$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKIS/adtWVXMUFuFB5C4rbabXPXuXzDM.roa File: adtWVXMUFuFB5C4rbabXPXuXzDM.roa (raw, json) Hash identifier: 0stVBfa9HE9kdvnUhT86CGAl6fPOyWhfcDIoBbsJjAk= Subject key identifier: 69:DB:56:55:73:14:16:E1:41:E4:2E:2B:6D:A6:D7:3D:7B:97:CC:33 Certificate issuer: /CN=6FECAE846F41BCC3B24E1327BA21C23053E11C03 Certificate serial: AB Authority key identifier: 6F:EC:AE:84:6F:41:BC:C3:B2:4E:13:27:BA:21:C2:30:53:E1:1C:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b-yuhG9BvMOyThMnuiHCMFPhHAM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/adtWVXMUFuFB5C4rbabXPXuXzDM.roa Signing time: Mon 10 Feb 2025 14:25:09 +0000 ROA not before: Mon 10 Feb 2025 14:25:09 +0000 ROA not after: Fri 09 Jan 2026 15:30:29 +0000 asID: 131645 IP address blocks: 161.248.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b-yuhG9BvMOyThMnuiHCMFPhHAM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FECAE846F41BCC3B24E1327BA21C23053E11C03 Validity Not Before: Feb 10 14:25:09 2025 GMT Not After : Jan 9 15:30:29 2026 GMT Subject: CN=69DB5655731416E141E42E2B6DA6D73D7B97CC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:66:dc:57:27:36:b2:be:5a:80:05:6d:77: 15:4e:e1:b5:51:4b:e5:2b:74:dc:c2:5e:56:a0:9c: 49:56:a8:88:c4:7c:66:7b:1a:6d:03:d7:46:51:4c: 28:8a:75:90:1a:3e:2f:d0:ac:5f:01:ab:e5:72:f6: 18:80:1a:ae:1d:98:4f:cb:0a:80:90:5c:28:2f:a2: 11:9d:8a:59:43:57:78:ba:b1:e1:d7:a2:f1:cf:47: cd:bd:0b:a8:38:c3:e2:92:f1:74:12:e6:2e:49:e3: 8d:73:cb:a6:69:2a:86:c8:7b:79:a4:6b:84:29:a2: 3c:e8:a0:7f:e4:70:cc:db:da:6d:62:bd:52:9d:5a: 57:5f:26:f0:24:8c:79:7d:50:a3:d1:9d:91:e0:7f: c2:f7:89:a1:83:00:f2:91:e6:7e:bc:6b:27:81:49: 6d:2c:c8:e1:52:8e:49:9b:92:9b:06:11:eb:69:3e: 60:98:d5:4d:46:af:c2:f0:b1:1a:79:3c:5e:41:d7: 41:9e:10:fa:ad:48:57:91:92:9e:a2:40:80:4a:66: 70:9b:4a:3a:10:41:7a:c8:ca:2c:a1:27:92:46:4d: 39:96:2f:40:99:43:cd:bb:53:1b:b0:59:e1:2d:9a: 7b:5b:02:3f:9b:f2:19:ec:d2:35:5a:02:c0:1d:f3: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DB:56:55:73:14:16:E1:41:E4:2E:2B:6D:A6:D7:3D:7B:97:CC:33 X509v3 Authority Key Identifier: keyid:6F:EC:AE:84:6F:41:BC:C3:B2:4E:13:27:BA:21:C2:30:53:E1:1C:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/b-yuhG9BvMOyThMnuiHCMFPhHAM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b-yuhG9BvMOyThMnuiHCMFPhHAM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/adtWVXMUFuFB5C4rbabXPXuXzDM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 161.248.132.0/23 Signature Algorithm: sha256WithRSAEncryption a8:ae:66:6b:20:ff:5e:22:d9:ef:98:83:3b:3f:8f:c2:56:37: 9a:fd:2a:ab:7a:b4:32:e8:4a:7a:b2:13:0e:d1:aa:df:95:86: 68:fc:65:35:4a:75:43:c5:4c:37:81:d4:32:0f:57:cc:05:9b: 34:5d:97:bd:63:b2:69:28:f0:f6:a7:44:7d:e3:65:63:40:b2: ec:f1:ad:fe:a1:cf:8c:a8:b8:b9:64:74:03:87:d2:b2:04:36: 04:ea:56:80:09:a4:a3:a5:ef:38:01:fd:1d:97:93:0a:b7:98: 5c:4e:a7:da:dd:32:74:ea:ed:aa:a4:25:2f:0b:75:6e:35:2c: eb:5a:b5:13:ce:9f:fb:ed:89:64:b6:7c:55:b5:74:db:d1:46: 27:53:5a:a8:a5:2b:86:73:f5:40:0e:c3:24:14:ed:4e:65:a6: 5c:fd:28:e5:0b:f3:7d:56:1c:8e:e9:2a:c2:25:7f:0c:cb:27: c2:2a:ef:51:6f:09:ce:89:fd:a1:81:f2:48:12:b1:c6:78:a6: 87:d8:f6:e6:95:fe:53:4e:18:8f:6d:6e:6f:bc:43:e3:db:f5: 90:24:b2:2b:b3:72:61:e9:6f:20:39:d9:f1:e6:a4:cb:33:0a: 36:1a:5c:8c:f3:ee:c6:10:b1:d4:a5:3c:2e:fd:0b:15:8b:d9: dd:75:5c:88 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZF Q0FFODQ2RjQxQkNDM0IyNEUxMzI3QkEyMUMyMzA1M0UxMUMwMzAeFw0yNTAyMTAx NDI1MDlaFw0yNjAxMDkxNTMwMjlaMDMxMTAvBgNVBAMTKDY5REI1NjU1NzMxNDE2 RTE0MUU0MkUyQjZEQTZENzNEN0I5N0NDMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQTGbcVyc2sr5agAVtdxVO4bVRS+UrdNzCXlagnElWqIjEfGZ7 Gm0D10ZRTCiKdZAaPi/QrF8Bq+Vy9hiAGq4dmE/LCoCQXCgvohGdillDV3i6seHX ovHPR829C6g4w+KS8XQS5i5J441zy6ZpKobIe3mka4QpojzooH/kcMzb2m1ivVKd WldfJvAkjHl9UKPRnZHgf8L3iaGDAPKR5n68ayeBSW0syOFSjkmbkpsGEetpPmCY 1U1Gr8LwsRp5PF5B10GeEPqtSFeRkp6iQIBKZnCbSjoQQXrIyiyhJ5JGTTmWL0CZ Q827UxuwWeEtmntbAj+b8hns0jVaAsAd8x05AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUadtWVXMUFuFB5C4rbabXPXuXzDMwHwYDVR0jBBgwFoAUb+yuhG9BvMOyThMn uiHCMFPhHAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tJUy9i LXl1aEc5QnZNT3lUaE1udWlIQ01GUGhIQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2IteXVoRzlCdk1PeVRoTW51aUhDTUZQaEhBTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0tLSVMvYWR0V1ZYTVVGdUZCNUM0cmJhYlhQ WHVYekRNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaH4hDAN BgkqhkiG9w0BAQsFAAOCAQEAqK5mayD/XiLZ75iDOz+PwlY3mv0qq3q0MuhKerIT DtGq35WGaPxlNUp1Q8VMN4HUMg9XzAWbNF2XvWOyaSjw9qdEfeNlY0Cy7PGt/qHP jKi4uWR0A4fSsgQ2BOpWgAmko6XvOAH9HZeTCreYXE6n2t0ydOrtqqQlLwt1bjUs 61q1E86f++2JZLZ8VbV029FGJ1NaqKUrhnP1QA7DJBTtTmWmXP0o5QvzfVYcjukq wiV/DMsnwirvUW8Jzon9oYHySBKxxnimh9j25pX+U04Yj21ub7xD49v1kCSyK7Ny YelvIDnZ8eakyzMKNhpcjPPuxhCx1KU8Lv0LFYvZ3XVciA== -----END CERTIFICATE-----Generated at Wed Nov 5 21:13:05 2025 by rpki-client