$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6ACGzHQC7kkdhJbdb0gQT55KuLY.roa File: 6ACGzHQC7kkdhJbdb0gQT55KuLY.roa (raw, json) Hash identifier: P01YptYBtz5lqKWf4yKOsVqJDhg6JXn8+YWttsax6uA= Subject key identifier: E8:00:86:CC:74:02:EE:49:1D:84:96:DD:6F:48:10:4F:9E:4A:B8:B6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 140D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6ACGzHQC7kkdhJbdb0gQT55KuLY.roa Signing time: Fri 22 Aug 2025 09:00:02 +0000 ROA not before: Fri 22 Aug 2025 09:00:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24154 IP address blocks: 210.63.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5133 (0x140d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E80086CC7402EE491D8496DD6F48104F9E4AB8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:c7:cc:cd:ac:8f:70:c5:29:da:c7:f4:f3: 35:c1:48:01:ff:b4:4c:ea:d1:3d:96:30:22:b9:86: ed:22:63:65:ff:54:0d:ef:e9:8b:6a:f7:34:a3:b3: b9:0d:e5:f7:c0:b0:94:67:2d:ec:b5:ce:28:0e:52: a1:e4:7e:01:d3:5d:a6:ca:3b:53:71:31:4b:9d:f3: e3:12:40:6c:7a:b7:16:99:ff:c4:a0:d2:4d:2d:56: 7b:1c:7a:8a:1c:2d:70:af:f6:fd:0c:d5:35:18:5b: 22:98:56:36:c0:1c:5c:e6:46:52:9c:8b:6e:8f:36: 97:8c:6b:f9:4c:6a:82:a3:1f:1b:c4:68:c0:b2:eb: b8:17:a4:ae:6b:84:78:46:9b:53:02:1e:41:c3:e4: da:71:c5:c4:29:b5:83:9f:94:11:3e:66:06:45:ee: ea:10:d6:e0:a7:c3:5b:d1:51:17:44:9a:fe:43:75: e0:34:e7:28:1a:82:10:8e:0b:fe:99:34:fc:73:2a: 79:0d:2a:44:64:4b:fb:a3:bd:5e:4f:f4:18:73:ca: 06:c4:20:c0:7c:41:d9:c9:f9:75:35:f3:80:3c:b3: 22:56:b2:32:23:e7:d4:c0:88:36:0d:5f:91:90:4a: bc:85:02:9a:b4:56:4d:9e:35:f6:3c:78:b4:65:6e: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:86:CC:74:02:EE:49:1D:84:96:DD:6F:48:10:4F:9E:4A:B8:B6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6ACGzHQC7kkdhJbdb0gQT55KuLY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.236.0/24 Signature Algorithm: sha256WithRSAEncryption 06:99:10:80:01:ec:17:cb:62:3a:69:6c:3e:b9:cb:fc:ba:2d: 13:0e:56:14:0b:15:8a:c6:17:cf:27:6a:4a:95:2d:51:b4:73: 3c:4c:09:2b:c9:36:57:5b:8c:1a:59:3f:93:c7:3a:ae:87:c4: 81:00:2a:b1:f0:2a:e4:9a:d3:76:74:36:a7:f9:51:2e:70:81: 3f:0c:22:da:01:3d:93:6a:8a:5e:0a:c8:3d:f9:be:c6:ae:b0: 2e:de:31:81:0a:b8:1a:63:27:6a:9f:59:ee:3b:ff:de:6e:2f: 1e:36:e6:7e:5c:c2:43:bf:38:32:49:8e:4f:ed:ef:da:0b:e2: cd:e9:2c:4e:2c:cd:51:3e:bf:40:29:30:92:a0:4c:5b:96:1b: 5a:38:44:2b:10:3c:53:09:ea:0c:10:34:a9:4f:c9:fc:8c:d3: b2:04:23:42:73:9e:3b:3b:9d:3d:bf:c7:24:37:6d:61:03:a3: 78:6f:f5:12:50:ea:98:c6:f0:21:72:95:e8:5c:2e:cf:2a:1b: 6f:d4:7a:c2:41:fb:85:8e:16:c7:fe:4e:fe:d5:bc:78:a7:25: e7:79:be:0c:96:b1:95:f8:13:13:cb:ba:3b:d9:0a:33:00:4f: fd:d3:bd:e7:19:e6:7a:51:b9:b0:ae:78:1a:6a:ee:c0:6b:21: cb:dd:35:47 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU4MDA4NkNDNzQwMkVF NDkxRDg0OTZERDZGNDgxMDRGOUU0QUI4QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8bMfMzayPcMUp2sf08zXBSAH/tEzq0T2WMCK5hu0iY2X/VA3v 6Ytq9zSjs7kN5ffAsJRnLey1zigOUqHkfgHTXabKO1NxMUud8+MSQGx6txaZ/8Sg 0k0tVnsceoocLXCv9v0M1TUYWyKYVjbAHFzmRlKci26PNpeMa/lMaoKjHxvEaMCy 67gXpK5rhHhGm1MCHkHD5NpxxcQptYOflBE+ZgZF7uoQ1uCnw1vRURdEmv5DdeA0 5ygaghCOC/6ZNPxzKnkNKkRkS/ujvV5P9BhzygbEIMB8QdnJ+XU184A8syJWsjIj 59TAiDYNX5GQSryFApq0Vk2eNfY8eLRlbrc7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU6ACGzHQC7kkdhJbdb0gQT55KuLYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZBQ0d6SFFDN2trZGhKYmRiMGdRVDU1 S3VMWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP+wwDQYJ KoZIhvcNAQELBQADggEBAAaZEIAB7BfLYjppbD65y/y6LRMOVhQLFYrGF88nakqV LVG0czxMCSvJNldbjBpZP5PHOq6HxIEAKrHwKuSa03Z0Nqf5US5wgT8MItoBPZNq il4KyD35vsausC7eMYEKuBpjJ2qfWe47/95uLx425n5cwkO/ODJJjk/t79oL4s3p LE4szVE+v0ApMJKgTFuWG1o4RCsQPFMJ6gwQNKlPyfyM07IEI0Jznjs7nT2/xyQ3 bWEDo3hv9RJQ6pjG8CFylehcLs8qG2/UesJB+4WOFsf+Tv7VvHinJed5vgyWsZX4 ExPLujvZCjMAT/3TvecZ5npRubCueBpq7sBrIcvdNUc= -----END CERTIFICATE-----Generated at Thu Nov 6 00:34:15 2025 by rpki-client