$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa File: 0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa (raw, json) Hash identifier: NB7AtyJ/gv5jdRxwaS5k9Y+cLlR3AyiNu4aspWF9yiA= Subject key identifier: D1:C9:B4:67:B6:20:8D:5F:22:4F:6D:36:93:40:F0:A4:C4:61:C9:F4 Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 07FD Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa Signing time: Fri 22 Aug 2025 08:58:49 +0000 ROA not before: Fri 22 Aug 2025 08:58:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 2401:95c0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Aug 22 08:58:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D1C9B467B6208D5F224F6D369340F0A4C461C9F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:d7:fe:02:e7:a6:7c:2b:fa:36:9d:9a:52: 68:ba:ed:ea:60:37:ea:7a:c8:c6:53:4f:ea:d7:d4: 4f:ee:77:74:65:81:a5:c6:ff:3f:a7:42:ce:67:0c: c7:b6:21:5a:f2:1d:53:df:65:d6:d0:fc:d7:9e:93: f9:ba:b6:8f:b1:13:10:c5:6a:bf:61:ae:0c:ea:3d: 39:e2:24:74:2a:0c:71:bb:66:c5:4e:ce:4f:d8:77: b0:65:3a:a5:67:ab:2c:c1:16:33:17:91:b5:ae:db: 4c:94:4f:5c:9e:7c:c2:65:6e:e9:2f:0f:66:aa:54: 5d:39:d6:64:fb:6c:a3:a3:67:74:f7:7f:18:5e:dc: 77:ed:a5:b4:d5:de:d2:2c:4a:77:0d:fc:ba:7c:c0: 4a:7a:7f:bb:41:05:46:96:6a:a2:72:e9:9e:32:08: 67:95:fd:64:1c:5a:88:86:9b:21:ae:d0:e8:cf:cd: 5c:1f:97:d9:89:06:26:10:10:31:b4:47:93:36:84: 22:47:1c:3e:47:03:73:ee:77:7a:59:62:fa:30:16: 0c:2c:62:09:df:57:2b:f7:50:7f:51:7b:64:5f:b9: 95:36:f0:ae:b6:51:b7:a0:14:3c:f8:38:ba:50:47: 9a:d5:88:15:7b:4e:fa:75:e4:ee:85:3a:f1:fb:2b: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C9:B4:67:B6:20:8D:5F:22:4F:6D:36:93:40:F0:A4:C4:61:C9:F4 X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:95c0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 0c:38:56:6e:cb:47:85:8f:f3:20:f3:73:32:ed:5b:b8:b7:0d: d2:a9:a9:66:45:02:28:0f:d5:96:08:3a:69:cd:c5:a8:8d:05: b4:32:c7:28:46:25:be:49:ca:28:75:18:2c:6a:d3:72:4c:37: d5:23:d7:f6:2d:d9:bb:3f:de:9b:bb:23:a3:dd:ea:d2:bf:4d: 26:be:ad:08:d8:83:9b:2f:12:45:f7:11:7a:7f:3d:2c:ed:b6: de:87:88:58:83:60:ca:66:16:37:d2:fa:18:42:10:50:21:aa: 33:7e:9a:43:c7:48:4c:fb:e8:d3:8e:0d:0c:60:31:e3:52:44: ea:c9:fd:6b:3e:16:d8:50:03:35:ad:0d:8d:b0:30:e9:a0:4c: d6:a9:4f:30:6d:9c:a1:97:54:d5:38:a6:a5:25:06:33:36:6c: 84:20:55:2b:79:a3:b4:1c:0c:3c:dd:b0:b7:13:f5:cc:c4:64: c0:31:89:4d:5e:89:1e:44:3f:78:0f:dc:17:19:4e:64:a2:2f: 9d:c6:cd:4f:80:27:c6:32:cc:f1:2c:60:fa:78:a6:5c:fb:60: 99:99:24:47:79:c7:9c:c1:b6:14:f2:a2:35:3e:21:6b:8b:13: 1b:78:55:2b:c8:82:2e:42:32:40:50:9d:d2:27:11:f6:f4:33: cd:95:b5:c8 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTA4MjIw ODU4NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxQzlCNDY3QjYyMDhE NUYyMjRGNkQzNjkzNDBGMEE0QzQ2MUM5RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW29f+AuemfCv6Np2aUmi67epgN+p6yMZTT+rX1E/ud3RlgaXG /z+nQs5nDMe2IVryHVPfZdbQ/Neek/m6to+xExDFar9hrgzqPTniJHQqDHG7ZsVO zk/Yd7BlOqVnqyzBFjMXkbWu20yUT1yefMJlbukvD2aqVF051mT7bKOjZ3T3fxhe 3HftpbTV3tIsSncN/Lp8wEp6f7tBBUaWaqJy6Z4yCGeV/WQcWoiGmyGu0OjPzVwf l9mJBiYQEDG0R5M2hCJHHD5HA3Pud3pZYvowFgwsYgnfVyv3UH9Re2RfuZU28K62 UbegFDz4OLpQR5rViBV7Tvp15O6FOvH7KwWFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU0cm0Z7YgjV8iT202k0DwpMRhyfQwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzBjbTBaN1lnalY4aVQyMDJr MER3cE1SaHlmUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk AZXAEDANBgkqhkiG9w0BAQsFAAOCAQEADDhWbstHhY/zIPNzMu1buLcN0qmpZkUC KA/Vlgg6ac3FqI0FtDLHKEYlvknKKHUYLGrTckw31SPX9i3Zuz/em7sjo93q0r9N Jr6tCNiDmy8SRfcRen89LO223oeIWINgymYWN9L6GEIQUCGqM36aQ8dITPvo044N DGAx41JE6sn9az4W2FADNa0NjbAw6aBM1qlPMG2coZdU1TimpSUGMzZshCBVK3mj tBwMPN2wtxP1zMRkwDGJTV6JHkQ/eA/cFxlOZKIvncbNT4AnxjLM8Sxg+nimXPtg mZkkR3nHnMG2FPKiNT4ha4sTG3hVK8iCLkIyQFCd0icR9vQzzZW1yA== -----END CERTIFICATE-----Generated at Sun Aug 24 09:21:15 2025 by rpki-client