzhU5xdkM2Tc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:1000::/36 Signature Algorithm: sha256WithRSAEncryption c1:4b:e2:c6:91:bc:e6:15:63:b5:3d:a4:ff:f8:d5:9a:4c:35: a5:68:68:5b:bf:4c:a5:62:f1:8e:82:29:6c:77:f6:78:5f:c2: da:57:a8:16:dc:f1:d0:78:3f:33:84:86:17:4a:09:4a:10:8a: de:fb:fa:e0:a8:2a:5d:fb:16:45:df:b1:70:93:c5:ae:2e:c4: 43:e7:d7:2f:8c:0e:3b:af:c2:fc:46:e0:f6:59:91:14:63:fb: a7:02:b5:55:2f:08:62:86:2e:28:54:93:a3:34:a0:e0:4b:9d: 90:fe:d6:ed:23:bd:22:13:a0:f5:e0:e5:65:8b:85:49:4b:f2: b5:a7:a8:77:b7:35:72:9c:dc:ee:ad:6a:7c:ef:7a:7d:35:c8: ef:5c:c8:10:5a:cf:ad:26:ca:86:22:66:70:02:cd:5b:40:c4: f7:98:d9:1c:64:10:2f:40:7b:ed:b0:7b:5a:61:a0:a4:ae:41: 83:c6:93:8e:62:80:0e:fb:7b:72:c6:8e:83:7b:e6:05:dd:c8: 3b:d2:55:64:a2:63:58:43:55:6b:d9:64:ab:52:6f:c7:00:38: 88:0b:5d:08:ce:11:67:2a:ea:f7:c5:5b:d0:52:e6:48:c9:ad: f6:2b:9b:7a:f6:ba:e1:29:b3:52:b5:e8:97:b2:b1:c7:b6:78: d5:cd:ca:b2 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICFCEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY1MDRFMEM1Q0Q5RDRE NDMwNkM0RTE5MENFMTUzOUM1RDkwQ0Q5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCy9YJ6zAQ2H/HJ4RrBTNLXJvA14uQIw50Gni1ystp27GkmoDGP ybcv4sKfC8qJJ+tY3Xv3vheLMjlwLIztWDYusMCSsGqCdWwi9DS+bTImVhcr0rIH Xbhej2R9eIgwxn8TbLl1Fn9S66PLwqIu69/4JclRk7Lnu0z2clZXIc7mZ9UbCBXT XeOFmaICRoSL3mQmF38KVeCMCqJLzwHSJpxa+cBfgcjSTWFf6O/dKuNQzskH130A r3NNg9u0A0yIgo38jy63U602FjiXAR6S1Bf5qlGAl61pQ8yi8UC093ijq1S9fWQP NRnysI67jNz5QH419eC0zAeMEoHoMWaez/mzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU9QTgxc2dTUMGxOGQzhU5xdkM2TcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzlRVGd4YzJkVFVNR3hPR1F6aFU1eGRr TTJUYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAEDAN BgkqhkiG9w0BAQsFAAOCAQEAwUvixpG85hVjtT2k//jVmkw1pWhoW79MpWLxjoIp bHf2eF/C2leoFtzx0Hg/M4SGF0oJShCK3vv64KgqXfsWRd+xcJPFri7EQ+fXL4wO O6/C/Ebg9lmRFGP7pwK1VS8IYoYuKFSTozSg4EudkP7W7SO9IhOg9eDlZYuFSUvy taeod7c1cpzc7q1qfO96fTXI71zIEFrPrSbKhiJmcALNW0DE95jZHGQQL0B77bB7 WmGgpK5Bg8aTjmKADvt7csaOg3vmBd3IO9JVZKJjWENVa9lkq1JvxwA4iAtdCM4R Zyrq98Vb0FLmSMmt9iubeva64SmzUrXol7Kxx7Z41c3Ksg== -----END CERTIFICATE-----Generated at Sun Aug 24 14:20:12 2025 by rpki-client