$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/BZD4Iu1gt1MdK9coMADLfAhap6M.roa File: BZD4Iu1gt1MdK9coMADLfAhap6M.roa (raw, json) Hash identifier: spBldHwscVLufjuNMAYoL+tFPcF/4ANeCmtqk4+0H8o= Subject key identifier: 05:90:F8:22:ED:60:B7:53:1D:2B:D7:28:30:00:CB:7C:08:5A:A7:A3 Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0DE9 Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/BZD4Iu1gt1MdK9coMADLfAhap6M.roa Signing time: Fri 22 Aug 2025 08:57:07 +0000 ROA not before: Fri 22 Aug 2025 08:57:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 101.0.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3561 (0xde9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Aug 22 08:57:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0590F822ED60B7531D2BD7283000CB7C085AA7A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:7e:ad:c1:24:e0:48:20:c2:2a:ea:c8:52: 0c:4f:b3:01:98:5e:fb:79:cc:b7:58:24:63:8a:ed: b0:fc:8f:39:0e:bb:cf:8e:e8:00:ba:bb:3d:b2:5b: a5:19:05:1d:cf:f1:ea:34:4e:1e:31:5e:b0:c8:0e: 9b:34:fe:f6:45:82:e6:b8:9e:fe:b8:cb:fe:1a:3a: 0a:1e:32:12:e6:7f:8a:15:5c:0e:7c:c0:4d:f3:d6: c1:64:65:51:e0:a7:d4:f9:3e:cb:68:e4:1a:26:40: 68:5f:03:5b:3c:c4:7e:df:be:a5:7c:6c:f6:77:cc: 44:c7:2a:c2:6c:a7:48:29:c4:98:d8:43:98:d2:2d: 69:8f:f4:ed:74:75:88:ab:29:69:31:91:47:f7:62: 59:a6:c9:8a:65:95:74:8e:fe:fb:ec:b7:7d:a7:da: 7c:0e:11:ce:96:ad:29:7e:b3:04:68:c0:16:67:84: 34:4f:35:33:e0:a4:61:a3:c8:29:9d:85:17:62:69: e6:6c:41:25:fc:99:ea:7b:0c:e6:d9:e5:ed:94:b8: a1:4d:83:59:57:85:36:bd:49:6a:1d:f9:e5:92:84: 1a:ac:90:50:97:41:c2:42:ad:e0:42:0d:82:ed:7a: 0b:f4:30:07:33:99:c7:d8:b1:0c:c4:55:6d:06:1b: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:90:F8:22:ED:60:B7:53:1D:2B:D7:28:30:00:CB:7C:08:5A:A7:A3 X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/BZD4Iu1gt1MdK9coMADLfAhap6M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.0.232.0/21 Signature Algorithm: sha256WithRSAEncryption b5:fe:a0:72:e6:b0:cb:0e:6b:78:cd:6f:00:9f:bd:b1:97:7d: 0f:33:2b:6b:ce:5f:eb:a3:de:c7:2e:67:9d:10:02:ee:77:88: 50:7a:b9:65:3c:c4:8c:33:52:9b:b7:d1:0f:3e:a3:13:f3:42: de:e8:18:13:2d:70:1b:c1:7d:7c:b8:5e:e8:07:c0:b7:18:42: 75:3f:58:01:9e:c1:62:0a:e9:84:04:0b:d1:5f:5c:4f:4d:3d: 4a:32:3d:0a:19:61:dd:1b:41:92:a6:24:2b:e3:a7:71:a0:83: 73:38:8d:86:a8:54:bd:36:97:8a:1d:39:bf:8e:1d:6d:c2:92: 4d:56:3e:08:6f:70:ed:db:e6:a8:c6:5b:d0:86:48:9b:52:72: 8d:e4:a4:e3:f0:d5:d6:2f:97:ee:ed:e7:df:d1:3e:dd:d8:46: 77:0e:5e:12:9a:2c:78:cf:15:94:41:f9:78:4a:a2:1d:5c:f5: 62:27:85:da:29:39:b1:f9:93:69:fd:96:d8:14:7a:f7:0b:a7: 04:9b:fc:6f:bd:33:a2:ce:e0:d6:39:06:e0:17:2a:f4:1f:38: 63:3a:7a:21:3c:b4:48:4c:0b:71:28:2d:4f:94:c6:dd:16:c9: aa:01:72:89:95:25:e9:ea:3a:95:2e:41:1f:1f:40:7e:6a:db: 5a:a1:e8:71 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTA4MjIw ODU3MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1OTBGODIyRUQ2MEI3 NTMxRDJCRDcyODMwMDBDQjdDMDg1QUE3QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1v36twSTgSCDCKurIUgxPswGYXvt5zLdYJGOK7bD8jzkOu8+O 6AC6uz2yW6UZBR3P8eo0Th4xXrDIDps0/vZFgua4nv64y/4aOgoeMhLmf4oVXA58 wE3z1sFkZVHgp9T5Psto5BomQGhfA1s8xH7fvqV8bPZ3zETHKsJsp0gpxJjYQ5jS LWmP9O10dYirKWkxkUf3YlmmyYpllXSO/vvst32n2nwOEc6WrSl+swRowBZnhDRP NTPgpGGjyCmdhRdiaeZsQSX8mep7DObZ5e2UuKFNg1lXhTa9SWod+eWShBqskFCX QcJCreBCDYLtegv0MAczmcfYsQzEVW0GGyi9AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUBZD4Iu1gt1MdK9coMADLfAhap6MwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vQlpENEl1MWd0 MU1kSzljb01BRExmQWhhcDZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA2UA6DANBgkqhkiG9w0BAQsFAAOCAQEAtf6gcuawyw5reM1vAJ+9sZd9 DzMra85f66Pexy5nnRAC7neIUHq5ZTzEjDNSm7fRDz6jE/NC3ugYEy1wG8F9fLhe 6AfAtxhCdT9YAZ7BYgrphAQL0V9cT009SjI9Chlh3RtBkqYkK+OncaCDcziNhqhU vTaXih05v44dbcKSTVY+CG9w7dvmqMZb0IZIm1JyjeSk4/DV1i+X7u3n39E+3dhG dw5eEposeM8VlEH5eEqiHVz1YieF2ik5sfmTaf2W2BR69wunBJv8b70zos7g1jkG 4Bcq9B84Yzp6ITy0SEwLcSgtT5TG3RbJqgFyiZUl6eo6lS5BHx9AfmrbWqHocQ== -----END CERTIFICATE-----Generated at Sun Aug 24 05:08:11 2025 by rpki-client