$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/J50ylXuhdas2KjTervlhvK74aq4.roa File: J50ylXuhdas2KjTervlhvK74aq4.roa (raw, json) Hash identifier: nkzyQg2rjHt4Go9O2O37cjw7Y67mlPRCQzf0lKj5t7I= Subject key identifier: 27:9D:32:95:7B:A1:75:AB:36:2A:34:DE:AE:F9:61:BC:AE:F8:6A:AE Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 146A Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/J50ylXuhdas2KjTervlhvK74aq4.roa Signing time: Fri 22 Aug 2025 08:51:29 +0000 ROA not before: Fri 22 Aug 2025 08:51:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131621 IP address blocks: 101.102.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 05:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5226 (0x146a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=279D32957BA175AB362A34DEAEF961BCAEF86AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:d0:ce:1f:88:66:bd:73:31:0a:06:39:fc: c4:a5:bd:00:f9:49:e1:08:cc:7b:5f:d5:f6:e3:ba: 5d:bd:e6:e4:6c:49:02:21:51:e8:08:15:aa:30:e1: 36:fb:a0:f5:a5:c1:dc:4e:92:e8:32:7e:34:c0:2a: 98:73:60:4b:fb:25:1e:a0:ad:07:e1:20:d5:c8:f2: d8:e6:17:0b:52:ef:c2:e0:de:64:40:0e:0d:14:16: cc:1e:20:4b:d8:de:6d:bf:5e:5c:40:dd:d6:ea:2a: 54:1f:a7:3b:84:7e:c7:dd:95:b6:f1:e8:db:af:04: 35:f3:c1:c8:f5:ec:6a:8e:11:12:a2:6e:ab:af:95: 5c:f2:d6:d4:a7:a1:e4:42:2d:c0:ce:5a:12:ee:07: 07:48:fc:de:a4:51:7c:5f:2a:61:89:c0:50:f3:db: 6b:13:9e:58:69:03:3c:68:e9:c9:b8:15:77:04:cb: b9:f6:60:c2:86:3b:2f:49:ad:0d:43:5a:d3:1b:45: da:af:f0:6b:f6:d7:16:e3:d1:ae:79:59:72:d9:5f: dd:db:05:53:dd:8b:96:eb:99:0c:35:f8:83:5f:2e: 36:cf:67:8f:e8:4e:fd:2a:8b:8e:7e:c8:b4:3c:c1: 51:68:db:e6:ee:79:76:02:42:d4:35:2f:1f:dc:31: 00:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9D:32:95:7B:A1:75:AB:36:2A:34:DE:AE:F9:61:BC:AE:F8:6A:AE X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/J50ylXuhdas2KjTervlhvK74aq4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.102.103.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:e3:d2:2e:a3:7e:4a:0e:ea:10:c1:f4:0d:ad:b3:a1:bf:c5: ea:c3:23:5f:34:8c:93:bc:f1:16:41:f8:d7:20:ce:c7:db:e7: 12:e8:c7:e8:2f:2f:09:1b:17:27:c1:a4:82:8a:28:72:22:78: 80:20:b9:eb:0e:a2:85:93:ad:c8:00:fb:08:9f:dc:f3:29:21: 2e:28:5b:8b:02:ea:17:61:b9:95:df:63:e7:4f:2d:0e:3a:9c: 95:40:bc:7e:c7:60:80:1e:69:10:e2:2c:2b:c1:27:8a:12:6f: 54:e9:51:58:ef:60:b6:06:ea:24:b5:98:a3:4c:06:87:60:b7: dc:24:69:e7:b9:17:62:96:7d:f2:26:b9:55:e0:d3:84:9f:81: 04:d8:be:fc:3f:cf:3a:4f:4c:eb:40:84:8b:be:07:44:75:4a: 9d:d6:53:39:ac:d8:d8:57:da:e5:21:7f:59:41:7e:ae:75:ea: 29:b7:ad:32:fe:2b:3f:fe:60:9d:97:a9:51:9b:b3:cd:ab:43: 8b:13:d4:0c:84:36:03:75:fd:22:0b:93:d0:16:64:99:d8:89: 87:3e:2c:9d:2f:37:9f:13:ae:fb:9d:cd:f3:f7:84:1d:4e:a0: d3:24:70:c5:fb:8e:14:94:fc:98:c2:51:77:41:e7:c1:23:03: 79:12:23:ba -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3OUQzMjk1N0JBMTc1 QUIzNjJBMzRERUFFRjk2MUJDQUVGODZBQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHzdDOH4hmvXMxCgY5/MSlvQD5SeEIzHtf1fbjul295uRsSQIh UegIFaow4Tb7oPWlwdxOkugyfjTAKphzYEv7JR6grQfhINXI8tjmFwtS78Lg3mRA Dg0UFsweIEvY3m2/XlxA3dbqKlQfpzuEfsfdlbbx6NuvBDXzwcj17GqOERKibquv lVzy1tSnoeRCLcDOWhLuBwdI/N6kUXxfKmGJwFDz22sTnlhpAzxo6cm4FXcEy7n2 YMKGOy9JrQ1DWtMbRdqv8Gv21xbj0a55WXLZX93bBVPdi5brmQw1+INfLjbPZ4/o Tv0qi45+yLQ8wVFo2+bueXYCQtQ1Lx/cMQAVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJ50ylXuhdas2KjTervlhvK74aq4wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9KNTB5bFh1aGRhczJLalRlcnZs aHZLNzRhcTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWZn MA0GCSqGSIb3DQEBCwUAA4IBAQBs49Iuo35KDuoQwfQNrbOhv8XqwyNfNIyTvPEW QfjXIM7H2+cS6MfoLy8JGxcnwaSCiihyIniAILnrDqKFk63IAPsIn9zzKSEuKFuL AuoXYbmV32PnTy0OOpyVQLx+x2CAHmkQ4iwrwSeKEm9U6VFY72C2BuoktZijTAaH YLfcJGnnuRdiln3yJrlV4NOEn4EE2L78P886T0zrQISLvgdEdUqd1lM5rNjYV9rl IX9ZQX6udeopt60y/is//mCdl6lRm7PNq0OLE9QMhDYDdf0iC5PQFmSZ2ImHPiyd LzefE677nc3z94QdTqDTJHDF+44UlPyYwlF3QefBIwN5EiO6 -----END CERTIFICATE-----Generated at Sat Sep 6 01:19:43 2025 by rpki-client