$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/J2HIZxT1QtqqCHgqD0W-u5fg7oQ.roa File: J2HIZxT1QtqqCHgqD0W-u5fg7oQ.roa (raw, json) Hash identifier: qUjZ7gwe9PNZa3Q/QOgcBZXx3Q03xByEnUTX4ygPZv0= Subject key identifier: 27:61:C8:67:14:F5:42:DA:AA:08:78:2A:0F:45:BE:BB:97:E0:EE:84 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 06CD Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/J2HIZxT1QtqqCHgqD0W-u5fg7oQ.roa Signing time: Fri 22 Aug 2025 08:48:56 +0000 ROA not before: Fri 22 Aug 2025 08:48:56 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 197537 IP address blocks: 103.156.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Aug 22 08:48:56 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2761C86714F542DAAA08782A0F45BEBB97E0EE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:6e:c2:2a:a2:df:a0:41:5d:9f:12:ef:62: ca:78:fb:62:bc:72:1f:78:53:48:89:f8:74:48:ed: 7c:0e:c6:81:bd:60:a6:49:ec:7a:2a:8a:6d:04:74: 5a:41:2f:ef:6d:6c:dc:80:11:fc:8d:d5:4f:ef:b6: 23:7a:c1:91:41:71:07:86:d6:39:c2:e5:54:78:8e: 02:db:64:2a:5d:78:8a:89:30:7a:5e:20:36:9f:ee: 96:79:c1:71:e9:37:07:34:8f:da:3e:98:71:9d:35: e3:b7:9c:5b:d7:0a:7a:8c:e2:22:dd:1a:fa:4a:c9: f9:10:d9:81:b5:90:bb:69:a5:57:c4:36:41:e7:18: 6b:4c:90:95:6f:9d:c8:17:02:90:54:84:7b:c5:f9: 03:67:d0:54:23:46:bd:a4:bd:76:3f:59:51:17:24: 68:03:ac:28:f6:08:14:53:bd:83:34:ae:fa:50:8c: ed:b9:5d:a5:7a:35:0b:87:ca:df:ae:f3:8b:ff:43: 6c:d2:fe:5c:53:06:aa:6e:eb:bc:64:be:e2:f2:dc: 87:f9:7b:27:05:65:98:1a:4f:fb:e5:99:37:0e:a0: 84:60:1c:0b:b6:02:73:11:65:a2:9a:4f:b1:ae:80: 1f:29:fd:f4:2e:5e:b1:dd:99:ce:fc:eb:26:a4:4e: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:61:C8:67:14:F5:42:DA:AA:08:78:2A:0F:45:BE:BB:97:E0:EE:84 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/J2HIZxT1QtqqCHgqD0W-u5fg7oQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.185.0/24 Signature Algorithm: sha256WithRSAEncryption 69:90:9d:d4:00:27:c5:78:49:0d:93:43:f6:8e:e0:4b:07:78: c7:c7:28:70:63:b2:96:d8:06:d7:69:ca:b2:ec:a3:3d:a3:f1: 1b:76:00:34:67:85:d0:08:59:b1:ec:7a:d6:c4:35:5e:f5:e9: 5e:ac:22:be:09:ee:6f:42:69:21:52:f1:4f:8b:db:68:a5:7e: cb:d7:fb:e6:cc:9b:d5:44:0c:4a:87:34:bf:ed:e0:fa:d4:93: 4f:e0:f4:d3:ec:ba:cf:c6:ba:0f:52:16:c6:79:3b:0b:89:cd: 95:cb:1a:5a:f0:ed:13:37:ed:86:b5:76:e2:fd:41:59:7a:a4: 02:49:a6:5b:94:35:5f:4a:2c:82:01:17:6c:4f:da:6e:42:52: c9:78:f8:55:38:d3:96:5a:93:b5:f0:dd:4a:ad:a6:31:9f:cc: a9:12:bd:ec:f9:4f:f2:ee:ab:5b:bf:1b:b5:24:e9:91:d3:4f: bd:5a:7b:6d:d9:3e:4e:38:93:0a:15:6c:72:dc:de:6a:96:ca: c2:53:5b:10:7b:f9:e1:a7:cd:cf:dc:47:a1:c5:62:8b:7a:f5: b2:e0:d8:0d:16:98:44:ad:aa:1d:35:f8:22:e5:05:2d:dc:7f: e1:a1:38:91:85:47:d2:39:e3:28:c0:6e:f7:09:e7:2a:7f:fb: d5:d1:a4:4d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNTA4MjIw ODQ4NTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3NjFDODY3MTRGNTQy REFBQTA4NzgyQTBGNDVCRUJCOTdFMEVFODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwdG7CKqLfoEFdnxLvYsp4+2K8ch94U0iJ+HRI7XwOxoG9YKZJ 7Hoqim0EdFpBL+9tbNyAEfyN1U/vtiN6wZFBcQeG1jnC5VR4jgLbZCpdeIqJMHpe IDaf7pZ5wXHpNwc0j9o+mHGdNeO3nFvXCnqM4iLdGvpKyfkQ2YG1kLtppVfENkHn GGtMkJVvncgXApBUhHvF+QNn0FQjRr2kvXY/WVEXJGgDrCj2CBRTvYM0rvpQjO25 XaV6NQuHyt+u84v/Q2zS/lxTBqpu67xkvuLy3If5eycFZZgaT/vlmTcOoIRgHAu2 AnMRZaKaT7GugB8p/fQuXrHdmc786yakTuKVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUJ2HIZxT1QtqqCHgqD0W+u5fg7oQwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvSjJISVp4VDFRdHFxQ0hn cUQwVy11NWZnN29RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuTANBgkqhkiG9w0BAQsFAAOCAQEAaZCd1AAnxXhJDZND9o7gSwd4x8cocGOy ltgG12nKsuyjPaPxG3YANGeF0AhZsex61sQ1XvXpXqwivgnub0JpIVLxT4vbaKV+ y9f75syb1UQMSoc0v+3g+tSTT+D00+y6z8a6D1IWxnk7C4nNlcsaWvDtEzfthrV2 4v1BWXqkAkmmW5Q1X0osggEXbE/abkJSyXj4VTjTllqTtfDdSq2mMZ/MqRK97PlP 8u6rW78btSTpkdNPvVp7bdk+TjiTChVsctzeapbKwlNbEHv54afNz9xHocVii3r1 suDYDRaYRK2qHTX4IuUFLdx/4aE4kYVH0jnjKMBu9wnnKn/71dGkTQ== -----END CERTIFICATE-----Generated at Sun Aug 24 11:42:10 2025 by rpki-client