$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/LIOMuFObqBAiDTiKmqOvZPbfPv0.roa File: LIOMuFObqBAiDTiKmqOvZPbfPv0.roa (raw, json) Hash identifier: 0XKqL+F8cqxKR6nXwZ8b/UbwlLbkEGtk2yWfYOOHs3g= Subject key identifier: 2C:83:8C:B8:53:9B:A8:10:22:0D:38:8A:9A:A3:AF:64:F6:DF:3E:FD Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0F05 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/LIOMuFObqBAiDTiKmqOvZPbfPv0.roa Signing time: Fri 22 Aug 2025 08:50:03 +0000 ROA not before: Fri 22 Aug 2025 08:50:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18424 IP address blocks: 2405:8700:9900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3845 (0xf05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 22 08:50:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2C838CB8539BA810220D388A9AA3AF64F6DF3EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:9c:15:00:5c:dc:90:78:2a:b7:07:d3:c1: b8:0d:39:ed:79:de:ba:a3:84:4a:b8:e1:88:53:7d: 49:ce:5f:8c:10:ec:f4:48:57:ca:23:2f:e4:2c:44: a1:86:c9:f5:51:59:12:b6:0a:2a:a9:c9:27:53:c8: ce:21:ad:2a:61:ce:43:7a:03:34:03:ee:5c:92:2b: 45:18:36:94:20:60:87:9d:eb:37:c2:43:77:5a:07: 94:a3:f3:ec:a5:75:e6:b5:f8:30:85:d7:51:20:95: f4:dc:5a:8e:ce:c2:ea:88:4a:40:16:74:e3:34:ae: c2:60:4a:81:d8:e9:a8:a5:b6:4a:82:5a:e4:57:3f: 6e:de:2d:68:49:6e:78:41:ff:4a:ba:8f:94:25:ec: e6:6c:ac:30:c0:b8:83:89:30:7c:89:49:fd:f2:15: b5:2f:48:08:25:21:1c:5d:2c:aa:d0:51:51:13:38: 25:8d:93:6f:46:8a:cd:20:c9:e0:fe:7b:e0:f8:b9: eb:e1:32:87:91:f9:dd:43:a5:9a:0c:8a:42:ff:22: ff:2a:12:87:1b:04:be:67:dd:f2:93:83:23:b4:16: 51:c4:07:c7:1f:e4:36:70:ec:7d:1d:a0:e1:18:d2: 05:29:f6:10:e8:05:26:20:f8:fd:41:f6:01:b2:3b: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:83:8C:B8:53:9B:A8:10:22:0D:38:8A:9A:A3:AF:64:F6:DF:3E:FD X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/LIOMuFObqBAiDTiKmqOvZPbfPv0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:8700:9900::/48 Signature Algorithm: sha256WithRSAEncryption 68:56:c8:b8:f0:d5:2e:76:c0:2d:69:46:46:ad:2e:0f:01:4c: aa:1a:9c:6f:f1:a8:c3:e1:3f:f7:0c:cb:17:d1:f7:3e:4c:ae: 01:85:01:72:e5:66:c2:00:9e:ca:fb:71:38:2d:70:28:44:15: 2e:15:49:ed:b5:8a:75:e7:df:41:77:28:d6:83:15:09:ec:e5: 68:8e:c5:75:a6:ab:57:6c:ed:7a:6b:c5:0f:6c:c7:06:51:ac: 76:ff:35:46:6c:c8:60:7f:f4:ab:12:ab:f4:c4:91:7b:fb:50: bd:a3:bb:d1:8a:dd:b5:68:88:98:b2:3a:25:5d:f7:8a:7c:06: f1:c0:52:b3:a3:a3:10:f8:65:05:cf:ef:79:df:89:25:ac:5a: c5:4f:3f:c8:47:a1:54:d2:23:da:35:8d:71:b6:be:c5:e9:25: c6:e7:eb:26:54:61:de:ef:56:4f:4b:6d:06:2b:7c:e7:f3:02: 9e:36:86:ed:e8:12:b1:3a:19:f6:b7:af:49:8c:23:4e:24:34: f4:d8:54:68:4f:5d:5e:48:5b:70:f1:b0:57:40:a3:7d:22:87: 23:ab:b3:f0:1c:ee:8e:a4:0f:04:13:9b:db:ff:4c:33:18:3b: 4c:b1:c5:f0:34:01:19:99:36:82:09:e6:af:2a:72:85:e4:cb: c2:c5:4e:e4 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICDwUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNTA4MjIw ODUwMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJDODM4Q0I4NTM5QkE4 MTAyMjBEMzg4QTlBQTNBRjY0RjZERjNFRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChv5wVAFzckHgqtwfTwbgNOe153rqjhEq44YhTfUnOX4wQ7PRI V8ojL+QsRKGGyfVRWRK2CiqpySdTyM4hrSphzkN6AzQD7lySK0UYNpQgYIed6zfC Q3daB5Sj8+yldea1+DCF11EglfTcWo7OwuqISkAWdOM0rsJgSoHY6ailtkqCWuRX P27eLWhJbnhB/0q6j5Ql7OZsrDDAuIOJMHyJSf3yFbUvSAglIRxdLKrQUVETOCWN k29Gis0gyeD+e+D4uevhMoeR+d1DpZoMikL/Iv8qEocbBL5n3fKTgyO0FlHEB8cf 5DZw7H0doOEY0gUp9hDoBSYg+P1B9gGyO7SxAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQULIOMuFObqBAiDTiKmqOvZPbfPv0wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL0xJT011Rk9icUJB aURUaUttcU92WlBiZlB2MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkBYcAmQAwDQYJKoZIhvcNAQELBQADggEBAGhWyLjw1S52wC1pRkatLg8B TKoanG/xqMPhP/cMyxfR9z5MrgGFAXLlZsIAnsr7cTgtcChEFS4VSe21inXn30F3 KNaDFQns5WiOxXWmq1ds7XprxQ9sxwZRrHb/NUZsyGB/9KsSq/TEkXv7UL2ju9GK 3bVoiJiyOiVd94p8BvHAUrOjoxD4ZQXP73nfiSWsWsVPP8hHoVTSI9o1jXG2vsXp Jcbn6yZUYd7vVk9LbQYrfOfzAp42hu3oErE6Gfa3r0mMI04kNPTYVGhPXV5IW3Dx sFdAo30ihyOrs/Ac7o6kDwQTm9v/TDMYO0yxxfA0ARmZNoIJ5q8qcoXky8LFTuQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:41:29 2025 by rpki-client