$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/r0QdsyaRpkpGpe4i8-gaJ8VhYjc.roa File: r0QdsyaRpkpGpe4i8-gaJ8VhYjc.roa (raw, json) Hash identifier: HLEkT6crtL8dTjAlG5G4phA1Er74Wdztz9KKNDrdD8E= Subject key identifier: AF:44:1D:B3:26:91:A6:4A:46:A5:EE:22:F3:E8:1A:27:C5:61:62:37 Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3 Certificate serial: 0507 Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/r0QdsyaRpkpGpe4i8-gaJ8VhYjc.roa Signing time: Fri 22 Aug 2025 09:04:04 +0000 ROA not before: Fri 22 Aug 2025 09:04:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38008 IP address blocks: 2406:d7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3 Validity Not Before: Aug 22 09:04:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AF441DB32691A64A46A5EE22F3E81A27C5616237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:72:b8:5e:e1:a3:1e:09:60:82:69:2d:80: fa:20:32:c8:3e:2b:7e:58:28:ca:ca:76:4d:49:97: 28:69:88:dd:ae:0d:fb:8a:0f:37:ba:23:dd:de:bf: a2:92:aa:37:90:ac:c6:e5:83:5a:31:f6:a3:79:31: 9b:50:48:12:ba:3d:aa:58:13:34:ca:e9:54:70:b5: 2b:5c:ff:bb:16:e7:39:2b:90:07:51:57:19:95:b9: 36:fc:ec:cd:f6:fd:aa:01:c7:fd:6e:74:dc:4e:2e: 58:e8:f5:70:f8:69:8b:9f:01:15:2f:a6:93:93:e8: bb:3e:67:ef:a5:17:6a:f5:50:5f:93:19:24:fb:e3: 03:79:6c:44:ee:eb:cd:35:93:de:af:25:84:ec:0b: b1:51:df:85:9d:dc:a8:6a:ee:e5:25:22:26:43:fc: c6:d3:45:7c:e6:15:7a:c8:46:4d:9d:e5:72:cf:c6: a1:04:f8:a8:71:0c:5b:ca:e5:c8:cb:f2:2d:29:e6: 89:aa:da:cf:05:66:f7:dd:b8:26:73:62:a8:ce:0e: 34:15:cf:63:89:68:7c:07:91:ec:05:9e:70:9c:ba: 8c:97:79:dd:53:f8:4d:8f:5e:dd:36:03:94:0a:2b: 86:37:f1:9d:a1:b1:2f:57:74:3d:5e:50:27:a0:8c: c5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:44:1D:B3:26:91:A6:4A:46:A5:EE:22:F3:E8:1A:27:C5:61:62:37 X509v3 Authority Key Identifier: keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/r0QdsyaRpkpGpe4i8-gaJ8VhYjc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d7c0::/32 Signature Algorithm: sha256WithRSAEncryption 4b:11:c6:d6:57:f9:3f:b8:08:de:00:30:dc:4a:86:84:83:32: 5d:bd:8e:1c:f6:c5:23:11:87:d3:d3:8b:ee:b6:36:5d:1c:eb: 1d:63:cc:6a:5a:d7:10:47:e3:4f:40:ef:73:c2:9f:79:0b:4c: 20:92:0e:02:45:3c:16:1b:54:b4:ab:50:9f:6b:2f:34:6d:ed: 52:b1:a8:92:c2:64:8c:9e:ef:10:fc:4b:50:c5:ee:af:1d:dc: 61:49:cf:b5:8c:68:8c:0f:29:bf:95:cd:0d:ed:53:ab:76:3d: 60:6b:d2:d7:bd:94:ca:5e:47:80:54:e5:9a:b6:e4:e4:73:aa: d5:cf:04:94:7a:70:d4:9e:f3:92:3a:d2:6e:00:b7:70:62:d3: ca:5f:ee:f0:d4:7d:5d:80:7f:99:58:f6:d9:cc:f6:2b:47:0b: 03:9b:db:f8:e4:60:82:9f:b3:b3:52:3b:0b:61:37:c8:c2:cf: bc:59:7a:63:3c:a1:3f:b3:95:f5:bd:ce:d0:79:cc:5d:d2:6f: 4f:64:00:97:8b:0a:e3:a2:84:ca:17:a7:d9:8f:5e:c6:1d:f0: e6:e4:5f:fa:e0:5d:eb:2a:7c:1e:14:ab:00:f8:97:81:4b:fd: 47:3b:bb:3b:08:5c:e9:8c:70:b7:77:6f:19:87:3e:c4:66:0c: eb:db:4c:5b -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA4 MkY1RDk5MkU2QkMyNUUwODk5NzUzODYxNjE4MDcwMkU4NTdDMzAeFw0yNTA4MjIw OTA0MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGNDQxREIzMjY5MUE2 NEE0NkE1RUUyMkYzRTgxQTI3QzU2MTYyMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi+3K4XuGjHglggmktgPogMsg+K35YKMrKdk1JlyhpiN2uDfuK Dze6I93ev6KSqjeQrMblg1ox9qN5MZtQSBK6PapYEzTK6VRwtStc/7sW5zkrkAdR VxmVuTb87M32/aoBx/1udNxOLljo9XD4aYufARUvppOT6Ls+Z++lF2r1UF+TGST7 4wN5bETu6801k96vJYTsC7FR34Wd3Khq7uUlIiZD/MbTRXzmFXrIRk2d5XLPxqEE +KhxDFvK5cjL8i0p5omq2s8FZvfduCZzYqjODjQVz2OJaHwHkewFnnCcuoyXed1T +E2PXt02A5QKK4Y38Z2hsS9XdD1eUCegjMVhAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUr0QdsyaRpkpGpe4i8+gaJ8VhYjcwHwYDVR0jBBgwFoAUoIL12ZLmvCXgiZdT hhYYBwLoV8MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVL L29JTDEyWkxtdkNYZ2laZFRoaFlZQndMb1Y4TS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0lMMTJaTG12Q1hnaVpkVGhoWVlCd0xvVjhNLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVLL3IwUWRzeWFScGtwR3BlNGk4 LWdhSjhWaFlqYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BtfAMA0GCSqGSIb3DQEBCwUAA4IBAQBLEcbWV/k/uAjeADDcSoaEgzJdvY4c9sUj EYfT04vutjZdHOsdY8xqWtcQR+NPQO9zwp95C0wgkg4CRTwWG1S0q1Cfay80be1S saiSwmSMnu8Q/EtQxe6vHdxhSc+1jGiMDym/lc0N7VOrdj1ga9LXvZTKXkeAVOWa tuTkc6rVzwSUenDUnvOSOtJuALdwYtPKX+7w1H1dgH+ZWPbZzPYrRwsDm9v45GCC n7OzUjsLYTfIws+8WXpjPKE/s5X1vc7Qecxd0m9PZACXiwrjooTKF6fZj17GHfDm 5F/64F3rKnweFKsA+JeBS/1HO7s7CFzpjHC3d28Zhz7EZgzr20xb -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:27 2025 by rpki-client