$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa File: QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa (raw, json) Hash identifier: 0lcn7A1+ZL5XJgqQCmzarNJs8CwPigObmEAryjQ0dO8= Subject key identifier: 41:6B:CE:55:64:F9:CD:9C:B7:95:45:94:9C:6B:C7:58:32:B1:82:77 Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Certificate serial: 0474 Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa Signing time: Fri 22 Aug 2025 08:52:26 +0000 ROA not before: Fri 22 Aug 2025 08:52:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18428 IP address blocks: 2407:d240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Validity Not Before: Aug 22 08:52:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=416BCE5564F9CD9CB79545949C6BC75832B18277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:3d:93:6d:b0:1c:1f:9a:a4:94:d8:3c:84: cf:85:65:77:3e:3c:4d:aa:9f:a1:f6:ba:1d:8c:8f: a6:c9:00:4b:ca:19:d7:4e:dc:d9:0e:64:4a:fa:98: 30:62:05:cc:76:c9:5a:ed:0a:ac:ff:f5:d3:44:b8: ad:56:ca:52:db:54:8b:69:72:e8:f5:18:a7:4f:53: 0c:f2:d9:e2:d5:55:1f:f7:39:98:7f:29:6b:62:65: 62:49:fb:3d:dd:88:f3:88:b1:c8:ef:fc:94:11:75: 5e:e6:19:b8:cd:ed:de:ae:8e:bb:5a:3a:a5:b9:a8: dc:9e:58:08:fc:ce:e2:bc:1e:33:2f:84:ef:a6:f2: 2b:0a:20:95:f5:f2:6f:d2:3b:45:13:d1:42:ba:5a: 1f:d4:3e:4d:73:35:cf:41:40:a3:39:21:29:b1:ae: 29:65:42:b3:ad:71:5d:6c:9f:a9:85:de:9c:f0:4f: 27:1c:19:4e:0c:fb:b8:bf:7f:04:6f:8c:36:cd:4a: 4c:48:fa:86:84:a8:16:47:81:3b:f9:45:29:e9:5c: 13:86:9f:61:46:17:bb:49:06:83:59:ac:fe:6d:ce: 57:69:a9:ca:b5:5a:e8:ae:36:65:a0:36:2e:62:99: 62:8b:ce:56:fe:6b:f8:be:84:8c:00:9f:81:55:de: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6B:CE:55:64:F9:CD:9C:B7:95:45:94:9C:6B:C7:58:32:B1:82:77 X509v3 Authority Key Identifier: keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:d240::/32 Signature Algorithm: sha256WithRSAEncryption 55:d4:85:05:01:7e:63:c9:49:2d:c6:22:b4:e8:87:1e:34:8a: 24:01:16:8b:67:39:e5:25:c9:59:a0:62:46:8c:48:54:d7:8d: 20:ec:02:cf:b0:0e:29:85:39:20:8f:56:12:22:2d:2f:bc:d0: cb:c0:5a:b3:9b:fa:c6:d7:dc:b0:97:3b:38:81:3b:e2:72:7b: c7:b2:a8:25:e6:bf:af:42:3e:b8:05:e3:d9:ce:17:8a:f5:d3: e1:c4:4f:06:60:85:e4:c8:a4:7c:ea:ec:ab:10:6b:c4:4c:4f: 99:02:ba:56:35:29:58:ab:50:3c:8f:d3:74:5b:98:aa:8c:2a: 04:61:b6:4d:5f:bd:7c:5a:57:d5:49:22:ef:fd:43:40:f1:e0: 54:bd:ff:20:10:1a:24:25:e1:dc:1b:23:59:e0:ab:e7:ef:e5: 5c:d2:da:12:fe:f6:86:1f:1e:ed:d9:70:49:ea:b8:9f:57:7f: 3a:d5:0c:a5:c8:f7:39:2f:ff:74:b2:7f:66:f3:23:17:63:5e: e0:3d:ff:19:5e:3e:29:54:4c:d2:dc:16:e7:d4:5e:e7:0a:20: 85:f1:c9:86:15:ff:75:25:32:74:80:df:c3:71:53:ea:01:cd: 14:cb:cd:8a:9e:2b:0c:d3:61:32:c4:2b:20:4a:9a:4b:eb:48: 96:48:43:1e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB MDlDRTQyODA5RjREQTlEN0IxQzQ0NzNEREYyRjQzNkE1OTlDNDAeFw0yNTA4MjIw ODUyMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxNkJDRTU1NjRGOUNE OUNCNzk1NDU5NDlDNkJDNzU4MzJCMTgyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCktT2TbbAcH5qklNg8hM+FZXc+PE2qn6H2uh2Mj6bJAEvKGddO 3NkOZEr6mDBiBcx2yVrtCqz/9dNEuK1WylLbVItpcuj1GKdPUwzy2eLVVR/3OZh/ KWtiZWJJ+z3diPOIscjv/JQRdV7mGbjN7d6ujrtaOqW5qNyeWAj8zuK8HjMvhO+m 8isKIJX18m/SO0UT0UK6Wh/UPk1zNc9BQKM5ISmxrillQrOtcV1sn6mF3pzwTycc GU4M+7i/fwRvjDbNSkxI+oaEqBZHgTv5RSnpXBOGn2FGF7tJBoNZrP5tzldpqcq1 WuiuNmWgNi5imWKLzlb+a/i+hIwAn4FV3lZNAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUQWvOVWT5zZy3lUWUnGvHWDKxgncwHwYDVR0jBBgwFoAU0qCc5CgJ9NqdexxE c93y9DalmcQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVSQ1lD QVQvMHFDYzVDZ0o5TnFkZXh4RWM5M3k5RGFsbWNRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wcUNjNUNnSjlOcWRleHhFYzkzeTlEYWxtY1EuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRVJDWUNBVC9RV3ZPVldUNXpaeTNs VVdVbkd2SFdES3hnbmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAfSQDANBgkqhkiG9w0BAQsFAAOCAQEAVdSFBQF+Y8lJLcYitOiHHjSKJAEW i2c55SXJWaBiRoxIVNeNIOwCz7AOKYU5II9WEiItL7zQy8Bas5v6xtfcsJc7OIE7 4nJ7x7KoJea/r0I+uAXj2c4XivXT4cRPBmCF5MikfOrsqxBrxExPmQK6VjUpWKtQ PI/TdFuYqowqBGG2TV+9fFpX1Uki7/1DQPHgVL3/IBAaJCXh3BsjWeCr5+/lXNLa Ev72hh8e7dlwSeq4n1d/OtUMpcj3OS//dLJ/ZvMjF2Ne4D3/GV4+KVRM0twW59Re 5woghfHJhhX/dSUydIDfw3FT6gHNFMvNip4rDNNhMsQrIEqaS+tIlkhDHg== -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:23 2025 by rpki-client