$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/jFvLfPC02_ndHiHFt2mAldtwwZk.roa File: jFvLfPC02_ndHiHFt2mAldtwwZk.roa (raw, json) Hash identifier: Kw7ZynrZ7I7k68tbzP6vE3jEm/LjvzArRoedzDlVi8g= Subject key identifier: 8C:5B:CB:7C:F0:B4:DB:F9:DD:1E:21:C5:B7:69:80:95:DB:70:C1:99 Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 0570 Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/jFvLfPC02_ndHiHFt2mAldtwwZk.roa Signing time: Fri 22 Aug 2025 08:49:01 +0000 ROA not before: Fri 22 Aug 2025 08:49:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 208223 IP address blocks: 160.25.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Aug 22 08:49:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8C5BCB7CF0B4DBF9DD1E21C5B7698095DB70C199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:b2:b9:02:19:f2:f0:fb:d3:36:e8:7b:bb: 42:85:4f:f5:fe:dd:e9:c3:7a:e1:2a:e3:a9:75:76: 8a:2c:bb:11:cb:27:cf:b1:e1:b9:35:c5:db:2b:8e: cf:a5:58:06:2f:6b:db:0b:9a:df:d2:a3:91:16:4c: 82:d9:41:bf:90:bd:82:6c:ff:0e:a9:04:03:1b:dd: 2c:d8:e0:3f:06:a9:05:41:ad:17:ed:4c:54:87:a7: 84:e3:45:9c:12:b5:82:75:02:73:33:a1:82:bb:9f: c2:a6:dc:12:0b:d5:13:b0:a6:94:0d:1f:a5:a7:ba: 18:15:15:9f:41:6d:87:0c:3e:89:75:ba:bd:8e:ae: 2d:1b:de:d2:e4:c6:1f:48:20:a0:29:86:98:68:b6: a4:fe:42:49:ae:56:e7:13:80:4a:80:32:7b:15:58: 80:b1:34:4a:27:5f:ae:6d:30:fd:58:e3:c0:cb:56: 32:0a:94:84:12:5d:d4:b0:52:6e:b8:d8:70:91:f1: 31:36:d3:4a:4c:54:d6:0a:1c:8e:07:2e:88:ff:0b: 36:ea:6a:ce:be:16:f7:10:7b:8c:f0:b2:89:37:fc: 92:68:ff:83:e2:f4:24:f1:17:b3:9d:e4:de:30:11: 2d:e1:a4:98:83:60:01:c6:27:61:3f:9d:e6:38:cb: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5B:CB:7C:F0:B4:DB:F9:DD:1E:21:C5:B7:69:80:95:DB:70:C1:99 X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/jFvLfPC02_ndHiHFt2mAldtwwZk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.104.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:24:79:3b:78:c4:b6:2e:08:46:8c:ca:fe:4a:06:01:5f:ec: ef:2b:2f:fc:cc:6b:68:28:a7:be:42:eb:26:1f:17:f4:48:22: 51:7b:98:6d:2c:ef:ea:10:b7:7f:80:97:a1:3c:63:66:75:c2: 0e:b0:12:3d:d9:7e:e3:c5:a5:bb:7b:3c:54:b3:c8:82:a6:19: bd:59:a7:b1:ec:e3:62:89:d4:3c:e5:9c:49:a8:34:11:ed:f0: 7e:4f:31:54:e7:3e:40:1e:64:a0:c2:cb:cb:cc:a4:0b:b0:6c: 14:25:73:6a:62:b3:fc:66:6d:97:96:c7:66:0e:ad:fc:8c:d1: 4d:1c:9f:08:81:4a:df:e2:54:27:ea:b2:23:4c:44:ac:5f:80: 0e:57:c6:de:a7:2e:48:e1:3d:07:f0:c8:75:4c:42:b8:37:08: ec:d1:73:7a:2c:56:9c:ea:ae:10:0a:8c:f1:39:e9:09:98:9a: 57:2b:cb:9f:65:12:49:f6:8c:ea:db:c7:39:a7:75:df:10:4c: 0c:fe:54:b9:a5:76:a9:92:2b:33:97:a2:b4:a6:a8:4b:9b:5b: e2:a9:1c:99:8f:e4:bb:7e:c3:85:2d:ce:2a:cf:ad:a3:5b:80: 2d:bc:20:a9:d3:c2:09:c4:a8:82:b4:b1:f6:41:6b:de:5d:fc: 04:27:52:63 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTA4MjIw ODQ5MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhDNUJDQjdDRjBCNERC RjlERDFFMjFDNUI3Njk4MDk1REI3MEMxOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwxbK5Ahny8PvTNuh7u0KFT/X+3enDeuEq46l1doosuxHLJ8+x 4bk1xdsrjs+lWAYva9sLmt/So5EWTILZQb+QvYJs/w6pBAMb3SzY4D8GqQVBrRft TFSHp4TjRZwStYJ1AnMzoYK7n8Km3BIL1ROwppQNH6WnuhgVFZ9BbYcMPol1ur2O ri0b3tLkxh9IIKAphphotqT+QkmuVucTgEqAMnsVWICxNEonX65tMP1Y48DLVjIK lIQSXdSwUm642HCR8TE200pMVNYKHI4HLoj/Czbqas6+FvcQe4zwsok3/JJo/4Pi 9CTxF7Od5N4wES3hpJiDYAHGJ2E/neY4y0RPAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUjFvLfPC02/ndHiHFt2mAldtwwZkwHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvakZ2TGZQQzAyX25kSGlI RnQybUFsZHR3d1prLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AaAZaDANBgkqhkiG9w0BAQsFAAOCAQEAfyR5O3jEti4IRozK/koGAV/s7ysv/Mxr aCinvkLrJh8X9EgiUXuYbSzv6hC3f4CXoTxjZnXCDrASPdl+48Wlu3s8VLPIgqYZ vVmnsezjYonUPOWcSag0Ee3wfk8xVOc+QB5koMLLy8ykC7BsFCVzamKz/GZtl5bH Zg6t/IzRTRyfCIFK3+JUJ+qyI0xErF+ADlfG3qcuSOE9B/DIdUxCuDcI7NFzeixW nOquEAqM8TnpCZiaVyvLn2USSfaM6tvHOad13xBMDP5UuaV2qZIrM5eitKaoS5tb 4qkcmY/ku37DhS3OKs+to1uALbwgqdPCCcSogrSx9kFr3l38BCdSYw== -----END CERTIFICATE-----Generated at Tue Sep 9 18:56:39 2025 by rpki-client