$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/hAzY-pybb1dGB3o-1e1xlmXJP9c.roa File: hAzY-pybb1dGB3o-1e1xlmXJP9c.roa (raw, json) Hash identifier: WS4KvwPj8b41OqRwrlpCX/OtWshSsnuTEQmpf1ExUhs= Subject key identifier: 84:0C:D8:FA:9C:9B:6F:57:46:07:7A:3E:D5:ED:71:96:65:C9:3F:D7 Certificate issuer: /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7 Certificate serial: 07A5 Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/hAzY-pybb1dGB3o-1e1xlmXJP9c.roa Signing time: Fri 22 Aug 2025 08:55:17 +0000 ROA not before: Fri 22 Aug 2025 08:55:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 2406:3040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7 Validity Not Before: Aug 22 08:55:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=840CD8FA9C9B6F5746077A3ED5ED719665C93FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:30:78:30:83:9e:25:24:53:97:f7:e9:64: 2b:93:0a:bb:98:f9:3c:48:0c:fa:2e:30:5e:f6:d8: 25:03:2f:32:22:3e:7d:aa:cc:21:aa:20:67:fc:f8: 0c:07:f6:34:43:2b:dc:de:eb:c6:bf:16:a7:c0:36: 04:e9:c0:9d:85:17:aa:20:98:80:7f:b2:d9:4c:e7: ca:31:04:97:48:ee:fc:fe:e8:d0:37:77:49:34:cc: 5f:71:4b:c8:4e:1c:65:7e:24:06:a5:70:4f:e0:3e: 78:e7:6c:e0:1a:64:2b:f3:4a:69:3f:62:f0:f7:01: 95:14:dc:54:9a:30:12:62:89:d0:88:b4:64:83:70: 02:75:0e:0c:5b:71:e4:ca:f2:3f:2f:58:7c:85:bd: fa:aa:63:b7:f4:f1:75:ba:83:82:d8:3b:91:ae:2f: 16:ce:35:8f:11:1d:46:8e:07:18:b6:6c:42:ad:f3: 73:e5:53:f2:fe:44:91:ec:28:dc:d0:15:60:d3:ca: 4c:a9:06:6e:71:a3:26:59:d3:d9:81:fe:c3:2b:99: 08:79:f8:19:9c:01:8c:0e:56:49:38:48:a4:8f:9e: b2:9c:6f:54:96:4e:79:28:7d:2e:dd:82:a8:85:b9: 6e:05:6a:8d:55:50:2c:09:46:b0:ef:34:1e:91:4e: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0C:D8:FA:9C:9B:6F:57:46:07:7A:3E:D5:ED:71:96:65:C9:3F:D7 X509v3 Authority Key Identifier: keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/hAzY-pybb1dGB3o-1e1xlmXJP9c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3040::/32 Signature Algorithm: sha256WithRSAEncryption 40:ac:f1:7e:9a:36:6a:92:03:21:94:57:bb:26:b5:47:a1:06: 04:8d:b9:1c:5d:55:ba:ba:3c:2a:3e:55:e0:59:e6:b3:aa:af: f8:97:1e:dd:b4:95:29:52:4c:a2:4b:0c:d8:86:0a:b4:ec:b1: 80:25:f8:ff:92:4f:47:e1:d0:f3:4f:e4:3e:7c:0f:dc:af:39: e9:5f:6c:ae:b1:fe:a9:98:cb:b5:4c:1e:37:81:5c:0d:75:db: d1:cf:3c:c8:57:ba:6a:95:ba:ba:fc:bf:8e:a5:0c:d3:31:54: d1:53:cf:ba:b1:16:96:07:a8:f2:f1:fb:16:2f:b3:92:03:48: 16:d2:3e:ad:00:01:aa:cc:3d:41:58:f3:e6:6a:81:7f:8a:ae: d7:f7:98:ed:00:b2:be:3d:7b:64:6a:95:a3:3e:85:85:4b:63: 1a:d3:22:bb:ea:fd:16:9f:87:a7:95:08:f2:fd:9b:3d:e1:fa: 92:13:44:c9:fa:b9:1b:90:6e:b4:58:1f:e6:5a:6a:a2:42:b8: e1:22:f4:e3:11:30:a9:af:ac:51:21:56:10:6a:9c:4a:92:b1: fd:73:b9:aa:d1:22:81:1b:ab:48:c5:4a:b5:49:27:a6:cd:de: 3a:f6:25:51:38:c6:dd:56:42:54:66:ba:68:66:74:cc:be:3e: 09:1b:b3:96 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjI4 MzlCRjdBNkM2QjE3RTdDRkNCMzczNEEzNkMwRTk4QzM3QTFCNzAeFw0yNTA4MjIw ODU1MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg0MENEOEZBOUM5QjZG NTc0NjA3N0EzRUQ1RUQ3MTk2NjVDOTNGRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHvTB4MIOeJSRTl/fpZCuTCruY+TxIDPouMF722CUDLzIiPn2q zCGqIGf8+AwH9jRDK9ze68a/FqfANgTpwJ2FF6ogmIB/stlM58oxBJdI7vz+6NA3 d0k0zF9xS8hOHGV+JAalcE/gPnjnbOAaZCvzSmk/YvD3AZUU3FSaMBJiidCItGSD cAJ1DgxbceTK8j8vWHyFvfqqY7f08XW6g4LYO5GuLxbONY8RHUaOBxi2bEKt83Pl U/L+RJHsKNzQFWDTykypBm5xoyZZ09mB/sMrmQh5+BmcAYwOVkk4SKSPnrKcb1SW TnkofS7dgqiFuW4Fao1VUCwJRrDvNB6RTlTNAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUhAzY+pybb1dGB3o+1e1xlmXJP9cwHwYDVR0jBBgwFoAUsoOb96bGsX58/LNz SjbA6Yw3obcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1VNQVRS QS9zb09iOTZiR3NYNThfTE56U2piQTZZdzNvYmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3NvT2I5NmJHc1g1OF9MTnpTamJBNll3M29iYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NVTUFUUkEvaEF6WS1weWJiMWRHQjNv LTFlMXhsbVhKUDljLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQGMEAwDQYJKoZIhvcNAQELBQADggEBAECs8X6aNmqSAyGUV7smtUehBgSNuRxd Vbq6PCo+VeBZ5rOqr/iXHt20lSlSTKJLDNiGCrTssYAl+P+ST0fh0PNP5D58D9yv OelfbK6x/qmYy7VMHjeBXA1129HPPMhXumqVurr8v46lDNMxVNFTz7qxFpYHqPLx +xYvs5IDSBbSPq0AAarMPUFY8+ZqgX+Krtf3mO0Asr49e2RqlaM+hYVLYxrTIrvq /Rafh6eVCPL9mz3h+pITRMn6uRuQbrRYH+ZaaqJCuOEi9OMRMKmvrFEhVhBqnEqS sf1zuarRIoEbq0jFSrVJJ6bN3jr2JVE4xt1WQlRmumhmdMy+Pgkbs5Y= -----END CERTIFICATE-----Generated at Sun Aug 24 09:39:38 2025 by rpki-client