$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/gNxDmGuc2PEXi9OG_BfHv2_q2sM.roa File: gNxDmGuc2PEXi9OG_BfHv2_q2sM.roa (raw, json) Hash identifier: 5seE7nbY8E8X+eQ6IkxdxFGQ4ameURjyy29bJ/nfaV0= Subject key identifier: 80:DC:43:98:6B:9C:D8:F1:17:8B:D3:86:FC:17:C7:BF:6F:EA:DA:C3 Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Certificate serial: 0B03 Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/gNxDmGuc2PEXi9OG_BfHv2_q2sM.roa Signing time: Fri 22 Aug 2025 08:57:56 +0000 ROA not before: Fri 22 Aug 2025 08:57:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131674 IP address blocks: 2405:b8c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Validity Not Before: Aug 22 08:57:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=80DC43986B9CD8F1178BD386FC17C7BF6FEADAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:ca:ad:42:e0:02:8f:98:3a:fa:80:7e:87: 18:dc:c7:0d:87:98:81:39:1a:b7:12:1e:c6:16:14: 71:10:33:af:95:02:54:4f:80:8e:84:9b:d4:bd:13: 4a:dd:8a:8b:cf:d5:1c:97:5f:c4:47:51:2e:53:cf: 04:da:fc:4c:99:c8:37:ba:3d:fa:91:88:4a:cc:0f: 61:e9:63:4e:12:e0:f0:ca:2f:cb:d7:df:58:3d:02: 8d:80:8e:73:bd:02:95:bf:35:58:78:b2:a8:56:32: 31:b7:a5:69:b0:e3:ed:59:be:35:aa:09:84:96:67: a1:60:e1:36:94:5e:ac:6d:b5:82:da:7a:5f:49:56: 2e:cc:8b:e2:c0:8e:3f:7c:6b:30:d8:06:1a:32:3f: b9:60:5b:89:9c:04:73:d2:6b:df:6c:38:6e:d0:af: 4c:55:b1:e0:73:a5:c1:26:3d:70:bc:ec:3e:a6:8c: e8:19:e2:83:4c:e2:cd:d8:06:9d:de:af:bf:cc:3e: be:56:a4:c3:e0:14:e4:b8:f6:34:6a:ab:18:bc:ea: e6:09:91:b5:fc:44:22:04:68:a0:1d:be:fc:32:4c: 46:be:b9:9a:1b:37:8a:bc:ee:db:4b:83:43:ac:a7: 2c:ce:31:87:9a:ee:76:e6:f0:43:ae:55:54:f5:de: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DC:43:98:6B:9C:D8:F1:17:8B:D3:86:FC:17:C7:BF:6F:EA:DA:C3 X509v3 Authority Key Identifier: keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/gNxDmGuc2PEXi9OG_BfHv2_q2sM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption 63:8b:e7:8a:ff:9d:00:04:00:cc:ae:23:46:e7:7b:69:6a:dc: 8b:47:9d:0d:ea:54:28:20:4a:07:e9:22:bb:ec:30:bb:66:8f: c3:a6:23:a1:23:39:4b:c1:a0:42:5f:46:64:5a:56:4b:2a:69: d8:50:58:eb:3e:e8:3a:28:0d:df:7d:e8:87:a4:fa:ae:df:09: 7f:e1:5f:9d:e3:99:f0:15:3b:74:8b:54:32:1a:f7:b0:71:90: 8b:6a:5a:f9:50:7e:04:ed:94:48:73:f5:ec:a1:b4:49:c7:0a: 28:9c:10:a5:63:36:9e:2c:ae:b4:77:9f:0d:c3:ac:d2:87:21: 65:4f:30:8d:2d:fe:eb:7c:53:f5:e3:fa:5d:bb:ac:94:64:53: ad:35:ef:bd:7d:b4:8f:b2:90:d9:c2:9a:e1:9d:69:24:41:93: b9:75:14:9b:6f:fd:3b:78:2d:c5:e0:26:23:71:a3:e7:74:d8: eb:82:cf:61:c4:89:08:b5:5f:89:b9:b3:dd:02:9b:fc:ed:54: 09:31:1b:90:39:9a:12:f5:42:68:61:92:6d:36:25:3b:15:d5: 1f:e1:ae:ac:ae:8f:9b:24:cc:04:41:21:b6:a4:7b:b4:90:49: 0e:b6:20:3d:bb:46:d1:14:ea:96:a8:86:6d:e2:2a:1f:d7:a0: 4e:d4:40:c9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUz OThDNTJDQzJBMDc5REE5MDE0ODIxMEFDODUzMjhDMTFCQkU5NjAeFw0yNTA4MjIw ODU3NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwREM0Mzk4NkI5Q0Q4 RjExNzhCRDM4NkZDMTdDN0JGNkZFQURBQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQQcqtQuACj5g6+oB+hxjcxw2HmIE5GrcSHsYWFHEQM6+VAlRP gI6Em9S9E0rdiovP1RyXX8RHUS5TzwTa/EyZyDe6PfqRiErMD2HpY04S4PDKL8vX 31g9Ao2AjnO9ApW/NVh4sqhWMjG3pWmw4+1ZvjWqCYSWZ6Fg4TaUXqxttYLael9J Vi7Mi+LAjj98azDYBhoyP7lgW4mcBHPSa99sOG7Qr0xVseBzpcEmPXC87D6mjOgZ 4oNM4s3YBp3er7/MPr5WpMPgFOS49jRqqxi86uYJkbX8RCIEaKAdvvwyTEa+uZob N4q87ttLg0OspyzOMYea7nbm8EOuVVT13k1lAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUgNxDmGuc2PEXi9OG/BfHv2/q2sMwHwYDVR0jBBgwFoAUbjmMUswqB52pAUgh CshTKMEbvpYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTlJJ Q0gvYmptTVVzd3FCNTJwQVVnaENzaFRLTUVidnBZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iam1NVXN3cUI1MnBBVWdoQ3NoVEtNRWJ2cFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOUklDSC9nTnhEbUd1YzJQRVhp OU9HX0JmSHYyX3Eyc00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAW4wDANBgkqhkiG9w0BAQsFAAOCAQEAY4vniv+dAAQAzK4jRud7aWrci0ed DepUKCBKB+kiu+wwu2aPw6YjoSM5S8GgQl9GZFpWSypp2FBY6z7oOigN333oh6T6 rt8Jf+FfneOZ8BU7dItUMhr3sHGQi2pa+VB+BO2USHP17KG0SccKKJwQpWM2niyu tHefDcOs0ochZU8wjS3+63xT9eP6XbuslGRTrTXvvX20j7KQ2cKa4Z1pJEGTuXUU m2/9O3gtxeAmI3Gj53TY64LPYcSJCLVfibmz3QKb/O1UCTEbkDmaEvVCaGGSbTYl OxXVH+GurK6PmyTMBEEhtqR7tJBJDrYgPbtG0RTqlqiGbeIqH9egTtRAyQ== -----END CERTIFICATE-----Generated at Sun Aug 24 11:14:28 2025 by rpki-client