$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/j40uiL6wGsks2vHkZNTajShnhrY.roa File: j40uiL6wGsks2vHkZNTajShnhrY.roa (raw, json) Hash identifier: t5mVi5fJZ14sd4vwog5SWQ+gOg6cQJo6M01QDVm4mqU= Subject key identifier: 8F:8D:2E:88:BE:B0:1A:C9:2C:DA:F1:E4:64:D4:DA:8D:28:67:86:B6 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FBA Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/j40uiL6wGsks2vHkZNTajShnhrY.roa Signing time: Fri 22 Aug 2025 08:50:21 +0000 ROA not before: Fri 22 Aug 2025 08:50:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4026 (0xfba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F8D2E88BEB01AC92CDAF1E464D4DA8D286786B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:0f:ea:60:b2:f4:94:90:8a:49:62:89:b3: b2:4b:67:c3:2b:55:b6:38:99:cc:7a:c8:4c:02:21: 86:12:a9:c3:c7:6e:22:a7:4f:dc:dd:18:2b:e9:05: e9:dc:51:d7:02:ff:46:a8:6b:7d:0d:6c:e8:a8:79: 27:f4:e8:6b:c9:40:f2:6e:9f:f0:84:78:76:e5:19: 7f:ec:9b:ef:26:8e:84:78:10:77:75:f1:7b:d8:bb: ba:49:63:70:09:a0:d1:9e:d0:2f:f1:cd:61:a6:ae: 41:39:c0:b2:49:26:7d:15:fe:55:d2:b7:42:09:9d: 18:26:1e:b8:97:25:82:a3:d3:b1:10:37:e1:56:c3: 80:af:0b:8c:e8:54:24:ef:5a:d2:7c:8e:7d:92:3e: 73:74:e4:fe:4a:44:f8:b9:ab:e4:f2:0f:5b:e9:ed: f5:c0:d2:c7:af:44:89:4e:1b:c6:1f:15:bb:43:ec: 9b:95:c1:a4:dc:c7:d7:e3:b8:ed:64:31:05:fd:0e: d4:9a:3c:a8:8c:ff:88:0d:a1:a9:93:84:bf:f6:6c: 87:6f:1f:a3:f6:fd:7d:05:5a:1a:16:96:26:c3:61: 89:d0:88:c6:f0:84:76:23:96:2b:bb:ae:ac:8d:e7: 80:cb:0a:ee:59:a5:55:96:20:90:0c:b4:bb:ab:0c: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:2E:88:BE:B0:1A:C9:2C:DA:F1:E4:64:D4:DA:8D:28:67:86:B6 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/j40uiL6wGsks2vHkZNTajShnhrY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.50.0/24 Signature Algorithm: sha256WithRSAEncryption 93:bd:e9:d2:20:05:cf:2f:80:7e:02:c6:0a:be:d7:ab:cb:b1: 6d:ba:82:7d:32:5e:9b:1d:6d:dd:56:c0:a9:5e:9d:9a:ef:92: 87:99:8c:c2:06:0a:da:f2:3c:e1:cd:ac:c6:27:35:d4:7d:8d: eb:fc:da:be:ce:ba:49:ee:91:bc:c3:e3:44:f3:fa:fb:ab:6e: 37:79:ae:0a:7a:52:2d:71:5f:48:b3:4d:21:2f:f9:68:a8:e3: 28:bb:ad:10:31:05:ba:62:61:c0:3c:10:62:a0:1f:19:7c:dc: 0b:66:06:e0:8b:e5:92:53:3b:bb:ed:8e:3a:8b:15:cc:ad:aa: 50:4c:52:2f:18:23:21:e0:96:89:d4:7b:44:43:04:01:29:cc: 41:4b:a8:15:dd:75:49:c0:02:eb:a6:ef:7c:37:5a:df:57:47: d5:49:18:dd:a1:7e:80:b4:cb:22:c1:9d:1f:1e:87:f5:5d:be: ae:83:28:3e:e9:0e:6c:0e:af:63:fa:e6:fe:08:fc:e1:a4:7d: a7:c7:e3:a8:58:a8:0d:12:85:26:48:d7:58:4b:01:1e:25:5e: 4a:fc:a1:8b:42:59:cd:be:7f:0f:d9:71:ea:c5:40:7d:ae:1a: 74:d2:39:b4:51:e2:b0:fe:8a:ad:c6:b8:42:86:73:2e:ca:a2: e5:28:94:7c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGOEQyRTg4QkVCMDFB QzkyQ0RBRjFFNDY0RDREQThEMjg2Nzg2QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ2w/qYLL0lJCKSWKJs7JLZ8MrVbY4mcx6yEwCIYYSqcPHbiKn T9zdGCvpBencUdcC/0aoa30NbOioeSf06GvJQPJun/CEeHblGX/sm+8mjoR4EHd1 8XvYu7pJY3AJoNGe0C/xzWGmrkE5wLJJJn0V/lXSt0IJnRgmHriXJYKj07EQN+FW w4CvC4zoVCTvWtJ8jn2SPnN05P5KRPi5q+TyD1vp7fXA0sevRIlOG8YfFbtD7JuV waTcx9fjuO1kMQX9DtSaPKiM/4gNoamThL/2bIdvH6P2/X0FWhoWlibDYYnQiMbw hHYjliu7rqyN54DLCu5ZpVWWIJAMtLurDNCDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUj40uiL6wGsks2vHkZNTajShnhrYwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vajQwdWlMNndHc2tzMnZIa1pOVGFq U2huaHJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bMjAN BgkqhkiG9w0BAQsFAAOCAQEAk73p0iAFzy+AfgLGCr7Xq8uxbbqCfTJemx1t3VbA qV6dmu+Sh5mMwgYK2vI84c2sxic11H2N6/zavs66Se6RvMPjRPP6+6tuN3muCnpS LXFfSLNNIS/5aKjjKLutEDEFumJhwDwQYqAfGXzcC2YG4IvlklM7u+2OOosVzK2q UExSLxgjIeCWidR7REMEASnMQUuoFd11ScAC66bvfDda31dH1UkY3aF+gLTLIsGd Hx6H9V2+roMoPukObA6vY/rm/gj84aR9p8fjqFioDRKFJkjXWEsBHiVeSvyhi0JZ zb5/D9lx6sVAfa4adNI5tFHisP6Krca4QoZzLsqi5SiUfA== -----END CERTIFICATE-----Generated at Wed Nov 5 22:11:29 2025 by rpki-client