$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/mAICm_NhhF8DHhGUqkO2H5WFmDI.roa File: mAICm_NhhF8DHhGUqkO2H5WFmDI.roa (raw, json) Hash identifier: h1adO+Y8fNzV9A16o5Euzc0Dvu3lLKXkTwllXDRw4J8= Subject key identifier: 98:02:02:9B:F3:61:84:5F:03:1E:11:94:AA:43:B6:1F:95:85:98:32 Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0DC6 Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/mAICm_NhhF8DHhGUqkO2H5WFmDI.roa Signing time: Fri 22 Aug 2025 08:55:19 +0000 ROA not before: Fri 22 Aug 2025 08:55:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131600 IP address blocks: 2403:a3c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3526 (0xdc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Aug 22 08:55:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9802029BF361845F031E1194AA43B61F95859832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:3d:6f:4c:33:7b:30:cd:90:f3:5b:d7:66: 7a:4c:8b:72:1f:fe:44:4b:48:af:94:5e:4c:fd:b6: bd:4e:74:78:40:d5:dd:95:62:cc:6e:29:7f:e7:49: 14:81:0c:22:64:7d:ce:19:14:b3:bb:e9:7a:b1:fb: 55:2d:66:38:00:3e:31:b5:71:a1:b5:5c:99:b2:12: ee:f7:1e:33:42:9e:09:96:ed:85:61:2d:fd:60:84: d4:63:d3:19:d8:92:85:ee:8d:a0:a6:4b:31:3f:09: bb:0d:8c:e6:d4:33:d9:28:09:4f:0b:b1:98:d2:e6: eb:89:78:23:52:a2:95:28:ea:f3:41:4c:72:b0:f9: ee:e3:00:f2:32:0a:cc:0d:fd:c4:40:79:9d:50:f6: cc:88:2c:1c:1c:ca:59:79:5a:12:81:69:97:7d:8a: 3e:9a:cb:38:da:b9:43:1a:ba:99:41:d0:82:2e:0d: 0d:6f:32:be:70:ee:12:ef:a5:c1:2f:7c:9d:e7:e6: 5c:0c:fa:e4:62:bb:f5:a5:39:e2:f0:f2:02:e3:95: 49:cf:7c:5e:66:c7:cf:c6:5c:55:b1:86:f3:70:a5: 44:9c:ed:84:e0:8a:a9:2a:f4:66:f7:4e:02:2c:e6: e0:94:59:cd:7b:0c:4c:9c:6e:c9:ba:68:02:6d:e8: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:02:02:9B:F3:61:84:5F:03:1E:11:94:AA:43:B6:1F:95:85:98:32 X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/mAICm_NhhF8DHhGUqkO2H5WFmDI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:a3c0::/32 Signature Algorithm: sha256WithRSAEncryption 40:eb:d3:73:e3:ca:82:8d:5c:d0:e1:25:11:25:82:ff:d8:12: c2:29:de:c8:14:94:2f:f1:3e:96:bc:0f:0d:43:77:75:cf:66: 61:f4:27:b0:1c:aa:82:fc:18:bd:e0:16:e3:0d:74:19:82:1f: a5:7d:87:8d:b0:8a:f9:18:2b:18:0b:1f:75:4e:77:83:0b:96: 1a:83:56:05:7e:89:08:fc:61:b1:86:9e:fc:f1:cb:2c:6a:fa: c9:e5:bb:aa:5e:e3:3b:1a:56:b3:0f:d1:c4:6f:34:3a:df:56: 90:1b:af:fc:c9:c6:b7:64:23:4d:d9:4a:eb:bb:b2:7e:54:21: 90:04:c7:67:06:00:6c:64:ec:65:0f:cc:f8:80:8f:56:81:58: db:09:f9:97:42:55:7c:4b:e6:d3:39:20:b2:38:03:77:f6:64: a2:0d:de:34:74:7c:17:07:e9:dd:ca:eb:b0:ea:76:81:9f:86: 78:92:36:5b:99:f5:ff:10:91:c8:45:c8:3a:4b:4e:0a:46:5d: 76:48:40:2b:91:ae:74:5b:0f:4b:95:68:a7:1a:68:64:08:5f: 3d:ce:65:0f:0f:6c:24:ed:b5:49:b8:c4:34:30:c0:9d:d5:5c: a0:18:77:98:2a:05:85:a9:4f:92:bc:2b:21:22:9a:72:c6:f8: 77:bd:26:fb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTA4MjIw ODU1MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk4MDIwMjlCRjM2MTg0 NUYwMzFFMTE5NEFBNDNCNjFGOTU4NTk4MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuyj1vTDN7MM2Q81vXZnpMi3If/kRLSK+UXkz9tr1OdHhA1d2V YsxuKX/nSRSBDCJkfc4ZFLO76Xqx+1UtZjgAPjG1caG1XJmyEu73HjNCngmW7YVh Lf1ghNRj0xnYkoXujaCmSzE/CbsNjObUM9koCU8LsZjS5uuJeCNSopUo6vNBTHKw +e7jAPIyCswN/cRAeZ1Q9syILBwcyll5WhKBaZd9ij6ayzjauUMauplB0IIuDQ1v Mr5w7hLvpcEvfJ3n5lwM+uRiu/WlOeLw8gLjlUnPfF5mx8/GXFWxhvNwpUSc7YTg iqkq9Gb3TgIs5uCUWc17DEycbsm6aAJt6OD7AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUmAICm/NhhF8DHhGUqkO2H5WFmDIwHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvbUFJQ21fTmhoRjhESGhH VXFrTzJINVdGbURJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQDo8AwDQYJKoZIhvcNAQELBQADggEBAEDr03PjyoKNXNDhJRElgv/YEsIp3sgU lC/xPpa8Dw1Dd3XPZmH0J7AcqoL8GL3gFuMNdBmCH6V9h42wivkYKxgLH3VOd4ML lhqDVgV+iQj8YbGGnvzxyyxq+snlu6pe4zsaVrMP0cRvNDrfVpAbr/zJxrdkI03Z Suu7sn5UIZAEx2cGAGxk7GUPzPiAj1aBWNsJ+ZdCVXxL5tM5ILI4A3f2ZKIN3jR0 fBcH6d3K67DqdoGfhniSNluZ9f8QkchFyDpLTgpGXXZIQCuRrnRbD0uVaKcaaGQI Xz3OZQ8PbCTttUm4xDQwwJ3VXKAYd5gqBYWpT5K8KyEimnLG+He9Jvs= -----END CERTIFICATE-----Generated at Sun Aug 24 07:57:25 2025 by rpki-client