$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/3UBhVhb0nL1VCV8ooQyBq4whqTw.roa File: 3UBhVhb0nL1VCV8ooQyBq4whqTw.roa (raw, json) Hash identifier: ZY1+G8RTYLNxd2us2334hcSu/RxuO0OiETFwTEN1i64= Subject key identifier: DD:40:61:56:16:F4:9C:BD:55:09:5F:28:A1:0C:81:AB:8C:21:A9:3C Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Certificate serial: 0D6E Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/3UBhVhb0nL1VCV8ooQyBq4whqTw.roa Signing time: Fri 22 Aug 2025 08:44:24 +0000 ROA not before: Fri 22 Aug 2025 08:44:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17710 IP address blocks: 103.234.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Validity Not Before: Aug 22 08:44:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DD40615616F49CBD55095F28A10C81AB8C21A93C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:e6:3b:65:2f:2d:c7:84:d8:0c:e6:55:7c: a4:9b:ae:5c:54:1f:8b:d6:89:11:6f:16:c6:cb:c2: 29:22:7d:5c:a0:23:f7:ce:ba:7a:6d:d1:f9:2a:3f: 2c:59:40:aa:8a:1d:a5:ea:a2:23:e6:a5:17:c5:27: 9b:a7:46:c7:31:96:cf:08:2a:e1:6d:da:82:b6:6e: 35:11:88:56:5a:4b:8b:36:39:bc:5c:15:ba:bf:a7: e3:0f:2c:4b:d0:d6:8b:0f:89:f4:72:db:dd:b3:3e: 8f:23:a7:a2:bf:a1:e0:f3:43:5c:d5:e7:34:f0:9c: 67:7e:d9:3b:57:8b:40:e6:95:9f:5a:8d:73:88:40: ce:55:dc:d6:bd:41:88:83:6b:a0:4f:7e:e2:40:6c: 99:54:df:05:33:91:bd:dc:0b:9e:95:eb:a1:53:04: e7:07:a2:a1:56:36:2f:76:cc:1b:fd:e9:bd:79:d9: 64:f1:80:45:21:40:38:5b:0a:2b:54:b3:3b:ee:68: 66:92:4f:91:ed:22:58:8c:3d:40:f7:d4:18:ab:bc: d4:b2:8d:01:34:c7:c7:69:d6:66:5a:a6:b6:91:00: 2c:38:b7:21:0b:f6:8b:12:ee:3d:fa:91:55:a9:23: ca:c1:f5:81:d6:d7:31:c7:14:09:b1:a8:8c:98:28: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:40:61:56:16:F4:9C:BD:55:09:5F:28:A1:0C:81:AB:8C:21:A9:3C X509v3 Authority Key Identifier: keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/3UBhVhb0nL1VCV8ooQyBq4whqTw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.81.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0b:81:0e:85:cf:eb:02:ca:2e:2b:4f:a5:9b:10:32:f5:0d: 49:34:42:d5:1c:5e:37:91:a9:77:16:bb:5e:15:86:83:0e:cb: 78:ee:7e:03:a3:9a:a4:b6:9e:b0:0c:84:42:19:4b:cf:86:4f: 28:3d:ca:99:59:04:6d:e0:a6:b3:92:7d:81:63:9a:0f:1f:89: 4d:c6:f7:e8:e6:2f:e3:6c:fc:2f:a2:81:fd:09:f0:10:5d:2d: 8b:a1:1c:65:a5:e9:11:d9:22:ef:18:ae:cd:81:17:c1:5b:65: 4d:38:a6:b5:ad:cc:92:98:28:a5:cd:71:42:4e:55:df:fb:86: 92:52:d7:49:17:98:df:cf:2b:39:87:e3:00:35:f6:d7:49:80: ee:2c:16:8c:b7:d1:b0:a3:0e:4b:ca:3b:01:66:78:40:39:7d: 08:49:74:3b:eb:16:4f:7f:6c:18:ba:b5:33:34:ef:4a:f8:71: 89:a3:a4:f4:dd:bb:92:76:69:6b:b3:22:eb:46:2f:c5:71:ca: 17:87:4d:10:9e:ab:42:15:23:6b:a1:f9:7e:b5:e6:3b:58:e3: fc:08:8f:cc:61:47:e7:fd:3b:a9:94:77:7a:15:b0:dc:38:8e: a1:df:1f:ed:a7:65:9d:24:7b:ac:3b:a7:0e:31:f2:9e:b6:db: 45:72:f8:03 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3 OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yNTA4MjIw ODQ0MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERENDA2MTU2MTZGNDlD QkQ1NTA5NUYyOEExMEM4MUFCOEMyMUE5M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUouY7ZS8tx4TYDOZVfKSbrlxUH4vWiRFvFsbLwikifVygI/fO unpt0fkqPyxZQKqKHaXqoiPmpRfFJ5unRscxls8IKuFt2oK2bjURiFZaS4s2Obxc Fbq/p+MPLEvQ1osPifRy292zPo8jp6K/oeDzQ1zV5zTwnGd+2TtXi0DmlZ9ajXOI QM5V3Na9QYiDa6BPfuJAbJlU3wUzkb3cC56V66FTBOcHoqFWNi92zBv96b152WTx gEUhQDhbCitUszvuaGaST5HtIliMPUD31BirvNSyjQE0x8dp1mZapraRACw4tyEL 9osS7j36kVWpI8rB9YHW1zHHFAmxqIyYKOQBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU3UBhVhb0nL1VCV8ooQyBq4whqTwwHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVULzNVQmhWaGIwbkwxVkNWOG9v UXlCcTR3aHFUdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn 6lEwDQYJKoZIhvcNAQELBQADggEBAFwLgQ6Fz+sCyi4rT6WbEDL1DUk0QtUcXjeR qXcWu14VhoMOy3jufgOjmqS2nrAMhEIZS8+GTyg9yplZBG3gprOSfYFjmg8fiU3G 9+jmL+Ns/C+igf0J8BBdLYuhHGWl6RHZIu8Yrs2BF8FbZU04prWtzJKYKKXNcUJO Vd/7hpJS10kXmN/PKzmH4wA19tdJgO4sFoy30bCjDkvKOwFmeEA5fQhJdDvrFk9/ bBi6tTM070r4cYmjpPTdu5J2aWuzIutGL8VxyheHTRCeq0IVI2uh+X615jtY4/wI j8xhR+f9O6mUd3oVsNw4jqHfH+2nZZ0ke6w7pw4x8p6220Vy+AM= -----END CERTIFICATE-----Generated at Sun Aug 24 15:35:55 2025 by rpki-client