$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/WT6gTX3hIzq98DT6oT-twkl40XM.roa File: WT6gTX3hIzq98DT6oT-twkl40XM.roa (raw, json) Hash identifier: QCAJ/XbvXdIWcwBf6YklJkLxCRD1OR5vhKzhA0rDzGA= Subject key identifier: 59:3E:A0:4D:7D:E1:23:3A:BD:F0:34:FA:A1:3F:AD:C2:49:78:D1:73 Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Certificate serial: 0B00 Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/WT6gTX3hIzq98DT6oT-twkl40XM.roa Signing time: Fri 22 Aug 2025 08:57:55 +0000 ROA not before: Fri 22 Aug 2025 08:57:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131677 IP address blocks: 2405:b8c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Validity Not Before: Aug 22 08:57:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=593EA04D7DE1233ABDF034FAA13FADC24978D173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:38:09:24:f9:ff:6d:bc:85:36:46:bd:e5:8b: 45:2c:64:06:c1:7d:e5:8e:6b:2d:53:e6:30:f0:4e: 5c:43:2e:f5:ff:f4:4c:6c:dd:24:eb:23:3a:b1:b8: 3c:69:29:7d:d5:44:9f:4f:b4:f0:8d:99:c9:6d:1f: 22:3e:aa:f8:73:9e:b8:4f:33:aa:9a:96:6f:5f:23: d7:2b:20:2a:78:64:44:45:f5:d2:80:0c:9f:36:d9: da:c0:ac:b4:77:86:63:2c:71:34:f2:e6:d6:d0:91: ee:30:53:98:36:b3:e6:63:24:4a:90:e9:bc:0a:d2: 05:a6:60:a1:7a:73:db:ef:c7:f6:fd:85:29:1f:f8: 02:83:2c:d9:fb:9f:3e:ee:18:95:c8:a5:3c:74:7d: b0:3a:94:38:d6:52:01:ab:dc:30:b0:a6:98:e5:3c: b0:25:ce:cc:42:31:3f:78:28:96:ee:d4:50:01:75: 7b:7c:52:ca:39:bb:95:9b:73:71:1d:a8:bf:14:42: 79:e9:6c:9f:4b:36:db:d3:dc:35:9b:97:af:ec:a2: 8f:31:f6:09:73:7f:b4:fa:14:d3:62:8a:aa:1f:a9: 2a:ae:b7:79:83:82:9a:56:b9:35:af:ba:b1:5d:2d: 6d:0d:ff:2d:bb:d7:a1:62:fe:08:71:7d:bf:dd:5e: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3E:A0:4D:7D:E1:23:3A:BD:F0:34:FA:A1:3F:AD:C2:49:78:D1:73 X509v3 Authority Key Identifier: keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/WT6gTX3hIzq98DT6oT-twkl40XM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption b9:7d:15:63:cf:ad:36:97:16:22:d3:bc:75:9f:13:1e:7f:d8: 3f:cb:35:3e:62:cb:69:2f:4d:1b:f2:99:02:07:43:d7:02:a1: 48:9e:a1:98:fa:b6:e7:1b:9a:3d:40:f5:74:75:19:51:c2:4e: a5:94:0e:b3:85:a7:70:46:71:4e:85:cb:37:69:12:0f:3e:eb: 27:ca:15:a6:ff:67:f8:16:70:f9:d6:9f:08:a0:58:1c:0d:75: 9a:e4:44:18:81:e5:20:b3:04:23:3f:ea:97:04:f3:8a:61:80: a0:0a:5d:ba:f4:85:04:0e:0d:3f:a3:47:1c:d0:fd:f8:4e:40: 30:36:d3:42:d5:2b:79:af:5d:53:f1:d6:b3:5f:63:0a:6e:ad: 56:0c:8e:46:6a:1a:9e:cb:11:cd:84:80:a2:4f:45:0f:a5:29: 39:ea:b3:9d:6f:5d:a4:67:7a:e8:93:1c:31:8b:7e:af:41:68: 65:6a:e4:33:f0:67:68:53:2f:cb:da:78:ab:c5:92:a2:02:97: c9:62:2f:ac:c5:94:5a:68:10:ff:cd:f7:c4:c9:3f:0e:7d:c4: 93:ce:e5:db:d2:3d:87:7d:73:c5:62:6c:87:45:77:15:2e:f1: bb:e4:86:4c:d0:52:6c:29:dc:94:12:33:93:aa:06:cc:99:20: 19:c2:d5:66 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUz OThDNTJDQzJBMDc5REE5MDE0ODIxMEFDODUzMjhDMTFCQkU5NjAeFw0yNTA4MjIw ODU3NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5M0VBMDREN0RFMTIz M0FCREYwMzRGQUExM0ZBREMyNDk3OEQxNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoOAkk+f9tvIU2Rr3li0UsZAbBfeWOay1T5jDwTlxDLvX/9Exs 3STrIzqxuDxpKX3VRJ9PtPCNmcltHyI+qvhznrhPM6qalm9fI9crICp4ZERF9dKA DJ822drArLR3hmMscTTy5tbQke4wU5g2s+ZjJEqQ6bwK0gWmYKF6c9vvx/b9hSkf +AKDLNn7nz7uGJXIpTx0fbA6lDjWUgGr3DCwppjlPLAlzsxCMT94KJbu1FABdXt8 Uso5u5Wbc3EdqL8UQnnpbJ9LNtvT3DWbl6/soo8x9glzf7T6FNNiiqofqSqut3mD gppWuTWvurFdLW0N/y2716Fi/ghxfb/dXmsRAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUWT6gTX3hIzq98DT6oT+twkl40XMwHwYDVR0jBBgwFoAUbjmMUswqB52pAUgh CshTKMEbvpYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTlJJ Q0gvYmptTVVzd3FCNTJwQVVnaENzaFRLTUVidnBZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iam1NVXN3cUI1MnBBVWdoQ3NoVEtNRWJ2cFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOUklDSC9XVDZnVFgzaEl6cTk4 RFQ2b1QtdHdrbDQwWE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAW4wDANBgkqhkiG9w0BAQsFAAOCAQEAuX0VY8+tNpcWItO8dZ8THn/YP8s1 PmLLaS9NG/KZAgdD1wKhSJ6hmPq25xuaPUD1dHUZUcJOpZQOs4WncEZxToXLN2kS Dz7rJ8oVpv9n+BZw+dafCKBYHA11muREGIHlILMEIz/qlwTzimGAoApduvSFBA4N P6NHHND9+E5AMDbTQtUrea9dU/HWs19jCm6tVgyORmoanssRzYSAok9FD6UpOeqz nW9dpGd66JMcMYt+r0FoZWrkM/BnaFMvy9p4q8WSogKXyWIvrMWUWmgQ/833xMk/ Dn3Ek87l29I9h31zxWJsh0V3FS7xu+SGTNBSbCnclBIzk6oGzJkgGcLVZg== -----END CERTIFICATE-----Generated at Sun Aug 24 11:15:31 2025 by rpki-client