$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JCA/frZLp6Fgbt0DRxm9lfre-B7vNG4.roa File: frZLp6Fgbt0DRxm9lfre-B7vNG4.roa (raw, json) Hash identifier: Rs2IdH85RiwC1j3ouzrHgnOxmKbOjg7he//GmCo/Dxw= Subject key identifier: 7E:B6:4B:A7:A1:60:6E:DD:03:47:19:BD:95:FA:DE:F8:1E:EF:34:6E Certificate issuer: /CN=83ACFC46609C1649AB4616D20D64C9D15D834C64 Certificate serial: 026D Authority key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/frZLp6Fgbt0DRxm9lfre-B7vNG4.roa Signing time: Fri 22 Aug 2025 08:51:07 +0000 ROA not before: Fri 22 Aug 2025 08:51:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 103.254.212.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64 Validity Not Before: Aug 22 08:51:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7EB64BA7A1606EDD034719BD95FADEF81EEF346E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:09:34:07:ca:30:62:df:d8:77:c4:ae:5b: 72:11:32:b9:c4:ca:d8:09:9d:c1:84:f0:05:a4:10: 07:2d:8f:ce:bb:36:aa:24:55:e7:d8:99:85:44:94: 06:3e:b5:c0:85:3d:5e:8f:a6:60:c5:ee:d4:dc:8b: 9f:f7:a3:2b:b0:12:f7:2c:03:bc:9a:c3:13:60:da: 52:45:f3:a9:e3:a4:0f:38:2e:44:cc:85:61:f8:18: 1c:17:84:25:e4:e1:be:e1:23:68:64:3e:fb:79:a3: 99:32:5b:a2:1f:96:d2:29:d0:9e:e0:89:de:ec:4f: 9d:2e:5f:a1:a9:e7:fc:29:69:41:3c:2d:77:d7:ad: b0:86:48:0b:09:2e:2c:16:4a:88:94:79:17:a9:19: 6b:3e:dc:55:c0:2c:81:95:2a:2d:09:fe:97:7d:70: 93:51:16:33:65:28:3b:82:68:56:90:51:55:73:f5: f5:1c:8f:46:d6:60:7d:fa:26:c3:64:34:1c:52:a8: fd:e8:44:62:ae:ef:99:43:ef:1c:14:c1:63:c2:6b: be:bc:14:dd:73:d2:61:c7:68:17:9d:49:11:c2:57: 29:a3:c3:71:1c:f9:ac:40:33:cc:00:0a:bd:bb:52: de:35:5f:0e:43:d0:de:77:ed:af:8e:db:b2:55:e2: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:4B:A7:A1:60:6E:DD:03:47:19:BD:95:FA:DE:F8:1E:EF:34:6E X509v3 Authority Key Identifier: keyid:83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/frZLp6Fgbt0DRxm9lfre-B7vNG4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.254.212.0/23 Signature Algorithm: sha256WithRSAEncryption ad:f6:df:9d:43:8e:5f:ea:74:c4:cb:42:db:90:55:c9:be:f8: b4:04:2f:e7:63:b9:55:18:78:af:01:09:e4:ed:1e:69:c4:1a: 51:d8:5c:65:c8:9b:ae:f3:1d:ff:5e:97:17:f3:6c:26:7c:8d: 5c:af:8c:26:1b:16:f7:d7:c4:27:9f:63:8b:d1:d5:80:a2:7c: c1:18:c5:05:45:1a:9d:6c:d0:2c:df:30:db:db:1d:87:f5:07: 07:4e:ab:38:2a:63:fb:37:76:4a:9f:1a:ef:ec:8a:f9:a5:58: 3c:ab:0f:d8:fe:6b:be:45:a4:2c:cd:fe:a7:82:f4:6b:25:65: 6c:0f:26:be:b6:84:65:2e:ef:eb:be:8b:f4:25:75:84:e2:0b: 21:7d:0f:a7:56:b4:dd:d4:af:12:3e:6e:68:6b:07:7a:b6:38: 2f:64:5f:51:20:f2:fc:43:51:79:3a:36:88:c6:be:e1:8e:ae: e5:e0:fe:fe:fc:9b:42:53:63:7c:e7:8f:b3:fc:ad:70:ec:6c: 11:d0:2d:a7:6c:27:84:6a:bc:d0:d2:83:45:f4:c5:9b:9e:98: 8d:be:0e:1d:ca:c6:ac:72:d6:37:61:ca:8e:65:2e:ac:00:2d: 82:56:8b:e7:80:cf:a3:e3:cd:8d:c5:0a:1e:b8:e8:87:ed:c2: fd:ce:a9:7f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNB Q0ZDNDY2MDlDMTY0OUFCNDYxNkQyMEQ2NEM5RDE1RDgzNEM2NDAeFw0yNTA4MjIw ODUxMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdFQjY0QkE3QTE2MDZF REQwMzQ3MTlCRDk1RkFERUY4MUVFRjM0NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHOgk0B8owYt/Yd8SuW3IRMrnEytgJncGE8AWkEActj867Nqok VefYmYVElAY+tcCFPV6PpmDF7tTci5/3oyuwEvcsA7yawxNg2lJF86njpA84LkTM hWH4GBwXhCXk4b7hI2hkPvt5o5kyW6IfltIp0J7gid7sT50uX6Gp5/wpaUE8LXfX rbCGSAsJLiwWSoiUeRepGWs+3FXALIGVKi0J/pd9cJNRFjNlKDuCaFaQUVVz9fUc j0bWYH36JsNkNBxSqP3oRGKu75lD7xwUwWPCa768FN1z0mHHaBedSRHCVymjw3Ec +axAM8wACr27Ut41Xw5D0N537a+O27JV4l2fAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUfrZLp6Fgbt0DRxm9lfre+B7vNG4wHwYDVR0jBBgwFoAUg6z8RmCcFkmrRhbS DWTJ0V2DTGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkNBL2c2 ejhSbUNjRmttclJoYlNEV1RKMFYyRFRHUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZzZ6OFJtQ2NGa21yUmhiU0RXVEowVjJEVEdRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkNBL2ZyWkxwNkZnYnQwRFJ4bTlsZnJlLUI3 dk5HNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn/tQwDQYJ KoZIhvcNAQELBQADggEBAK32351Djl/qdMTLQtuQVcm++LQEL+djuVUYeK8BCeTt HmnEGlHYXGXIm67zHf9elxfzbCZ8jVyvjCYbFvfXxCefY4vR1YCifMEYxQVFGp1s 0CzfMNvbHYf1BwdOqzgqY/s3dkqfGu/sivmlWDyrD9j+a75FpCzN/qeC9GslZWwP Jr62hGUu7+u+i/QldYTiCyF9D6dWtN3UrxI+bmhrB3q2OC9kX1Eg8vxDUXk6NojG vuGOruXg/v78m0JTY3znj7P8rXDsbBHQLadsJ4RqvNDSg0X0xZuemI2+Dh3Kxqxy 1jdhyo5lLqwALYJWi+eAz6PjzY3FCh646Iftwv3OqX8= -----END CERTIFICATE-----Generated at Sun Oct 26 03:41:19 2025 by rpki-client