$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/j06-PcNHrarB3TpZWsej4rwN_O4.roa File: j06-PcNHrarB3TpZWsej4rwN_O4.roa (raw, json) Hash identifier: gmQiLGg7PZKsxBMn743vm45mVw9a6pd6SJ23TpdqHBM= Subject key identifier: 8F:4E:BE:3D:C3:47:AD:AA:C1:DD:3A:59:5A:C7:A3:E2:BC:0D:FC:EE Certificate issuer: /CN=1A610A62A8A72CD36C1D22C7085EDF1809518994 Certificate serial: 0B06 Authority key identifier: 1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/j06-PcNHrarB3TpZWsej4rwN_O4.roa Signing time: Fri 22 Aug 2025 08:51:35 +0000 ROA not before: Fri 22 Aug 2025 08:51:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131667 IP address blocks: 2405:a040::/32 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A610A62A8A72CD36C1D22C7085EDF1809518994 Validity Not Before: Aug 22 08:51:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F4EBE3DC347ADAAC1DD3A595AC7A3E2BC0DFCEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:be:5b:39:ca:d0:c6:ec:82:71:bf:74:31: 47:20:17:ac:c0:fa:b8:d7:b3:e6:d7:02:e3:f6:9f: f3:8a:8b:73:3e:50:7e:98:72:5e:cb:7a:de:fb:b5: 0b:b4:96:6c:36:74:79:71:e0:90:bd:a5:b5:0f:d5: 32:71:82:55:71:7c:e0:49:1f:de:4a:2c:7f:a2:e6: f5:d9:37:0b:cd:7e:ca:08:19:17:ed:c3:8c:81:c0: db:33:bf:3c:08:02:02:65:a7:d7:2c:f5:ec:ea:ef: 08:c5:c1:15:8f:89:4a:fc:2a:b5:87:47:d0:7f:57: 8d:e5:65:2c:e9:70:31:dc:04:20:a9:53:e6:b6:ad: 1c:2c:6e:53:2d:40:38:87:9a:39:c7:5b:d3:b2:c7: b5:b5:37:73:4f:33:a4:5b:63:01:0d:f4:47:93:46: 88:0d:fc:1d:a6:0a:12:a8:1c:d2:89:d4:a1:80:15: 19:bf:68:8a:f4:3c:34:df:e7:f4:0d:0b:14:66:fc: a5:6c:49:9e:bf:af:99:07:76:cc:5f:3b:7b:a9:cc: 43:51:ba:b6:dc:2b:89:15:68:cb:21:ed:89:87:ce: bb:15:5a:95:ab:81:71:30:c0:b6:8d:79:87:e5:f0: a0:2f:7f:24:ef:6f:c9:f4:34:24:3f:0f:a7:3d:f0: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4E:BE:3D:C3:47:AD:AA:C1:DD:3A:59:5A:C7:A3:E2:BC:0D:FC:EE X509v3 Authority Key Identifier: keyid:1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/j06-PcNHrarB3TpZWsej4rwN_O4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:a040::/32 Signature Algorithm: sha256WithRSAEncryption 90:15:8d:4b:78:21:2f:22:7c:b9:c9:84:67:15:32:06:6d:88: c8:89:9a:5f:a7:ec:4e:75:0d:71:e6:8d:37:38:d4:c2:97:0c: 22:3d:8c:16:86:dd:44:74:37:4b:38:9e:86:d2:1c:27:eb:1f: 59:ee:a1:f9:c6:a0:48:ff:3a:66:eb:be:1c:b6:84:84:a8:ea: 10:fe:be:44:fd:cc:1b:16:6b:b3:d6:0a:db:c3:7a:21:c0:19: 2c:d6:48:6e:96:51:fd:fd:37:56:14:27:05:74:23:f0:b6:ba: 04:8f:70:83:b8:ef:f4:a6:27:5e:b5:fe:a0:83:4e:eb:85:b7: 2c:48:04:b3:b2:01:3d:a7:e3:51:f8:99:f5:1d:07:cf:7b:c6: 05:f5:7a:d5:ac:91:7b:82:8a:d2:22:1e:3f:9c:05:4b:7b:5f: b3:0e:91:9a:32:0a:91:11:06:72:3d:67:d4:1c:0c:2f:a7:61: 5c:eb:3b:dd:6d:68:2f:be:32:a5:c1:b8:cd:77:2d:e7:eb:4b: df:d4:ad:84:a8:5b:ae:ab:8a:31:14:b0:ae:f7:fb:f8:d2:ff: c9:7a:ea:8f:d7:6d:b1:7a:36:d9:98:46:9b:a6:bf:16:1a:c9: bb:57:ad:02:a2:87:d3:23:66:47:94:bc:21:36:46:f3:e9:6d: 60:d0:86:f9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUE2 MTBBNjJBOEE3MkNEMzZDMUQyMkM3MDg1RURGMTgwOTUxODk5NDAeFw0yNTA4MjIw ODUxMzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGNEVCRTNEQzM0N0FE QUFDMUREM0E1OTVBQzdBM0UyQkMwREZDRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmC75bOcrQxuyCcb90MUcgF6zA+rjXs+bXAuP2n/OKi3M+UH6Y cl7Let77tQu0lmw2dHlx4JC9pbUP1TJxglVxfOBJH95KLH+i5vXZNwvNfsoIGRft w4yBwNszvzwIAgJlp9cs9ezq7wjFwRWPiUr8KrWHR9B/V43lZSzpcDHcBCCpU+a2 rRwsblMtQDiHmjnHW9Oyx7W1N3NPM6RbYwEN9EeTRogN/B2mChKoHNKJ1KGAFRm/ aIr0PDTf5/QNCxRm/KVsSZ6/r5kHdsxfO3upzENRurbcK4kVaMsh7YmHzrsVWpWr gXEwwLaNeYfl8KAvfyTvb8n0NCQ/D6c98CoXAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUj06+PcNHrarB3TpZWsej4rwN/O4wHwYDVR0jBBgwFoAUGmEKYqinLNNsHSLH CF7fGAlRiZQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1JPTkVY VC9HbUVLWXFpbkxOTnNIU0xIQ0Y3ZkdBbFJpWlEuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dtRUtZcWluTE5Oc0hTTEhDRjdmR0FsUmlaUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dST05FWFQvajA2LVBjTkhyYXJCM1Rw WldzZWo0cndOX080LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQFoEAwDQYJKoZIhvcNAQELBQADggEBAJAVjUt4IS8ifLnJhGcVMgZtiMiJml+n 7E51DXHmjTc41MKXDCI9jBaG3UR0N0s4nobSHCfrH1nuofnGoEj/Ombrvhy2hISo 6hD+vkT9zBsWa7PWCtvDeiHAGSzWSG6WUf39N1YUJwV0I/C2ugSPcIO47/SmJ161 /qCDTuuFtyxIBLOyAT2n41H4mfUdB897xgX1etWskXuCitIiHj+cBUt7X7MOkZoy CpERBnI9Z9QcDC+nYVzrO91taC++MqXBuM13LefrS9/UrYSoW66rijEUsK73+/jS /8l66o/XbbF6NtmYRpumvxYaybtXrQKih9MjZkeUvCE2RvPpbWDQhvk= -----END CERTIFICATE-----Generated at Thu Nov 6 00:22:21 2025 by rpki-client