$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/Udn2fS9FZ4H5XagEj4tkEQXjxbA.roa File: Udn2fS9FZ4H5XagEj4tkEQXjxbA.roa (raw, json) Hash identifier: L1tYswV8htTodB/S4XkTCy2ngDeB0Wn4AedK6ZfAa9U= Subject key identifier: 51:D9:F6:7D:2F:45:67:81:F9:5D:A8:04:8F:8B:64:11:05:E3:C5:B0 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FDC Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Udn2fS9FZ4H5XagEj4tkEQXjxbA.roa Signing time: Fri 22 Aug 2025 08:50:30 +0000 ROA not before: Fri 22 Aug 2025 08:50:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4060 (0xfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=51D9F67D2F456781F95DA8048F8B641105E3C5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:39:bb:af:44:03:9c:ae:b3:4a:17:5c:51: bb:93:80:ec:46:0b:09:cf:d7:da:8e:b3:6c:f1:5a: 2d:de:6f:37:dd:fd:d4:ae:57:e6:6b:d2:29:e3:51: a9:73:47:65:55:3c:cb:89:53:3e:3c:ef:e5:47:18: 75:c5:42:cf:35:be:24:49:9a:56:3b:c5:6b:f4:30: 5b:f5:02:e0:c9:1f:69:dc:e8:a8:7d:24:7a:e7:69: e4:27:ca:36:e9:63:a1:79:8f:d2:40:c6:2c:b2:19: 1a:8b:aa:c2:68:60:02:96:61:60:84:2c:93:47:65: a1:81:d0:f4:85:7f:4d:f9:58:d5:4f:a8:4e:f2:8c: 7c:a0:7a:1c:0f:bd:4a:51:80:05:67:76:ce:2d:25: 34:b3:f5:1b:58:ad:c7:8a:95:8d:9e:3b:93:ef:68: 44:64:8c:ad:c6:f7:1b:81:8b:13:b5:9f:77:ad:6d: 05:78:e3:5e:31:d8:29:40:7a:a0:d9:c1:94:d0:30: 6e:74:ae:63:14:f2:4b:0a:a5:3a:71:7c:74:a0:5e: 8b:69:db:73:fb:05:15:e1:14:5e:21:d1:09:1d:99: a7:29:01:39:1d:ca:57:31:46:69:90:ea:1d:61:08: 29:17:da:57:e4:68:23:86:54:28:2a:e1:e6:bd:2c: b1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D9:F6:7D:2F:45:67:81:F9:5D:A8:04:8F:8B:64:11:05:E3:C5:B0 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Udn2fS9FZ4H5XagEj4tkEQXjxbA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.60.0/22 Signature Algorithm: sha256WithRSAEncryption b7:34:3f:96:75:fc:7d:2c:83:23:fa:2a:a6:29:13:de:38:ab: 1f:48:a6:18:97:37:b1:22:d0:36:10:bd:47:8e:55:83:e5:09: 9c:fc:be:f2:65:9e:9f:7e:ab:3f:10:23:78:43:43:d1:71:d0: cd:f1:7c:c6:94:b1:fc:08:fe:ee:63:d1:e0:1d:cd:11:6a:8c: 21:f2:16:b7:0e:a3:a0:66:3e:d8:18:64:0b:e8:be:37:5b:03: c8:07:69:0c:86:52:27:ba:34:de:d3:3e:f0:14:c7:39:5d:20: 1a:6b:a8:b2:73:6e:d4:e7:59:c9:30:1e:8f:50:f1:35:6d:4a: 2d:c0:1e:f5:29:e3:b0:a3:4e:71:55:3e:7f:4e:13:18:0f:4c: 62:2e:a1:bd:e2:d5:15:16:da:25:fc:39:9e:1c:df:a2:51:c2: 02:e0:aa:66:01:0c:be:86:25:7d:d4:5c:c2:ec:3a:f3:40:01: 48:37:f2:f0:5f:63:9a:ec:d1:b9:62:72:3f:dd:f9:22:c7:81: 3f:e6:ab:4f:5d:dc:ec:70:8c:d7:a9:be:88:ea:09:2c:ce:00: a4:2d:60:de:46:b9:79:09:88:4a:32:3e:1d:05:a5:7f:d3:c0: 01:4b:8b:92:1f:f3:6b:c9:6d:de:d8:b5:7c:27:a0:60:7a:51: 9c:75:ff:89 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUxRDlGNjdEMkY0NTY3 ODFGOTVEQTgwNDhGOEI2NDExMDVFM0M1QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfzjm7r0QDnK6zShdcUbuTgOxGCwnP19qOs2zxWi3ebzfd/dSu V+Zr0injUalzR2VVPMuJUz487+VHGHXFQs81viRJmlY7xWv0MFv1AuDJH2nc6Kh9 JHrnaeQnyjbpY6F5j9JAxiyyGRqLqsJoYAKWYWCELJNHZaGB0PSFf035WNVPqE7y jHygehwPvUpRgAVnds4tJTSz9RtYrceKlY2eO5PvaERkjK3G9xuBixO1n3etbQV4 414x2ClAeqDZwZTQMG50rmMU8ksKpTpxfHSgXotp23P7BRXhFF4h0QkdmacpATkd ylcxRmmQ6h1hCCkX2lfkaCOGVCgq4ea9LLEDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUUdn2fS9FZ4H5XagEj4tkEQXjxbAwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vVWRuMmZTOUZaNEg1WGFnRWo0dGtF UVhqeGJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAt8bPDAN BgkqhkiG9w0BAQsFAAOCAQEAtzQ/lnX8fSyDI/oqpikT3jirH0imGJc3sSLQNhC9 R45Vg+UJnPy+8mWen36rPxAjeEND0XHQzfF8xpSx/Aj+7mPR4B3NEWqMIfIWtw6j oGY+2BhkC+i+N1sDyAdpDIZSJ7o03tM+8BTHOV0gGmuosnNu1OdZyTAej1DxNW1K LcAe9SnjsKNOcVU+f04TGA9MYi6hveLVFRbaJfw5nhzfolHCAuCqZgEMvoYlfdRc wuw680ABSDfy8F9jmuzRuWJyP935IseBP+arT13c7HCM16m+iOoJLM4ApC1g3ka5 eQmISjI+HQWlf9PAAUuLkh/za8lt3ti1fCegYHpRnHX/iQ== -----END CERTIFICATE-----Generated at Wed Nov 5 23:22:17 2025 by rpki-client