$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/O4jOZLEbSNp1UmZEtaZLUcDHkoo.roa File: O4jOZLEbSNp1UmZEtaZLUcDHkoo.roa (raw, json) Hash identifier: XMS2WuqhyfSGEiDiu2odDeKAFpavxew6LKiXoQT3ff8= Subject key identifier: 3B:88:CE:64:B1:1B:48:DA:75:52:66:44:B5:A6:4B:51:C0:C7:92:8A Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Certificate serial: 04D9 Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/O4jOZLEbSNp1UmZEtaZLUcDHkoo.roa Signing time: Fri 22 Aug 2025 08:50:41 +0000 ROA not before: Fri 22 Aug 2025 08:50:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 134823 IP address blocks: 160.30.78.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 13:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Validity Not Before: Aug 22 08:50:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B88CE64B11B48DA75526644B5A64B51C0C7928A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:ba:ac:bd:ac:08:30:8d:f5:3a:60:d3:6e: 7a:9d:99:59:5b:5f:93:34:98:df:05:a7:86:41:35: 24:41:a3:7b:fa:d7:5d:97:71:cb:38:62:17:03:14: 00:52:ad:26:12:bc:4a:88:1e:e3:4d:5f:11:1d:54: f5:85:ac:98:57:d4:01:84:43:3a:a4:9a:9b:b0:92: d7:97:1c:8b:76:78:cb:fb:b8:14:de:51:ce:7b:b0: 7a:55:fa:09:b5:1a:bd:87:6e:02:7f:03:fb:f8:1a: 20:56:10:82:27:42:08:bb:c0:f8:be:4f:a5:bf:69: 73:d1:97:40:f5:8a:47:c7:e8:df:a3:97:41:7a:df: 12:1a:e2:db:de:ab:68:14:38:fa:1d:ba:9c:e2:5a: 78:f8:1b:fc:5f:72:83:ee:37:bc:b7:7b:9c:3c:e9: ff:38:23:bc:22:85:85:06:22:56:af:91:40:fc:a9: b5:7f:45:6b:dd:5d:d2:85:99:1c:3c:66:e0:7d:b7: 06:5e:e5:49:6d:de:33:c5:13:82:d3:b3:3c:33:64: 3a:e9:bc:db:5b:2c:33:77:92:c8:1f:6e:7c:af:0c: 62:a1:f9:52:da:ef:31:87:e0:da:83:68:82:41:59: e9:7b:d8:80:a9:27:4b:88:fc:4a:e5:a1:00:f7:41: 80:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:88:CE:64:B1:1B:48:DA:75:52:66:44:B5:A6:4B:51:C0:C7:92:8A X509v3 Authority Key Identifier: keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/O4jOZLEbSNp1UmZEtaZLUcDHkoo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.78.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:08:97:99:ab:16:a6:dd:98:86:42:96:a2:1a:2f:d6:e3:c2: 7b:23:62:90:44:39:19:92:59:74:a1:b0:01:fa:3d:17:43:9b: a7:f7:d5:7c:05:3a:19:63:fb:2e:9f:87:a0:16:f5:c2:14:58: 52:cf:63:d3:05:74:7b:b6:e8:34:6c:a8:30:e6:ef:30:95:76: 39:d8:cb:22:a3:a3:26:b3:8a:e3:9b:97:ae:1f:6c:35:08:26: 89:d1:70:9a:28:27:e0:5d:95:10:0b:3f:39:0e:d0:43:9d:82: a7:6d:ff:15:a1:f2:ee:fc:91:76:d8:74:be:b9:8f:79:89:71: fd:5d:37:f9:67:3c:b8:3d:5a:31:8c:a8:1f:73:bc:7f:29:6f: 35:0c:ba:92:88:00:fc:ea:92:bb:94:f7:b4:6d:b0:6f:9e:9b: d5:b1:ca:19:0a:86:4d:ff:92:c0:ae:9b:ff:2e:7e:af:bc:a1: 04:77:ad:88:24:05:66:70:5a:99:b7:1d:5c:df:8b:b6:11:a9: f0:4d:bd:da:68:f8:7e:00:7c:a3:29:96:c7:00:b5:fb:6f:94: 00:8f:1e:95:43:1a:6f:4e:89:f6:ca:44:24:3f:6b:c4:41:8c: 28:03:a5:dc:1c:ba:03:cf:7b:5b:a7:ac:82:3a:b0:ab:1b:0b: d2:cf:b6:5b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDRG OERDRjY2QjI1QjcxOTA1NkQxRUQ2NUMxNkVBOTI1N0U1NTUzRDAeFw0yNTA4MjIw ODUwNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCODhDRTY0QjExQjQ4 REE3NTUyNjY0NEI1QTY0QjUxQzBDNzkyOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT97qsvawIMI31OmDTbnqdmVlbX5M0mN8Fp4ZBNSRBo3v6112X ccs4YhcDFABSrSYSvEqIHuNNXxEdVPWFrJhX1AGEQzqkmpuwkteXHIt2eMv7uBTe Uc57sHpV+gm1Gr2HbgJ/A/v4GiBWEIInQgi7wPi+T6W/aXPRl0D1ikfH6N+jl0F6 3xIa4tveq2gUOPodupziWnj4G/xfcoPuN7y3e5w86f84I7wihYUGIlavkUD8qbV/ RWvdXdKFmRw8ZuB9twZe5Ult3jPFE4LTszwzZDrpvNtbLDN3ksgfbnyvDGKh+VLa 7zGH4NqDaIJBWel72ICpJ0uI/ErloQD3QYB5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUO4jOZLEbSNp1UmZEtaZLUcDHkoowHwYDVR0jBBgwFoAURPjc9msltxkFbR7W XBbqklflVT0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9V L1JQamM5bXNsdHhrRmJSN1dYQmJxa2xmbFZUMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUlBqYzltc2x0eGtGYlI3V1hCYnFrbGZsVlQwLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VL080ak9aTEViU05wMVVtWkV0 YVpMVWNESGtvby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg Hk4wDQYJKoZIhvcNAQELBQADggEBAH4Il5mrFqbdmIZClqIaL9bjwnsjYpBEORmS WXShsAH6PRdDm6f31XwFOhlj+y6fh6AW9cIUWFLPY9MFdHu26DRsqDDm7zCVdjnY yyKjoyaziuObl64fbDUIJonRcJooJ+BdlRALPzkO0EOdgqdt/xWh8u78kXbYdL65 j3mJcf1dN/lnPLg9WjGMqB9zvH8pbzUMupKIAPzqkruU97RtsG+em9WxyhkKhk3/ ksCum/8ufq+8oQR3rYgkBWZwWpm3HVzfi7YRqfBNvdpo+H4AfKMplscAtftvlACP HpVDGm9OifbKRCQ/a8RBjCgDpdwcugPPe1unrII6sKsbC9LPtls= -----END CERTIFICATE-----Generated at Sat Oct 25 11:35:57 2025 by rpki-client