$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/cAAoRYjs4Fhulg_NrFpgTKFSug8.roa File: cAAoRYjs4Fhulg_NrFpgTKFSug8.roa (raw, json) Hash identifier: GU3lGnuoC/0EIa5DEUSqxYffOaPxsUIoWI+JqYFi0K4= Subject key identifier: 70:00:28:45:88:EC:E0:58:6E:96:0F:CD:AC:5A:60:4C:A1:52:BA:0F Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 0801 Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/cAAoRYjs4Fhulg_NrFpgTKFSug8.roa Signing time: Fri 22 Aug 2025 08:58:50 +0000 ROA not before: Fri 22 Aug 2025 08:58:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 2401:95c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Aug 22 08:58:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7000284588ECE0586E960FCDAC5A604CA152BA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:0d:41:ed:dd:67:b5:01:d8:d5:ca:1a:ce: 03:cb:69:87:f2:79:92:39:aa:22:8a:ee:57:b3:c7: b5:bd:bf:4a:f4:06:f0:2a:eb:51:e1:b1:7b:7b:a6: 61:29:fb:4a:84:3f:ff:f4:b6:cb:b2:c6:04:df:cf: a8:4c:a0:c5:6e:e6:5a:46:f9:7d:ef:df:4b:4e:da: 13:97:17:12:8a:83:9c:e0:fa:e9:5b:67:d6:57:da: e5:e9:17:5c:7e:f0:c1:02:f3:d0:72:07:f2:35:a1: 75:dd:fb:23:5f:e5:0c:75:11:5f:5f:47:ce:1e:ee: bf:ac:ce:25:67:ae:61:c2:2b:be:dd:da:cb:74:f2: bb:ce:9b:4d:14:fe:19:d3:cd:b1:de:7d:0b:39:a0: 43:40:bc:3a:68:d9:aa:d0:2c:a0:83:03:d6:62:fe: f8:c7:24:58:e0:7c:9d:78:74:7c:8a:f6:a2:58:b0: 9f:7d:33:7d:e2:1e:7d:7b:e3:83:6c:57:f4:18:34: 01:c5:f5:85:91:d3:90:f4:72:12:2e:b8:75:eb:d3: 4d:96:97:d0:aa:05:7f:d2:ac:48:c7:43:1f:50:e6: be:89:50:cd:3d:01:21:50:db:b3:25:a8:30:60:cc: 62:fa:a5:8d:6f:5c:3b:3f:99:a7:d5:89:4d:8c:64: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:00:28:45:88:EC:E0:58:6E:96:0F:CD:AC:5A:60:4C:A1:52:BA:0F X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/cAAoRYjs4Fhulg_NrFpgTKFSug8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:95c0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 54:57:d4:9e:67:72:9e:1a:26:41:ed:e4:0b:07:1e:9f:7c:32: 8d:58:1e:c5:79:f0:56:12:d9:75:34:ed:63:d0:f8:ea:d0:84: a8:33:cf:81:39:bb:bd:3b:e8:ef:35:a4:ef:39:8f:8e:26:4f: c7:8d:b5:de:be:a0:e6:81:ce:b7:81:53:29:36:3f:bc:9e:81: f9:c3:06:50:73:c4:95:21:8f:8b:0a:f6:63:54:53:5f:9e:38: 84:4b:e9:0d:93:9c:28:05:55:b3:99:9f:f3:0c:f3:0f:ff:6b: 27:67:ea:bd:0a:b7:cc:0e:94:78:30:75:2b:84:9a:f2:b2:03: 01:a5:7b:38:19:d9:36:2e:04:8d:cf:44:08:35:ec:78:c3:49: 9f:44:cd:9f:0c:31:db:d3:4c:97:c2:e6:7b:62:74:09:6a:2c: d1:91:2c:56:82:f6:ea:8e:d1:91:c5:96:e8:6e:d7:34:6b:4f: 3b:0b:b3:4c:38:2f:94:cf:cf:19:0c:c4:59:a4:24:9b:e8:71: 59:19:e8:74:c0:20:7f:9e:d5:f6:b7:0b:90:a1:23:7c:b4:6f: b4:f6:73:04:81:f3:cb:6c:16:e6:6a:c7:3e:89:96:ec:b1:25: ab:20:83:68:36:6b:4e:d4:fb:6e:96:5d:ae:ec:9f:ba:e4:4a: cf:b3:52:7e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTA4MjIw ODU4NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwMDAyODQ1ODhFQ0Uw NTg2RTk2MEZDREFDNUE2MDRDQTE1MkJBMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYBg1B7d1ntQHY1coazgPLaYfyeZI5qiKK7lezx7W9v0r0BvAq 61HhsXt7pmEp+0qEP//0tsuyxgTfz6hMoMVu5lpG+X3v30tO2hOXFxKKg5zg+ulb Z9ZX2uXpF1x+8MEC89ByB/I1oXXd+yNf5Qx1EV9fR84e7r+sziVnrmHCK77d2st0 8rvOm00U/hnTzbHefQs5oENAvDpo2arQLKCDA9Zi/vjHJFjgfJ14dHyK9qJYsJ99 M33iHn1744NsV/QYNAHF9YWR05D0chIuuHXr002Wl9CqBX/SrEjHQx9Q5r6JUM09 ASFQ27MlqDBgzGL6pY1vXDs/mafViU2MZAd3AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUcAAoRYjs4Fhulg/NrFpgTKFSug8wHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL2NBQW9SWWpzNEZodWxnX05y RnBnVEtGU3VnOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk AZXAIDANBgkqhkiG9w0BAQsFAAOCAQEAVFfUnmdynhomQe3kCwcen3wyjVgexXnw VhLZdTTtY9D46tCEqDPPgTm7vTvo7zWk7zmPjiZPx4213r6g5oHOt4FTKTY/vJ6B +cMGUHPElSGPiwr2Y1RTX544hEvpDZOcKAVVs5mf8wzzD/9rJ2fqvQq3zA6UeDB1 K4Sa8rIDAaV7OBnZNi4Ejc9ECDXseMNJn0TNnwwx29NMl8Lme2J0CWos0ZEsVoL2 6o7RkcWW6G7XNGtPOwuzTDgvlM/PGQzEWaQkm+hxWRnodMAgf57V9rcLkKEjfLRv tPZzBIHzy2wW5mrHPomW7LElqyCDaDZrTtT7bpZdruyfuuRKz7NSfg== -----END CERTIFICATE-----Generated at Tue Oct 21 00:10:46 2025 by rpki-client