$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/F-uIqLUJ2DofwkNp7jRcP9Rb0qU.roa File: F-uIqLUJ2DofwkNp7jRcP9Rb0qU.roa (raw, json) Hash identifier: qxhjM03lflZoUJobv28e2CqjaJUBiXRNnEpHgSf1MKI= Subject key identifier: 17:EB:88:A8:B5:09:D8:3A:1F:C2:43:69:EE:34:5C:3F:D4:5B:D2:A5 Certificate issuer: /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1 Certificate serial: 110B Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/F-uIqLUJ2DofwkNp7jRcP9Rb0qU.roa Signing time: Fri 22 Aug 2025 09:01:28 +0000 ROA not before: Fri 22 Aug 2025 09:01:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131645 IP address blocks: 202.148.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4363 (0x110b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1 Validity Not Before: Aug 22 09:01:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=17EB88A8B509D83A1FC24369EE345C3FD45BD2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:b7:cd:31:c3:72:d1:0c:6f:91:25:fd:df: c3:2f:bf:ff:74:95:86:39:ea:ae:b5:73:65:c6:8e: 0c:e2:da:df:b8:49:35:08:58:8f:a0:98:44:1c:9b: fd:84:28:03:b2:ae:a8:f5:77:29:b9:48:07:22:fa: e9:38:94:50:d3:a4:df:7a:ed:96:d6:ed:25:95:f1: 05:c1:24:af:b5:d3:33:ac:8a:b5:9f:fe:03:e9:22: f2:11:3c:9c:68:fc:59:6b:de:da:71:cf:12:ec:9b: 5b:3e:44:26:c2:90:28:71:5a:96:10:2c:50:95:4f: 26:44:50:17:4b:e8:27:bd:1b:66:9e:6f:4b:12:b2: 95:da:2b:6d:e3:70:f9:fd:6d:be:19:78:bb:ef:49: 80:31:96:fa:88:15:28:62:6f:9d:b3:e7:79:60:85: ab:6e:19:a4:a4:b6:0e:c9:35:77:c4:ca:5f:81:08: b0:a4:ac:b1:2f:34:9e:9f:2a:ed:8f:65:72:f3:01: 81:42:f6:cd:08:38:2c:4d:40:eb:03:47:24:4f:fd: e7:28:46:c2:f7:af:78:7f:68:47:57:dc:48:1f:5c: 8a:c3:66:a0:04:8b:ea:41:c4:c2:eb:2a:59:82:90: 53:44:f6:c8:fc:83:c1:c5:62:f7:16:88:3f:71:66: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EB:88:A8:B5:09:D8:3A:1F:C2:43:69:EE:34:5C:3F:D4:5B:D2:A5 X509v3 Authority Key Identifier: keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/F-uIqLUJ2DofwkNp7jRcP9Rb0qU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.148.208.0/23 Signature Algorithm: sha256WithRSAEncryption 03:8c:2f:64:a9:fc:d8:bf:cd:ce:5d:4a:36:68:89:7a:ec:b3: 8e:77:6a:d6:b0:71:ec:f4:3c:ae:f4:da:64:eb:08:42:5e:72: d3:84:b9:fb:af:fd:98:bc:50:0d:7f:04:08:dd:ab:87:ea:c5: 08:e1:01:bf:dc:e7:1c:14:fc:b2:b5:d6:62:17:8d:21:a6:59: 08:84:43:2f:8c:19:43:f2:28:2e:be:05:9a:66:cf:85:f2:ac: 10:78:0a:f1:f2:97:b4:1a:8a:43:44:e5:c0:c8:7f:3e:a6:d3: 63:fa:f1:a7:d3:38:6a:68:ab:a8:a5:8e:70:26:1c:b9:de:76: 91:65:3f:54:3a:9f:a9:15:9c:c5:60:b6:94:42:a4:b4:4b:c1: 71:61:a7:2a:30:47:7c:23:09:88:b7:82:ba:d5:86:4e:91:f5: 0d:20:3d:22:10:a0:ae:72:96:6b:df:92:4e:13:63:f7:25:cf: b8:fb:73:59:e6:85:34:e2:bd:50:25:8d:38:2e:13:ed:d9:0d: 3b:ad:e9:de:86:4c:27:d3:c8:55:95:b2:9d:ee:23:6d:b4:54: 7c:3b:ce:24:b8:3b:59:59:9b:54:03:97:9e:c9:8c:12:c4:17: f4:be:73:9c:13:ff:77:da:a0:ee:5c:1c:1a:8f:2e:85:d9:f5: a3:73:09:03 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODI4 QkQxOUVGQThFQkU1OUVGNDA3QkI3RkFCNjg5OEY3NTRDN0VDMTAeFw0yNTA4MjIw OTAxMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE3RUI4OEE4QjUwOUQ4 M0ExRkMyNDM2OUVFMzQ1QzNGRDQ1QkQyQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAHrfNMcNy0QxvkSX938Mvv/90lYY56q61c2XGjgzi2t+4STUI WI+gmEQcm/2EKAOyrqj1dym5SAci+uk4lFDTpN967ZbW7SWV8QXBJK+10zOsirWf /gPpIvIRPJxo/Flr3tpxzxLsm1s+RCbCkChxWpYQLFCVTyZEUBdL6Ce9G2aeb0sS spXaK23jcPn9bb4ZeLvvSYAxlvqIFShib52z53lghatuGaSktg7JNXfEyl+BCLCk rLEvNJ6fKu2PZXLzAYFC9s0IOCxNQOsDRyRP/ecoRsL3r3h/aEdX3EgfXIrDZqAE i+pBxMLrKlmCkFNE9sj8g8HFYvcWiD9xZthFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUF+uIqLUJ2DofwkNp7jRcP9Rb0qUwHwYDVR0jBBgwFoAUgovRnvqOvlnvQHu3 +raJj3VMfsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tDTy9n b3ZSbnZxT3ZsbnZRSHUzLXJhSmozVk1mc0UuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2dvdlJudnFPdmxudlFIdTMtcmFKajNWTWZzRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0tLQ08vRi11SXFMVUoyRG9md2tOcDdqUmNQ OVJiMHFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcqU0DAN BgkqhkiG9w0BAQsFAAOCAQEAA4wvZKn82L/Nzl1KNmiJeuyzjndq1rBx7PQ8rvTa ZOsIQl5y04S5+6/9mLxQDX8ECN2rh+rFCOEBv9znHBT8srXWYheNIaZZCIRDL4wZ Q/IoLr4FmmbPhfKsEHgK8fKXtBqKQ0TlwMh/PqbTY/rxp9M4amirqKWOcCYcud52 kWU/VDqfqRWcxWC2lEKktEvBcWGnKjBHfCMJiLeCutWGTpH1DSA9IhCgrnKWa9+S ThNj9yXPuPtzWeaFNOK9UCWNOC4T7dkNO63p3oZMJ9PIVZWyne4jbbRUfDvOJLg7 WVmbVAOXnsmMEsQX9L5znBP/d9qg7lwcGo8uhdn1o3MJAw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:56:55 2025 by rpki-client