$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIRUN/j7K_nCeKsBMYe9_jdu8NKQ1vn1Y.roa File: j7K_nCeKsBMYe9_jdu8NKQ1vn1Y.roa (raw, json) Hash identifier: oP7Q5gapANp1URfuC5e25xUXVnEBjFJWyMYVybOusro= Subject key identifier: 8F:B2:BF:9C:27:8A:B0:13:18:7B:DF:E3:76:EF:0D:29:0D:6F:9F:56 Certificate issuer: /CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Certificate serial: 0250 Authority key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/j7K_nCeKsBMYe9_jdu8NKQ1vn1Y.roa Signing time: Thu 05 Mar 2026 10:04:31 +0000 ROA not before: Thu 05 Mar 2026 10:04:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150766 IP address blocks: 157.66.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Validity Not Before: Mar 5 10:04:31 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8FB2BF9C278AB013187BDFE376EF0D290D6F9F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:d3:93:96:84:58:79:8d:8f:80:4d:2d:84: 8f:56:a5:67:9c:05:d3:b8:4b:25:45:e9:5a:31:6b: 63:48:84:23:bb:67:8d:60:10:5b:85:ac:f3:0b:2d: 47:8a:f0:e9:89:2f:77:a0:c0:11:94:94:32:f3:a8: 1d:9b:cd:3c:47:da:e8:74:7e:13:45:81:87:eb:e0: fa:d5:8c:ee:e2:b4:9e:cc:72:ff:23:f7:69:a2:da: 4e:cb:60:95:53:fa:9e:ee:46:56:35:d9:9a:b6:7c: c6:b0:d5:6f:6b:5a:47:38:a2:26:85:03:52:9d:bc: 52:6e:7f:fe:7e:50:f6:62:81:18:1c:95:aa:cd:f3: 9d:4b:41:8f:9a:67:17:4a:17:0d:97:e1:c3:55:01: a3:01:94:9d:62:88:5b:7f:97:0a:e9:d6:1c:96:f3: e7:c1:29:5b:f1:6c:e6:1c:a0:40:db:a5:ff:a4:32: 1e:78:56:fd:d4:e8:88:9e:1e:7a:c4:23:a2:00:6c: 46:da:e8:ff:21:93:21:e3:f1:74:6b:07:9d:4e:0f: 0b:e6:41:b7:86:56:e2:d9:1c:38:99:6e:07:cd:9b: b2:c1:f0:6e:e1:12:52:98:15:d0:bc:e3:dd:20:f2: 6f:12:84:9e:8c:ab:8e:f8:a4:35:1f:26:38:2a:2d: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B2:BF:9C:27:8A:B0:13:18:7B:DF:E3:76:EF:0D:29:0D:6F:9F:56 X509v3 Authority Key Identifier: keyid:D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/j7K_nCeKsBMYe9_jdu8NKQ1vn1Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.166.0/23 Signature Algorithm: sha256WithRSAEncryption 53:ed:20:72:79:6b:89:67:95:3a:df:21:1f:51:3c:ec:33:5e: 4e:d5:a5:72:f3:01:ac:98:41:4f:73:f9:2f:5b:76:59:c8:ad: 98:43:97:15:85:dd:44:c2:4b:b0:71:5f:06:74:95:74:2a:31: 10:bf:f4:f7:5b:d9:6b:30:6f:73:60:a0:d4:87:83:44:f0:0b: 75:8f:74:8f:9b:28:ef:14:10:ec:86:5c:30:a2:49:52:12:f5: c2:d3:c2:71:ad:16:6c:48:bd:45:d1:10:f6:66:bc:2a:34:e9: 34:59:50:a2:da:06:2b:ca:92:7b:56:53:da:56:0c:77:49:d1: bd:ba:45:38:16:c0:f2:8a:73:84:8b:73:dc:9e:39:b6:e5:1a: bd:54:3a:6f:32:5a:0e:7b:de:a5:a4:1c:23:2f:72:9d:a5:57: af:3e:f8:6d:6c:bc:c8:63:41:da:e0:43:2b:d0:55:1e:73:c5: 4c:32:f0:c8:2d:28:1c:b8:b7:bf:eb:17:24:e7:44:71:61:de: b8:51:d1:3f:51:8d:f4:5e:4f:eb:39:c0:ab:b4:34:e8:57:57: 84:71:08:ab:8d:81:f8:45:ed:e8:91:fa:cd:8e:22:17:09:07: 45:1d:f6:78:06:f5:ad:af:e4:ff:3f:79:f0:a9:41:df:92:2c: 9c:13:6f:5d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDk2 NkI1NTkwOTMyNDE4MEE4OEE0NUUxRjY4M0NGNEQyRUQ5QkNBNTAeFw0yNjAzMDUx MDA0MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGQjJCRjlDMjc4QUIw MTMxODdCREZFMzc2RUYwRDI5MEQ2RjlGNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJBtOTloRYeY2PgE0thI9WpWecBdO4SyVF6Voxa2NIhCO7Z41g EFuFrPMLLUeK8OmJL3egwBGUlDLzqB2bzTxH2uh0fhNFgYfr4PrVjO7itJ7Mcv8j 92mi2k7LYJVT+p7uRlY12Zq2fMaw1W9rWkc4oiaFA1KdvFJuf/5+UPZigRgclarN 851LQY+aZxdKFw2X4cNVAaMBlJ1iiFt/lwrp1hyW8+fBKVvxbOYcoEDbpf+kMh54 Vv3U6IieHnrEI6IAbEba6P8hkyHj8XRrB51ODwvmQbeGVuLZHDiZbgfNm7LB8G7h ElKYFdC8490g8m8ShJ6Mq474pDUfJjgqLUH1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUj7K/nCeKsBMYe9/jdu8NKQ1vn1YwHwYDVR0jBBgwFoAU2Wa1WQkyQYCoikXh 9oPPTS7ZvKUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElSVU4v MldhMVdRa3lRWUNvaWtYaDlvUFBUUzdadktVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8yV2ExV1FreVFZQ29pa1hoOW9QUFRTN1p2S1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSVJVTi9qN0tfbkNlS3NCTVllOV9qZHU4 TktRMXZuMVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKm MA0GCSqGSIb3DQEBCwUAA4IBAQBT7SByeWuJZ5U63yEfUTzsM15O1aVy8wGsmEFP c/kvW3ZZyK2YQ5cVhd1EwkuwcV8GdJV0KjEQv/T3W9lrMG9zYKDUh4NE8At1j3SP myjvFBDshlwwoklSEvXC08JxrRZsSL1F0RD2ZrwqNOk0WVCi2gYrypJ7VlPaVgx3 SdG9ukU4FsDyinOEi3Pcnjm25Rq9VDpvMloOe96lpBwjL3KdpVevPvhtbLzIY0Ha 4EMr0FUec8VMMvDILSgcuLe/6xck50RxYd64UdE/UY30Xk/rOcCrtDToV1eEcQir jYH4Re3okfrNjiIXCQdFHfZ4BvWtr+T/P3nwqUHfkiycE29d -----END CERTIFICATE-----Generated at Sun Mar 8 00:06:40 2026 by rpki-client