$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/JP4zLD_t4Kd18s9GzNFAxrCT4RY.roa File: JP4zLD_t4Kd18s9GzNFAxrCT4RY.roa (raw, json) Hash identifier: 4GNOxH+pgiXljJ6LwSAA7yOmwBfkQ+MK2iu8dF5LMYs= Subject key identifier: 24:FE:33:2C:3F:ED:E0:A7:75:F2:CF:46:CC:D1:40:C6:B0:93:E1:16 Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Certificate serial: 03EE Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/JP4zLD_t4Kd18s9GzNFAxrCT4RY.roa Signing time: Fri 22 Aug 2025 08:49:42 +0000 ROA not before: Fri 22 Aug 2025 08:49:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38047 IP address blocks: 2400:61a0:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Validity Not Before: Aug 22 08:49:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=24FE332C3FEDE0A775F2CF46CCD140C6B093E116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:e0:93:62:c5:b0:c0:a4:4d:71:53:43:52: ec:ec:ce:17:d1:22:4b:62:1b:e6:1a:14:4a:2a:69: 7b:89:e1:d6:0b:22:11:75:c0:c7:8f:f8:f6:40:a9: 10:49:05:ed:f0:b4:9a:86:55:9c:b1:4f:37:bf:bb: ae:4e:c5:8e:26:3f:a8:1c:46:6f:a9:f2:60:00:3f: 55:0c:20:a8:57:21:51:0d:65:a8:ff:bb:e9:3b:27: a1:38:5c:2b:9d:a5:c0:b7:d1:b4:b1:f0:07:3f:e7: 89:48:f6:c4:e6:d9:be:39:1c:74:ef:86:ef:ff:be: af:1d:39:d0:55:29:46:00:ba:24:4a:a0:1f:95:52: 94:2d:09:48:e5:75:61:db:81:c9:0d:5f:a9:b8:c4: 64:6d:64:ca:72:96:db:9e:a6:d1:ca:ba:bd:02:38: 35:3b:da:59:38:46:32:96:30:75:d6:0b:24:6f:3f: d9:9d:3d:1c:fc:37:51:60:be:8e:2e:d4:aa:22:ad: ca:c6:67:5b:12:d9:1c:9c:47:f9:3d:ba:c4:1a:a2: 7e:62:9b:c9:c7:b1:fb:70:85:c3:96:dc:9c:2a:7e: fd:50:2b:ea:df:8b:d4:36:e5:31:59:11:17:6a:a4: 60:c9:c8:9f:86:27:58:a0:8e:56:d9:2f:57:17:b5: f2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FE:33:2C:3F:ED:E0:A7:75:F2:CF:46:CC:D1:40:C6:B0:93:E1:16 X509v3 Authority Key Identifier: keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/JP4zLD_t4Kd18s9GzNFAxrCT4RY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:61a0:a001::/48 Signature Algorithm: sha256WithRSAEncryption 71:09:7a:17:e2:f7:d7:dc:02:f9:26:eb:b4:90:20:de:13:36: 2d:d2:26:20:40:31:96:93:87:c0:52:b4:5a:ae:10:d2:88:34: a4:a5:de:71:0a:cd:6b:42:69:47:e6:d0:f6:ea:ee:20:e5:15: 5b:22:5d:81:53:a7:a0:84:fc:1f:cf:82:b5:51:33:13:b6:1a: c6:6b:26:59:a3:31:37:51:e9:46:6e:8a:de:46:09:e0:e3:4c: 4f:61:1f:90:ff:ac:39:5e:d5:32:98:f1:9a:e7:cf:6f:11:bb: 77:71:a8:a0:02:16:3f:4c:37:d3:b1:9e:c5:67:99:d8:f1:03: 9c:29:1f:2c:53:fb:d7:9a:c0:80:5c:39:38:73:a7:ca:d8:72: df:bd:aa:cc:28:bd:fc:f8:3a:6d:6b:9f:6d:4a:83:c1:11:7e: fe:51:1b:62:0f:df:4d:7a:87:0e:52:8f:b7:d3:bc:8c:00:72: c4:2d:b6:65:8b:38:a5:25:6d:c0:8c:ee:3f:af:d8:3f:8d:bd: b1:61:4f:46:d9:f1:e5:d8:2a:c9:51:d5:ec:69:99:99:44:fa: c1:80:fc:06:d4:7f:a9:08:66:ec:64:86:6f:38:c5:e5:0c:10: de:d3:07:87:49:40:0f:f5:9e:ea:55:9b:7c:59:26:10:6a:67: ea:43:3d:8b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD ODQzOUZFMTlEOTlCMDM4MjcwMjA4Qzk0QjY2Q0EyMzFGRkVENTAeFw0yNTA4MjIw ODQ5NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0RkUzMzJDM0ZFREUw QTc3NUYyQ0Y0NkNDRDE0MEM2QjA5M0UxMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJnuCTYsWwwKRNcVNDUuzszhfRIktiG+YaFEoqaXuJ4dYLIhF1 wMeP+PZAqRBJBe3wtJqGVZyxTze/u65OxY4mP6gcRm+p8mAAP1UMIKhXIVENZaj/ u+k7J6E4XCudpcC30bSx8Ac/54lI9sTm2b45HHTvhu//vq8dOdBVKUYAuiRKoB+V UpQtCUjldWHbgckNX6m4xGRtZMpyltueptHKur0CODU72lk4RjKWMHXWCyRvP9md PRz8N1Fgvo4u1KoircrGZ1sS2RycR/k9usQaon5im8nHsftwhcOW3Jwqfv1QK+rf i9Q25TFZERdqpGDJyJ+GJ1igjlbZL1cXtfKTAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUJP4zLD/t4Kd18s9GzNFAxrCT4RYwHwYDVR0jBBgwFoAUq8hDn+GdmbA4JwII yUtmyiMf/tUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU RUwvcThoRG4tR2RtYkE0SndJSXlVdG15aU1mX3RVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9xOGhEbi1HZG1iQTRKd0lJeVV0bXlpTWZfdFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElOQVRFTC9KUDR6TERfdDRLZDE4 czlHek5GQXhyQ1Q0Ulkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJABhoKABMA0GCSqGSIb3DQEBCwUAA4IBAQBxCXoX4vfX3AL5Juu0kCDeEzYt 0iYgQDGWk4fAUrRarhDSiDSkpd5xCs1rQmlH5tD26u4g5RVbIl2BU6eghPwfz4K1 UTMTthrGayZZozE3UelGboreRgng40xPYR+Q/6w5XtUymPGa589vEbt3caigAhY/ TDfTsZ7FZ5nY8QOcKR8sU/vXmsCAXDk4c6fK2HLfvarMKL38+Dpta59tSoPBEX7+ URtiD99NeocOUo+307yMAHLELbZlizilJW3AjO4/r9g/jb2xYU9G2fHl2CrJUdXs aZmZRPrBgPwG1H+pCGbsZIZvOMXlDBDe0weHSUAP9Z7qVZt8WSYQamfqQz2L -----END CERTIFICATE-----Generated at Sun Aug 24 11:53:18 2025 by rpki-client