$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/JT-OtLK63GHyr1cPrlfDgUYaxxg.roa File: JT-OtLK63GHyr1cPrlfDgUYaxxg.roa (raw, json) Hash identifier: wubtwxH/xb95xF736pVpicIKUa3Lyjvn7r5EoYtRq3A= Subject key identifier: 25:3F:8E:B4:B2:BA:DC:61:F2:AF:57:0F:AE:57:C3:81:46:1A:C7:18 Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: 028D Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/JT-OtLK63GHyr1cPrlfDgUYaxxg.roa Signing time: Thu 11 Sep 2025 00:36:12 +0000 ROA not before: Thu 11 Sep 2025 00:36:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 215595 IP address blocks: 202.160.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 07:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: Sep 11 00:36:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=253F8EB4B2BADC61F2AF570FAE57C381461AC718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:04:7d:f8:35:f5:d3:ab:72:8f:9a:3a:bf: cd:26:6a:de:da:d1:ee:70:0a:95:a4:f9:0a:f4:13: 51:49:2d:c8:ae:21:17:5b:69:c8:8f:e8:f9:c8:c0: fd:17:20:70:09:28:c7:52:69:e9:28:af:f3:70:09: 8d:7c:62:ed:c5:55:a6:d1:85:e5:7e:3d:16:d2:e4: e9:e2:63:9f:26:6d:f8:16:1c:53:bb:4a:49:26:a2: e8:85:20:57:f6:31:32:68:9c:10:e3:67:f3:23:d9: 6d:01:56:06:0a:d3:c0:89:7f:05:ea:cc:4a:94:fa: 31:d1:b0:8b:d7:34:71:05:c3:d0:e8:1e:3d:cc:4d: 12:ff:1c:12:e9:93:38:78:5b:54:a3:fb:02:22:fb: 40:5b:34:76:1a:2e:4d:8a:03:99:85:f7:ae:62:a5: d9:03:40:54:81:c1:a6:eb:31:b1:c6:a9:4b:a7:fe: e5:64:a1:2f:c4:3b:e5:4f:66:3e:df:9c:d6:35:88: 6e:34:3b:b6:0e:c0:87:61:9a:c4:1a:cb:1c:d2:b7: af:95:fa:6e:3d:de:37:9f:2c:a3:dc:a8:e7:3d:fd: 7e:1f:72:fd:28:80:40:00:19:bd:ac:06:38:c9:a7: 14:cd:f0:7a:2b:e1:7d:75:eb:d8:cd:d5:f0:08:eb: 0d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:8E:B4:B2:BA:DC:61:F2:AF:57:0F:AE:57:C3:81:46:1A:C7:18 X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/JT-OtLK63GHyr1cPrlfDgUYaxxg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.70.0/24 Signature Algorithm: sha256WithRSAEncryption 24:f8:26:4a:8d:3b:b6:f3:82:fd:50:81:60:bd:22:f5:e3:be: f4:6b:3d:52:a9:32:7b:e7:5d:67:73:fc:86:6d:d6:bd:bc:83: 7d:e8:17:7b:97:ca:00:58:bb:48:f2:6f:57:84:9a:ea:26:a1: 3c:4f:67:be:55:25:43:bb:20:65:c8:d3:9a:36:0d:cf:27:3d: 68:be:51:b4:96:6f:b1:67:92:20:74:fe:5c:dc:95:44:48:6e: ab:4c:62:8a:1c:87:30:28:e6:43:cc:25:bc:cf:b5:a1:1f:f6: 36:e5:43:d9:98:0a:bd:9a:99:7f:ef:ce:64:37:e1:3a:ea:6e: 4a:9c:b8:b3:4c:c2:c8:66:7e:c3:f6:38:f5:d6:dc:5f:44:2d: 38:36:4b:0a:25:c2:38:3e:2d:b0:19:6f:17:66:8b:ed:31:86: 75:15:8c:41:af:45:41:dc:c0:ef:18:1c:14:81:64:4f:08:f0: 04:37:21:b3:78:45:7f:60:f8:10:c4:1b:00:59:e0:42:2d:26: e6:3f:ac:d5:2e:4d:6c:e2:8a:01:44:c4:8d:c0:7a:e1:b8:3d: be:6c:86:d1:5b:c8:0b:85:8f:fc:da:29:43:0d:eb:1d:c4:fa: d7:23:e0:69:eb:a7:d3:93:b9:29:58:c5:22:d7:76:bf:ef:f3: 3a:c7:6e:d6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNTA5MTEw MDM2MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI1M0Y4RUI0QjJCQURD NjFGMkFGNTcwRkFFNTdDMzgxNDYxQUM3MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3rwR9+DX106tyj5o6v80mat7a0e5wCpWk+Qr0E1FJLciuIRdb aciP6PnIwP0XIHAJKMdSaekor/NwCY18Yu3FVabRheV+PRbS5OniY58mbfgWHFO7 SkkmouiFIFf2MTJonBDjZ/Mj2W0BVgYK08CJfwXqzEqU+jHRsIvXNHEFw9DoHj3M TRL/HBLpkzh4W1Sj+wIi+0BbNHYaLk2KA5mF965ipdkDQFSBwabrMbHGqUun/uVk oS/EO+VPZj7fnNY1iG40O7YOwIdhmsQayxzSt6+V+m493jefLKPcqOc9/X4fcv0o gEAAGb2sBjjJpxTN8Hor4X1169jN1fAI6w03AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUJT+OtLK63GHyr1cPrlfDgUYaxxgwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL0pULU90TEs2M0dI eXIxY1BybGZEZ1VZYXh4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKoEYwDQYJKoZIhvcNAQELBQADggEBACT4JkqNO7bzgv1QgWC9IvXjvvRr PVKpMnvnXWdz/IZt1r28g33oF3uXygBYu0jyb1eEmuomoTxPZ75VJUO7IGXI05o2 Dc8nPWi+UbSWb7FnkiB0/lzclURIbqtMYoochzAo5kPMJbzPtaEf9jblQ9mYCr2a mX/vzmQ34TrqbkqcuLNMwshmfsP2OPXW3F9ELTg2Swolwjg+LbAZbxdmi+0xhnUV jEGvRUHcwO8YHBSBZE8I8AQ3IbN4RX9g+BDEGwBZ4EItJuY/rNUuTWziigFExI3A euG4Pb5shtFbyAuFj/zaKUMN6x3E+tcj4Gnrp9OTuSlYxSLXdr/v8zrHbtY= -----END CERTIFICATE-----Generated at Fri Sep 19 07:33:13 2025 by rpki-client