$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/ZbUxmDkJey6NiDTTZTNeHNA0qDs.roa File: ZbUxmDkJey6NiDTTZTNeHNA0qDs.roa (raw, json) Hash identifier: 5ZruKMXS1tVdVG4FaFYgYPFfcyxANsM4+O+Z4TEOeOQ= Subject key identifier: 65:B5:31:98:39:09:7B:2E:8D:88:34:D3:65:33:5E:1C:D0:34:A8:3B Certificate issuer: /CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E Certificate serial: 03D8 Authority key identifier: F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/ZbUxmDkJey6NiDTTZTNeHNA0qDs.roa Signing time: Fri 22 Aug 2025 09:01:45 +0000 ROA not before: Fri 22 Aug 2025 09:01:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63893 IP address blocks: 2400:50e0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E Validity Not Before: Aug 22 09:01:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=65B5319839097B2E8D8834D365335E1CD034A83B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:34:c1:37:2a:a2:49:bc:4b:8c:1e:98:34: 3c:24:22:15:89:5b:5d:4f:fd:a3:43:90:93:55:52: 06:1a:21:0f:68:38:64:5a:81:56:3d:a9:0d:9a:c0: fd:e9:e8:ef:99:4f:a2:8b:17:dd:e7:d9:45:84:1f: 5a:b2:38:f1:3f:81:5f:2d:28:aa:d2:9f:22:44:1c: e3:a3:70:61:6d:84:28:a8:a2:e4:54:86:76:35:1b: cf:ac:bc:b0:01:89:4b:5a:b0:63:e1:64:61:ba:65: e4:4d:32:d4:10:eb:ed:6a:b1:61:19:fe:11:e0:9b: ad:7e:8c:8b:74:4f:3a:25:ad:15:9b:92:00:b7:e3: b0:1b:9c:f5:c7:6e:4f:0d:c2:f8:58:84:8e:31:18: 3b:e3:5f:d6:47:72:bd:e1:12:80:46:68:bd:02:c8: 9e:cc:f6:3e:59:86:36:37:71:c1:1e:8d:64:1b:2f: b3:36:9f:5a:1e:65:8f:d9:3f:57:bf:b8:3a:25:69: 40:65:07:c5:cb:70:0b:4e:ec:72:c0:15:85:48:27: b7:d6:42:ad:2b:5a:66:07:23:65:2d:a3:0f:55:b7: 2d:cf:ec:59:93:56:6f:e4:c6:47:6b:e4:55:b5:5f: 84:57:42:22:6f:d8:f3:a1:00:b8:3f:3d:b8:ff:ca: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B5:31:98:39:09:7B:2E:8D:88:34:D3:65:33:5E:1C:D0:34:A8:3B X509v3 Authority Key Identifier: keyid:F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/ZbUxmDkJey6NiDTTZTNeHNA0qDs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:50e0::/32 Signature Algorithm: sha256WithRSAEncryption 64:75:5f:d5:79:a6:6e:34:db:9d:77:f3:07:a1:39:09:cb:5a: a4:39:f1:5a:06:83:19:04:de:a4:94:0b:31:b8:89:fd:88:f7: 5c:c9:52:fd:74:7c:a1:a5:4e:57:6a:f4:db:b4:36:39:9e:a5: b8:a4:21:5a:22:ff:8c:07:1f:7a:89:90:e0:c5:6b:69:65:7e: 40:3e:88:5d:00:50:96:0f:db:82:6d:19:59:1e:a5:db:06:df: b8:16:88:d8:d1:c8:72:f8:9e:08:25:31:d4:19:f4:f3:8c:e2: fa:7f:a5:c8:5c:1c:86:7a:10:6b:e9:b2:0e:06:03:47:96:c7: a3:52:c2:7b:ef:8c:92:61:e4:24:73:9f:ce:60:2b:b7:ef:eb: e8:e2:48:08:92:86:b9:e2:3d:ea:9f:d5:ba:52:f6:51:8b:5b: bd:37:73:84:8a:e9:3f:e4:c0:0e:81:8f:fe:f4:ad:a9:1b:30: a2:13:b8:3e:72:33:64:be:5f:46:3f:fa:9f:d0:e9:28:07:97: ae:ef:85:da:c6:33:fc:cb:a9:44:27:7c:d6:9c:ba:cb:a7:7c: 22:b3:96:54:59:0c:08:54:40:32:19:5f:1c:d1:fd:4f:10:91: 1a:8c:10:a8:74:4e:4c:dd:e1:7b:76:01:79:18:af:52:4c:b3: 2b:cc:62:8a -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjcy QjhENTQ5REU4QkJDNkRFMDI0NTZDNjcwRDFCMUEwNUFGRTgwRTAeFw0yNTA4MjIw OTAxNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY1QjUzMTk4MzkwOTdC MkU4RDg4MzREMzY1MzM1RTFDRDAzNEE4M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUUzTBNyqiSbxLjB6YNDwkIhWJW11P/aNDkJNVUgYaIQ9oOGRa gVY9qQ2awP3p6O+ZT6KLF93n2UWEH1qyOPE/gV8tKKrSnyJEHOOjcGFthCioouRU hnY1G8+svLABiUtasGPhZGG6ZeRNMtQQ6+1qsWEZ/hHgm61+jIt0TzolrRWbkgC3 47AbnPXHbk8NwvhYhI4xGDvjX9ZHcr3hEoBGaL0CyJ7M9j5ZhjY3ccEejWQbL7M2 n1oeZY/ZP1e/uDolaUBlB8XLcAtO7HLAFYVIJ7fWQq0rWmYHI2Utow9Vty3P7FmT Vm/kxkdr5FW1X4RXQiJv2POhALg/Pbj/ysoLAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUZbUxmDkJey6NiDTTZTNeHNA0qDswHwYDVR0jBBgwFoAU9yuNVJ3ou8beAkVs Zw0bGgWv6A4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENDMTIy MzM0Mi85eXVOVkozb3U4YmVBa1ZzWncwYkdnV3Y2QTQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBLzl5dU5WSjNvdThiZUFrVnNadzBiR2dXdjZBNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RDQzEyMjMzNDIvWmJVeG1Ea0pl eTZOaURUVFpUTmVITkEwcURzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAUOAwDQYJKoZIhvcNAQELBQADggEBAGR1X9V5pm4025138wehOQnL WqQ58VoGgxkE3qSUCzG4if2I91zJUv10fKGlTldq9Nu0NjmepbikIVoi/4wHH3qJ kODFa2llfkA+iF0AUJYP24JtGVkepdsG37gWiNjRyHL4ngglMdQZ9POM4vp/pchc HIZ6EGvpsg4GA0eWx6NSwnvvjJJh5CRzn85gK7fv6+jiSAiShrniPeqf1bpS9lGL W703c4SK6T/kwA6Bj/70rakbMKITuD5yM2S+X0Y/+p/Q6SgHl67vhdrGM/zLqUQn fNacusunfCKzllRZDAhUQDIZXxzR/U8QkRqMEKh0Tkzd4Xt2AXkYr1JMsyvMYoo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:31:51 2025 by rpki-client