$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Z7O67lsGx3aARIFY9eOxvhRCwak.roa File: Z7O67lsGx3aARIFY9eOxvhRCwak.roa (raw, json) Hash identifier: Hs949LOGE5pbIo9H2UFLzIVQo4zVj2WEGxy/5hBDHjA= Subject key identifier: 67:B3:BA:EE:5B:06:C7:76:80:44:81:58:F5:E3:B1:BE:14:42:C1:A9 Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Certificate serial: 0996 Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Z7O67lsGx3aARIFY9eOxvhRCwak.roa Signing time: Fri 22 Aug 2025 08:51:49 +0000 ROA not before: Fri 22 Aug 2025 08:51:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131674 IP address blocks: 2405:e4c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Validity Not Before: Aug 22 08:51:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=67B3BAEE5B06C77680448158F5E3B1BE1442C1A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:09:d3:98:3d:8f:8b:d8:43:67:a4:92:7c: 83:60:46:59:1f:c5:81:b2:54:d4:26:2e:d1:3b:64: 0f:68:dd:5f:c5:4b:e7:3e:d4:a0:95:a1:40:3e:f9: 22:e6:1e:e8:18:56:4f:22:3d:71:26:52:07:24:69: ad:ae:1c:0b:62:7b:9a:dd:ad:c6:10:f4:83:cd:bf: d3:72:5f:19:c0:f7:df:35:4d:33:ee:b0:69:ee:ba: ac:73:cf:56:3c:7e:20:92:a1:e9:83:e3:76:6e:a3: 11:04:25:a3:c1:a2:99:c8:02:6b:8a:a1:dd:b5:ee: c1:40:75:02:42:3c:23:f4:25:65:b6:67:45:ba:1c: 71:79:49:65:1f:32:40:e5:df:9b:12:5c:07:75:94: e1:4d:db:d1:5d:c9:c3:63:8d:69:bc:c3:ca:96:cf: 8f:5b:7d:2f:2e:6c:49:d1:88:5d:ed:26:17:fd:7f: a8:1e:86:4f:19:84:46:c2:2e:3d:bb:4b:0f:57:07: 51:e3:40:f3:2d:4a:57:fd:04:ff:5c:8e:db:ae:13: 35:2f:a9:b6:fc:eb:4a:f2:f5:5a:69:26:33:ca:6f: 0a:c5:04:6d:70:e6:c5:85:dc:8d:f1:06:e6:a8:82: ad:c5:fb:dc:2b:e6:f5:ea:fa:98:95:47:f7:2a:21: 15:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:BA:EE:5B:06:C7:76:80:44:81:58:F5:E3:B1:BE:14:42:C1:A9 X509v3 Authority Key Identifier: keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Z7O67lsGx3aARIFY9eOxvhRCwak.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:e4c0::/32 Signature Algorithm: sha256WithRSAEncryption 88:4f:d4:3a:a4:f0:97:f6:b1:53:68:b2:7d:4d:18:86:5b:55: aa:27:e1:43:c1:a1:ee:73:e1:9c:40:e7:08:d0:f0:d6:2e:99: 33:7d:94:10:51:90:36:f3:18:93:59:c6:d5:88:65:47:03:8d: a0:43:35:8b:fd:c1:46:22:f9:aa:73:e5:91:51:a6:64:62:e1: 88:dd:23:74:43:7a:b3:dc:60:65:12:20:cf:9b:f5:16:16:38: ad:08:9c:52:40:3c:96:bb:77:4c:ac:f6:17:db:b0:63:71:2a: d4:85:06:23:80:e0:67:99:d3:0f:9a:75:6d:c4:4f:2e:b4:35: e4:a5:db:47:f6:35:51:cf:28:51:4e:a8:c9:47:d6:70:36:9c: 92:58:9f:f5:82:48:ea:f5:0c:12:fa:43:1e:58:1d:d5:14:d2: 4d:f0:5a:34:24:70:e5:2f:f3:68:22:04:e1:1b:3f:b5:99:4e: 16:5e:f6:06:7e:24:f3:4a:4a:42:ab:6a:18:48:86:8c:ae:f8: 6e:c9:e7:c5:e5:b0:cf:40:d4:ae:ed:bd:14:0e:ad:01:6b:b4: b7:58:0f:fe:a1:a0:8a:f1:d2:f1:6e:ca:03:2a:cb:67:b8:df: 50:31:66:9c:f5:6b:58:bf:64:0c:aa:04:4d:e8:6b:25:7b:39: 94:e8:74:85 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yNTA4MjIw ODUxNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY3QjNCQUVFNUIwNkM3 NzY4MDQ0ODE1OEY1RTNCMUJFMTQ0MkMxQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0dwnTmD2Pi9hDZ6SSfINgRlkfxYGyVNQmLtE7ZA9o3V/FS+c+ 1KCVoUA++SLmHugYVk8iPXEmUgckaa2uHAtie5rdrcYQ9IPNv9NyXxnA9981TTPu sGnuuqxzz1Y8fiCSoemD43ZuoxEEJaPBopnIAmuKod217sFAdQJCPCP0JWW2Z0W6 HHF5SWUfMkDl35sSXAd1lOFN29FdycNjjWm8w8qWz49bfS8ubEnRiF3tJhf9f6ge hk8ZhEbCLj27Sw9XB1HjQPMtSlf9BP9cjtuuEzUvqbb860ry9VppJjPKbwrFBG1w 5sWF3I3xBuaogq3F+9wr5vXq+piVR/cqIRXBAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZ7O67lsGx3aARIFY9eOxvhRCwakwHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw 5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvWjdPNjdsc0d4M2FBUklG WTllT3h2aFJDd2FrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQF5MAwDQYJKoZIhvcNAQELBQADggEBAIhP1Dqk8Jf2sVNosn1NGIZbVaon4UPB oe5z4ZxA5wjQ8NYumTN9lBBRkDbzGJNZxtWIZUcDjaBDNYv9wUYi+apz5ZFRpmRi 4YjdI3RDerPcYGUSIM+b9RYWOK0InFJAPJa7d0ys9hfbsGNxKtSFBiOA4GeZ0w+a dW3ETy60NeSl20f2NVHPKFFOqMlH1nA2nJJYn/WCSOr1DBL6Qx5YHdUU0k3wWjQk cOUv82giBOEbP7WZThZe9gZ+JPNKSkKrahhIhoyu+G7J58XlsM9A1K7tvRQOrQFr tLdYD/6hoIrx0vFuygMqy2e431AxZpz1a1i/ZAyqBE3oayV7OZTodIU= -----END CERTIFICATE-----Generated at Sun Aug 24 16:15:27 2025 by rpki-client