$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/jLn6tF4P-a7RHjWnA3VcdBK7tqc.roa File: jLn6tF4P-a7RHjWnA3VcdBK7tqc.roa (raw, json) Hash identifier: /LPHtdsfGfudGpcN7NXQViv7xJxIdrGZqZpLI3Op5pA= Subject key identifier: 8C:B9:FA:B4:5E:0F:F9:AE:D1:1E:35:A7:03:75:5C:74:12:BB:B6:A7 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0E20 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/jLn6tF4P-a7RHjWnA3VcdBK7tqc.roa Signing time: Fri 22 Aug 2025 09:03:28 +0000 ROA not before: Fri 22 Aug 2025 09:03:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 2400:df40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3616 (0xe20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 22 09:03:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8CB9FAB45E0FF9AED11E35A703755C7412BBB6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:6c:f0:43:90:a9:10:45:42:28:99:34:9e: 05:f2:31:af:99:d0:d9:27:c6:7d:41:d3:04:fa:f9: fc:24:6d:b9:bd:5b:f0:c5:40:51:c8:38:d9:61:e2: fe:7c:56:1c:ce:8b:d5:21:da:bd:a9:22:f4:dc:98: 2f:5b:33:52:fb:fd:0c:09:f6:2e:8c:ee:58:8a:74: 64:49:f1:6f:93:c4:48:97:ad:51:cf:d5:06:fd:1b: 72:af:91:4d:7a:bf:d7:d0:f2:59:c3:13:25:31:c6: bc:bd:49:92:e8:f7:45:e5:32:28:98:2c:c9:e9:bf: fb:af:04:aa:dd:31:05:8b:ea:dd:74:bf:99:99:83: 27:13:23:23:35:62:5b:0d:a5:42:22:9e:ab:6a:aa: 57:f0:13:5c:fd:78:f8:09:78:01:8c:fb:6c:ec:41: 80:75:55:b4:f7:e9:93:06:c4:64:5b:1b:ad:21:f3: 86:09:db:fd:06:0a:c4:68:75:3c:26:eb:8c:c1:60: 60:d8:bd:32:45:f1:71:b2:ed:f0:8b:6a:fb:e2:c4: d0:c0:0d:61:7a:e3:cf:fa:32:00:d7:be:cc:9c:89: 6f:5e:6a:88:2f:3a:d7:30:a8:64:10:ab:33:9b:c3: 9d:f2:19:52:a3:0f:96:bb:a2:e4:bc:a1:16:7b:7e: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B9:FA:B4:5E:0F:F9:AE:D1:1E:35:A7:03:75:5C:74:12:BB:B6:A7 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/jLn6tF4P-a7RHjWnA3VcdBK7tqc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:df40::/32 Signature Algorithm: sha256WithRSAEncryption cb:de:af:0b:c5:ea:23:bd:50:58:0c:fb:9a:ea:db:5e:e6:70: 58:87:36:3f:be:9d:ba:60:fa:a7:99:37:1d:fd:e6:62:db:8c: d6:f4:ad:35:50:7d:93:37:e4:3c:42:41:1f:68:59:ff:43:95: 32:94:a0:d5:f3:69:6e:7e:2d:b9:bb:79:57:f7:42:5e:7b:8c: 98:af:3c:d3:97:94:54:85:3d:81:a5:ff:2e:e5:8a:7a:65:ca: 04:3d:93:88:a5:f1:64:20:03:c2:d6:84:fe:65:6b:15:41:2d: 8c:f1:43:41:d7:07:d8:59:5b:87:b5:1d:c5:90:7f:54:87:97: a4:49:47:79:12:f6:2c:25:ea:2a:90:d6:12:c4:6f:c0:5e:46: e6:01:3e:bf:69:8a:56:23:63:32:f4:cd:1d:23:61:71:85:21: e5:aa:92:be:c6:aa:d5:b2:9b:d9:a6:3e:a8:be:f5:28:57:26: cc:ba:ab:d2:a0:c1:eb:dc:64:1d:11:25:8f:bd:f0:55:47:b1: 65:19:be:c0:64:ea:0e:51:1d:fc:48:58:05:87:ad:38:88:33: 24:bd:17:22:56:63:71:d0:f3:08:73:a8:40:fe:07:11:b3:eb: 5e:0f:1a:70:73:76:30:07:bd:a4:9f:a8:2e:0f:ae:7d:1d:10: bf:aa:f8:76 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTA4MjIw OTAzMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhDQjlGQUI0NUUwRkY5 QUVEMTFFMzVBNzAzNzU1Qzc0MTJCQkI2QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkNmzwQ5CpEEVCKJk0ngXyMa+Z0Nknxn1B0wT6+fwkbbm9W/DF QFHIONlh4v58VhzOi9Uh2r2pIvTcmC9bM1L7/QwJ9i6M7liKdGRJ8W+TxEiXrVHP 1Qb9G3KvkU16v9fQ8lnDEyUxxry9SZLo90XlMiiYLMnpv/uvBKrdMQWL6t10v5mZ gycTIyM1YlsNpUIinqtqqlfwE1z9ePgJeAGM+2zsQYB1VbT36ZMGxGRbG60h84YJ 2/0GCsRodTwm64zBYGDYvTJF8XGy7fCLavvixNDADWF648/6MgDXvsyciW9eaogv OtcwqGQQqzObw53yGVKjD5a7ouS8oRZ7fgLfAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUjLn6tF4P+a7RHjWnA3VcdBK7tqcwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL2pMbjZ0RjRQLWE3UkhqV25BM1ZjZEJL N3RxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAN9AMA0G CSqGSIb3DQEBCwUAA4IBAQDL3q8LxeojvVBYDPua6tte5nBYhzY/vp26YPqnmTcd /eZi24zW9K01UH2TN+Q8QkEfaFn/Q5UylKDV82lufi25u3lX90Jee4yYrzzTl5RU hT2Bpf8u5Yp6ZcoEPZOIpfFkIAPC1oT+ZWsVQS2M8UNB1wfYWVuHtR3FkH9Uh5ek SUd5EvYsJeoqkNYSxG/AXkbmAT6/aYpWI2My9M0dI2FxhSHlqpK+xqrVspvZpj6o vvUoVybMuqvSoMHr3GQdESWPvfBVR7FlGb7AZOoOUR38SFgFh604iDMkvRciVmNx 0PMIc6hA/gcRs+teDxpwc3YwB72kn6guD659HRC/qvh2 -----END CERTIFICATE-----Generated at Wed Oct 29 08:11:45 2025 by rpki-client