$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/u0MjLfOn8TcLZeyp0axyL5FVV-0.roa File: u0MjLfOn8TcLZeyp0axyL5FVV-0.roa (raw, json) Hash identifier: pFYGUDdHuv4qF9mEKWKrTL+z4yM9CpOqnXm2+uioeSQ= Subject key identifier: BB:43:23:2D:F3:A7:F1:37:0B:65:EC:A9:D1:AC:72:2F:91:55:57:ED Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0E2C Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/u0MjLfOn8TcLZeyp0axyL5FVV-0.roa Signing time: Fri 22 Aug 2025 09:03:31 +0000 ROA not before: Fri 22 Aug 2025 09:03:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 58.86.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 09:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3628 (0xe2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 22 09:03:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BB43232DF3A7F1370B65ECA9D1AC722F915557ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:e0:0d:9b:f7:c6:25:f0:a9:e0:d3:15:04: 5a:f9:15:89:e3:ab:f3:be:24:8f:b0:bb:c5:b1:85: d1:92:5a:39:a6:53:78:bd:06:41:58:1e:81:51:7c: 4d:81:a1:3d:d6:53:e2:70:46:3a:ee:9f:72:4d:a6: a7:c5:75:e4:15:d5:72:2f:88:9f:8a:17:2d:4a:92: dc:8e:77:0a:2b:01:bc:65:1b:c5:bb:e3:c4:0b:34: ba:03:4c:7d:68:48:bc:f1:43:f2:76:5a:ac:de:2d: 05:48:cf:7f:3f:7b:fb:7c:54:66:ec:06:8d:34:1c: d0:b3:b7:9b:c9:74:c6:98:a6:62:0a:b5:d9:86:1b: 02:8c:29:6f:9c:94:5d:77:f8:0e:21:71:f3:f4:a0: d7:35:e5:99:ca:cf:a0:fe:d2:86:fb:c4:f8:70:c0: 14:bf:9b:6f:71:c1:44:a6:0f:4e:95:34:8a:f2:3c: 5f:ce:bc:1b:94:d3:af:f0:29:3f:8d:68:6d:6c:f1: 6b:53:c6:78:66:e2:af:67:df:29:23:ed:44:71:10: 28:f9:6b:85:4c:1e:f8:d6:45:ff:47:70:57:d9:de: 1f:c6:35:a7:f0:06:41:61:2a:88:69:94:e4:bc:7c: b8:9f:d6:fb:55:34:41:d3:3a:5e:8c:10:2c:73:79: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:43:23:2D:F3:A7:F1:37:0B:65:EC:A9:D1:AC:72:2F:91:55:57:ED X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/u0MjLfOn8TcLZeyp0axyL5FVV-0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.86.46.0/24 Signature Algorithm: sha256WithRSAEncryption 09:38:bb:7e:dc:98:25:5b:71:a1:08:ab:a2:a6:3f:7c:e6:2a: cb:de:d9:8d:53:f8:cb:b9:e3:8b:90:cf:50:92:63:d0:38:fe: 2e:08:ab:8c:a6:a3:50:de:f1:11:97:80:e8:4a:f2:bf:0b:df: a2:bb:54:6f:01:ba:dc:84:b6:ca:64:cb:da:0a:68:58:bd:58: 62:6c:1b:de:28:c5:83:a7:77:db:72:a8:01:bc:e7:dc:b4:74: 88:0e:a3:97:b5:af:e1:6f:b1:a7:2c:f0:e3:66:cf:fd:35:63: ee:6d:b0:7c:8f:71:4e:2a:9f:a3:e8:b1:d0:36:ec:7d:40:1c: e3:6d:46:e9:18:e1:57:f2:ca:45:25:4c:4f:aa:1c:ef:db:45: a7:0a:63:91:26:c1:7d:43:3b:6b:22:db:04:ad:fa:1e:fc:e2: 05:54:71:a2:09:17:69:15:6d:d0:df:fc:1d:3f:b0:4c:b1:1a: a6:8b:ee:50:d1:18:2e:4e:9b:f5:0f:73:16:f1:18:ec:6f:63: 52:5f:ee:1e:8c:1d:32:27:c9:62:44:90:b9:5b:5a:57:fd:43: 24:38:d3:5c:b4:bd:ab:1b:1d:71:92:40:75:8f:19:2d:7d:9d: 2b:6b:0d:27:8e:f0:0b:f8:70:e0:49:7f:10:d1:c6:24:3d:8d: 3a:7d:83:36 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTA4MjIw OTAzMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJCNDMyMzJERjNBN0Yx MzcwQjY1RUNBOUQxQUM3MjJGOTE1NTU3RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC58uANm/fGJfCp4NMVBFr5FYnjq/O+JI+wu8WxhdGSWjmmU3i9 BkFYHoFRfE2BoT3WU+JwRjrun3JNpqfFdeQV1XIviJ+KFy1KktyOdworAbxlG8W7 48QLNLoDTH1oSLzxQ/J2WqzeLQVIz38/e/t8VGbsBo00HNCzt5vJdMaYpmIKtdmG GwKMKW+clF13+A4hcfP0oNc15ZnKz6D+0ob7xPhwwBS/m29xwUSmD06VNIryPF/O vBuU06/wKT+NaG1s8WtTxnhm4q9n3ykj7URxECj5a4VMHvjWRf9HcFfZ3h/GNafw BkFhKohplOS8fLif1vtVNEHTOl6MECxzeXMPAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUu0MjLfOn8TcLZeyp0axyL5FVV+0wHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL3UwTWpMZk9uOFRjTFpleXAwYXh5TDVG VlYtMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA6Vi4wDQYJ KoZIhvcNAQELBQADggEBAAk4u37cmCVbcaEIq6KmP3zmKsve2Y1T+Mu544uQz1CS Y9A4/i4Iq4ymo1De8RGXgOhK8r8L36K7VG8ButyEtspky9oKaFi9WGJsG94oxYOn d9tyqAG859y0dIgOo5e1r+Fvsacs8ONmz/01Y+5tsHyPcU4qn6PosdA27H1AHONt RukY4VfyykUlTE+qHO/bRacKY5EmwX1DO2si2wSt+h784gVUcaIJF2kVbdDf/B0/ sEyxGqaL7lDRGC5Om/UPcxbxGOxvY1Jf7h6MHTInyWJEkLlbWlf9QyQ401y0vasb HXGSQHWPGS19nStrDSeO8Av4cOBJfxDRxiQ9jTp9gzY= -----END CERTIFICATE-----Generated at Wed Oct 29 08:20:20 2025 by rpki-client