$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/JLlwWPRLIdVEBXA4ls6Hn9AfXHk.roa File: JLlwWPRLIdVEBXA4ls6Hn9AfXHk.roa (raw, json) Hash identifier: dAQN1TAFVk1cxhQApwHYQA3ZUreZS7cWXGhtDTw7KQw= Subject key identifier: 24:B9:70:58:F4:4B:21:D5:44:05:70:38:96:CE:87:9F:D0:1F:5C:79 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 1077 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JLlwWPRLIdVEBXA4ls6Hn9AfXHk.roa Signing time: Fri 22 Aug 2025 08:55:31 +0000 ROA not before: Fri 22 Aug 2025 08:55:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18177 IP address blocks: 120.115.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4215 (0x1077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 22 08:55:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=24B97058F44B21D54405703896CE879FD01F5C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:3a:97:66:2d:75:45:8e:1e:24:ec:cb:35: d5:87:27:3a:cc:31:00:ef:1a:3f:1f:fc:c6:98:62: 31:88:fe:89:62:38:1b:6c:b5:14:fb:ce:8f:e4:d9: a1:6a:bb:d6:0f:79:f9:6c:37:4e:42:9e:ad:d2:11: b1:a9:c8:bf:f6:46:6b:31:22:f2:f7:76:d1:bd:3b: 0d:9c:07:f2:e9:8a:39:51:8f:f9:db:4c:87:9f:74: 88:f5:b6:d3:72:30:5f:09:a4:c0:10:43:4a:2e:34: ad:85:30:00:54:66:fb:91:3f:38:cd:a5:d7:9d:52: 2b:de:20:04:d4:e6:ce:24:ed:52:42:78:05:e5:db: 86:39:ed:ec:14:d2:e4:3f:e0:2c:b2:df:d0:f7:39: 5b:87:64:68:81:97:f0:97:19:05:2e:6a:34:38:fe: c1:1c:e5:6f:f0:07:0f:6a:d4:7c:63:94:bc:2a:85: e9:35:b7:e9:66:7b:50:e4:08:23:da:e0:68:92:a8: 86:55:17:83:07:3a:4d:ad:be:8e:94:ba:bf:26:6c: 1f:dc:c6:89:bc:88:d8:62:36:47:4f:5e:23:7e:a8: a9:a6:73:2f:18:4b:98:e3:2c:1e:5c:6f:88:43:92: 4b:df:3e:2d:28:8f:de:8d:69:8f:fc:2e:87:b0:9e: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B9:70:58:F4:4B:21:D5:44:05:70:38:96:CE:87:9F:D0:1F:5C:79 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JLlwWPRLIdVEBXA4ls6Hn9AfXHk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.115.0.0/16 Signature Algorithm: sha256WithRSAEncryption 81:40:2a:9b:a9:8b:79:6d:cc:27:de:20:78:1a:36:14:dc:dc: 9d:5f:d6:86:ed:a8:b5:b5:5f:51:f6:6b:af:55:ed:da:8a:98: e8:df:89:b2:c1:c4:54:b5:50:91:bf:62:00:9f:b8:0d:5d:ad: 33:d0:3a:26:12:ef:33:e8:2c:ff:03:40:f8:f2:01:d4:b6:42: a5:b4:42:36:39:02:1a:14:7b:b5:8f:33:6c:ea:e7:51:66:ee: 6d:e6:1c:62:4d:14:86:78:30:f8:c0:4a:d2:70:b3:08:33:09: 3c:22:a7:ae:7b:f1:bb:dc:45:60:99:93:50:56:b0:e4:78:41: d6:4f:4a:10:98:0b:c6:2d:8e:14:7b:ee:77:02:66:0e:c5:ea: 49:71:27:8e:d5:dd:74:5a:67:0c:8f:72:14:a2:e8:67:e5:85: 96:9b:4b:b5:1e:29:12:c0:36:a1:39:32:77:21:92:2e:03:26: 16:f2:d8:58:ad:8c:3e:b6:50:97:05:df:5f:cc:86:44:a1:be: 52:ed:01:ae:70:dc:80:1a:71:6f:89:7f:5e:b7:5f:bf:bf:9c: 13:c7:b2:9d:13:21:77:0a:be:c2:ff:10:97:92:3c:23:08:c0: 59:46:35:5b:90:01:eb:3e:14:75:3a:19:ed:38:0b:bd:27:ad: e5:ac:c6:5a -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA4MjIw ODU1MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0Qjk3MDU4RjQ0QjIx RDU0NDA1NzAzODk2Q0U4NzlGRDAxRjVDNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8PDqXZi11RY4eJOzLNdWHJzrMMQDvGj8f/MaYYjGI/oliOBts tRT7zo/k2aFqu9YPeflsN05Cnq3SEbGpyL/2RmsxIvL3dtG9Ow2cB/LpijlRj/nb TIefdIj1ttNyMF8JpMAQQ0ouNK2FMABUZvuRPzjNpdedUiveIATU5s4k7VJCeAXl 24Y57ewU0uQ/4Cyy39D3OVuHZGiBl/CXGQUuajQ4/sEc5W/wBw9q1HxjlLwqhek1 t+lme1DkCCPa4GiSqIZVF4MHOk2tvo6Uur8mbB/cxom8iNhiNkdPXiN+qKmmcy8Y S5jjLB5cb4hDkkvfPi0oj96NaY/8Loewnh+pAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUJLlwWPRLIdVEBXA4ls6Hn9AfXHkwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9KTGx3V1BSTElkVkVCWEE0bHM2 SG45QWZYSGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeHMw DQYJKoZIhvcNAQELBQADggEBAIFAKpupi3ltzCfeIHgaNhTc3J1f1obtqLW1X1H2 a69V7dqKmOjfibLBxFS1UJG/YgCfuA1drTPQOiYS7zPoLP8DQPjyAdS2QqW0QjY5 AhoUe7WPM2zq51Fm7m3mHGJNFIZ4MPjAStJwswgzCTwip6578bvcRWCZk1BWsOR4 QdZPShCYC8YtjhR77ncCZg7F6klxJ47V3XRaZwyPchSi6GflhZabS7UeKRLANqE5 Mnchki4DJhby2FitjD62UJcF31/MhkShvlLtAa5w3IAacW+Jf163X7+/nBPHsp0T IXcKvsL/EJeSPCMIwFlGNVuQAes+FHU6Ge04C70nreWsxlo= -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:23 2025 by rpki-client