$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/9aNFfbqYyxeneu69pQEb4pSk0oA.roa File: 9aNFfbqYyxeneu69pQEb4pSk0oA.roa (raw, json) Hash identifier: Dr8OcPK4VDg5eWx5NuSMw8WHQbxbj7Q8BKWf1asyLo0= Subject key identifier: F5:A3:45:7D:BA:98:CB:17:A7:7A:EE:BD:A5:01:1B:E2:94:A4:D2:80 Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0D8C Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/9aNFfbqYyxeneu69pQEb4pSk0oA.roa Signing time: Fri 22 Aug 2025 09:03:25 +0000 ROA not before: Fri 22 Aug 2025 09:03:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18179 IP address blocks: 2404:db00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3468 (0xd8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Aug 22 09:03:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F5A3457DBA98CB17A77AEEBDA5011BE294A4D280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:06:73:80:92:1b:af:d9:2a:d1:ee:63:6c:fe: 4c:67:12:90:48:92:ed:07:1d:ae:28:b6:24:6d:0b: 68:3b:11:bc:f6:d8:4a:ec:0d:a7:c0:6e:c8:4f:ab: fc:c5:d5:70:03:5d:39:59:f1:b0:16:7e:86:fb:87: dc:41:21:fd:07:a4:27:8e:4a:ff:dd:e0:c9:cb:8b: 10:d4:81:c5:08:dc:58:06:dd:6a:78:71:b2:6e:8c: 71:69:96:69:f7:f0:90:db:05:f0:62:04:ee:3b:3b: bd:76:c5:a9:48:18:fc:39:ff:48:f1:5c:fc:23:73: b1:28:23:1c:00:6e:9b:4e:b2:ac:51:72:25:d7:bd: 41:0a:50:ed:06:03:8d:c7:b6:aa:cb:c9:3b:35:d0: 3e:ee:3f:c9:2a:e6:05:38:5e:80:0d:0a:b9:61:d2: eb:f1:c0:c5:df:43:12:91:b0:2c:9d:97:ba:36:7f: 00:a9:ae:4b:c1:6a:b1:9c:8b:58:e4:d0:f0:6c:4c: b9:1b:b1:90:6c:d1:9d:99:87:8a:8d:7c:9a:57:e8: c9:23:39:6b:49:00:8e:d5:15:69:b8:8a:3f:db:c3: e1:9c:73:19:fd:6c:bb:7c:aa:91:fb:15:6b:a1:0c: d7:0f:46:76:55:85:ea:63:22:8d:30:86:23:2e:dc: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A3:45:7D:BA:98:CB:17:A7:7A:EE:BD:A5:01:1B:E2:94:A4:D2:80 X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/9aNFfbqYyxeneu69pQEb4pSk0oA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:db00::/32 Signature Algorithm: sha256WithRSAEncryption 85:66:37:cb:62:e4:22:97:2d:5c:ce:a8:d4:65:ca:2d:56:2c: 7c:48:d8:0f:44:d2:77:26:3d:a1:36:a5:92:b3:23:17:26:88: c4:9f:e1:fe:67:78:3a:02:17:3b:73:3a:11:1e:16:fb:bf:ed: d8:9f:f5:ed:7f:a2:f2:a3:81:01:12:59:b5:1c:fa:bc:48:d4: be:1e:c8:e2:37:17:b4:35:fa:c8:cd:2b:56:1d:6b:13:81:5d: 53:59:17:42:05:8e:da:eb:ae:e0:34:b4:9a:79:b5:c7:aa:fd: 2a:c7:75:f1:0d:c5:9d:03:99:18:10:a4:88:4c:32:6b:dc:71: 24:7b:0a:69:73:3c:e8:46:5c:f7:ff:9e:ee:5e:04:a7:20:db: 2e:e5:a5:8f:ea:ef:04:ce:5c:47:2b:62:3d:8e:51:88:48:aa: e8:5b:6a:6b:c2:9d:04:07:b0:89:74:c4:b0:dc:54:90:b3:2c: cb:b6:7a:d9:76:0f:4a:cc:3e:ab:d4:23:4c:be:10:0c:14:74: 6c:0c:43:e8:d5:bc:80:d5:f0:20:f3:2c:b2:58:7f:34:86:6d: 36:23:e8:f0:ae:e2:d7:56:b9:c4:86:21:34:fe:42:4c:d5:e4: fd:88:ac:6d:1a:ab:4d:cf:eb:4a:d5:4b:30:a1:48:c0:fc:1d: 41:ce:7e:8a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNTA4MjIw OTAzMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY1QTM0NTdEQkE5OENC MTdBNzdBRUVCREE1MDExQkUyOTRBNEQyODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxBnOAkhuv2SrR7mNs/kxnEpBIku0HHa4otiRtC2g7Ebz22Ers DafAbshPq/zF1XADXTlZ8bAWfob7h9xBIf0HpCeOSv/d4MnLixDUgcUI3FgG3Wp4 cbJujHFplmn38JDbBfBiBO47O712xalIGPw5/0jxXPwjc7EoIxwAbptOsqxRciXX vUEKUO0GA43HtqrLyTs10D7uP8kq5gU4XoANCrlh0uvxwMXfQxKRsCydl7o2fwCp rkvBarGci1jk0PBsTLkbsZBs0Z2Zh4qNfJpX6MkjOWtJAI7VFWm4ij/bw+Gccxn9 bLt8qpH7FWuhDNcPRnZVhepjIo0whiMu3F/pAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU9aNFfbqYyxeneu69pQEb4pSk0oAwHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy85YU5GZmJxWXl4ZW5l dTY5cFFFYjRwU2swb0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJATbADANBgkqhkiG9w0BAQsFAAOCAQEAhWY3y2LkIpctXM6o1GXKLVYsfEjY D0TSdyY9oTalkrMjFyaIxJ/h/md4OgIXO3M6ER4W+7/t2J/17X+i8qOBARJZtRz6 vEjUvh7I4jcXtDX6yM0rVh1rE4FdU1kXQgWO2uuu4DS0mnm1x6r9Ksd18Q3FnQOZ GBCkiEwya9xxJHsKaXM86EZc9/+e7l4EpyDbLuWlj+rvBM5cRytiPY5RiEiq6Ftq a8KdBAewiXTEsNxUkLMsy7Z62XYPSsw+q9QjTL4QDBR0bAxD6NW8gNXwIPMsslh/ NIZtNiPo8K7i11a5xIYhNP5CTNXk/YisbRqrTc/rStVLMKFIwPwdQc5+ig== -----END CERTIFICATE-----Generated at Sun Aug 24 07:42:16 2025 by rpki-client