$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/j4REDXROM2lOtUIiuocgriI24RA.roa File: j4REDXROM2lOtUIiuocgriI24RA.roa (raw, json) Hash identifier: eYpGN7WBVE66cQ5mjTxFEu52wXsjQGtYMh23FEG0qh4= Subject key identifier: 8F:84:44:0D:74:4E:33:69:4E:B5:42:22:BA:87:20:AE:22:36:E1:10 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 0A04 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/j4REDXROM2lOtUIiuocgriI24RA.roa Signing time: Mon 20 Oct 2025 07:23:25 +0000 ROA not before: Mon 20 Oct 2025 07:23:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131642 IP address blocks: 103.157.42.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 03:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2564 (0xa04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Oct 20 07:23:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F84440D744E33694EB54222BA8720AE2236E110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:02:bd:c6:29:05:aa:95:87:96:50:56:64: f0:81:3b:66:63:03:cc:a5:14:86:7b:7b:8f:0f:1e: 6e:1a:70:d1:5b:4f:61:84:ae:fe:07:33:0c:bd:cf: bf:d9:a0:43:0e:07:08:0d:34:b5:a6:13:71:a3:38: c5:19:e8:48:b9:db:bf:fa:e4:5c:f3:d7:e5:f8:b5: 8c:d5:c3:51:c1:0c:33:5c:af:4e:9c:08:7c:49:ff: e3:ba:13:f4:f9:1c:06:67:5a:57:fd:a1:65:ea:2e: 44:23:fc:4c:e7:be:7a:84:36:dd:ec:c8:b6:e9:b3: 58:c6:78:e2:99:dc:16:d7:ef:23:c1:e6:bc:3e:4b: 58:64:ff:d8:60:21:28:a4:2f:7a:10:d6:74:9e:b2: 04:8a:1d:01:46:24:a4:07:3f:1e:28:39:f0:18:07: dd:fd:77:f0:99:10:0c:5e:0a:11:7e:44:41:ed:bb: 5f:09:35:bb:ec:33:bc:64:f8:ba:a8:77:7b:99:cc: 68:8d:92:3d:c6:01:d1:29:da:ca:e1:05:a1:61:e5: 81:1e:4a:13:97:09:08:d6:9e:a0:29:eb:ab:a9:b9: e0:6d:9a:92:df:d0:e3:76:ac:67:05:d7:41:bf:5d: af:97:7d:f1:33:25:da:3f:40:59:4d:2b:2d:5d:64: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:84:44:0D:74:4E:33:69:4E:B5:42:22:BA:87:20:AE:22:36:E1:10 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/j4REDXROM2lOtUIiuocgriI24RA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.157.42.0/23 Signature Algorithm: sha256WithRSAEncryption 65:78:f4:2a:27:be:fe:4e:78:8a:cd:b9:96:48:e9:aa:dc:dd: 1d:27:f1:14:65:56:04:be:08:7a:a4:ee:f1:b8:64:48:ba:65: 38:f5:12:08:7a:87:7c:39:99:22:b9:03:46:bf:73:0b:2c:0f: f4:8b:db:72:8e:8c:44:8a:96:e3:49:3b:85:4e:aa:15:f5:27: db:78:21:38:68:63:a6:6c:b1:74:cf:9c:3b:54:24:0d:f4:a1: d6:12:02:18:5a:f2:63:24:76:b5:17:6b:9f:c4:79:05:f7:5c: b8:99:1f:89:a8:c5:99:16:7b:d9:f3:19:b6:c1:79:e0:ed:47: fe:3e:e4:cf:e9:31:c7:ab:e5:fa:60:45:19:db:da:8d:0a:d8: f0:0f:3d:45:81:00:61:38:28:72:37:56:59:21:e4:0c:6c:06: 2b:71:92:17:09:db:9b:e3:f9:57:17:32:70:c3:0a:6c:ef:3e: fa:d2:e4:0e:b1:08:28:02:e4:1c:6d:0f:f8:ce:ee:39:77:d9: af:7c:2a:0b:a7:c3:02:01:2e:1a:75:0e:76:04:ab:be:69:f0: 8a:8a:c1:f8:01:f0:89:b5:6b:a6:a5:a2:91:eb:46:77:d4:88: 4f:c3:79:28:82:54:c3:7f:e6:1c:31:ed:5d:13:51:49:d5:b2: 68:59:b1:6a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCgQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNTEwMjAw NzIzMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGODQ0NDBENzQ0RTMz Njk0RUI1NDIyMkJBODcyMEFFMjIzNkUxMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNUgK9xikFqpWHllBWZPCBO2ZjA8ylFIZ7e48PHm4acNFbT2GE rv4HMwy9z7/ZoEMOBwgNNLWmE3GjOMUZ6Ei527/65Fzz1+X4tYzVw1HBDDNcr06c CHxJ/+O6E/T5HAZnWlf9oWXqLkQj/EznvnqENt3syLbps1jGeOKZ3BbX7yPB5rw+ S1hk/9hgISikL3oQ1nSesgSKHQFGJKQHPx4oOfAYB939d/CZEAxeChF+REHtu18J NbvsM7xk+Lqod3uZzGiNkj3GAdEp2srhBaFh5YEeShOXCQjWnqAp66upueBtmpLf 0ON2rGcF10G/Xa+XffEzJdo/QFlNKy1dZMd5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUj4REDXROM2lOtUIiuocgriI24RAwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL2o0UkVEWFJPTTJsT3RVSWl1b2NncmlJ MjRSQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnSowDQYJ KoZIhvcNAQELBQADggEBAGV49Convv5OeIrNuZZI6arc3R0n8RRlVgS+CHqk7vG4 ZEi6ZTj1Egh6h3w5mSK5A0a/cwssD/SL23KOjESKluNJO4VOqhX1J9t4IThoY6Zs sXTPnDtUJA30odYSAhha8mMkdrUXa5/EeQX3XLiZH4moxZkWe9nzGbbBeeDtR/4+ 5M/pMcer5fpgRRnb2o0K2PAPPUWBAGE4KHI3Vlkh5AxsBitxkhcJ25vj+VcXMnDD CmzvPvrS5A6xCCgC5BxtD/jO7jl32a98KgunwwIBLhp1DnYEq75p8IqKwfgB8Im1 a6alopHrRnfUiE/DeSiCVMN/5hwx7V0TUUnVsmhZsWo= -----END CERTIFICATE-----Generated at Tue Oct 21 01:16:54 2025 by rpki-client