$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa File: w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa (raw, json) Hash identifier: QYwPy/H598La7J5MB1HqoJS0u7dDO+OJwY1gvU8qT5A= Subject key identifier: C3:5D:17:CE:6D:D0:9D:3D:1A:8C:C2:C3:98:13:84:22:89:CD:F1:1A Certificate issuer: /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Certificate serial: 0317 Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa Signing time: Fri 22 Aug 2025 09:01:33 +0000 ROA not before: Fri 22 Aug 2025 09:01:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131657 IP address blocks: 2400:c9a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Validity Not Before: Aug 22 09:01:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C35D17CE6DD09D3D1A8CC2C39813842289CDF11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:19:e9:49:26:8c:0e:63:50:35:b3:a7:65: 78:c7:fd:1c:85:4f:45:cf:d2:cf:bd:8f:42:cd:ce: ae:2a:a8:dd:f5:5c:82:d3:b4:bc:09:8b:30:97:c0: a7:94:f0:9f:20:0c:ea:d3:e7:87:bc:9b:54:96:75: 45:67:6e:75:dc:27:aa:ad:73:47:46:32:31:fe:15: 0f:6c:18:af:7a:6d:3f:5b:66:a5:4a:eb:1d:3a:0f: 91:2a:65:9c:03:f1:78:15:2b:33:87:3b:b9:df:50: ce:f2:fc:cf:8c:4b:62:22:95:df:25:d1:5d:df:34: 1d:e0:d3:e4:12:dd:4b:f7:62:d0:5f:90:aa:dc:57: cb:a7:f9:d3:0a:de:e5:99:e7:16:37:80:82:6e:e7: 86:69:af:37:f3:71:0d:cc:fe:9a:7d:b8:3c:d3:d4: f1:3c:7c:5d:03:d3:09:9c:ac:9b:67:bc:73:41:63: b4:06:d1:39:7e:6f:d5:f3:e0:00:52:7f:70:e6:dc: 5f:16:78:52:02:31:1f:7e:4a:0b:b1:4e:0b:02:6a: 68:3b:f5:50:5c:c7:0a:36:66:25:13:25:cf:5a:ab: 7f:8d:01:78:6d:54:bf:0b:fc:5e:7a:e5:14:1d:ff: 30:8a:fb:ee:8e:54:a6:cc:13:b2:71:a4:4f:82:3e: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5D:17:CE:6D:D0:9D:3D:1A:8C:C2:C3:98:13:84:22:89:CD:F1:1A X509v3 Authority Key Identifier: keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:c9a0::/32 Signature Algorithm: sha256WithRSAEncryption 72:52:63:5e:1e:64:a2:24:ba:61:ae:3c:a5:c6:9d:49:b7:8d: 28:9b:9e:dc:32:d3:62:17:39:ee:8b:7b:5c:9e:c6:f8:45:b1: b5:f3:c3:a4:12:80:76:0b:42:26:00:1c:62:68:73:71:ce:92: 4b:57:f3:fc:14:1b:bd:7d:45:6a:85:ba:ad:ca:07:30:73:0f: fd:60:49:d8:3d:e4:78:37:18:74:ad:d9:7b:f6:8c:ec:94:be: 48:a1:04:75:fe:4e:ce:67:ed:3f:9d:3c:76:c1:ec:c4:6a:1e: 05:ba:cb:26:09:d8:72:e9:be:78:e9:fa:f0:01:32:af:c6:cb: 77:1b:21:b8:9a:bf:d1:d3:c7:42:d8:57:01:f5:b8:e6:a2:72: 3c:ad:03:8e:34:de:92:7a:70:2a:77:d1:29:dc:5a:ad:e5:65: a0:69:56:db:41:03:b7:58:e1:57:d6:31:2f:36:3a:6a:3b:2e: 3e:19:70:2b:38:96:fb:82:02:69:f9:8c:d9:82:a6:18:60:47: 8c:15:0b:3c:8c:f9:2d:6d:8e:74:34:eb:00:a9:ca:b8:b4:26: 1e:87:fa:61:cc:d2:88:9a:75:bf:54:c5:20:44:4a:64:f7:e5: 7e:b4:cb:33:69:b1:37:9f:ff:30:d9:93:00:98:a5:74:5b:5e: 84:37:54:c8 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJG Q0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJEMzAeFw0yNTA4MjIw OTAxMzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMzNUQxN0NFNkREMDlE M0QxQThDQzJDMzk4MTM4NDIyODlDREYxMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC95BnpSSaMDmNQNbOnZXjH/RyFT0XP0s+9j0LNzq4qqN31XILT tLwJizCXwKeU8J8gDOrT54e8m1SWdUVnbnXcJ6qtc0dGMjH+FQ9sGK96bT9bZqVK 6x06D5EqZZwD8XgVKzOHO7nfUM7y/M+MS2Iild8l0V3fNB3g0+QS3Uv3YtBfkKrc V8un+dMK3uWZ5xY3gIJu54ZprzfzcQ3M/pp9uDzT1PE8fF0D0wmcrJtnvHNBY7QG 0Tl+b9Xz4ABSf3Dm3F8WeFICMR9+SguxTgsCamg79VBcxwo2ZiUTJc9aq3+NAXht VL8L/F565RQd/zCK++6OVKbME7JxpE+CPiYDAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUw10Xzm3QnT0ajMLDmBOEIonN8RowHwYDVR0jBBgwFoAUm/z6ohBnQrLAmeP0 wqUEKOXNYtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERS SVZFTi9tX3o2b2hCblFyTEFtZVAwd3FVRUtPWE5ZdE0uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RFQ0hEUklWRU4vdzEwWHptM1Fu VDBhak1MRG1CT0VJb25OOFJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAyaAwDQYJKoZIhvcNAQELBQADggEBAHJSY14eZKIkumGuPKXGnUm3 jSibntwy02IXOe6Le1yexvhFsbXzw6QSgHYLQiYAHGJoc3HOkktX8/wUG719RWqF uq3KBzBzD/1gSdg95Hg3GHSt2Xv2jOyUvkihBHX+Ts5n7T+dPHbB7MRqHgW6yyYJ 2HLpvnjp+vABMq/Gy3cbIbiav9HTx0LYVwH1uOaicjytA4403pJ6cCp30SncWq3l ZaBpVttBA7dY4VfWMS82Omo7Lj4ZcCs4lvuCAmn5jNmCphhgR4wVCzyM+S1tjnQ0 6wCpyri0Jh6H+mHM0oiadb9UxSBESmT35X60yzNpsTef/zDZkwCYpXRbXoQ3VMg= -----END CERTIFICATE-----Generated at Sun Aug 24 09:55:43 2025 by rpki-client