$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/JqEmmq0VmpkXKKXdOvnF1NYj20Y.roa File: JqEmmq0VmpkXKKXdOvnF1NYj20Y.roa (raw, json) Hash identifier: jJpoHAk/MgdGdZZOsnSp0t/jZOlkQ4dfGrTOYPLQgKk= Subject key identifier: 26:A1:26:9A:AD:15:9A:99:17:28:A5:DD:3A:F9:C5:D4:D6:23:DB:46 Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989 Certificate serial: 0D65 Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/JqEmmq0VmpkXKKXdOvnF1NYj20Y.roa Signing time: Fri 22 Aug 2025 08:50:37 +0000 ROA not before: Fri 22 Aug 2025 08:50:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 147035 IP address blocks: 103.122.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 01:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989 Validity Not Before: Aug 22 08:50:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=26A1269AAD159A991728A5DD3AF9C5D4D623DB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:c8:47:ce:04:01:13:80:5e:39:82:2e:6f: 2f:a0:e8:62:56:b4:0a:de:54:81:76:4f:46:d7:75: 0e:20:b8:ce:a8:fa:49:dc:1c:d8:ff:44:0d:c8:c9: 5b:d2:5d:dc:9a:4f:0f:ca:4b:e3:3f:71:12:41:83: 2c:bd:da:93:6c:00:b8:97:33:ec:8b:4a:91:f6:49: fa:fa:d6:77:80:91:8f:d2:68:c8:7f:32:2b:8a:83: 75:4f:a0:95:a9:81:d8:2b:21:55:eb:d7:4e:10:a3: 5e:96:21:6e:9f:9e:04:5b:09:fa:d5:43:a4:66:6b: a1:85:67:fd:89:5b:86:a5:d1:8d:5b:6b:a1:e8:c9: ca:c1:a6:56:b3:aa:86:25:a4:99:05:a0:5a:ea:fb: 56:36:ea:65:89:c7:70:c5:ca:95:b7:77:5e:ba:d5: 70:48:5d:a2:ea:4e:85:49:53:60:a2:d9:95:4d:78: a8:87:2e:29:4e:0e:a8:c8:30:3c:7c:6e:42:23:6b: 9d:70:33:e5:e0:5b:8b:12:31:92:88:1f:f3:b8:0e: 03:07:4e:76:85:d7:2f:ed:09:9d:36:f7:0f:88:d5: 64:e2:35:75:d8:b2:46:18:d8:b6:1d:ee:0c:8c:b1: 0e:01:ea:ca:14:06:b1:bb:20:fb:d4:5e:03:49:cf: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A1:26:9A:AD:15:9A:99:17:28:A5:DD:3A:F9:C5:D4:D6:23:DB:46 X509v3 Authority Key Identifier: keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/JqEmmq0VmpkXKKXdOvnF1NYj20Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.116.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:33:f8:65:21:7c:37:38:af:2e:49:c3:d2:4b:af:a6:61:80: 26:c6:3b:72:33:b9:46:e9:88:c4:da:1a:0e:af:fd:55:03:3f: 91:d6:62:88:6e:06:b2:e5:cd:e2:15:67:ca:35:be:b9:79:4b: c7:1a:55:c0:ad:63:50:aa:50:c9:e9:3b:f8:e0:86:73:a3:76: c6:77:d7:cd:93:23:20:a0:3d:2d:1d:f2:e7:cb:cf:36:36:f6: 6e:58:17:20:eb:77:01:b5:a0:a5:4d:6e:66:92:80:63:a9:5c: d5:1e:62:ec:ac:fb:87:bf:36:5a:5d:dc:77:91:37:20:f8:46: ff:81:0e:3f:7b:a5:c8:71:5b:8f:15:ee:e8:eb:68:e2:b9:39: 10:d6:f8:7f:a3:73:89:8c:25:f0:50:58:40:f1:d4:c3:22:e9: 4a:0f:ea:63:02:51:4e:e9:06:0e:f3:24:15:78:6a:3b:b4:f5: 1d:d4:dc:8b:d9:f3:8c:d1:ca:64:64:bb:a7:58:c2:1c:dc:77: b5:d2:9d:be:57:b7:1f:c5:ae:2f:f7:1c:a0:e7:45:18:32:e4: 89:26:1d:9f:0f:37:03:98:19:45:f8:08:16:2b:1b:fc:16:be: 4c:ec:ce:49:8b:f9:75:17:4b:fa:6f:fa:3a:02:58:f4:a1:6c: 84:15:9b:84 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDU4 NjYyQjhEQTA1RTQwMjlGM0ZBNEQ1NkE1MTIxREQ0QkQ2ODk4OTAeFw0yNTA4MjIw ODUwMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI2QTEyNjlBQUQxNTlB OTkxNzI4QTVERDNBRjlDNUQ0RDYyM0RCNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNsshHzgQBE4BeOYIuby+g6GJWtAreVIF2T0bXdQ4guM6o+knc HNj/RA3IyVvSXdyaTw/KS+M/cRJBgyy92pNsALiXM+yLSpH2Sfr61neAkY/SaMh/ MiuKg3VPoJWpgdgrIVXr104Qo16WIW6fngRbCfrVQ6Rma6GFZ/2JW4al0Y1ba6Ho ycrBplazqoYlpJkFoFrq+1Y26mWJx3DFypW3d1661XBIXaLqToVJU2Ci2ZVNeKiH LilODqjIMDx8bkIja51wM+XgW4sSMZKIH/O4DgMHTnaF1y/tCZ029w+I1WTiNXXY skYY2LYd7gyMsQ4B6soUBrG7IPvUXgNJz4rVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUJqEmmq0VmpkXKKXdOvnF1NYj20YwHwYDVR0jBBgwFoAUBYZiuNoF5AKfP6TV alEh3UvWiYkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFV L0JZWml1Tm9GNUFLZlA2VFZhbEVoM1V2V2lZay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQllaaXVOb0Y1QUtmUDZUVmFsRWgzVXZXaVlrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFVL0pxRW1tcTBWbXBrWEtLWGRP dm5GMU5ZajIwWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn enQwDQYJKoZIhvcNAQELBQADggEBAB0z+GUhfDc4ry5Jw9JLr6ZhgCbGO3IzuUbp iMTaGg6v/VUDP5HWYohuBrLlzeIVZ8o1vrl5S8caVcCtY1CqUMnpO/jghnOjdsZ3 182TIyCgPS0d8ufLzzY29m5YFyDrdwG1oKVNbmaSgGOpXNUeYuys+4e/Nlpd3HeR NyD4Rv+BDj97pchxW48V7ujraOK5ORDW+H+jc4mMJfBQWEDx1MMi6UoP6mMCUU7p Bg7zJBV4aju09R3U3IvZ84zRymRku6dYwhzcd7XSnb5Xtx/Fri/3HKDnRRgy5Ikm HZ8PNwOYGUX4CBYrG/wWvkzszkmL+XUXS/pv+joCWPShbIQVm4Q= -----END CERTIFICATE-----Generated at Tue Oct 28 22:17:40 2025 by rpki-client