$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/dJpQtzndugIaMgKpkejUNi8lrZ0.roa File: dJpQtzndugIaMgKpkejUNi8lrZ0.roa (raw, json) Hash identifier: nZlSzvE0stUK/grdixuxy9Ws4R/l340poF1OTnaXyZg= Subject key identifier: 74:9A:50:B7:39:DD:BA:02:1A:32:02:A9:91:E8:D4:36:2F:25:AD:9D Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 07FB Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/dJpQtzndugIaMgKpkejUNi8lrZ0.roa Signing time: Fri 22 Aug 2025 08:58:49 +0000 ROA not before: Fri 22 Aug 2025 08:58:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9678 IP address blocks: 2401:95c0:11ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Aug 22 08:58:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=749A50B739DDBA021A3202A991E8D4362F25AD9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:dd:f1:6e:d9:f1:99:2c:e9:3a:fd:3e:fb: 6e:57:5d:ad:b8:86:1b:cd:7b:ca:f4:b0:4e:93:89: 9c:30:c4:44:8b:90:2c:7c:eb:79:1c:c0:28:e5:76: 75:d1:2c:13:0b:77:52:0c:67:ae:54:33:26:cd:82: 44:0a:a3:24:e7:45:ef:60:19:da:f5:49:39:c2:58: 52:7a:e3:0e:08:fc:eb:d2:d6:4d:32:d8:a2:59:10: 10:fd:0b:aa:89:e4:cc:6c:a8:1f:49:67:7c:cd:29: ee:7f:0f:27:df:77:56:c4:24:f4:f6:ce:4c:9c:95: 94:6b:bf:24:fb:2f:be:38:10:04:4e:24:31:43:ef: 5b:8d:82:c4:e3:02:03:89:cf:35:c4:3c:60:ed:27: 44:65:5c:ee:c9:fa:79:b8:3b:1f:46:3f:64:3d:b7: 63:12:b1:5d:21:fa:0d:b6:f5:65:24:6f:eb:5f:f6: 8e:95:b5:0b:16:4f:f6:23:58:5f:a9:35:8c:47:7b: ff:f1:ff:57:4d:79:63:49:55:d0:73:75:ca:2a:69: 39:e1:cb:16:eb:a2:1b:e3:30:a9:1c:85:b1:b5:81: d5:91:24:20:e8:cc:ad:ee:e9:cf:9c:cc:3b:db:20: 39:7d:00:16:23:4e:31:1b:a8:29:48:40:b0:1e:39: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:50:B7:39:DD:BA:02:1A:32:02:A9:91:E8:D4:36:2F:25:AD:9D X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/dJpQtzndugIaMgKpkejUNi8lrZ0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:95c0:11ff::/48 Signature Algorithm: sha256WithRSAEncryption 15:27:41:ed:9d:0f:c5:f0:70:dc:7b:41:e7:19:20:aa:0f:d1: d5:d1:fe:da:20:6c:e9:6e:4e:31:f7:ef:ad:66:10:22:b4:17: 91:51:f5:9d:d3:a3:a1:e9:46:ce:a5:73:88:7a:47:6a:2d:86: 49:1f:00:1b:d4:96:45:bc:84:aa:7b:44:fe:ee:18:a9:f4:27: 65:c1:36:a5:5d:f1:44:a7:ce:6b:d4:43:db:7b:6a:cc:7c:e9: 76:13:03:22:c6:92:11:c8:b2:c6:91:45:01:96:bb:36:3f:dd: 36:35:f7:5f:2e:77:fb:54:f8:c6:23:30:f1:7b:de:13:c0:22: 2c:37:16:68:af:36:92:73:ea:4f:8e:7a:51:17:53:5e:e8:5e: fc:20:a1:c4:5c:d6:c8:06:9c:1e:51:f0:17:bb:be:26:ca:37: 27:42:65:c0:66:0f:17:8f:46:11:d0:11:20:29:18:03:35:c1: 64:10:04:b5:88:42:47:4f:77:1d:f2:0a:c0:a9:9f:2e:7c:e6: 77:34:bc:9f:61:c3:15:fd:86:dd:5b:7a:a6:63:c7:57:ea:bb: 89:5c:59:ef:18:34:59:1b:73:7b:53:af:05:97:10:40:d0:74: 63:81:0b:9e:a3:28:c8:74:8b:02:6a:a5:20:3c:5a:7e:3b:db: e8:b2:58:e3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICB/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTA4MjIw ODU4NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc0OUE1MEI3MzlEREJB MDIxQTMyMDJBOTkxRThENDM2MkYyNUFEOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnkN3xbtnxmSzpOv0++25XXa24hhvNe8r0sE6TiZwwxESLkCx8 63kcwCjldnXRLBMLd1IMZ65UMybNgkQKoyTnRe9gGdr1STnCWFJ64w4I/OvS1k0y 2KJZEBD9C6qJ5MxsqB9JZ3zNKe5/Dyffd1bEJPT2zkyclZRrvyT7L744EAROJDFD 71uNgsTjAgOJzzXEPGDtJ0RlXO7J+nm4Ox9GP2Q9t2MSsV0h+g229WUkb+tf9o6V tQsWT/YjWF+pNYxHe//x/1dNeWNJVdBzdcoqaTnhyxbrohvjMKkchbG1gdWRJCDo zK3u6c+czDvbIDl9ABYjTjEbqClIQLAeOfORAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUdJpQtzndugIaMgKpkejUNi8lrZ0wHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL2RKcFF0em5kdWdJYU1nS3Br ZWpVTmk4bHJaMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AZXAEf8wDQYJKoZIhvcNAQELBQADggEBABUnQe2dD8XwcNx7QecZIKoP0dXR/tog bOluTjH3761mECK0F5FR9Z3To6HpRs6lc4h6R2othkkfABvUlkW8hKp7RP7uGKn0 J2XBNqVd8USnzmvUQ9t7asx86XYTAyLGkhHIssaRRQGWuzY/3TY1918ud/tU+MYj MPF73hPAIiw3FmivNpJz6k+OelEXU17oXvwgocRc1sgGnB5R8Be7vibKNydCZcBm DxePRhHQESApGAM1wWQQBLWIQkdPdx3yCsCpny585nc0vJ9hwxX9ht1beqZjx1fq u4lcWe8YNFkbc3tTrwWXEEDQdGOBC56jKMh0iwJqpSA8Wn472+iyWOM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:14:19 2025 by rpki-client