$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/F_tz9YMtONIj4ey14wz4m4cSAEQ.roa File: F_tz9YMtONIj4ey14wz4m4cSAEQ.roa (raw, json) Hash identifier: vCLC3PokhGJHFJYOcIOorW8KHb+s04OzjY9WuV9W2RI= Subject key identifier: 17:FB:73:F5:83:2D:38:D2:23:E1:EC:B5:E3:0C:F8:9B:87:12:00:44 Certificate issuer: /CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Certificate serial: 03 Authority key identifier: F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/F_tz9YMtONIj4ey14wz4m4cSAEQ.roa Signing time: Wed 15 Oct 2025 04:27:40 +0000 ROA not before: Wed 15 Oct 2025 04:27:40 +0000 ROA not after: Wed 07 Oct 2026 15:30:24 +0000 asID: 63900 IP address blocks: 2402:30e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 01:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Validity Not Before: Oct 15 04:27:40 2025 GMT Not After : Oct 7 15:30:24 2026 GMT Subject: CN=17FB73F5832D38D223E1ECB5E30CF89B87120044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:b9:f9:b8:94:e2:db:8d:78:59:29:3b:c5: d8:3d:21:47:ef:db:2d:3d:28:81:0a:9d:c2:ca:13: ec:b4:1f:e4:fd:ef:12:84:dd:98:28:27:cc:bc:cf: 27:2e:66:89:45:ab:0d:98:29:40:41:e6:4d:02:2d: e0:be:e8:a9:03:2a:c5:c7:6e:cc:8a:d3:a3:b7:9f: c8:b2:aa:ee:2f:97:75:1f:1d:fc:ea:4a:a8:61:87: be:10:51:70:a5:8b:be:85:d1:70:e0:ee:27:06:c7: 5a:82:d8:85:2a:ed:1f:a2:a5:cf:9c:6a:1b:52:13: c1:f2:6c:fd:c8:e3:bd:98:8a:10:5e:56:72:22:35: 68:41:9b:5e:64:5f:08:45:35:47:ca:e7:a5:cf:85: 3a:18:7e:a3:c0:a8:db:6a:b5:c3:2f:4b:f9:9f:94: d3:93:bb:e2:f5:34:22:ca:2c:11:3f:c5:a2:ec:a3: d5:ec:0e:94:d7:5c:36:23:31:57:4c:69:01:61:9d: e4:9f:4a:e9:31:ce:9e:8e:cd:22:8a:93:ad:d3:e6: 1d:16:21:db:2f:f8:60:07:51:2a:c8:09:03:51:1a: 4d:f3:b6:aa:f6:0f:0e:5e:54:55:d4:53:9c:81:e8: 65:cc:96:50:c0:5d:80:76:d1:f2:02:e0:60:63:c0: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:73:F5:83:2D:38:D2:23:E1:EC:B5:E3:0C:F8:9B:87:12:00:44 X509v3 Authority Key Identifier: keyid:F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/F_tz9YMtONIj4ey14wz4m4cSAEQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:30e0::/32 Signature Algorithm: sha256WithRSAEncryption 85:df:ed:45:3e:b5:4e:42:33:a6:32:54:6b:96:e0:84:81:ef: 2f:d3:e1:55:27:1e:d5:cc:65:72:7f:9b:9c:84:ff:2c:1a:d2: f0:44:5f:1c:1c:0f:6a:1b:b6:b7:ca:05:74:26:dc:31:2e:49: 1a:31:8d:bb:7c:a0:34:4e:de:65:62:cf:08:6b:14:71:06:0c: 65:6d:20:e7:ba:08:87:c0:35:a0:bf:6c:3f:f7:ba:99:4d:6c: 15:93:d9:96:4e:31:3c:76:f0:56:aa:4a:1a:d3:5c:b8:9c:32: b1:82:56:cd:25:05:8a:dc:12:32:37:81:0d:33:5b:4d:4e:e9: 03:de:d5:51:84:d6:a0:5c:48:77:0c:1f:14:ef:c2:ab:fa:8f: 00:bf:85:94:0e:0b:fe:e2:83:3a:10:8c:91:7f:4a:91:97:51: 3a:eb:ae:87:7a:34:3a:4b:56:4f:b5:4c:7f:cf:b9:d9:61:96: 79:38:56:9e:59:73:4a:82:97:36:96:a3:17:48:a7:04:8c:60: 9a:91:92:d6:ba:a0:1a:6b:fe:a0:bb:b1:9f:af:7e:d8:c1:57: 99:e8:69:81:33:0c:f0:2b:6d:1a:f2:b7:7e:f4:4f:8b:1f:9a: 1e:36:40:b2:c0:57:a9:fa:aa:84:10:98:1e:d4:07:21:bd:c2: c2:af:24:7c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGN0U5 RUE0ODIyNzIzRDQ3RTMwNDJGOUQ4RkI2RTQyQjZEMEE2NjgzMB4XDTI1MTAxNTA0 Mjc0MFoXDTI2MTAwNzE1MzAyNFowMzExMC8GA1UEAxMoMTdGQjczRjU4MzJEMzhE MjIzRTFFQ0I1RTMwQ0Y4OUI4NzEyMDA0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANljufm4lOLbjXhZKTvF2D0hR+/bLT0ogQqdwsoT7LQf5P3vEoTd mCgnzLzPJy5miUWrDZgpQEHmTQIt4L7oqQMqxcduzIrTo7efyLKq7i+XdR8d/OpK qGGHvhBRcKWLvoXRcODuJwbHWoLYhSrtH6Klz5xqG1ITwfJs/cjjvZiKEF5WciI1 aEGbXmRfCEU1R8rnpc+FOhh+o8Co22q1wy9L+Z+U05O74vU0IsosET/Fouyj1ewO lNdcNiMxV0xpAWGd5J9K6THOno7NIoqTrdPmHRYh2y/4YAdRKsgJA1EaTfO2qvYP Dl5UVdRTnIHoZcyWUMBdgHbR8gLgYGPAmocCAwEAAaOCAeswggHnMB0GA1UdDgQW BBQX+3P1gy040iPh7LXjDPibhxIARDAfBgNVHSMEGDAWgBT36epIInI9R+MEL52P tuQrbQpmgzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9aVVNPLzkt bnFTQ0p5UFVmakJDLWRqN2JrSzIwS1pvTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev OS1ucVNDSnlQVWZqQkMtZGo3YmtLMjBLWm9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy9GX3R6OVlNdE9OSWo0ZXkxNHd6NG00 Y1NBRVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIw4DAN BgkqhkiG9w0BAQsFAAOCAQEAhd/tRT61TkIzpjJUa5bghIHvL9PhVSce1cxlcn+b nIT/LBrS8ERfHBwPahu2t8oFdCbcMS5JGjGNu3ygNE7eZWLPCGsUcQYMZW0g57oI h8A1oL9sP/e6mU1sFZPZlk4xPHbwVqpKGtNcuJwysYJWzSUFitwSMjeBDTNbTU7p A97VUYTWoFxIdwwfFO/Cq/qPAL+FlA4L/uKDOhCMkX9KkZdROuuuh3o0OktWT7VM f8+52WGWeThWnllzSoKXNpajF0inBIxgmpGS1rqgGmv+oLuxn69+2MFXmehpgTMM 8CttGvK3fvRPix+aHjZAssBXqfqqhBCYHtQHIb3Cwq8kfA== -----END CERTIFICATE-----Generated at Mon Oct 20 23:06:24 2025 by rpki-client