$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/JfijR53-cBzykb27pNHQutb--Bw.roa File: JfijR53-cBzykb27pNHQutb--Bw.roa (raw, json) Hash identifier: 2v52Bj0e/fpd2qDoa9LP3JZvfvgHwUw7Qn9WgVOYrI0= Subject key identifier: 25:F8:A3:47:9D:FE:70:1C:F2:91:BD:BB:A4:D1:D0:BA:D6:FE:F8:1C Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: 02C3 Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/JfijR53-cBzykb27pNHQutb--Bw.roa Signing time: Fri 14 Nov 2025 06:46:44 +0000 ROA not before: Fri 14 Nov 2025 06:46:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 215595 IP address blocks: 202.160.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 15:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: Nov 14 06:46:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=25F8A3479DFE701CF291BDBBA4D1D0BAD6FEF81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:e0:59:1d:fb:78:9a:e5:f2:e6:ff:29:b9: 6c:b3:28:66:b8:96:90:ec:cb:2e:f6:c7:54:40:06: 82:1a:45:44:49:f0:7b:d6:62:12:d7:73:d1:26:e9: 50:a7:49:3f:14:05:a0:67:ba:6b:cb:ec:e8:26:06: d7:7c:39:0a:2f:a8:ba:c5:c7:1c:e4:b6:03:7b:28: 36:1a:63:c0:79:eb:01:79:0b:30:ab:2c:ef:7e:2d: 95:0e:5f:66:ea:37:cc:a1:ca:e6:99:d5:e9:7c:6c: 04:e4:bb:63:42:fb:a6:e4:88:5b:8f:06:cf:91:9a: a6:05:60:bb:ac:6c:e1:44:bb:43:a0:4c:85:34:fd: 00:6a:37:25:d7:63:8d:78:64:0f:e3:62:f9:56:a4: f9:23:93:84:a9:42:62:53:c8:fc:33:d1:1c:c8:01: 82:bb:d9:6c:5d:2f:f3:56:59:3e:87:ba:8f:f0:d1: a6:d7:db:17:e6:70:d8:63:ae:cc:43:1c:15:d6:00: 72:bd:68:f0:32:e8:9a:19:d9:7d:f4:dc:51:4a:5d: 31:7a:9d:11:f4:c0:c2:c5:a9:a3:b5:72:3e:4b:e7: f7:dd:f7:73:59:ff:1e:b9:f0:c1:11:9a:57:c9:38: cd:5e:fb:cf:a3:33:5f:92:1c:71:7b:ab:41:22:1a: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:A3:47:9D:FE:70:1C:F2:91:BD:BB:A4:D1:D0:BA:D6:FE:F8:1C X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/JfijR53-cBzykb27pNHQutb--Bw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.66.0/24 Signature Algorithm: sha256WithRSAEncryption 50:94:7d:ce:16:60:bc:f4:4b:50:ab:5e:30:31:67:ae:70:5a: d9:ef:07:22:e0:a4:16:ca:10:ca:73:cd:e3:db:c2:8a:3f:7b: 75:23:74:96:7f:65:a2:83:83:15:20:3e:53:80:53:7e:eb:e6: 5c:f0:8b:42:84:b1:a1:3a:d9:95:dc:49:c5:53:fb:c7:ff:ba: 90:5f:9e:12:03:36:1d:b8:f5:2e:b9:6c:c8:da:71:e4:6d:02: 2e:9c:fc:a7:a1:c6:6e:3e:3b:41:d7:dc:f1:c8:36:b6:2d:9f: 93:03:69:ae:7b:e2:37:05:25:dc:69:6d:df:f7:87:b4:9f:58: 64:01:16:40:25:b3:85:0d:32:1f:d3:8d:2a:35:13:80:9b:9d: ef:45:a9:0d:0c:be:1f:d6:c8:71:d5:c2:b4:99:f3:40:f6:03: e6:9c:82:00:70:e0:be:d2:14:dd:1c:8c:b9:01:82:71:e6:49: fd:d2:b8:74:59:9a:16:cf:85:ec:84:56:c3:3d:5e:47:67:65: ed:34:25:85:42:fb:8d:f6:33:2b:97:96:9d:54:73:ec:5e:aa: a4:8f:b8:47:c5:1f:d7:26:13:08:f8:32:45:5e:a4:8c:be:6e: 24:2f:78:91:fe:f3:d5:37:d1:f5:92:d4:a1:03:45:6a:e8:c8: e5:9e:ae:f6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNTExMTQw NjQ2NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI1RjhBMzQ3OURGRTcw MUNGMjkxQkRCQkE0RDFEMEJBRDZGRUY4MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCZOBZHft4muXy5v8puWyzKGa4lpDsyy72x1RABoIaRURJ8HvW YhLXc9Em6VCnST8UBaBnumvL7OgmBtd8OQovqLrFxxzktgN7KDYaY8B56wF5CzCr LO9+LZUOX2bqN8yhyuaZ1el8bATku2NC+6bkiFuPBs+RmqYFYLusbOFEu0OgTIU0 /QBqNyXXY414ZA/jYvlWpPkjk4SpQmJTyPwz0RzIAYK72WxdL/NWWT6Huo/w0abX 2xfmcNhjrsxDHBXWAHK9aPAy6JoZ2X303FFKXTF6nRH0wMLFqaO1cj5L5/fd93NZ /x658MERmlfJOM1e+8+jM1+SHHF7q0EiGrTNAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUJfijR53+cBzykb27pNHQutb++BwwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL0pmaWpSNTMtY0J6 eWtiMjdwTkhRdXRiLS1Cdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKoEIwDQYJKoZIhvcNAQELBQADggEBAFCUfc4WYLz0S1CrXjAxZ65wWtnv ByLgpBbKEMpzzePbwoo/e3UjdJZ/ZaKDgxUgPlOAU37r5lzwi0KEsaE62ZXcScVT +8f/upBfnhIDNh249S65bMjaceRtAi6c/Kehxm4+O0HX3PHINrYtn5MDaa574jcF Jdxpbd/3h7SfWGQBFkAls4UNMh/TjSo1E4Cbne9FqQ0Mvh/WyHHVwrSZ80D2A+ac ggBw4L7SFN0cjLkBgnHmSf3SuHRZmhbPheyEVsM9XkdnZe00JYVC+432MyuXlp1U c+xeqqSPuEfFH9cmEwj4MkVepIy+biQveJH+89U30fWS1KEDRWroyOWervY= -----END CERTIFICATE-----Generated at Sat Nov 15 11:52:17 2025 by rpki-client