$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/JZU30sLroqtv84I8HynOOZIetVQ.roa File: JZU30sLroqtv84I8HynOOZIetVQ.roa (raw, json) Hash identifier: V89nEJ3/x4eb5W33syn7HX9piXpoupDztO8jADUCF04= Subject key identifier: 25:95:37:D2:C2:EB:A2:AB:6F:F3:82:3C:1F:29:CE:39:92:1E:B5:54 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 09D7 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/JZU30sLroqtv84I8HynOOZIetVQ.roa Signing time: Fri 22 Aug 2025 08:55:25 +0000 ROA not before: Fri 22 Aug 2025 08:55:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 211.76.176.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Aug 22 08:55:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=259537D2C2EBA2AB6FF3823C1F29CE39921EB554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:fe:0e:f4:f8:96:fa:ec:d0:2f:29:00:75: 28:ae:00:3e:b5:2d:9a:ec:f8:ed:3f:ad:0b:60:c8: 16:42:f7:88:11:44:5b:e5:03:df:cc:71:36:6f:33: 5e:71:3a:81:55:86:07:c4:67:74:98:b4:32:a4:9b: 44:41:e9:7b:11:1c:00:15:32:d2:b4:03:8e:cf:87: 01:be:24:a5:bf:97:b8:a3:d4:d6:4c:25:00:08:d6: e2:6d:db:78:be:7b:97:5d:da:ed:1b:81:f0:0f:3b: 51:f5:3d:f2:d5:f1:38:74:62:20:00:13:2b:c9:94: 6c:ec:32:22:11:e3:39:72:08:91:14:0a:a0:e0:47: d0:82:6a:9c:de:6b:96:bb:fb:ff:31:46:72:a1:a5: d9:b3:c2:36:17:8e:59:d6:9a:28:21:7b:a8:99:05: 5b:f0:f8:d3:13:42:f5:30:32:de:c0:29:10:2c:13: 58:5c:b4:39:f5:97:bb:eb:be:eb:0b:0b:4a:30:6a: bc:02:bf:af:89:9c:e2:d0:dd:e8:48:53:7f:7c:94: 2d:62:dc:36:18:5e:a3:74:42:c6:59:0b:c1:4d:d7: 65:f7:3c:7e:f1:43:e1:d9:06:66:19:9b:ae:bd:d5: cc:30:3c:e7:a3:25:67:08:c8:b0:3b:b0:dc:0e:f2: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:37:D2:C2:EB:A2:AB:6F:F3:82:3C:1F:29:CE:39:92:1E:B5:54 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/JZU30sLroqtv84I8HynOOZIetVQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.176.0/23 Signature Algorithm: sha256WithRSAEncryption 97:38:eb:13:fd:f2:8b:1b:1f:b2:74:43:72:23:eb:3b:9f:b2: 4a:6e:f2:e2:b2:09:f3:44:67:62:15:e4:17:df:12:70:27:c9: 7a:ab:5b:1d:64:41:79:b6:06:c7:f6:93:aa:0a:16:2b:0d:58: de:f8:14:cc:31:66:7c:84:73:ea:a8:1f:4c:84:3e:eb:b1:71: ae:1b:6a:88:5d:a7:d3:99:db:03:7e:94:f4:6d:44:13:52:7f: 94:b5:ce:b8:a9:6a:3b:43:5c:8f:42:44:81:92:fe:e9:0c:6c: 4b:9a:65:d2:27:f2:2d:86:2c:d4:c5:35:60:26:b4:01:23:b5: 6b:43:6e:68:91:e0:81:fe:d3:ed:b9:d4:fd:94:d1:0d:00:85: ff:34:87:a2:3c:a0:3c:d9:b3:44:17:c4:ed:4a:f7:e3:d1:cd: 67:1b:8b:fc:c8:63:1f:3e:07:98:cc:da:23:f5:2a:85:b2:c4: a6:a7:8a:cc:e7:ab:f6:41:e6:51:97:79:66:03:89:a5:38:0b: ac:25:23:a8:3a:bb:3f:f9:1b:ef:0b:6b:9e:6d:15:5b:99:35: 4a:bd:1a:e5:81:0e:5b:ca:17:44:57:fa:e8:04:29:b1:c0:90: a8:98:f6:31:d6:c6:33:90:32:ab:1e:fb:66:34:6d:41:92:7d: aa:1b:16:96 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNTA4MjIw ODU1MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI1OTUzN0QyQzJFQkEy QUI2RkYzODIzQzFGMjlDRTM5OTIxRUI1NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtK/4O9PiW+uzQLykAdSiuAD61LZrs+O0/rQtgyBZC94gRRFvl A9/McTZvM15xOoFVhgfEZ3SYtDKkm0RB6XsRHAAVMtK0A47PhwG+JKW/l7ij1NZM JQAI1uJt23i+e5dd2u0bgfAPO1H1PfLV8Th0YiAAEyvJlGzsMiIR4zlyCJEUCqDg R9CCapzea5a7+/8xRnKhpdmzwjYXjlnWmighe6iZBVvw+NMTQvUwMt7AKRAsE1hc tDn1l7vrvusLC0owarwCv6+JnOLQ3ehIU398lC1i3DYYXqN0QsZZC8FN12X3PH7x Q+HZBmYZm6691cwwPOejJWcIyLA7sNwO8vozAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUJZU30sLroqtv84I8HynOOZIetVQwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL0paVTMwc0xyb3F0djg0SThIeW5PT1pJ ZXRWUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTTLAwDQYJ KoZIhvcNAQELBQADggEBAJc46xP98osbH7J0Q3Ij6zufskpu8uKyCfNEZ2IV5Bff EnAnyXqrWx1kQXm2Bsf2k6oKFisNWN74FMwxZnyEc+qoH0yEPuuxca4baohdp9OZ 2wN+lPRtRBNSf5S1zripajtDXI9CRIGS/ukMbEuaZdIn8i2GLNTFNWAmtAEjtWtD bmiR4IH+0+251P2U0Q0Ahf80h6I8oDzZs0QXxO1K9+PRzWcbi/zIYx8+B5jM2iP1 KoWyxKanisznq/ZB5lGXeWYDiaU4C6wlI6g6uz/5G+8La55tFVuZNUq9GuWBDlvK F0RX+ugEKbHAkKiY9jHWxjOQMqse+2Y0bUGSfaobFpY= -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:28 2025 by rpki-client