$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/JzMRBGGCDrRPBceBtUmvb6FvVUg.roa File: JzMRBGGCDrRPBceBtUmvb6FvVUg.roa (raw, json) Hash identifier: nk+5bhEX/Vr+jLHIwE5C8ACKvTrhII7BQrLZNYFKWNw= Subject key identifier: 27:33:11:04:61:82:0E:B4:4F:05:C7:81:B5:49:AF:6F:A1:6F:55:48 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1438 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JzMRBGGCDrRPBceBtUmvb6FvVUg.roa Signing time: Fri 22 Aug 2025 09:00:11 +0000 ROA not before: Fri 22 Aug 2025 09:00:11 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24155 IP address blocks: 210.63.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5176 (0x1438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2733110461820EB44F05C781B549AF6FA16F5548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:82:d9:58:60:19:52:3a:c7:e8:5c:5c:be: 3e:d4:cb:32:10:7a:ee:0f:6c:79:06:a9:8e:8b:ac: b9:65:c4:ca:22:f2:aa:3d:1e:dc:5e:f2:ae:6d:ba: 8e:a2:26:79:75:52:41:40:f8:15:52:43:0d:34:43: ad:14:0e:c9:f3:30:bf:2f:25:5e:6c:3b:f9:7d:76: 5a:f5:ae:e7:81:19:bd:55:e4:c9:cc:bf:6e:0a:f0: 95:c0:11:ed:18:76:e3:2d:65:1a:2a:17:b8:4b:25: 64:29:56:57:be:02:7b:0d:14:10:02:e2:45:b5:e4: da:ce:8c:ad:34:c1:9e:fe:e3:40:43:65:01:c3:89: 7a:4d:4c:54:06:c4:45:e0:bf:12:34:dd:f5:56:73: ae:6f:6a:50:5a:a4:05:d0:c8:79:4b:64:46:51:c2: ce:26:40:58:27:30:4d:e7:56:c3:88:24:fa:25:62: 74:41:0e:45:00:b8:80:f2:07:8b:00:28:97:34:59: 9d:d7:27:e4:b0:40:50:f8:d7:45:f1:a3:b3:fc:ce: 53:16:d8:2b:c7:99:de:df:e5:e0:f0:c6:80:0e:28: 03:fb:35:72:31:1e:20:4d:95:4d:5b:68:6e:d6:ed: 74:3c:ce:fb:6e:3e:a4:1e:45:d9:6b:c1:1f:65:2b: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:11:04:61:82:0E:B4:4F:05:C7:81:B5:49:AF:6F:A1:6F:55:48 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JzMRBGGCDrRPBceBtUmvb6FvVUg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.224.0/21 Signature Algorithm: sha256WithRSAEncryption 41:44:91:ef:bb:7b:f9:67:ee:14:d5:40:a4:c5:7d:35:12:84: e6:74:88:49:d3:30:42:85:2c:f5:89:7b:ca:1f:fe:b7:62:24: b8:bf:34:88:20:90:fe:40:17:d0:09:f6:fd:4e:26:60:1d:43: da:35:d4:ac:6a:e6:6b:30:a6:8d:ec:91:67:6a:28:58:3a:d7: 13:63:2f:df:9d:5f:0a:ae:47:ed:ba:bc:09:f6:f0:f3:f7:a5: 1d:59:65:50:fe:c9:52:0f:1b:fc:f0:eb:73:1c:87:55:af:a8: 89:05:c8:22:75:55:04:4b:a9:ea:cf:23:a2:a8:42:f2:07:65: 99:5f:64:0a:f8:ad:3b:5e:5e:6e:9f:da:1f:7e:5b:ea:26:94: c5:75:06:62:9f:c8:5b:4e:ed:5d:9d:2a:80:16:48:71:89:0c: 6f:db:61:9a:72:9e:d4:0b:f0:4a:0e:a4:f6:68:0e:22:95:de: 1a:ea:03:8b:4e:86:b8:da:1c:49:7a:5d:30:49:c1:29:af:6f: 42:6c:ef:66:44:f8:75:1d:a5:42:fb:ac:8b:e4:bc:82:c8:a0: 3a:bb:f9:3f:54:d5:16:ea:6b:1c:57:d7:5a:59:f9:f5:a1:62: 5c:70:e8:67:a3:1a:9b:39:29:a3:55:d9:17:13:aa:1f:35:c2: d8:95:b4:c0 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3MzMxMTA0NjE4MjBF QjQ0RjA1Qzc4MUI1NDlBRjZGQTE2RjU1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq+oLZWGAZUjrH6Fxcvj7UyzIQeu4PbHkGqY6LrLllxMoi8qo9 Htxe8q5tuo6iJnl1UkFA+BVSQw00Q60UDsnzML8vJV5sO/l9dlr1rueBGb1V5MnM v24K8JXAEe0YduMtZRoqF7hLJWQpVle+AnsNFBAC4kW15NrOjK00wZ7+40BDZQHD iXpNTFQGxEXgvxI03fVWc65valBapAXQyHlLZEZRws4mQFgnME3nVsOIJPolYnRB DkUAuIDyB4sAKJc0WZ3XJ+SwQFD410Xxo7P8zlMW2CvHmd7f5eDwxoAOKAP7NXIx HiBNlU1baG7W7XQ8zvtuPqQeRdlrwR9lK6VtAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUJzMRBGGCDrRPBceBtUmvb6FvVUgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0p6TVJCR0dDRHJSUEJjZUJ0VW12YjZG dlZVZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSP+AwDQYJ KoZIhvcNAQELBQADggEBAEFEke+7e/ln7hTVQKTFfTUShOZ0iEnTMEKFLPWJe8of /rdiJLi/NIggkP5AF9AJ9v1OJmAdQ9o11Kxq5mswpo3skWdqKFg61xNjL9+dXwqu R+26vAn28PP3pR1ZZVD+yVIPG/zw63Mch1WvqIkFyCJ1VQRLqerPI6KoQvIHZZlf ZAr4rTteXm6f2h9+W+omlMV1BmKfyFtO7V2dKoAWSHGJDG/bYZpyntQL8EoOpPZo DiKV3hrqA4tOhrjaHEl6XTBJwSmvb0Js72ZE+HUdpUL7rIvkvILIoDq7+T9U1Rbq axxX11pZ+fWhYlxw6GejGps5KaNV2RcTqh81wtiVtMA= -----END CERTIFICATE-----Generated at Sun Aug 24 14:17:19 2025 by rpki-client