$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/jwMIW6i_RHfle0vO5zgjXbRk8Co.roa File: jwMIW6i_RHfle0vO5zgjXbRk8Co.roa (raw, json) Hash identifier: JR5KA0BLsENAJQfNOEqnBiB3XaBoLRNzbIN98A1vmCo= Subject key identifier: 8F:03:08:5B:A8:BF:44:77:E5:7B:4B:CE:E7:38:23:5D:B4:64:F0:2A Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E69 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/jwMIW6i_RHfle0vO5zgjXbRk8Co.roa Signing time: Fri 22 Aug 2025 08:58:14 +0000 ROA not before: Fri 22 Aug 2025 08:58:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 61.57.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3689 (0xe69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 22 08:58:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F03085BA8BF4477E57B4BCEE738235DB464F02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:d9:c3:93:66:d0:64:0c:b3:32:7f:98:e6: 6e:52:a3:21:6a:6c:c5:4a:62:e7:67:ee:73:36:4e: 5b:36:4e:d9:a9:81:4e:71:2e:9b:ab:0f:e2:90:4c: a3:7e:63:a2:8b:d4:4a:7a:34:38:ef:8a:0d:a6:ec: 36:af:93:9b:4a:fb:e5:8b:ba:85:24:6f:49:1a:90: c7:67:82:a4:73:30:ec:57:31:de:31:66:3c:9d:62: 6e:1d:5c:b2:78:34:97:dc:4d:5d:b1:97:6b:b8:76: 73:13:c9:c2:07:af:79:4e:77:b9:79:6a:b9:97:27: 48:a3:5f:9c:64:da:a2:30:ca:19:f4:ca:b1:1d:c8: a4:4d:7f:f9:0c:d0:d9:d9:79:42:ae:f9:47:f9:ac: 8f:74:98:d7:b9:36:32:cb:39:97:3e:60:b2:75:8f: d1:57:b4:c0:16:fb:e0:e4:5a:c0:04:c9:62:96:10: 38:b3:13:03:3a:ad:8e:e6:8d:7c:c8:cf:6e:ae:62: f7:bc:e6:0a:3b:0b:ac:2f:5c:a1:51:51:2b:07:53: 09:0c:8c:61:1f:f2:0c:4c:45:ab:0b:6f:24:b2:29: 97:eb:75:ca:6c:b4:27:03:e9:ea:6f:4b:c7:c2:0a: 91:b7:6c:8a:01:dd:13:bc:7f:7b:13:ba:c1:fc:3a: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:03:08:5B:A8:BF:44:77:E5:7B:4B:CE:E7:38:23:5D:B4:64:F0:2A X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/jwMIW6i_RHfle0vO5zgjXbRk8Co.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.64.0/18 Signature Algorithm: sha256WithRSAEncryption bd:1b:25:52:82:dc:50:6f:3f:f4:01:4b:37:a6:bf:25:9f:82: da:70:85:19:52:3d:bd:6c:fe:b7:52:52:08:31:19:78:2d:a5: 64:39:9d:b8:99:ad:14:41:6d:0b:3a:70:8c:13:dd:b7:b9:79: 29:ee:80:ed:a3:94:9b:61:c6:e4:13:1d:08:77:aa:1c:17:77: 09:1b:7e:f8:bc:d0:0a:d4:d3:08:fe:f1:d9:7a:7d:f5:74:58: e3:a6:58:36:e0:49:97:2f:21:a7:82:60:d9:b9:25:65:d6:4a: 8d:7a:4e:ca:c5:4b:e8:d4:94:20:7c:f5:11:0f:c7:69:fd:95: a9:b9:71:34:ca:87:5a:8e:d6:3d:20:18:b2:3b:88:cc:d1:0e: df:19:5c:2f:d6:86:26:09:30:b0:35:87:f9:df:8d:e7:17:46: 6c:97:3e:62:21:ec:b1:07:93:0c:8c:d3:47:08:a8:1c:c3:7a: 19:19:7e:ed:b2:60:c2:0c:d6:6d:f5:9c:6b:89:72:b1:b9:32: 1d:93:1d:87:1d:31:ff:91:04:2d:d5:1f:99:fc:df:ad:75:1c: a5:9e:39:44:de:19:11:5a:54:bb:57:fa:d5:05:c4:b8:a6:67: 0a:62:1d:48:34:bc:e0:5f:d9:15:22:95:75:89:fa:81:94:31: 47:31:1c:fb -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA4MjIw ODU4MTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGMDMwODVCQThCRjQ0 NzdFNTdCNEJDRUU3MzgyMzVEQjQ2NEYwMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzg9nDk2bQZAyzMn+Y5m5SoyFqbMVKYudn7nM2Tls2TtmpgU5x LpurD+KQTKN+Y6KL1Ep6NDjvig2m7Davk5tK++WLuoUkb0kakMdngqRzMOxXMd4x ZjydYm4dXLJ4NJfcTV2xl2u4dnMTycIHr3lOd7l5armXJ0ijX5xk2qIwyhn0yrEd yKRNf/kM0NnZeUKu+Uf5rI90mNe5NjLLOZc+YLJ1j9FXtMAW++DkWsAEyWKWEDiz EwM6rY7mjXzIz26uYve85go7C6wvXKFRUSsHUwkMjGEf8gxMRasLbySyKZfrdcps tCcD6epvS8fCCpG3bIoB3RO8f3sTusH8OkKxAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUjwMIW6i/RHfle0vO5zgjXbRk8CowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9qd01JVzZpX1JIZmxlMHZPNXpn alhiUms4Q28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGPTlA MA0GCSqGSIb3DQEBCwUAA4IBAQC9GyVSgtxQbz/0AUs3pr8ln4LacIUZUj29bP63 UlIIMRl4LaVkOZ24ma0UQW0LOnCME923uXkp7oDto5SbYcbkEx0Id6ocF3cJG374 vNAK1NMI/vHZen31dFjjplg24EmXLyGngmDZuSVl1kqNek7KxUvo1JQgfPURD8dp /ZWpuXE0yodajtY9IBiyO4jM0Q7fGVwv1oYmCTCwNYf5343nF0Zslz5iIeyxB5MM jNNHCKgcw3oZGX7tsmDCDNZt9ZxriXKxuTIdkx2HHTH/kQQt1R+Z/N+tdRylnjlE 3hkRWlS7V/rVBcS4pmcKYh1INLzgX9kVIpV1ifqBlDFHMRz7 -----END CERTIFICATE-----Generated at Sun Aug 24 09:17:54 2025 by rpki-client