$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QISDA/8hpjA8jUWHTJ-XrRrIgVLenTo1I.roa File: 8hpjA8jUWHTJ-XrRrIgVLenTo1I.roa (raw, json) Hash identifier: 5xd0ZvP39RbAt2K0chW0V9e6/aVioqMYr7abYJ2trW0= Subject key identifier: F2:1A:63:03:C8:D4:58:74:C9:F9:7A:D1:AC:88:15:2D:E9:D3:A3:52 Certificate issuer: /CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7 Certificate serial: 01C5 Authority key identifier: 29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/8hpjA8jUWHTJ-XrRrIgVLenTo1I.roa Signing time: Thu 26 Mar 2026 07:45:55 +0000 ROA not before: Thu 26 Mar 2026 07:45:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131681 IP address blocks: 2402:ca0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7 Validity Not Before: Mar 26 07:45:55 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F21A6303C8D45874C9F97AD1AC88152DE9D3A352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:d3:02:98:d9:b1:89:d3:c0:b2:9c:b9:90: 5f:e1:55:ad:d9:b7:ed:1a:8a:19:a9:2c:18:38:c4: 68:0f:54:10:54:02:60:25:43:83:b4:51:da:19:1e: 86:f4:6b:18:f3:13:6e:ee:4a:fc:d2:18:98:f1:8b: d0:4c:e0:e9:74:29:a7:d9:8f:8a:cd:1d:c9:a1:29: 7b:83:4d:98:00:06:a9:d0:c0:22:be:62:00:0f:da: 99:15:ae:2c:f5:79:eb:c0:9b:23:0b:5f:5e:2d:1a: ff:77:f6:58:71:f8:4b:ba:07:d3:87:8f:8f:8f:b5: 9b:b5:60:c8:0e:b5:32:ba:e3:1d:ba:bd:b3:c0:ce: 73:e3:21:78:8d:34:fb:45:5e:6e:2c:af:31:5b:f9: 19:da:59:86:5c:40:d2:bd:a9:91:97:5f:38:3c:89: 59:2f:bc:67:f2:d0:ff:e0:cf:92:f6:63:f1:92:6f: 5a:e4:02:50:d2:a3:82:10:5a:34:0a:55:f8:dd:80: dc:ab:a4:19:25:5c:42:8b:d3:d4:b2:bc:ea:43:3d: ea:45:5e:df:5b:59:b1:9f:7d:4e:bc:a2:37:16:44: f7:0b:91:0f:15:34:50:8a:fe:bf:a9:b0:1c:47:a7: 05:ae:6f:7d:8f:56:24:c5:f4:62:33:ef:bb:fb:e0: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1A:63:03:C8:D4:58:74:C9:F9:7A:D1:AC:88:15:2D:E9:D3:A3:52 X509v3 Authority Key Identifier: keyid:29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/8hpjA8jUWHTJ-XrRrIgVLenTo1I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:ca0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:5a:a8:f7:80:f2:e7:c3:c5:86:9e:7f:1b:1b:c0:c5:f6:9f: 54:3e:10:86:a7:f2:42:2a:74:dc:bf:90:83:c7:08:92:a1:a6: ce:05:d6:fd:a6:e2:cb:51:f6:7d:93:7e:c2:a6:fc:0f:9e:c0: 89:e4:58:37:47:84:56:ea:86:2d:3c:bc:e6:14:bd:c4:a1:89: 94:ce:f7:fd:e1:41:74:11:a9:9f:e2:95:31:29:b4:57:d8:4a: 28:71:8a:b3:24:5e:4a:24:8f:98:c0:ea:8f:e6:f5:13:39:a0: 13:0e:c6:cf:2b:9a:e1:e3:99:a2:6f:62:9e:25:e3:96:ce:71: cd:74:c0:8d:c3:2e:8f:f8:22:88:4b:45:84:0e:8c:43:02:6d: ce:88:b5:18:9b:8f:00:95:0a:ee:dc:05:5c:ae:c5:15:41:19: 52:97:72:c2:9a:24:9b:00:f5:ab:92:32:3c:ed:f4:75:0a:f3: 0d:20:49:46:06:da:05:9f:16:59:83:1b:88:77:76:20:7e:67: ba:23:0f:d9:26:48:79:5c:d4:eb:98:bd:fc:71:d4:a2:e4:75: 61:6c:2d:43:cb:d7:29:e0:ab:41:5c:e7:d8:b5:ab:ec:03:ca: 7d:57:5d:15:b9:1d:ac:84:d4:e0:00:e9:b1:e5:dc:00:9d:30: 0f:0e:11:91 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkw MTdBNDIxNkNCN0FDMjU0MjJEOEYyQjZFQkRFMzk3OEMxNEJFNzAeFw0yNjAzMjYw NzQ1NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYyMUE2MzAzQzhENDU4 NzRDOUY5N0FEMUFDODgxNTJERTlEM0EzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcgNMCmNmxidPAspy5kF/hVa3Zt+0aihmpLBg4xGgPVBBUAmAl Q4O0UdoZHob0axjzE27uSvzSGJjxi9BM4Ol0KafZj4rNHcmhKXuDTZgABqnQwCK+ YgAP2pkVriz1eevAmyMLX14tGv939lhx+Eu6B9OHj4+PtZu1YMgOtTK64x26vbPA znPjIXiNNPtFXm4srzFb+RnaWYZcQNK9qZGXXzg8iVkvvGfy0P/gz5L2Y/GSb1rk AlDSo4IQWjQKVfjdgNyrpBklXEKL09SyvOpDPepFXt9bWbGffU68ojcWRPcLkQ8V NFCK/r+psBxHpwWub32PViTF9GIz77v74IePAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU8hpjA8jUWHTJ+XrRrIgVLenTo1IwHwYDVR0jBBgwFoAUKQF6QhbLesJUItjy tuveOXjBS+cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUUlTREEv S1FGNlFoYkxlc0pVSXRqeXR1dmVPWGpCUy1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9LUUY2UWhiTGVzSlVJdGp5dHV2ZU9YakJTLWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9RSVNEQS84aHBqQThqVVdIVEotWHJSckln VkxlblRvMUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIM oDANBgkqhkiG9w0BAQsFAAOCAQEAL1qo94Dy58PFhp5/GxvAxfafVD4QhqfyQip0 3L+Qg8cIkqGmzgXW/abiy1H2fZN+wqb8D57AieRYN0eEVuqGLTy85hS9xKGJlM73 /eFBdBGpn+KVMSm0V9hKKHGKsyReSiSPmMDqj+b1EzmgEw7Gzyua4eOZom9iniXj ls5xzXTAjcMuj/giiEtFhA6MQwJtzoi1GJuPAJUK7twFXK7FFUEZUpdywpokmwD1 q5IyPO30dQrzDSBJRgbaBZ8WWYMbiHd2IH5nuiMP2SZIeVzU65i9/HHUouR1YWwt Q8vXKeCrQVzn2LWr7APKfVddFbkdrITU4ADpseXcAJ0wDw4RkQ== -----END CERTIFICATE-----Generated at Fri Mar 27 03:36:08 2026 by rpki-client