$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/B_g1ezD4v4D6IDErm3q4W9xxN60.roa File: B_g1ezD4v4D6IDErm3q4W9xxN60.roa (raw, json) Hash identifier: WM6KVNTYmHuLiQ1/0lItzLXPwYsdbFD/4chRtLeF4LM= Subject key identifier: 07:F8:35:7B:30:F8:BF:80:FA:20:31:2B:9B:7A:B8:5B:DC:71:37:AD Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274 Certificate serial: 0220 Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/B_g1ezD4v4D6IDErm3q4W9xxN60.roa Signing time: Fri 22 Aug 2025 09:01:10 +0000 ROA not before: Fri 22 Aug 2025 09:01:10 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18041 IP address blocks: 210.79.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274 Validity Not Before: Aug 22 09:01:10 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=07F8357B30F8BF80FA20312B9B7AB85BDC7137AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:58:9d:b7:26:18:5d:26:2d:ff:be:23:4f: 85:e1:9f:ad:7b:f1:15:71:24:bb:98:f4:0d:9a:80: 9a:31:49:50:3e:07:19:47:c0:c5:91:00:6d:51:d7: 30:2c:84:4b:14:44:61:c6:43:5d:1e:1f:a9:96:12: d2:2a:11:61:e9:c0:a4:c5:53:ee:00:c5:cd:4d:c8: f3:a5:90:b8:b2:99:01:12:e9:ab:2e:7e:2f:f8:5a: 2c:c3:25:9c:9f:a2:cb:1d:8d:29:f1:09:fe:60:09: d5:38:75:ca:20:e2:d6:f9:4a:81:e5:e9:fa:1c:c8: a0:87:08:48:58:c1:6f:6c:a4:75:16:4d:4a:7d:50: d1:22:6d:1b:34:97:1c:07:b2:ef:44:b9:53:ef:0c: e8:97:4a:46:02:30:e9:2a:a7:94:55:27:39:df:64: 4a:98:b6:83:be:21:be:2f:04:f2:82:8f:84:6e:42: 6a:9e:65:bc:ef:d5:c4:88:37:6c:7a:85:8a:52:4f: 18:d3:40:38:95:bb:0f:ac:79:fa:2b:bf:b5:be:b2: 1a:6f:1c:c9:b8:06:84:2a:bc:ba:2a:5e:9d:32:0a: a8:80:ab:25:5a:2a:ce:47:1d:41:a8:06:ae:1a:cb: 89:90:c1:13:42:5e:a7:c0:58:df:5f:db:5f:b7:b8: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F8:35:7B:30:F8:BF:80:FA:20:31:2B:9B:7A:B8:5B:DC:71:37:AD X509v3 Authority Key Identifier: keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/B_g1ezD4v4D6IDErm3q4W9xxN60.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.79.154.0/23 Signature Algorithm: sha256WithRSAEncryption bc:8c:7f:6b:29:c5:7a:9a:65:65:08:30:ab:28:ea:cc:44:cf: 72:23:19:d0:f3:c0:cc:84:80:9d:5a:58:29:f3:b6:b2:54:6e: 0e:2c:bb:bf:68:c4:3f:21:14:7e:6e:6d:27:78:65:c7:7f:88: f4:79:d0:2a:45:04:d5:22:6b:59:66:81:c5:2d:24:1d:e0:14: d1:c0:f3:65:23:d1:f4:9c:1d:e9:fc:16:89:89:b8:fa:b8:ca: 74:f1:88:89:dd:e7:d2:4a:53:bf:d2:98:33:87:1c:8b:23:3e: ca:50:10:14:17:52:64:b9:81:e4:92:36:97:a1:a7:5c:06:6d: 57:50:c1:cc:29:1c:73:2d:3b:f3:2c:99:e5:ef:b2:32:5d:59: be:42:52:20:f8:6c:53:6a:7f:7d:fb:79:f3:9f:c9:a4:2a:fb: bb:d4:55:8e:e8:dc:5b:12:f7:38:00:e7:9e:f5:dc:c1:e2:be: e6:0a:9e:d4:e4:f4:b7:80:7b:db:00:88:39:58:58:36:0c:12: 22:af:9f:6c:de:da:c1:b5:e1:66:99:b2:24:5b:e2:d1:84:30: c4:24:8f:e3:94:91:49:33:7f:10:41:df:9e:3d:cf:5e:d4:0c: 2c:04:14:b2:95:2b:1d:fc:58:39:c8:ec:fa:b6:7f:2f:46:e8: 8b:30:07:2c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZG NkQwNkI0MDQ5Mzg2QTEwNkU1RUQyMjY1NkE5M0Q5RjM1NTI3NDAeFw0yNTA4MjIw OTAxMTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA3RjgzNTdCMzBGOEJG ODBGQTIwMzEyQjlCN0FCODVCREM3MTM3QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK/lidtyYYXSYt/74jT4Xhn6178RVxJLuY9A2agJoxSVA+BxlH wMWRAG1R1zAshEsURGHGQ10eH6mWEtIqEWHpwKTFU+4Axc1NyPOlkLiymQES6asu fi/4WizDJZyfossdjSnxCf5gCdU4dcog4tb5SoHl6focyKCHCEhYwW9spHUWTUp9 UNEibRs0lxwHsu9EuVPvDOiXSkYCMOkqp5RVJznfZEqYtoO+Ib4vBPKCj4RuQmqe Zbzv1cSIN2x6hYpSTxjTQDiVuw+seforv7W+shpvHMm4BoQqvLoqXp0yCqiAqyVa Ks5HHUGoBq4ay4mQwRNCXqfAWN9f21+3uK/9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUB/g1ezD4v4D6IDErm3q4W9xxN60wHwYDVR0jBBgwFoAUhvbQa0BJOGoQbl7S JlapPZ81UnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkRBL2h2 YlFhMEJKT0dvUWJsN1NKbGFwUFo4MVVuUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev aHZiUWEwQkpPR29RYmw3U0psYXBQWjgxVW5RLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkRBL0JfZzFlekQ0djRENklERXJtM3E0Vzl4 eE42MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHST5owDQYJ KoZIhvcNAQELBQADggEBALyMf2spxXqaZWUIMKso6sxEz3IjGdDzwMyEgJ1aWCnz trJUbg4su79oxD8hFH5ubSd4Zcd/iPR50CpFBNUia1lmgcUtJB3gFNHA82Uj0fSc Hen8FomJuPq4ynTxiInd59JKU7/SmDOHHIsjPspQEBQXUmS5geSSNpehp1wGbVdQ wcwpHHMtO/MsmeXvsjJdWb5CUiD4bFNqf337efOfyaQq+7vUVY7o3FsS9zgA5571 3MHivuYKntTk9LeAe9sAiDlYWDYMEiKvn2ze2sG14WaZsiRb4tGEMMQkj+OUkUkz fxBB3549z17UDCwEFLKVKx38WDnI7Pq2fy9G6IswByw= -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:36 2025 by rpki-client