$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/31m7dx_bn0Ro8ePcnB2TYVLaCKo.roa File: 31m7dx_bn0Ro8ePcnB2TYVLaCKo.roa (raw, json) Hash identifier: q27K7syNnI6b+P8BSh5Is6tYNQbmHPJyp56ERdT/Jm8= Subject key identifier: DF:59:BB:77:1F:DB:9F:44:68:F1:E3:DC:9C:1D:93:61:52:DA:08:AA Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Certificate serial: 145E Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/31m7dx_bn0Ro8ePcnB2TYVLaCKo.roa Signing time: Fri 22 Aug 2025 08:50:47 +0000 ROA not before: Fri 22 Aug 2025 08:50:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9922 IP address blocks: 2403:b340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5214 (0x145e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Validity Not Before: Aug 22 08:50:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DF59BB771FDB9F4468F1E3DC9C1D936152DA08AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:7c:fd:ed:51:89:8a:b1:fb:3c:f6:b3:1f: 52:08:70:6e:3f:79:da:13:8f:84:d5:9a:17:a7:fd: 2d:20:8a:a9:7d:90:ca:6c:92:47:b4:5e:85:17:3f: aa:6a:81:f2:c7:9d:b9:34:ba:1f:c8:ac:18:4c:18: 59:95:50:12:a3:f0:22:35:9b:06:44:53:a6:16:01: cb:19:69:74:bf:ef:49:c5:ab:7a:e3:68:79:42:12: 98:4c:ea:17:c4:22:76:2b:af:89:ad:61:a7:42:b0: f8:d7:ee:a1:ac:25:58:9f:75:0c:5f:06:ff:c3:a5: a9:fd:f2:a4:47:e5:14:e1:c4:90:fd:00:c4:fe:81: f6:ca:19:99:3f:7b:b5:2b:7a:03:57:5f:c7:fc:86: fe:e5:57:bc:f5:48:b5:0c:8c:4b:03:28:df:c1:52: 31:53:11:eb:42:19:b5:54:42:d4:ed:37:43:67:b6: 3f:d0:fa:0e:4b:45:45:98:1a:8a:9c:86:40:3a:eb: 80:9f:6a:38:5d:12:dd:f1:27:5d:24:c7:98:81:5e: 5b:97:9c:e3:56:63:cc:ed:ba:1b:04:08:0b:ca:60: 5f:4a:9d:f7:3e:89:92:6b:81:b7:b4:60:0d:9c:93: 2a:55:a5:fa:68:0c:f7:c0:14:f7:e9:5c:ac:67:83: 1f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:59:BB:77:1F:DB:9F:44:68:F1:E3:DC:9C:1D:93:61:52:DA:08:AA X509v3 Authority Key Identifier: keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/31m7dx_bn0Ro8ePcnB2TYVLaCKo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:b340::/32 Signature Algorithm: sha256WithRSAEncryption 66:12:0b:4f:a6:ab:d0:3e:75:d0:3c:1c:2c:03:01:7c:59:d9: 6c:e7:8e:b1:ad:bb:7d:28:11:89:6c:54:9b:29:c4:66:8a:66: 56:1b:d3:8e:83:b6:bd:ef:65:7c:4a:42:7b:83:b3:a2:a5:67: c1:63:23:89:93:80:ee:c9:e1:db:7a:b0:52:a1:ea:ad:8f:59: 98:51:d5:45:ce:ca:b2:35:96:7b:22:49:5b:05:ab:30:c2:c9: 36:e7:31:cb:5e:16:fb:22:38:41:54:8d:b3:12:36:a0:89:92: 1b:5e:6b:b6:c2:1b:55:41:26:be:f2:79:08:0f:ac:db:be:99: 30:88:6c:78:14:ac:30:87:6e:7c:27:72:73:a6:90:c5:07:19: 3f:a4:cb:71:dd:b5:3a:0e:f2:64:55:d1:3e:cb:21:ee:68:9f: ef:e7:a0:4b:49:25:e7:f5:28:d8:4d:a9:64:8a:51:9d:8f:0a: 27:09:15:e3:19:e5:bf:0b:f0:59:42:b6:7d:c0:df:e6:95:50: 86:ca:1f:af:5f:9b:f0:bd:ec:12:33:11:fa:48:64:72:59:c6: 71:c9:85:35:a3:7d:8b:44:db:f9:b6:7f:29:64:9a:b1:42:c0: 04:cd:e6:41:21:55:fb:ff:b0:5d:cf:f7:19:b4:8f:4b:e2:99: 2d:49:c5:fe -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICFF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1 MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yNTA4MjIw ODUwNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERGNTlCQjc3MUZEQjlG NDQ2OEYxRTNEQzlDMUQ5MzYxNTJEQTA4QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVFnz97VGJirH7PPazH1IIcG4/edoTj4TVmhen/S0giql9kMps kke0XoUXP6pqgfLHnbk0uh/IrBhMGFmVUBKj8CI1mwZEU6YWAcsZaXS/70nFq3rj aHlCEphM6hfEInYrr4mtYadCsPjX7qGsJVifdQxfBv/Dpan98qRH5RThxJD9AMT+ gfbKGZk/e7UregNXX8f8hv7lV7z1SLUMjEsDKN/BUjFTEetCGbVUQtTtN0Nntj/Q +g5LRUWYGoqchkA664CfajhdEt3xJ10kx5iBXluXnONWY8ztuhsECAvKYF9Knfc+ iZJrgbe0YA2ckypVpfpoDPfAFPfpXKxngx99AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU31m7dx/bn0Ro8ePcnB2TYVLaCKowHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVULzMxbTdkeF9ibjBSbzhlUGNu QjJUWVZMYUNLby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk A7NAMA0GCSqGSIb3DQEBCwUAA4IBAQBmEgtPpqvQPnXQPBwsAwF8Wdls546xrbt9 KBGJbFSbKcRmimZWG9OOg7a972V8SkJ7g7OipWfBYyOJk4DuyeHberBSoeqtj1mY UdVFzsqyNZZ7IklbBaswwsk25zHLXhb7IjhBVI2zEjagiZIbXmu2whtVQSa+8nkI D6zbvpkwiGx4FKwwh258J3JzppDFBxk/pMtx3bU6DvJkVdE+yyHuaJ/v56BLSSXn 9SjYTalkilGdjwonCRXjGeW/C/BZQrZ9wN/mlVCGyh+vX5vwvewSMxH6SGRyWcZx yYU1o32LRNv5tn8pZJqxQsAEzeZBIVX7/7Bdz/cZtI9L4pktScX+ -----END CERTIFICATE-----Generated at Wed Nov 5 18:13:54 2025 by rpki-client