$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/Nhk4T1QnP_ydpoIpkh55VROz35E.roa File: Nhk4T1QnP_ydpoIpkh55VROz35E.roa (raw, json) Hash identifier: tsuaA/5vZI/wXjlgy0WuY3BqwdbjGBHXgZmVmWTpeuY= Subject key identifier: 36:19:38:4F:54:27:3F:FC:9D:A6:82:29:92:1E:79:55:13:B3:DF:91 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FCC Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Nhk4T1QnP_ydpoIpkh55VROz35E.roa Signing time: Fri 22 Aug 2025 08:50:25 +0000 ROA not before: Fri 22 Aug 2025 08:50:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4044 (0xfcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3619384F54273FFC9DA68229921E795513B3DF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:b2:89:61:ee:7c:39:f0:f2:6f:9c:df:5b: c5:bb:2e:1f:f5:d5:f5:d8:91:a5:c9:92:80:6e:fd: 19:d0:4c:3a:f2:be:bb:cf:a0:2d:52:cf:68:8a:24: 7f:99:a0:9c:27:c1:30:c8:7b:6b:3b:82:e9:40:6e: 68:b0:31:d8:83:09:df:6c:3c:be:19:be:4d:e0:6d: 22:fb:ec:4d:7c:0d:44:fc:91:32:f7:20:d0:0f:b7: 54:f4:98:32:f7:b3:0b:82:88:2a:6b:e7:62:6e:e3: 0e:75:7b:b2:9f:e7:a6:ba:a8:fa:1a:dd:9b:d5:88: b2:d5:14:c0:be:4f:6e:c4:7c:39:5f:43:5b:64:d0: 07:87:bf:e2:b7:78:3b:bc:25:b6:9b:7e:ef:5e:f3: 4a:1d:72:0b:9e:6e:a6:02:a4:89:a4:c3:b2:e9:24: 05:d7:4a:5e:d7:2d:ae:cd:c0:25:69:66:58:d6:5e: a5:c7:be:24:f6:3f:12:0b:e5:a3:c0:0c:62:b2:e3: f8:7c:bc:68:67:8d:2b:29:af:1d:03:75:41:0d:77: 2e:83:42:d7:80:b8:2f:73:0a:bc:12:ac:33:fb:c7: 99:a6:5e:7f:82:8b:9e:e4:0e:68:1b:07:5f:f3:97: 71:fc:e3:ce:08:11:12:b2:73:37:36:5b:da:c1:88: a1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:19:38:4F:54:27:3F:FC:9D:A6:82:29:92:1E:79:55:13:B3:DF:91 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Nhk4T1QnP_ydpoIpkh55VROz35E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.39.0/24 Signature Algorithm: sha256WithRSAEncryption 26:96:a3:b2:72:36:0b:7c:c6:f0:ec:8b:8b:0d:39:60:10:0e: c4:18:56:c7:00:a5:5f:1b:ce:2e:6b:df:19:63:ce:38:38:97: a7:6c:bb:33:69:27:1a:ec:57:19:62:35:fc:31:de:fa:10:30: 45:3f:1e:4b:f0:99:36:12:4c:4e:fa:87:e5:25:b5:1f:99:fd: 13:5d:2e:e2:d9:4b:f1:cc:f6:76:f0:86:48:73:19:f9:2c:08: 4c:1b:64:99:ce:1f:ce:66:2e:6d:a1:3a:52:55:4f:f2:73:8e: 60:ee:94:e9:38:46:ed:7a:93:82:fd:15:ea:11:6e:f4:c3:c7: ba:de:9e:9d:30:19:70:be:6a:73:19:f7:08:67:33:80:69:05: 16:00:6e:bd:9e:35:2e:3e:59:87:cc:28:e9:f6:a9:fe:d0:10: 42:f9:5f:e3:77:d2:58:25:e4:65:12:df:7c:7e:1a:88:0c:26: 78:1f:23:3f:ac:d0:af:fa:af:d9:11:a2:ca:c7:36:d0:9a:81: fd:a9:29:c6:51:92:65:ff:22:32:f2:76:dc:a7:be:6b:a2:8c: 03:09:bb:ed:9b:33:04:96:fb:fa:b5:da:e5:af:e7:a2:3a:c8: 03:f8:a8:cc:88:11:92:2e:7e:ac:2d:6b:2d:4d:fb:db:79:fe: 55:3a:ae:c3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM2MTkzODRGNTQyNzNG RkM5REE2ODIyOTkyMUU3OTU1MTNCM0RGOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfKrKJYe58OfDyb5zfW8W7Lh/11fXYkaXJkoBu/RnQTDryvrvP oC1Sz2iKJH+ZoJwnwTDIe2s7gulAbmiwMdiDCd9sPL4Zvk3gbSL77E18DUT8kTL3 INAPt1T0mDL3swuCiCpr52Ju4w51e7Kf56a6qPoa3ZvViLLVFMC+T27EfDlfQ1tk 0AeHv+K3eDu8Jbabfu9e80odcguebqYCpImkw7LpJAXXSl7XLa7NwCVpZljWXqXH viT2PxIL5aPADGKy4/h8vGhnjSsprx0DdUENdy6DQteAuC9zCrwSrDP7x5mmXn+C i57kDmgbB1/zl3H8484IERKyczc2W9rBiKHNAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUNhk4T1QnP/ydpoIpkh55VROz35EwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vTmhrNFQxUW5QX3lkcG9JcGtoNTVW Uk96MzVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bJzAN BgkqhkiG9w0BAQsFAAOCAQEAJpajsnI2C3zG8OyLiw05YBAOxBhWxwClXxvOLmvf GWPOODiXp2y7M2knGuxXGWI1/DHe+hAwRT8eS/CZNhJMTvqH5SW1H5n9E10u4tlL 8cz2dvCGSHMZ+SwITBtkmc4fzmYubaE6UlVP8nOOYO6U6ThG7XqTgv0V6hFu9MPH ut6enTAZcL5qcxn3CGczgGkFFgBuvZ41Lj5Zh8wo6fap/tAQQvlf43fSWCXkZRLf fH4aiAwmeB8jP6zQr/qv2RGiysc20JqB/akpxlGSZf8iMvJ23Ke+a6KMAwm77Zsz BJb7+rXa5a/nojrIA/iozIgRki5+rC1rLU3723n+VTquww== -----END CERTIFICATE-----Generated at Wed Nov 5 22:11:38 2025 by rpki-client