$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KNszs86yA87D0j13Y1haSyT5gaU.roa File: KNszs86yA87D0j13Y1haSyT5gaU.roa (raw, json) Hash identifier: 41RoB0ExF63yuSIDa7ZraYuTGzl6WrxoY2OoA5880XU= Subject key identifier: 28:DB:33:B3:CE:B2:03:CE:C3:D2:3D:77:63:58:5A:4B:24:F9:81:A5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1489 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KNszs86yA87D0j13Y1haSyT5gaU.roa Signing time: Fri 22 Aug 2025 09:00:31 +0000 ROA not before: Fri 22 Aug 2025 09:00:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 202.178.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5257 (0x1489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=28DB33B3CEB203CEC3D23D7763585A4B24F981A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:e8:44:90:f9:b5:57:cf:54:bb:9c:1e:06: 87:55:1f:34:00:48:bd:06:28:db:7c:f7:f5:f6:ae: 99:c2:5e:94:dc:96:4b:21:d4:5a:a5:2c:f2:c3:32: c6:48:93:8c:0c:11:b8:90:88:40:57:ca:9f:87:6d: 70:b2:1d:9f:6f:5e:95:c7:33:e0:ed:0f:fc:51:32: dd:c8:ae:7c:10:01:d4:fd:d7:6e:fe:11:26:35:85: 9a:73:82:3b:91:5d:19:55:14:9e:ce:47:4e:13:6c: 24:cf:08:e8:ab:7d:4a:be:d4:10:40:14:da:01:69: 15:ce:6c:b3:02:be:12:94:ed:10:a1:75:ba:f1:dc: 59:58:f2:21:bf:19:53:26:fc:24:2e:01:3b:1e:bb: 73:09:b8:aa:19:d6:0c:bf:5b:b2:45:34:4c:b7:e6: 2c:bb:5e:cb:ac:15:db:3d:81:25:e4:eb:d1:0a:06: b4:37:a2:38:d4:a6:42:14:aa:2c:de:a7:fb:9f:a2: 72:e0:d4:b4:7a:1a:d3:37:80:75:d8:85:df:2a:11: d6:b5:23:ba:94:90:02:4f:59:2e:9a:96:1b:4c:45: c0:04:5a:7f:d1:3f:e7:c9:01:ec:56:a7:87:91:71: e9:3e:e6:dd:af:de:ff:ef:aa:17:25:5e:cd:77:c2: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DB:33:B3:CE:B2:03:CE:C3:D2:3D:77:63:58:5A:4B:24:F9:81:A5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KNszs86yA87D0j13Y1haSyT5gaU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.178.180.0/22 Signature Algorithm: sha256WithRSAEncryption 41:25:21:b8:fa:99:70:c8:e0:55:7b:e4:b3:7b:ad:de:60:a1: ef:e3:67:1a:ca:d3:df:3a:3a:4a:cf:53:b2:3c:41:7f:6d:a3: 89:43:7f:8d:43:d8:cb:13:f2:d6:25:05:8f:43:fd:1c:23:48: 83:e6:b0:46:4f:a0:8b:25:e3:09:5a:e0:30:56:fc:ee:d7:14: c8:44:00:b9:92:b9:8d:b3:0a:ec:a4:05:fd:60:c1:ce:35:ba: 2d:be:2f:16:5d:df:18:3e:f1:d0:3e:9b:14:e1:26:16:05:ad: 40:e7:8b:c6:f4:d3:c8:38:8f:37:e8:72:55:ec:f1:58:c0:e4: c5:c6:fc:5f:01:a7:cb:0d:a5:3d:56:2d:f1:7c:14:7a:4d:d0: 59:9e:55:fc:3d:57:d3:b4:a3:5c:93:c8:a1:f0:ef:f0:5a:9c: 5f:92:56:24:78:1a:81:c0:e4:97:6d:7c:65:d1:c4:6a:f2:75: c2:b6:dc:16:36:9b:71:ef:c6:c4:e6:fb:27:1e:ee:e8:fb:12: 1c:db:ce:50:99:d2:6d:4b:00:95:50:68:e4:c9:3c:77:ad:83: 10:f7:87:8f:a8:c6:18:ee:82:14:a1:c5:f7:e2:15:59:8e:1e: 27:42:c3:c5:c3:43:b6:7f:ea:47:f7:d6:5d:fb:60:18:3b:ca: 57:3b:59:67 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4REIzM0IzQ0VCMjAz Q0VDM0QyM0Q3NzYzNTg1QTRCMjRGOTgxQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVH+hEkPm1V89Uu5weBodVHzQASL0GKNt89/X2rpnCXpTclksh 1FqlLPLDMsZIk4wMEbiQiEBXyp+HbXCyHZ9vXpXHM+DtD/xRMt3IrnwQAdT9127+ ESY1hZpzgjuRXRlVFJ7OR04TbCTPCOirfUq+1BBAFNoBaRXObLMCvhKU7RChdbrx 3FlY8iG/GVMm/CQuATseu3MJuKoZ1gy/W7JFNEy35iy7XsusFds9gSXk69EKBrQ3 ojjUpkIUqizep/ufonLg1LR6GtM3gHXYhd8qEda1I7qUkAJPWS6alhtMRcAEWn/R P+fJAexWp4eRcek+5t2v3v/vqhclXs13wgGBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKNszs86yA87D0j13Y1haSyT5gaUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0tOc3pzODZ5QTg3RDBqMTNZMWhhU3lU NWdhVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKsrQwDQYJ KoZIhvcNAQELBQADggEBAEElIbj6mXDI4FV75LN7rd5goe/jZxrK0986OkrPU7I8 QX9to4lDf41D2MsT8tYlBY9D/RwjSIPmsEZPoIsl4wla4DBW/O7XFMhEALmSuY2z CuykBf1gwc41ui2+LxZd3xg+8dA+mxThJhYFrUDni8b008g4jzfoclXs8VjA5MXG /F8Bp8sNpT1WLfF8FHpN0FmeVfw9V9O0o1yTyKHw7/BanF+SViR4GoHA5JdtfGXR xGrydcK23BY2m3HvxsTm+yce7uj7EhzbzlCZ0m1LAJVQaOTJPHetgxD3h4+oxhju ghShxffiFVmOHidCw8XDQ7Z/6kf31l37YBg7ylc7WWc= -----END CERTIFICATE-----Generated at Thu Nov 6 01:58:04 2025 by rpki-client