$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/J9xD38Qvc86jflu_265RHv1a_QI.roa File: J9xD38Qvc86jflu_265RHv1a_QI.roa (raw, json) Hash identifier: cQRrT6SntOfq6Zv56ikzm3e1QRlFwgwoaFm3tj89Big= Subject key identifier: 27:DC:43:DF:C4:2F:73:CE:A3:7E:5B:BF:DB:AE:51:1E:FD:5A:FD:02 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02FD Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/J9xD38Qvc86jflu_265RHv1a_QI.roa Signing time: Thu 09 Oct 2025 06:14:40 +0000 ROA not before: Thu 09 Oct 2025 06:14:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152609 IP address blocks: 157.20.248.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Oct 9 06:14:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=27DC43DFC42F73CEA37E5BBFDBAE511EFD5AFD02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:be:a3:02:f9:db:43:77:e7:82:04:cc:93: a3:c1:f2:c8:e6:8e:62:f9:2d:08:e2:20:c4:78:38: 34:ee:e9:3f:00:5b:d3:6c:98:eb:ee:f4:6a:01:55: 7b:26:1d:69:58:e4:6d:fa:c0:8c:9f:6d:ac:0d:5b: 5d:ec:7f:7c:ee:ce:99:96:50:ef:79:5d:8a:2d:c2: 11:8b:be:e2:95:03:6d:a1:ea:4d:ef:a5:2f:e7:48: ba:d0:ad:b4:5d:40:ed:d5:b6:32:93:67:71:51:9b: 98:55:f8:5f:36:c6:8b:9a:ae:11:c5:20:89:5c:5a: 2e:18:99:33:f3:80:71:0a:74:4a:92:6c:2f:49:84: 31:fd:97:5c:f5:ab:3c:73:b2:7e:17:79:7a:0a:e6: 5c:c4:28:30:40:79:af:58:8f:e1:4a:7a:e7:d4:87: ef:ff:a1:2e:7a:22:a0:9c:f9:13:ae:b3:2e:9d:d8: 25:31:5a:8a:9f:89:84:de:c4:e4:ff:71:d9:ad:53: 16:af:1a:b1:b7:cd:fa:dc:d6:6f:77:f2:61:69:cf: 8e:9a:6b:dd:95:35:73:3b:52:9f:06:c4:fb:98:3d: ea:ed:f4:5e:1e:89:fe:46:b4:61:a9:bb:84:dc:b6: 58:74:90:3a:b6:fb:3a:5b:16:a4:39:55:e0:a8:a1: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DC:43:DF:C4:2F:73:CE:A3:7E:5B:BF:DB:AE:51:1E:FD:5A:FD:02 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/J9xD38Qvc86jflu_265RHv1a_QI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.224/28 Signature Algorithm: sha256WithRSAEncryption c0:0d:15:d9:21:a9:5b:12:74:f7:f5:9f:f4:dc:8a:3f:b4:10: 1f:74:34:1e:ec:59:30:50:b0:1c:b4:a3:a8:4f:c0:9e:47:91: 3a:33:e3:1d:14:b4:cd:31:c6:eb:38:41:41:46:69:3f:ad:8e: e8:67:88:01:d0:f7:73:14:ea:e3:56:65:78:33:0c:2d:32:cd: 4c:be:03:8b:c4:3a:55:40:87:06:de:44:ce:c3:6a:63:cf:f4: 1e:ec:f9:a9:ab:3c:3b:ce:13:27:02:41:e3:3e:37:a8:87:b0: 96:a1:43:fb:39:91:73:a3:7f:ee:a1:89:4b:d7:a5:81:2f:57: 2b:c0:f6:3c:09:6b:c3:12:7e:df:85:dc:31:21:99:c9:09:6c: 4b:e8:1c:f9:f3:9e:15:1b:7c:99:18:2a:d9:d5:41:e1:78:29: 4b:19:1d:d3:45:a3:c8:27:13:c9:b0:62:24:ff:72:3c:9a:9d: 22:6e:56:eb:94:f3:fc:4c:e9:72:87:c2:e1:9e:85:e4:1f:67: 00:72:0f:d8:15:75:3a:e7:1d:4a:b7:1f:e7:85:97:cb:1f:84: 32:1d:6a:79:71:1b:14:a8:30:c6:c4:b8:c2:da:69:1f:66:44: eb:8b:f2:62:97:72:08:c0:cf:24:4b:cb:81:f4:4a:82:a4:94: fd:39:d0:e3 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTEwMDkw NjE0NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI3REM0M0RGQzQyRjcz Q0VBMzdFNUJCRkRCQUU1MTFFRkQ1QUZEMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKVL6jAvnbQ3fnggTMk6PB8sjmjmL5LQjiIMR4ODTu6T8AW9Ns mOvu9GoBVXsmHWlY5G36wIyfbawNW13sf3zuzpmWUO95XYotwhGLvuKVA22h6k3v pS/nSLrQrbRdQO3VtjKTZ3FRm5hV+F82xouarhHFIIlcWi4YmTPzgHEKdEqSbC9J hDH9l1z1qzxzsn4XeXoK5lzEKDBAea9Yj+FKeufUh+//oS56IqCc+ROusy6d2CUx WoqfiYTexOT/cdmtUxavGrG3zfrc1m938mFpz46aa92VNXM7Up8GxPuYPert9F4e if5GtGGpu4Tctlh0kDq2+zpbFqQ5VeCooW07AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUJ9xD38Qvc86jflu/265RHv1a/QIwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvSjl4RDM4UXZjODZqZmx1XzI2NVJI djFhX1FJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBJ0U+OAw DQYJKoZIhvcNAQELBQADggEBAMANFdkhqVsSdPf1n/Tcij+0EB90NB7sWTBQsBy0 o6hPwJ5HkToz4x0UtM0xxus4QUFGaT+tjuhniAHQ93MU6uNWZXgzDC0yzUy+A4vE OlVAhwbeRM7DamPP9B7s+amrPDvOEycCQeM+N6iHsJahQ/s5kXOjf+6hiUvXpYEv VyvA9jwJa8MSft+F3DEhmckJbEvoHPnznhUbfJkYKtnVQeF4KUsZHdNFo8gnE8mw YiT/cjyanSJuVuuU8/xM6XKHwuGeheQfZwByD9gVdTrnHUq3H+eFl8sfhDIdanlx GxSoMMbEuMLaaR9mROuL8mKXcgjAzyRLy4H0SoKklP050OM= -----END CERTIFICATE-----Generated at Wed Nov 5 21:24:27 2025 by rpki-client