$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KBv3kRs-r24iHr8lwe0Sse1tC7w.roa File: KBv3kRs-r24iHr8lwe0Sse1tC7w.roa (raw, json) Hash identifier: b6WPwqNVbX+PbokE42HoT2Fmrv3oulZ7GvOh256BrKU= Subject key identifier: 28:1B:F7:91:1B:3E:AF:6E:22:1E:BF:25:C1:ED:12:B1:ED:6D:0B:BC Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: 02CB Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KBv3kRs-r24iHr8lwe0Sse1tC7w.roa Signing time: Fri 14 Nov 2025 06:50:29 +0000 ROA not before: Fri 14 Nov 2025 06:50:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 215595 IP address blocks: 202.160.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 15:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: Nov 14 06:50:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=281BF7911B3EAF6E221EBF25C1ED12B1ED6D0BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:d7:13:f6:a2:78:45:cf:31:d5:b9:09:46: 24:c2:43:70:01:72:95:69:7d:03:5d:c2:2f:a6:98: df:a2:03:31:42:b7:90:b4:66:15:d8:fa:e8:ab:13: b1:b2:13:c3:d2:b4:8f:2c:ea:7c:e3:84:16:ac:0b: f2:1b:64:b0:a5:05:d0:6f:f7:b5:0a:03:cf:77:e2: 55:62:32:be:95:16:e5:2e:73:4f:e6:69:4c:26:56: aa:86:d6:64:74:f2:74:38:31:49:3e:63:04:fe:91: cf:12:53:31:6b:d0:3a:1b:e3:6e:cf:b3:35:5a:56: b1:c7:2c:0f:ff:a8:db:32:f6:5f:76:09:87:de:ee: 00:ae:60:ed:9f:a5:58:88:6b:f6:80:3d:94:b9:20: 0e:e4:e2:9a:f9:c4:86:ff:50:a5:5f:f6:3f:66:c1: 02:5d:83:bf:a4:44:6e:5a:12:15:4c:a5:86:4c:9e: f2:80:7b:41:8f:f1:6e:7d:b9:1d:12:ad:14:c4:df: 37:ec:f5:49:42:86:50:1c:b1:67:66:25:05:8b:8e: a7:06:58:5b:31:a2:e2:a4:49:67:b0:ad:27:4f:7e: c7:62:a3:ee:b7:aa:6c:b5:d5:1c:00:bc:3d:ac:f5: a0:41:3f:a0:33:47:5f:8a:4a:33:35:53:a2:f2:45: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1B:F7:91:1B:3E:AF:6E:22:1E:BF:25:C1:ED:12:B1:ED:6D:0B:BC X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/KBv3kRs-r24iHr8lwe0Sse1tC7w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.90.0/24 Signature Algorithm: sha256WithRSAEncryption 89:76:8b:66:c3:f9:8e:94:62:dd:db:b5:ef:e0:89:29:61:96: 03:c0:bf:b7:c4:65:f3:5a:43:1c:9a:62:cc:1c:cf:5b:c9:7c: 87:0e:a8:4d:07:af:2f:c2:43:02:9e:a6:6f:10:da:55:19:e9: ec:e4:d6:a9:67:a6:e7:ec:54:f9:4c:7f:ce:08:08:d3:92:c6: 74:1c:dd:a7:d3:5a:58:a2:1b:41:0a:b2:5b:55:72:4e:20:f5: 9a:dc:d3:15:bd:37:39:c4:2b:93:a1:3a:38:99:26:43:03:2e: fd:8a:45:0d:e3:ec:0d:f3:08:d7:de:e7:ee:4f:8c:90:cc:fb: 6e:c6:08:11:81:00:ea:ec:5e:da:12:ea:02:e5:c0:2a:a6:2c: 99:ec:88:bf:e0:9a:dc:53:9f:95:2a:7e:e3:ce:90:04:68:30: d4:9e:00:f1:c8:4a:63:e1:fe:d0:e2:42:70:01:f6:a9:3d:aa: 3a:de:40:9c:d7:0b:e2:66:9b:aa:ed:e1:9b:bf:6f:cb:8c:67: 29:10:4f:62:5b:5c:a7:20:22:84:8a:93:38:1d:4e:4f:bf:cf: 9b:f4:f4:a3:91:fd:c5:f7:1c:60:9a:f9:6b:1a:37:3c:92:ad: 41:0c:29:dc:f7:5c:00:aa:b1:9f:f4:93:47:ab:72:23:5a:f5: b1:f0:de:34 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAsswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNTExMTQw NjUwMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4MUJGNzkxMUIzRUFG NkUyMjFFQkYyNUMxRUQxMkIxRUQ2RDBCQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoj9cT9qJ4Rc8x1bkJRiTCQ3ABcpVpfQNdwi+mmN+iAzFCt5C0 ZhXY+uirE7GyE8PStI8s6nzjhBasC/IbZLClBdBv97UKA8934lViMr6VFuUuc0/m aUwmVqqG1mR08nQ4MUk+YwT+kc8SUzFr0Dob427PszVaVrHHLA//qNsy9l92CYfe 7gCuYO2fpViIa/aAPZS5IA7k4pr5xIb/UKVf9j9mwQJdg7+kRG5aEhVMpYZMnvKA e0GP8W59uR0SrRTE3zfs9UlChlAcsWdmJQWLjqcGWFsxouKkSWewrSdPfsdio+63 qmy11RwAvD2s9aBBP6AzR1+KSjM1U6LyRWRlAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUKBv3kRs+r24iHr8lwe0Sse1tC7wwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL0tCdjNrUnMtcjI0 aUhyOGx3ZTBTc2UxdEM3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKoFowDQYJKoZIhvcNAQELBQADggEBAIl2i2bD+Y6UYt3bte/giSlhlgPA v7fEZfNaQxyaYswcz1vJfIcOqE0Hry/CQwKepm8Q2lUZ6ezk1qlnpufsVPlMf84I CNOSxnQc3afTWliiG0EKsltVck4g9Zrc0xW9NznEK5OhOjiZJkMDLv2KRQ3j7A3z CNfe5+5PjJDM+27GCBGBAOrsXtoS6gLlwCqmLJnsiL/gmtxTn5UqfuPOkARoMNSe APHISmPh/tDiQnAB9qk9qjreQJzXC+Jmm6rt4Zu/b8uMZykQT2JbXKcgIoSKkzgd Tk+/z5v09KOR/cX3HGCa+WsaNzySrUEMKdz3XACqsZ/0k0erciNa9bHw3jQ= -----END CERTIFICATE-----Generated at Sat Nov 15 11:52:17 2025 by rpki-client