$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/S6vsxTP49Ql94cgZit0e1Dt8hx8.roa File: S6vsxTP49Ql94cgZit0e1Dt8hx8.roa (raw, json) Hash identifier: nwlK61pvv6+lqbHcwMrpTYVqcwuqjxvRNwLfpTG9j/c= Subject key identifier: 4B:AB:EC:C5:33:F8:F5:09:7D:E1:C8:19:8A:DD:1E:D4:3B:7C:87:1F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1394 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/S6vsxTP49Ql94cgZit0e1Dt8hx8.roa Signing time: Fri 22 Aug 2025 08:59:27 +0000 ROA not before: Fri 22 Aug 2025 08:59:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 7482 IP address blocks: 203.79.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5012 (0x1394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 08:59:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4BABECC533F8F5097DE1C8198ADD1ED43B7C871F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:8e:1d:a6:ba:37:84:2d:ed:dd:5d:5d:8e: d8:00:48:32:02:56:3a:cc:8f:6a:30:98:4f:7f:20: a9:0d:05:2b:42:9b:91:de:85:75:a0:de:91:bc:29: 45:06:5e:1d:d9:ce:aa:0e:99:75:79:de:25:d1:ac: 0e:bb:d2:3e:a9:23:22:08:67:b0:56:1d:e5:3f:53: fb:2c:c5:56:6f:cb:10:80:3f:ce:d3:94:37:6a:19: 15:9e:fd:36:97:b0:4a:2a:46:50:40:72:02:00:dc: 3a:b6:fa:b4:76:0c:31:8a:32:86:3f:ba:ed:3d:83: b6:c2:ab:8c:49:76:d1:a0:43:c2:f7:38:30:d7:30: 63:ee:63:66:4f:07:13:e5:52:6a:32:2f:19:76:bd: ba:ac:54:5d:3c:8b:11:e5:8d:e7:77:b0:1b:9a:a3: a9:97:a2:83:39:29:63:aa:6a:97:fe:2d:32:db:ed: fe:87:f8:d1:62:11:5d:eb:04:66:e2:a5:9c:af:78: 00:78:ae:ae:73:52:ec:4c:b7:66:51:33:91:a6:0c: ba:84:3b:1f:b2:18:97:98:77:29:c1:f9:81:fe:0a: fb:dd:9a:e8:67:5f:8b:d9:6c:17:ea:74:1f:c1:32: 62:b6:3e:c3:fd:50:6e:54:82:06:c2:2e:4d:57:26: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AB:EC:C5:33:F8:F5:09:7D:E1:C8:19:8A:DD:1E:D4:3B:7C:87:1F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/S6vsxTP49Ql94cgZit0e1Dt8hx8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.240.0/21 Signature Algorithm: sha256WithRSAEncryption 78:8c:ee:2e:74:fa:32:9b:f2:cc:0c:3b:c0:c8:21:38:8f:94: 00:84:60:da:80:b0:45:de:d3:e3:39:2a:e6:c5:3f:4a:0b:f7: 31:50:53:c6:1f:00:92:d4:a5:52:fd:b2:8c:f3:5e:97:72:dd: e8:6d:22:10:4b:28:03:c1:af:c2:71:ab:14:c7:4e:13:93:66: 6b:8d:7e:50:8f:d0:89:e3:c0:6f:6e:e0:43:fc:ad:12:e3:c2: 0d:4a:d9:52:43:f2:75:9f:1b:34:a8:29:26:5c:de:d2:ce:ef: 89:78:87:eb:ba:2d:f5:24:98:e1:0e:71:9b:cb:cf:4e:12:a3: 54:88:6c:78:2f:49:91:7f:63:69:d9:66:24:f8:5b:9d:da:1a: fd:66:72:bb:2b:07:9a:a5:55:7c:62:24:f5:ea:a8:99:09:2a: 74:fe:50:b9:14:c4:38:95:97:57:66:64:47:3e:7b:0f:cc:e4: 49:6a:bf:73:13:65:9f:db:c5:19:ff:6f:db:76:3a:c0:8d:d9: 2a:d7:49:fc:7e:8c:3b:cb:3f:3c:6c:8f:54:08:af:a8:d1:b1: 6a:4a:03:0b:54:9e:3b:af:f1:8f:a0:d4:7f:1d:77:15:58:82: e7:84:3f:0c:4b:13:11:99:6a:25:d6:cf:39:5e:9a:16:0f:52: f6:82:c7:26 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICE5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw ODU5MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRCQUJFQ0M1MzNGOEY1 MDk3REUxQzgxOThBREQxRUQ0M0I3Qzg3MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4bI4dpro3hC3t3V1djtgASDICVjrMj2owmE9/IKkNBStCm5He hXWg3pG8KUUGXh3ZzqoOmXV53iXRrA670j6pIyIIZ7BWHeU/U/ssxVZvyxCAP87T lDdqGRWe/TaXsEoqRlBAcgIA3Dq2+rR2DDGKMoY/uu09g7bCq4xJdtGgQ8L3ODDX MGPuY2ZPBxPlUmoyLxl2vbqsVF08ixHljed3sBuao6mXooM5KWOqapf+LTLb7f6H +NFiEV3rBGbipZyveAB4rq5zUuxMt2ZRM5GmDLqEOx+yGJeYdynB+YH+Cvvdmuhn X4vZbBfqdB/BMmK2PsP9UG5UggbCLk1XJqz/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUS6vsxTP49Ql94cgZit0e1Dt8hx8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1M2dnN4VFA0OVFsOTRjZ1ppdDBlMUR0 OGh4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPLT/AwDQYJ KoZIhvcNAQELBQADggEBAHiM7i50+jKb8swMO8DIITiPlACEYNqAsEXe0+M5KubF P0oL9zFQU8YfAJLUpVL9sozzXpdy3ehtIhBLKAPBr8JxqxTHThOTZmuNflCP0Inj wG9u4EP8rRLjwg1K2VJD8nWfGzSoKSZc3tLO74l4h+u6LfUkmOEOcZvLz04So1SI bHgvSZF/Y2nZZiT4W53aGv1mcrsrB5qlVXxiJPXqqJkJKnT+ULkUxDiVl1dmZEc+ ew/M5Elqv3MTZZ/bxRn/b9t2OsCN2SrXSfx+jDvLPzxsj1QIr6jRsWpKAwtUnjuv 8Y+g1H8ddxVYgueEPwxLExGZaiXWzzlemhYPUvaCxyY= -----END CERTIFICATE-----Generated at Sun Aug 24 14:16:33 2025 by rpki-client