$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa File: 5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa (raw, json) Hash identifier: vvplqjRtyDKlQoipChhhpH5hF9AumMJ25Z2F6CIx3Ww= Subject key identifier: E5:3C:C3:A4:17:E7:2D:30:10:C4:DB:CF:D3:D9:B9:18:D1:B8:24:24 Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 07FF Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa Signing time: Fri 22 Aug 2025 08:58:49 +0000 ROA not before: Fri 22 Aug 2025 08:58:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 2401:95c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Aug 22 08:58:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E53CC3A417E72D3010C4DBCFD3D9B918D1B82424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:fa:95:31:70:67:07:06:99:eb:24:1f:f2: b9:5b:30:e0:5b:2a:ea:28:41:bd:f4:f3:a0:81:7a: 48:84:41:0a:ab:10:1c:06:9a:15:7f:39:87:42:b2: 2c:8f:9b:60:d1:21:dd:72:51:02:31:55:5c:25:74: bc:f4:66:da:8c:ec:9f:7e:a3:7d:26:de:ae:c3:49: 48:be:68:68:2d:6a:13:b5:70:f6:26:da:46:c0:06: 3c:1e:b8:31:a2:b2:eb:26:10:e4:26:92:36:ff:5f: 91:ea:07:3c:2c:1b:9d:5c:01:50:91:81:2c:8f:bb: e7:e5:b1:49:99:3e:3d:d7:03:7e:35:cd:3d:5f:91: 7d:67:1c:bd:32:a0:c1:21:7f:21:c5:c2:b7:bf:62: 03:7c:93:fc:b8:da:27:bf:31:d8:2c:9c:37:52:28: 2e:b2:b8:db:4c:cf:93:54:d9:67:61:7f:c3:eb:c8: 0b:b4:40:e1:d0:11:51:71:57:78:d7:0c:2a:71:fa: 45:d1:0b:da:b5:b3:a8:16:79:fe:e9:f3:cb:ee:58: 8d:cb:88:3c:3a:b3:bd:84:8a:dd:46:cf:a8:02:e9: af:5e:ba:bc:2f:38:1a:6c:55:95:8d:34:1c:18:63: 13:db:f9:29:5b:d2:b7:d2:83:7a:f3:c3:9e:08:f8: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3C:C3:A4:17:E7:2D:30:10:C4:DB:CF:D3:D9:B9:18:D1:B8:24:24 X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:95c0::/32 Signature Algorithm: sha256WithRSAEncryption 26:3c:9e:59:14:6b:24:c5:ba:51:28:6d:df:98:42:b5:4b:96: 6f:06:06:7a:3a:b1:d2:71:34:45:83:98:8e:38:70:81:7d:33: f7:8d:ff:f4:60:84:ba:46:11:30:27:73:1b:f4:24:49:a0:38: 08:c0:8b:23:dd:a6:64:e9:b3:aa:c7:df:38:63:98:47:23:13: ea:09:36:33:7f:80:ea:a8:04:91:31:4f:84:f3:57:24:dc:3e: 98:55:d3:be:61:03:ca:55:d8:d8:f4:d9:bb:72:05:f3:7f:65: ac:51:ac:db:9c:9d:3a:ef:d5:23:ec:c9:f4:98:98:3c:c1:70: f9:d7:3b:eb:cc:86:03:b1:01:a0:1a:63:af:e7:1b:2d:04:27: f6:bf:27:b3:b6:6d:81:cf:64:65:cc:67:6c:da:c4:02:be:a1: ee:61:f9:3a:67:df:65:66:72:7b:b2:fe:68:df:ec:3c:b1:b4: d4:9d:79:52:1b:42:f3:c9:c9:4b:fc:fd:5a:ab:d5:b0:e8:aa: 10:2d:ad:10:42:fb:17:57:30:57:a7:1c:e6:c9:2c:ba:1a:cc: 8d:ff:52:d4:aa:09:3a:34:1a:4d:5f:77:66:7c:4f:44:14:11: 21:33:1f:1b:00:28:03:af:db:b6:96:9c:94:df:99:82:05:6f: 51:64:45:2f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTA4MjIw ODU4NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU1M0NDM0E0MTdFNzJE MzAxMEM0REJDRkQzRDlCOTE4RDFCODI0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkpPqVMXBnBwaZ6yQf8rlbMOBbKuooQb3086CBekiEQQqrEBwG mhV/OYdCsiyPm2DRId1yUQIxVVwldLz0ZtqM7J9+o30m3q7DSUi+aGgtahO1cPYm 2kbABjweuDGisusmEOQmkjb/X5HqBzwsG51cAVCRgSyPu+flsUmZPj3XA341zT1f kX1nHL0yoMEhfyHFwre/YgN8k/y42ie/MdgsnDdSKC6yuNtMz5NU2Wdhf8PryAu0 QOHQEVFxV3jXDCpx+kXRC9q1s6gWef7p88vuWI3LiDw6s72Eit1Gz6gC6a9eurwv OBpsVZWNNBwYYxPb+Slb0rfSg3rzw54I+E+nAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU5TzDpBfnLTAQxNvP09m5GNG4JCQwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOLzVUekRwQmZuTFRBUXhOdlAw OW01R05HNEpDUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk AZXAMA0GCSqGSIb3DQEBCwUAA4IBAQAmPJ5ZFGskxbpRKG3fmEK1S5ZvBgZ6OrHS cTRFg5iOOHCBfTP3jf/0YIS6RhEwJ3Mb9CRJoDgIwIsj3aZk6bOqx984Y5hHIxPq CTYzf4DqqASRMU+E81ck3D6YVdO+YQPKVdjY9Nm7cgXzf2WsUazbnJ0679Uj7Mn0 mJg8wXD51zvrzIYDsQGgGmOv5xstBCf2vyeztm2Bz2RlzGds2sQCvqHuYfk6Z99l ZnJ7sv5o3+w8sbTUnXlSG0LzyclL/P1aq9Ww6KoQLa0QQvsXVzBXpxzmySy6GsyN /1LUqgk6NBpNX3dmfE9EFBEhMx8bACgDr9u2lpyU35mCBW9RZEUv -----END CERTIFICATE-----Generated at Sun Aug 24 09:21:11 2025 by rpki-client