$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa File: 0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa (raw, json) Hash identifier: kDVcdLKZ33TiF6qe2oThZ6b+hy94ppWeYcriObmSfJU= Subject key identifier: D1:1C:81:6F:66:56:97:E2:68:46:FC:21:9B:E6:92:19:AE:0F:84:FD Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0E62 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa Signing time: Fri 22 Aug 2025 08:56:28 +0000 ROA not before: Fri 22 Aug 2025 08:56:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 2402:2580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3682 (0xe62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 22 08:56:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D11C816F665697E26846FC219BE69219AE0F84FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:47:6e:19:8e:e0:4a:dd:82:5c:14:96:73: b2:fa:5a:3e:c5:96:72:35:e0:a1:9a:4a:84:0f:93: aa:b2:78:d5:25:61:0e:b4:f4:c7:fc:26:80:ca:79: 7b:1d:25:91:86:4b:7f:80:a8:86:16:30:3a:4d:ab: 59:6f:a6:22:e3:35:c4:5f:b2:04:c3:53:4d:82:63: f0:f6:bc:5c:59:5d:7b:9b:b8:6d:28:e2:9e:eb:e0: 2f:e7:7d:11:19:1d:0d:6a:f0:c1:23:66:a3:52:82: 38:16:3b:ca:c6:c5:28:1e:11:40:a0:de:04:0d:d8: fd:73:5d:cd:19:b3:d5:e9:1e:c9:6e:22:f1:31:7b: e2:c1:90:5b:e0:94:0a:60:32:bf:18:12:c8:d6:a2: d1:34:d6:10:54:d9:17:37:93:40:8e:02:7c:01:8b: e4:f0:ee:4d:26:9c:52:fe:af:5a:e2:09:7a:5e:b9: 1a:39:d4:c1:27:98:0d:96:1b:fc:15:1d:e4:ae:2c: 5a:37:38:e6:63:34:5c:28:4a:fd:7e:a5:90:71:50: dd:37:f3:82:1f:3f:63:fb:31:d2:89:32:52:f7:5c: 75:bc:fb:3b:b8:69:3d:35:d7:c6:0a:2b:fa:45:5f: 0b:77:f1:65:f6:fe:ae:8d:c4:a4:73:43:c0:83:88: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:81:6F:66:56:97:E2:68:46:FC:21:9B:E6:92:19:AE:0F:84:FD X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:2580::/32 Signature Algorithm: sha256WithRSAEncryption 24:34:c0:55:9b:43:89:2d:1d:00:95:4f:ba:25:44:1a:b4:a0: 64:f4:99:70:b8:05:64:bd:d6:43:40:d9:99:fa:b1:cf:56:45: 8b:a7:51:9a:41:10:d1:45:18:52:7c:34:90:36:a3:da:12:c2: 72:7a:76:b6:39:1d:15:b5:3d:83:08:25:0d:2b:37:d7:5e:52: 55:08:05:1f:cb:d8:d6:a1:aa:eb:ad:b8:84:ee:b6:2d:fa:58: 4a:f9:64:96:77:b5:3f:fb:ca:ba:16:2e:42:1f:f9:33:cb:83: 2f:f5:3e:5a:9b:29:bd:7d:3b:cd:00:9b:1a:01:aa:95:6f:6d: 29:03:b3:23:ea:03:e5:aa:0f:77:fc:86:04:a5:96:bd:4a:48: c4:25:73:29:88:f4:af:df:a2:3a:4e:f4:7b:d1:ab:6d:62:98: 92:a6:30:70:a5:3d:8b:44:12:e6:9d:57:d9:ef:05:ef:1a:fa: ff:1b:56:af:f9:d9:ba:6c:6c:de:02:b0:37:55:99:42:42:4d: 4d:8e:45:47:6c:c9:9d:24:fe:1a:54:42:e1:44:51:20:dc:76: 37:9f:b1:a6:39:d6:4b:74:0d:11:76:6f:0c:3e:e5:ad:f9:bc: 8f:70:05:12:01:3a:f5:70:f4:f0:7f:0f:1c:1d:8a:62:eb:be: 3c:fa:fa:d3 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw ODU2MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxMUM4MTZGNjY1Njk3 RTI2ODQ2RkMyMTlCRTY5MjE5QUUwRjg0RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLyEduGY7gSt2CXBSWc7L6Wj7FlnI14KGaSoQPk6qyeNUlYQ60 9Mf8JoDKeXsdJZGGS3+AqIYWMDpNq1lvpiLjNcRfsgTDU02CY/D2vFxZXXubuG0o 4p7r4C/nfREZHQ1q8MEjZqNSgjgWO8rGxSgeEUCg3gQN2P1zXc0Zs9XpHsluIvEx e+LBkFvglApgMr8YEsjWotE01hBU2Rc3k0COAnwBi+Tw7k0mnFL+r1riCXpeuRo5 1MEnmA2WG/wVHeSuLFo3OOZjNFwoSv1+pZBxUN0384IfP2P7MdKJMlL3XHW8+zu4 aT0118YKK/pFXwt38WX2/q6NxKRzQ8CDiM6DAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU0RyBb2ZWl+JoRvwhm+aSGa4PhP0wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS8wUnlCYjJaV2wtSm9SdndobS1h U0dhNFBoUDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIl gDANBgkqhkiG9w0BAQsFAAOCAQEAJDTAVZtDiS0dAJVPuiVEGrSgZPSZcLgFZL3W Q0DZmfqxz1ZFi6dRmkEQ0UUYUnw0kDaj2hLCcnp2tjkdFbU9gwglDSs3115SVQgF H8vY1qGq6624hO62LfpYSvlklne1P/vKuhYuQh/5M8uDL/U+WpspvX07zQCbGgGq lW9tKQOzI+oD5aoPd/yGBKWWvUpIxCVzKYj0r9+iOk70e9GrbWKYkqYwcKU9i0QS 5p1X2e8F7xr6/xtWr/nZumxs3gKwN1WZQkJNTY5FR2zJnST+GlRC4URRINx2N5+x pjnWS3QNEXZvDD7lrfm8j3AFEgE69XD08H8PHB2KYuu+PPr60w== -----END CERTIFICATE-----Generated at Sun Aug 24 07:42:30 2025 by rpki-client