$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/2bTqYrZys3Fogts7Fv5vjncOvIc.roa File: 2bTqYrZys3Fogts7Fv5vjncOvIc.roa (raw, json) Hash identifier: qnYX1Y1VBdTSxMV61i74UZEIUai9LUqwtA41ObRO5LM= Subject key identifier: D9:B4:EA:62:B6:72:B3:71:68:82:DB:3B:16:FE:6F:8E:77:0E:BC:87 Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Certificate serial: 8D Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/2bTqYrZys3Fogts7Fv5vjncOvIc.roa Signing time: Fri 12 Sep 2025 01:59:37 +0000 ROA not before: Fri 12 Sep 2025 01:59:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152617 IP address blocks: 203.18.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 02:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Validity Not Before: Sep 12 01:59:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D9B4EA62B672B3716882DB3B16FE6F8E770EBC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:83:32:00:92:7c:16:d4:9b:57:92:ed:68: cf:d3:5e:f5:fc:db:2b:01:89:4a:52:30:02:47:18: 6f:ea:6a:26:d7:75:57:f3:84:80:98:ff:04:c5:f3: 60:a4:a6:0f:de:ac:88:3c:54:10:27:82:e5:ae:7e: 3d:45:ca:87:61:0b:77:47:45:a9:12:48:bf:76:9e: 32:0d:a4:6d:43:93:29:60:79:27:68:09:9d:aa:0a: 7c:d5:63:2e:c0:f1:64:8c:34:a2:58:0c:b6:f5:3c: 93:1f:57:52:09:12:6e:95:39:e5:1d:92:13:53:f6: 44:b7:63:6b:d9:6a:cc:82:7a:cb:b8:d4:6b:fe:ef: 97:77:ca:9a:e1:02:bd:23:fa:a1:08:66:f7:53:73: 5a:74:c8:1f:ad:ee:44:ef:87:32:b5:6f:bf:23:0a: d1:28:ed:01:92:fa:0f:c8:cc:17:e8:12:9c:65:05: 84:ad:d8:12:99:53:ba:a2:e4:6e:bf:84:74:7a:fb: 9b:8e:87:4e:7f:83:1b:bb:13:bd:33:20:78:b5:85: 7e:27:01:8e:cc:01:ae:b0:ec:ea:5d:23:37:ac:86: 3d:2a:2a:3b:a7:78:cf:83:97:0c:fa:7e:91:9d:44: ec:f7:90:8a:e8:07:43:a3:02:9d:e5:6a:7c:aa:79: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:EA:62:B6:72:B3:71:68:82:DB:3B:16:FE:6F:8E:77:0E:BC:87 X509v3 Authority Key Identifier: keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/2bTqYrZys3Fogts7Fv5vjncOvIc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.18.156.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:bf:66:80:9e:8f:e7:06:ed:52:6f:ce:4e:85:74:97:9e:45: 37:c6:22:51:41:4f:c6:7c:0a:24:c9:ba:41:d5:d6:47:a1:fe: 31:b5:5c:b3:18:ba:87:8f:4d:06:0b:41:7e:89:99:94:20:1c: 2b:52:7f:7f:d8:b0:50:48:be:8e:4c:1f:e2:8f:fe:f9:35:f9: 25:40:82:17:04:56:12:e7:e9:04:54:72:3b:3c:4f:9e:98:5c: 4a:0f:d7:7d:8b:e2:02:b2:38:6c:07:39:41:42:e3:b3:30:96: 01:56:ca:3b:83:1d:c1:03:d2:48:34:a8:b3:10:85:63:aa:3c: 9f:d8:e0:0f:43:75:bc:85:d5:43:5e:bb:76:a2:9d:a9:65:4e: ef:01:88:d5:37:b5:32:a5:3b:62:4b:bc:f2:c4:3a:8a:74:21: e0:c8:db:12:7e:6f:af:81:cd:15:ec:44:bb:d7:41:99:74:20: fd:ba:ae:88:28:8e:35:46:b1:59:37:58:f6:82:04:4f:20:88: 50:3b:ff:cf:fe:bf:6a:94:e3:ba:79:f8:4c:ed:f6:c8:3e:ae: 0d:a8:ad:47:80:73:b6:56:ae:86:06:f7:ec:83:85:03:37:93: a0:7e:14:9c:09:95:c1:2e:d6:0c:54:bf:42:60:de:d4:b2:e3: 4e:82:17:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjAy MEVBRjZEMjRCNzRFRUE1NEE4NDRGNzAyMzREQ0EyNTVBNkJDMTAeFw0yNTA5MTIw MTU5MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ5QjRFQTYyQjY3MkIz NzE2ODgyREIzQjE2RkU2RjhFNzcwRUJDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCeYMyAJJ8FtSbV5LtaM/TXvX82ysBiUpSMAJHGG/qaibXdVfz hICY/wTF82Ckpg/erIg8VBAnguWufj1FyodhC3dHRakSSL92njINpG1DkylgeSdo CZ2qCnzVYy7A8WSMNKJYDLb1PJMfV1IJEm6VOeUdkhNT9kS3Y2vZasyCesu41Gv+ 75d3yprhAr0j+qEIZvdTc1p0yB+t7kTvhzK1b78jCtEo7QGS+g/IzBfoEpxlBYSt 2BKZU7qi5G6/hHR6+5uOh05/gxu7E70zIHi1hX4nAY7MAa6w7OpdIzeshj0qKjun eM+Dlwz6fpGdROz3kIroB0OjAp3lanyqeeL1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2bTqYrZys3Fogts7Fv5vjncOvIcwHwYDVR0jBBgwFoAU8CDq9tJLdO6lSoRP cCNNyiVaa8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNI LzhDRHE5dEpMZE82bFNvUlBjQ05OeWlWYWE4RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvOENEcTl0SkxkTzZsU29SUGNDTk55aVZhYThFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNILzJiVHFZclp5czNGb2d0czdG djV2am5jT3ZJYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHL EpwwDQYJKoZIhvcNAQELBQADggEBAJq/ZoCej+cG7VJvzk6FdJeeRTfGIlFBT8Z8 CiTJukHV1keh/jG1XLMYuoePTQYLQX6JmZQgHCtSf3/YsFBIvo5MH+KP/vk1+SVA ghcEVhLn6QRUcjs8T56YXEoP132L4gKyOGwHOUFC47MwlgFWyjuDHcED0kg0qLMQ hWOqPJ/Y4A9DdbyF1UNeu3ainallTu8BiNU3tTKlO2JLvPLEOop0IeDI2xJ+b6+B zRXsRLvXQZl0IP26rogojjVGsVk3WPaCBE8giFA7/8/+v2qU47p5+Ezt9sg+rg2o rUeAc7ZWroYG9+yDhQM3k6B+FJwJlcEu1gxUv0Jg3tSy406CF8M= -----END CERTIFICATE-----Generated at Tue Oct 21 01:27:22 2025 by rpki-client