$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/QYACgM9A2M0GOAa3eK26VJj_DDM.roa File: QYACgM9A2M0GOAa3eK26VJj_DDM.roa (raw, json) Hash identifier: 7tQ0B/wSUKv1KusABZLkSJCxu01V92r6nUlRKNBRXF8= Subject key identifier: 41:80:02:80:CF:40:D8:CD:06:38:06:B7:78:AD:BA:54:98:FF:0C:33 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E13 Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/QYACgM9A2M0GOAa3eK26VJj_DDM.roa Signing time: Fri 22 Aug 2025 08:54:24 +0000 ROA not before: Fri 22 Aug 2025 08:54:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 2001:4420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3603 (0xe13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 22 08:54:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=41800280CF40D8CD063806B778ADBA5498FF0C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:c0:c4:a0:a4:15:04:00:04:6b:6f:7a:ad: a6:13:0f:13:0b:4a:40:2c:9c:25:a5:b5:cc:aa:05: e6:ac:3f:1c:c5:7f:fa:6e:3d:fd:92:a7:49:04:dd: 1d:4e:2b:28:f2:4a:83:dc:3e:79:1c:8f:68:73:d1: 97:8e:2a:d5:e7:3f:6c:1c:10:38:95:37:a3:3b:2d: e1:a5:73:84:49:56:a4:0c:f8:40:c0:98:6e:08:7a: a3:ad:d4:29:4b:43:f6:b8:01:2d:58:ea:19:d5:95: fd:df:43:be:ce:e7:86:21:40:5e:9f:ba:39:6f:93: 45:aa:e2:d7:ea:e5:df:6d:7c:cf:cd:34:16:7e:da: 26:db:ed:0d:9c:b9:e4:ec:55:89:55:d2:d7:14:06: c5:42:36:56:3b:c3:e9:20:fe:64:60:19:f8:51:fc: 3b:b8:ee:d0:e7:2b:61:32:1c:05:c6:ad:68:fc:da: df:11:05:2b:00:68:52:e2:12:ae:7e:25:19:75:da: 5d:99:ea:9d:dc:a2:3d:6c:cd:77:4e:b0:63:e6:c7: 2a:87:cd:1b:03:e1:95:84:dc:ee:a1:fe:f2:c7:dd: 36:30:82:70:f5:cb:9a:f8:67:16:31:93:60:f3:d3: f6:14:66:12:95:a5:59:27:1b:40:2d:3e:7b:73:4e: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:80:02:80:CF:40:D8:CD:06:38:06:B7:78:AD:BA:54:98:FF:0C:33 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/QYACgM9A2M0GOAa3eK26VJj_DDM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4420::/32 Signature Algorithm: sha256WithRSAEncryption 42:2a:57:96:86:33:16:9b:79:e6:f7:89:ba:43:1b:75:23:ba: c7:bc:19:ce:71:26:36:1b:45:9f:49:4e:51:76:82:7f:41:6d: 67:d2:bb:b0:97:9d:08:ec:c2:cd:a9:99:96:22:a6:eb:4d:47: 36:ed:4e:c3:71:14:bc:1b:7a:4d:c5:fa:ec:81:3b:d2:51:ca: 0b:23:8b:2d:af:4b:f5:3b:2f:6b:cf:e0:c9:af:38:78:79:f6: 14:98:16:35:a3:04:80:e2:31:ef:4f:ca:10:d2:11:9d:95:05: 54:e9:75:e4:b4:ed:91:9d:ee:90:af:0b:67:43:fd:9f:42:ba: 08:9e:11:66:19:8c:ff:54:c6:6f:f6:21:61:20:93:46:8c:e6: d5:84:37:77:1b:2f:74:19:8b:ad:a8:84:a1:90:32:3e:2f:44: dc:38:9a:e0:a8:ff:d4:b6:49:fb:92:e8:58:0d:9c:2a:6e:ed: e7:cf:f3:4f:c9:14:8b:35:af:82:67:d5:42:f7:6e:4f:68:12: b0:e0:78:bd:27:5f:91:36:38:c7:15:13:12:cf:4c:b9:41:01: b7:43:40:b7:f2:15:8e:11:8b:20:4e:d0:49:d5:d0:cf:de:d9: bf:4b:ca:06:32:65:f8:13:7d:6c:9f:0f:11:4e:4a:b2:46:e5: 3a:cd:62:fb -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICDhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTA4MjIw ODU0MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxODAwMjgwQ0Y0MEQ4 Q0QwNjM4MDZCNzc4QURCQTU0OThGRjBDMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ1MDEoKQVBAAEa296raYTDxMLSkAsnCWltcyqBeasPxzFf/pu Pf2Sp0kE3R1OKyjySoPcPnkcj2hz0ZeOKtXnP2wcEDiVN6M7LeGlc4RJVqQM+EDA mG4IeqOt1ClLQ/a4AS1Y6hnVlf3fQ77O54YhQF6fujlvk0Wq4tfq5d9tfM/NNBZ+ 2ibb7Q2cueTsVYlV0tcUBsVCNlY7w+kg/mRgGfhR/Du47tDnK2EyHAXGrWj82t8R BSsAaFLiEq5+JRl12l2Z6p3coj1szXdOsGPmxyqHzRsD4ZWE3O6h/vLH3TYwgnD1 y5r4ZxYxk2Dz0/YUZhKVpVknG0AtPntzTg0ZAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUQYACgM9A2M0GOAa3eK26VJj/DDMwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL1FZQUNnTTlBMk0wR09BYTNlSzI2Vkpq X0RETS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAUQgMA0G CSqGSIb3DQEBCwUAA4IBAQBCKleWhjMWm3nm94m6Qxt1I7rHvBnOcSY2G0WfSU5R doJ/QW1n0ruwl50I7MLNqZmWIqbrTUc27U7DcRS8G3pNxfrsgTvSUcoLI4str0v1 Oy9rz+DJrzh4efYUmBY1owSA4jHvT8oQ0hGdlQVU6XXktO2Rne6QrwtnQ/2fQroI nhFmGYz/VMZv9iFhIJNGjObVhDd3Gy90GYutqIShkDI+L0TcOJrgqP/Utkn7kuhY DZwqbu3nz/NPyRSLNa+CZ9VC925PaBKw4Hi9J1+RNjjHFRMSz0y5QQG3Q0C38hWO EYsgTtBJ1dDP3tm/S8oGMmX4E31snw8RTkqyRuU6zWL7 -----END CERTIFICATE-----Generated at Wed Nov 5 21:07:20 2025 by rpki-client