$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/pJjq3pyIvXmZeztb-Md32cWdUyg.roa File: pJjq3pyIvXmZeztb-Md32cWdUyg.roa (raw, json) Hash identifier: DW0PhuUFIRLJdsO4y9RAlwKNkLnSI+uTSrtxRPJhTZI= Subject key identifier: A4:98:EA:DE:9C:88:BD:79:99:7B:3B:5B:F8:C7:77:D9:C5:9D:53:28 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1477 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/pJjq3pyIvXmZeztb-Md32cWdUyg.roa Signing time: Fri 22 Aug 2025 08:51:32 +0000 ROA not before: Fri 22 Aug 2025 08:51:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17718 IP address blocks: 150.242.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5239 (0x1477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 22 08:51:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A498EADE9C88BD79997B3B5BF8C777D9C59D5328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:09:a1:f6:b8:da:56:a5:b3:99:53:ea:0f: 7a:0b:c5:d2:2b:e9:d4:54:f7:0d:45:cc:3a:49:77: 5b:b7:61:64:52:98:b7:f9:ec:9b:bb:6a:15:41:97: 9f:a2:0f:25:d5:59:cf:bc:97:2a:85:68:a9:db:ee: c5:17:72:07:17:f6:38:46:49:72:49:50:4f:e2:1e: 0e:33:c2:f7:e7:29:b7:d3:04:1e:e8:e9:dd:35:42: 77:8d:f3:ca:0f:5e:af:39:3a:1d:93:22:0c:17:d9: 48:23:32:d9:65:ed:26:0f:60:c8:77:b1:be:f2:24: ed:73:b9:1a:6e:eb:97:0b:ec:c7:95:e3:f5:cb:ad: 3a:cc:a6:d8:3e:86:0a:b6:60:37:3e:ff:a5:69:f9: b7:20:90:47:5c:0a:b8:62:af:de:67:40:af:bc:0f: c9:ed:39:0f:52:ad:e2:a2:5c:a6:db:1d:63:05:36: eb:9a:30:71:54:8c:b7:07:69:0f:6f:67:c8:ab:59: d7:c5:1a:e3:3a:d2:17:cb:ee:eb:6a:20:69:c2:70: 0f:41:c5:8c:62:a8:30:1f:67:dd:72:c9:5c:cc:9e: 2c:15:f4:1e:a0:cf:32:e1:0a:0e:d2:89:d0:c5:0f: 48:bc:8c:e0:8e:8c:2d:93:ad:31:d9:30:28:9a:65: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:98:EA:DE:9C:88:BD:79:99:7B:3B:5B:F8:C7:77:D9:C5:9D:53:28 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/pJjq3pyIvXmZeztb-Md32cWdUyg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.242.102.0/24 Signature Algorithm: sha256WithRSAEncryption 17:37:08:13:6e:be:25:c8:04:eb:6e:6b:c1:05:37:23:67:a8: d6:3b:0e:66:0e:e0:7d:b4:0f:8b:41:13:d0:e7:9f:db:b1:4e: 21:75:d4:a2:7b:29:d4:a5:8d:df:54:96:18:c7:a7:e8:41:e8: da:97:4d:d3:08:02:9b:6b:cc:68:14:fa:9a:5a:48:a2:0a:f9: b6:1b:ef:d6:c9:5f:0b:f7:71:94:72:f3:fc:b9:6b:c6:0d:8f: 0f:0f:d1:b1:62:16:72:c0:10:b0:7d:e2:3a:94:41:cd:d2:12: 2e:9f:3a:3f:ba:3c:36:d7:3e:27:5d:f7:5b:58:11:33:42:44: 5b:e3:dd:71:04:4a:f7:70:d0:dc:f0:22:9d:85:c5:3d:65:d9: f3:7e:81:cf:88:cb:0d:c6:f0:1f:3a:0c:a1:85:cc:5d:02:00: 66:31:9a:f6:48:1a:5c:6f:fe:74:bd:61:23:69:03:71:40:bb: c6:80:14:9a:4b:24:7d:2a:87:54:60:03:51:dd:1e:df:5a:ba: 2d:0b:53:40:ef:ef:f4:a9:55:5a:ff:99:3e:13:d6:89:46:12: 2f:b1:cb:a7:13:e0:9e:99:84:98:f7:3f:f1:a6:39:56:92:27: c8:9c:e7:24:b0:26:3d:de:3a:d5:f2:28:ed:e2:76:e5:b1:2e: 8e:0d:d4:30 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICFHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTA4MjIw ODUxMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE0OThFQURFOUM4OEJE Nzk5OTdCM0I1QkY4Qzc3N0Q5QzU5RDUzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+RAmh9rjaVqWzmVPqD3oLxdIr6dRU9w1FzDpJd1u3YWRSmLf5 7Ju7ahVBl5+iDyXVWc+8lyqFaKnb7sUXcgcX9jhGSXJJUE/iHg4zwvfnKbfTBB7o 6d01QneN88oPXq85Oh2TIgwX2UgjMtll7SYPYMh3sb7yJO1zuRpu65cL7MeV4/XL rTrMptg+hgq2YDc+/6Vp+bcgkEdcCrhir95nQK+8D8ntOQ9SreKiXKbbHWMFNuua MHFUjLcHaQ9vZ8irWdfFGuM60hfL7utqIGnCcA9BxYxiqDAfZ91yyVzMniwV9B6g zzLhCg7SidDFD0i8jOCOjC2TrTHZMCiaZaE5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUpJjq3pyIvXmZeztb+Md32cWdUygwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9wSmpxM3B5SXZYbVplenRiLU1k MzJjV2RVeWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvJm MA0GCSqGSIb3DQEBCwUAA4IBAQAXNwgTbr4lyATrbmvBBTcjZ6jWOw5mDuB9tA+L QRPQ55/bsU4hddSieynUpY3fVJYYx6foQejal03TCAKba8xoFPqaWkiiCvm2G+/W yV8L93GUcvP8uWvGDY8PD9GxYhZywBCwfeI6lEHN0hIunzo/ujw21z4nXfdbWBEz QkRb491xBEr3cNDc8CKdhcU9ZdnzfoHPiMsNxvAfOgyhhcxdAgBmMZr2SBpcb/50 vWEjaQNxQLvGgBSaSyR9KodUYANR3R7fWrotC1NA7+/0qVVa/5k+E9aJRhIvscun E+CemYSY9z/xpjlWkifInOcksCY93jrV8ijt4nblsS6ODdQw -----END CERTIFICATE-----Generated at Sat Sep 6 07:06:07 2025 by rpki-client