$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/J8hSLLzm5jiY4n8ZoFBY8qv2TlY.roa File: J8hSLLzm5jiY4n8ZoFBY8qv2TlY.roa (raw, json) Hash identifier: K9uASHy/f7hYroRXCwiv67ugUzkSrVLCJa14XITQMSk= Subject key identifier: 27:C8:52:2C:BC:E6:E6:38:98:E2:7F:19:A0:50:58:F2:AB:F6:4E:56 Certificate issuer: /CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20 Certificate serial: 03 Authority key identifier: 96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/J8hSLLzm5jiY4n8ZoFBY8qv2TlY.roa Signing time: Wed 15 Oct 2025 04:26:19 +0000 ROA not before: Wed 15 Oct 2025 04:26:19 +0000 ROA not after: Wed 07 Oct 2026 15:30:24 +0000 asID: 63900 IP address blocks: 138.252.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 01:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20 Validity Not Before: Oct 15 04:26:19 2025 GMT Not After : Oct 7 15:30:24 2026 GMT Subject: CN=27C8522CBCE6E63898E27F19A05058F2ABF64E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:b4:11:e2:cd:05:ea:84:a1:9b:fc:ac:c7: ec:15:17:4b:ba:c1:f9:aa:cd:e1:4e:f8:80:4b:c5: c6:f4:65:c7:06:4f:e6:79:ec:d2:1d:9b:f6:7e:2d: 39:84:70:82:a2:1f:f4:03:63:b7:56:df:b6:48:ce: e0:1d:24:05:49:cd:91:de:48:89:fb:d4:0a:08:f1: bf:f5:90:6d:0b:9f:62:4b:15:b6:13:f8:f9:4b:80: c7:d1:e7:96:05:5f:89:a9:14:3e:c3:79:bc:d3:d9: bf:2f:eb:c0:00:b1:49:f0:53:c2:6b:3d:2b:73:86: 62:7e:59:01:42:09:f2:0f:d8:8d:18:7f:aa:54:c3: ff:25:1b:79:ed:47:34:16:85:eb:09:91:a6:30:35: f9:ae:cd:dc:75:4f:a6:37:54:ca:e4:d3:7d:b5:23: 43:f2:bf:f5:84:91:3d:d6:f5:4d:a3:ae:03:8f:da: f4:0c:c5:ee:f3:98:8c:6d:18:29:27:0c:47:e6:14: bc:7a:5d:c0:e8:ae:31:09:38:fd:45:0f:49:79:fa: 8f:05:49:b1:f8:fd:2a:e2:f2:d0:d7:fe:95:7d:19: 73:90:9b:e1:ce:94:90:de:56:8a:50:f4:47:0b:82: ad:aa:ae:9f:8c:6a:36:7f:13:5b:58:77:94:a2:c6: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C8:52:2C:BC:E6:E6:38:98:E2:7F:19:A0:50:58:F2:AB:F6:4E:56 X509v3 Authority Key Identifier: keyid:96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/J8hSLLzm5jiY4n8ZoFBY8qv2TlY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.12.0/23 Signature Algorithm: sha256WithRSAEncryption 19:25:08:e4:d6:7b:8e:c5:28:8e:01:ae:0a:88:23:a0:9d:23: 1a:83:f5:af:0d:89:79:79:75:57:ff:29:c9:21:3c:42:61:ea: d7:2d:c3:7a:9e:fd:01:b8:12:77:f7:7a:47:47:76:43:91:6e: 54:c8:46:24:53:ed:32:0b:5b:af:5d:7d:09:45:bf:02:cb:ed: 0c:d2:82:c6:44:1d:9d:31:75:e6:18:7f:49:1a:e4:eb:b5:6d: 41:5d:72:e9:f7:e6:f4:41:16:c3:2d:86:d0:f8:73:f4:8f:d0: 65:a9:4d:3b:df:f0:cb:61:2e:6c:bc:ce:be:64:42:30:bc:5a: 41:01:90:52:d5:0b:0c:42:d8:54:92:84:a5:5a:f1:94:58:9f: 82:60:51:dd:ad:f6:8a:e2:15:1f:f5:e7:ae:9a:60:96:cf:35: 97:73:9b:9f:11:98:16:a4:b9:fd:2d:a0:66:ec:40:18:ef:1c: a7:6e:9d:aa:ee:65:34:00:f5:9a:cc:16:de:c6:2d:00:14:d8: 2e:7c:fd:88:0a:28:aa:39:b2:3b:5b:26:f6:5a:63:6f:17:3a: da:01:28:61:0f:ef:4c:98:04:ca:94:67:60:81:ff:db:32:70: b9:17:41:33:32:3c:01:13:c0:d7:a8:0b:36:6c:0a:e7:d5:c7: 7d:e5:2e:77 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjU3 QjYwRDY5RkMyODIyODRFRTBCNzU3RDJFQkY2QjNBODU1QTIwMB4XDTI1MTAxNTA0 MjYxOVoXDTI2MTAwNzE1MzAyNFowMzExMC8GA1UEAxMoMjdDODUyMkNCQ0U2RTYz ODk4RTI3RjE5QTA1MDU4RjJBQkY2NEU1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ6EtBHizQXqhKGb/KzH7BUXS7rB+arN4U74gEvFxvRlxwZP5nns 0h2b9n4tOYRwgqIf9ANjt1bftkjO4B0kBUnNkd5IifvUCgjxv/WQbQufYksVthP4 +UuAx9HnlgVfiakUPsN5vNPZvy/rwACxSfBTwms9K3OGYn5ZAUIJ8g/YjRh/qlTD /yUbee1HNBaF6wmRpjA1+a7N3HVPpjdUyuTTfbUjQ/K/9YSRPdb1TaOuA4/a9AzF 7vOYjG0YKScMR+YUvHpdwOiuMQk4/UUPSXn6jwVJsfj9KuLy0Nf+lX0Zc5Cb4c6U kN5WilD0RwuCraqun4xqNn8TW1h3lKLGbZECAwEAAaOCAeowggHmMB0GA1UdDgQW BBQnyFIsvObmOJjifxmgUFjyq/ZOVjAfBgNVHSMEGDAWgBSWV7YNafwoIoTuC3V9 Lr9rOoVaIDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9aVVNPL2xs ZTJEV244S0NLRTdndDFmUzZfYXpxRldpQS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bGxlMkRXbjhLQ0tFN2d0MWZTNl9henFGV2lBLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy9KOGhTTEx6bTVqaVk0bjhab0ZCWThx djJUbFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivwMMA0G CSqGSIb3DQEBCwUAA4IBAQAZJQjk1nuOxSiOAa4KiCOgnSMag/WvDYl5eXVX/ynJ ITxCYerXLcN6nv0BuBJ393pHR3ZDkW5UyEYkU+0yC1uvXX0JRb8Cy+0M0oLGRB2d MXXmGH9JGuTrtW1BXXLp9+b0QRbDLYbQ+HP0j9BlqU073/DLYS5svM6+ZEIwvFpB AZBS1QsMQthUkoSlWvGUWJ+CYFHdrfaK4hUf9eeummCWzzWXc5ufEZgWpLn9LaBm 7EAY7xynbp2q7mU0APWazBbexi0AFNgufP2ICiiqObI7Wyb2WmNvFzraAShhD+9M mATKlGdggf/bMnC5F0EzMjwBE8DXqAs2bArn1cd95S53 -----END CERTIFICATE-----Generated at Mon Oct 20 23:27:28 2025 by rpki-client