$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/jLielrwY7K23zu4SkX4C3HUui3k.roa File: jLielrwY7K23zu4SkX4C3HUui3k.roa (raw, json) Hash identifier: aD9XeVmBEt2oFztOqWTZGK+cwrd+bi5eG4VVkIIEwTQ= Subject key identifier: 8C:B8:9E:96:BC:18:EC:AD:B7:CE:EE:12:91:7E:02:DC:75:2E:8B:79 Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Certificate serial: 04DC Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/jLielrwY7K23zu4SkX4C3HUui3k.roa Signing time: Fri 22 Aug 2025 08:50:41 +0000 ROA not before: Fri 22 Aug 2025 08:50:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 6939 IP address blocks: 160.30.78.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Validity Not Before: Aug 22 08:50:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8CB89E96BC18ECADB7CEEE12917E02DC752E8B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:f2:20:df:a5:19:6f:54:4a:62:19:33:ba: 80:f7:d5:ea:63:1c:a3:be:58:21:b2:cc:b1:6f:bd: 83:65:c9:ed:c9:ac:8e:40:5f:d5:1d:60:ec:74:a1: a6:6a:a9:bd:05:f8:96:89:33:d5:00:2c:ee:4a:c5: 28:20:80:f9:e7:74:18:0a:30:21:c3:54:58:f4:51: 09:d8:dc:ca:bc:a0:f9:f0:fa:0d:d9:86:ea:83:a6: 1c:9d:27:0e:e1:65:63:84:60:a3:32:b8:39:d5:d1: 74:82:de:a6:5f:a9:de:8c:76:b2:46:5c:08:7b:49: d5:8b:56:c3:5e:cf:3c:93:c0:53:14:4c:23:25:b2: f4:7c:57:14:9e:c9:cc:cf:f1:5a:33:54:21:4e:66: 94:ef:68:fb:8e:ed:aa:df:f2:25:71:95:6b:14:a4: 5e:5f:8c:3d:07:bb:75:7c:ce:0e:bb:22:53:11:3c: b7:e5:d4:ca:12:43:9d:52:da:a1:52:07:01:cb:2a: 2a:70:ba:fd:39:5b:a9:fa:a0:2c:20:ad:18:11:ea: af:f6:75:df:ce:19:bc:bc:79:9c:3c:40:b2:89:b5: 37:3a:d1:61:54:b6:b8:c1:a8:69:73:13:ec:64:82: 66:da:ce:65:46:38:fc:55:16:ef:0a:62:14:69:85: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B8:9E:96:BC:18:EC:AD:B7:CE:EE:12:91:7E:02:DC:75:2E:8B:79 X509v3 Authority Key Identifier: keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/jLielrwY7K23zu4SkX4C3HUui3k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.78.0/23 Signature Algorithm: sha256WithRSAEncryption 32:b5:4c:f1:73:6f:33:b8:a1:e4:5a:97:6c:77:b4:c7:72:1f: 45:1b:5d:7e:e7:27:44:a3:b3:5d:25:4d:41:2a:28:13:77:14: e6:2b:19:36:cf:e6:6f:82:bb:bd:9b:d1:2d:0f:91:db:fe:cf: 0d:5c:e8:db:75:41:1d:a0:f7:8c:76:32:3c:bd:4d:b4:db:ae: 9a:ae:bb:84:eb:5e:03:4b:dc:41:5e:dd:40:7c:67:cb:8d:a4: c8:41:d4:53:d6:a4:f2:d7:18:e3:47:84:81:17:fb:30:6b:bf: c6:2f:9c:e7:a0:9c:bf:24:58:54:6e:59:10:63:81:96:1a:39: ee:09:6b:c0:f7:21:b2:6e:75:9a:6d:83:cc:72:9e:4e:0a:9c: fc:1a:2a:95:1f:64:42:e1:2f:33:da:83:1c:60:78:d4:66:aa: a8:b8:b6:6a:d0:a3:2e:a6:f8:1c:2b:1e:ec:9f:a6:b3:ee:66: a8:e6:af:4f:44:55:15:e3:81:65:4e:d8:87:cd:57:0d:9e:ec: a6:20:66:4d:95:3f:30:93:2a:d4:d4:8b:e2:fe:24:ba:04:c9: 53:cc:57:e0:7f:87:6e:26:68:23:92:7d:9b:9b:48:da:cc:79: e6:ab:90:8e:a8:36:61:5a:88:48:cf:13:bd:9c:7a:24:fb:46: da:a1:25:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDRG OERDRjY2QjI1QjcxOTA1NkQxRUQ2NUMxNkVBOTI1N0U1NTUzRDAeFw0yNTA4MjIw ODUwNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhDQjg5RTk2QkMxOEVD QURCN0NFRUUxMjkxN0UwMkRDNzUyRThCNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4UvIg36UZb1RKYhkzuoD31epjHKO+WCGyzLFvvYNlye3JrI5A X9UdYOx0oaZqqb0F+JaJM9UALO5KxSgggPnndBgKMCHDVFj0UQnY3Mq8oPnw+g3Z huqDphydJw7hZWOEYKMyuDnV0XSC3qZfqd6MdrJGXAh7SdWLVsNezzyTwFMUTCMl svR8VxSeyczP8VozVCFOZpTvaPuO7arf8iVxlWsUpF5fjD0Hu3V8zg67IlMRPLfl 1MoSQ51S2qFSBwHLKipwuv05W6n6oCwgrRgR6q/2dd/OGby8eZw8QLKJtTc60WFU trjBqGlzE+xkgmbazmVGOPxVFu8KYhRphfO/AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjLielrwY7K23zu4SkX4C3HUui3kwHwYDVR0jBBgwFoAURPjc9msltxkFbR7W XBbqklflVT0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9V L1JQamM5bXNsdHhrRmJSN1dYQmJxa2xmbFZUMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUlBqYzltc2x0eGtGYlI3V1hCYnFrbGZsVlQwLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VL2pMaWVscndZN0syM3p1NFNr WDRDM0hVdWkzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg Hk4wDQYJKoZIhvcNAQELBQADggEBADK1TPFzbzO4oeRal2x3tMdyH0UbXX7nJ0Sj s10lTUEqKBN3FOYrGTbP5m+Cu72b0S0Pkdv+zw1c6Nt1QR2g94x2Mjy9TbTbrpqu u4TrXgNL3EFe3UB8Z8uNpMhB1FPWpPLXGONHhIEX+zBrv8YvnOegnL8kWFRuWRBj gZYaOe4Ja8D3IbJudZptg8xynk4KnPwaKpUfZELhLzPagxxgeNRmqqi4tmrQoy6m +BwrHuyfprPuZqjmr09EVRXjgWVO2IfNVw2e7KYgZk2VPzCTKtTUi+L+JLoEyVPM V+B/h24maCOSfZubSNrMeearkI6oNmFaiEjPE72ceiT7RtqhJXU= -----END CERTIFICATE-----Generated at Mon Sep 8 11:22:45 2025 by rpki-client