$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/pXNunNpANDlwCz6XpDF21Nw8Fmg.roa File: pXNunNpANDlwCz6XpDF21Nw8Fmg.roa (raw, json) Hash identifier: aiy97eVFPJDtWAsYsrKI0GsiFPZWmOtUm2TQ9Qpe3fA= Subject key identifier: A5:73:6E:9C:DA:40:34:39:70:0B:3E:97:A4:31:76:D4:DC:3C:16:68 Certificate issuer: /CN=063F818DACB171B835415ABD278993922F3CDC5D Certificate serial: 0294 Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/pXNunNpANDlwCz6XpDF21Nw8Fmg.roa Signing time: Fri 22 Aug 2025 09:02:12 +0000 ROA not before: Fri 22 Aug 2025 09:02:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 2401:a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D Validity Not Before: Aug 22 09:02:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A5736E9CDA403439700B3E97A43176D4DC3C1668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:cd:3b:cd:a5:27:df:72:29:d1:65:2b:e2: 71:ae:bb:22:ad:48:ec:61:5e:b4:e8:16:4a:68:86: 0b:15:cd:65:fb:d0:07:15:9a:9c:c5:20:56:36:81: fa:2c:33:54:63:d0:84:2c:b3:71:19:b7:d0:12:60: 4d:de:7d:c3:b7:bc:8c:0e:2c:54:ac:9f:6b:8e:99: bf:ea:08:4e:2d:84:05:06:29:86:1d:13:5d:32:4e: dd:be:c8:5b:90:05:81:be:32:98:f3:a1:68:2d:41: 5e:39:ac:f5:0d:aa:13:c3:7d:47:44:6b:fb:cd:fe: e7:1d:87:d6:94:38:a7:bd:02:cf:81:53:e3:43:83: cc:1e:66:41:e5:3d:53:c8:bf:85:55:b4:10:97:80: 54:db:43:65:66:08:72:f2:d4:ab:58:bf:6e:f2:fc: bc:40:65:c4:f8:cb:54:44:5e:1b:53:2b:a7:83:c7: 51:fa:65:bc:9b:f2:2d:35:ba:a9:85:60:ea:34:e2: 4d:cf:cb:5b:bf:3c:e5:de:ed:1e:51:51:9b:3b:7d: c8:5e:27:73:73:08:41:1c:1e:a7:4e:e3:5e:75:18: cf:e1:f2:1a:b4:d7:a5:75:f0:bd:c7:36:26:ed:50: f4:7a:af:61:81:cd:26:50:a7:17:c9:14:57:17:0b: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:73:6E:9C:DA:40:34:39:70:0B:3E:97:A4:31:76:D4:DC:3C:16:68 X509v3 Authority Key Identifier: keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/pXNunNpANDlwCz6XpDF21Nw8Fmg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:a60::/32 Signature Algorithm: sha256WithRSAEncryption 5b:96:5a:82:da:d5:87:8d:7e:31:85:9a:30:c4:35:73:f8:da: 75:af:e0:d3:b5:92:ad:7b:2a:7c:65:d7:6b:83:c8:85:ba:92: 03:4c:96:48:2e:22:b7:7c:8d:6b:c9:1f:9e:04:4b:8f:d8:b9: 4a:e3:5c:ba:cf:e6:ab:fb:78:98:53:b1:d1:5c:02:6a:a0:82: 68:d9:dd:99:82:28:34:71:c2:38:cf:d8:2b:61:94:ad:87:ca: 9a:ea:f8:7a:ad:03:e5:12:1e:16:39:09:0a:36:56:8e:4b:ec: f4:0b:5a:2b:1d:7e:c6:74:5e:e9:65:ed:ba:70:55:2c:6d:6c: 60:16:fc:5b:36:5b:18:45:a1:74:ed:a6:35:ba:b1:51:9b:1e: 81:96:ac:86:b2:02:01:23:fe:ae:5f:15:c4:df:a7:ec:6e:9b: 0c:3d:79:07:ba:29:91:62:59:b7:5c:17:49:d4:b5:6f:8a:57: 1d:bc:7c:6f:48:72:92:68:ba:51:db:e6:be:b4:9f:6c:ac:91: f9:41:f1:2f:17:af:30:e2:2e:85:03:7c:e6:1d:ce:7b:ad:47: 43:97:91:0c:76:19:e8:1b:f3:74:ec:04:ae:0e:89:9b:81:10: ed:19:48:fa:ca:ff:d4:ca:ca:cc:c1:f1:d6:80:b0:ec:79:f9: e3:e0:c2:35 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICApQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYz RjgxOERBQ0IxNzFCODM1NDE1QUJEMjc4OTkzOTIyRjNDREM1RDAeFw0yNTA4MjIw OTAyMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1NzM2RTlDREE0MDM0 Mzk3MDBCM0U5N0E0MzE3NkQ0REMzQzE2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu/M07zaUn33Ip0WUr4nGuuyKtSOxhXrToFkpohgsVzWX70AcV mpzFIFY2gfosM1Rj0IQss3EZt9ASYE3efcO3vIwOLFSsn2uOmb/qCE4thAUGKYYd E10yTt2+yFuQBYG+MpjzoWgtQV45rPUNqhPDfUdEa/vN/ucdh9aUOKe9As+BU+ND g8weZkHlPVPIv4VVtBCXgFTbQ2VmCHLy1KtYv27y/LxAZcT4y1REXhtTK6eDx1H6 Zbyb8i01uqmFYOo04k3Py1u/POXe7R5RUZs7fcheJ3NzCEEcHqdO4151GM/h8hq0 16V18L3HNibtUPR6r2GBzSZQpxfJFFcXC9f/AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUpXNunNpANDlwCz6XpDF21Nw8FmgwHwYDVR0jBBgwFoAUBj+Bjayxcbg1QVq9 J4mTki883F0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVERDL0Jq LUJqYXl4Y2JnMVFWcTlKNG1Ua2k4ODNGMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QmotQmpheXhjYmcxUVZxOUo0bVRraTg4M0YwLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVERDL3BYTnVuTnBBTkRsd0N6NlhwREYyMU53 OEZtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAQpgMA0G CSqGSIb3DQEBCwUAA4IBAQBbllqC2tWHjX4xhZowxDVz+Np1r+DTtZKteyp8Zddr g8iFupIDTJZILiK3fI1ryR+eBEuP2LlK41y6z+ar+3iYU7HRXAJqoIJo2d2Zgig0 ccI4z9grYZSth8qa6vh6rQPlEh4WOQkKNlaOS+z0C1orHX7GdF7pZe26cFUsbWxg FvxbNlsYRaF07aY1urFRmx6BlqyGsgIBI/6uXxXE36fsbpsMPXkHuimRYlm3XBdJ 1LVvilcdvHxvSHKSaLpR2+a+tJ9srJH5QfEvF68w4i6FA3zmHc57rUdDl5EMdhno G/N07ASuDombgRDtGUj6yv/UysrMwfHWgLDsefnj4MI1 -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:47 2025 by rpki-client