$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/l1ya56ztYWN9LQzEtpWHZzCmb7k.roa File: l1ya56ztYWN9LQzEtpWHZzCmb7k.roa (raw, json) Hash identifier: cGsP2hQjqgtk/O2UB32GIZs+PlJde1vOna37A0oBLFE= Subject key identifier: 97:5C:9A:E7:AC:ED:61:63:7D:2D:0C:C4:B6:95:87:67:30:A6:6F:B9 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FD0 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/l1ya56ztYWN9LQzEtpWHZzCmb7k.roa Signing time: Fri 22 Aug 2025 08:50:26 +0000 ROA not before: Fri 22 Aug 2025 08:50:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 124.150.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4048 (0xfd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=975C9AE7ACED61637D2D0CC4B695876730A66FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:e2:0c:04:32:74:9c:78:9d:29:8b:25:bd: 05:88:3d:2c:95:54:55:a8:ed:44:3b:36:ea:db:eb: 72:82:10:e6:e5:6d:36:64:54:e7:e7:1f:82:2a:a6: 4d:c3:54:42:67:b2:11:77:1a:44:8d:e8:c8:2d:8a: ea:1f:fa:7e:b5:32:4a:14:31:5f:cd:1b:fb:0b:56: 7e:b1:8e:ba:0e:bd:81:76:c6:71:e4:d7:64:4a:e9: 3a:f7:d4:7a:3e:a3:bc:34:8b:d0:2b:51:4b:7b:01: 68:07:f3:c9:62:9d:f0:05:07:a1:00:46:a3:d8:f9: 24:78:32:3c:b7:64:64:83:ff:27:13:17:02:21:52: 29:63:78:06:49:5c:2f:86:18:a4:4a:f6:ba:d3:38: 06:33:d2:3f:29:fd:15:46:86:97:13:25:74:51:f5: cf:7a:c5:8d:54:84:dc:3e:18:ae:11:60:f5:6a:d9: 92:29:bf:90:b2:cb:ea:1b:24:06:6d:4c:94:4f:59: aa:d9:d0:39:ac:a8:46:ba:06:2d:ec:d7:2a:fa:b1: b4:33:2f:13:2c:44:2c:35:69:ee:7c:ee:0f:34:de: 43:43:eb:76:35:6d:3c:ff:30:06:71:8f:68:49:11: 46:b0:b3:8a:e7:57:c7:a5:3b:20:64:2a:81:cd:f0: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:9A:E7:AC:ED:61:63:7D:2D:0C:C4:B6:95:87:67:30:A6:6F:B9 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/l1ya56ztYWN9LQzEtpWHZzCmb7k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.130.0/24 Signature Algorithm: sha256WithRSAEncryption 64:86:30:2b:df:f5:d7:fc:4d:33:a6:ca:fb:a8:0f:7b:e6:1c: 26:f3:60:2a:35:f0:2b:7b:df:75:db:c8:6b:24:9d:bb:c9:97: 42:3d:eb:db:ec:84:01:87:1e:59:12:14:c2:1f:e9:54:32:50: 9a:7a:08:ad:c1:c3:6d:f5:7a:02:d7:50:39:0c:b5:b8:d8:d8: 0b:63:86:69:a7:e9:7c:85:a4:23:8e:b3:71:30:a1:6d:7c:96: 71:27:6b:1f:0d:7a:58:c2:52:e5:7b:7b:e6:83:af:c5:a6:ec: a4:64:73:b1:19:8b:3a:2d:20:97:b7:19:e2:d5:6c:40:d5:7b: 9a:cd:39:ba:e2:5f:d2:b0:d5:4d:6a:e6:6b:16:f9:64:71:f2: e1:ca:30:25:e9:05:e8:bb:b1:b8:8a:45:cb:0e:ea:70:5a:a4: 70:21:05:5e:e1:a7:84:50:23:7f:a2:71:41:b5:d3:ef:f4:b0: 3c:98:71:d5:18:dd:23:43:00:69:aa:b9:91:77:21:e1:cb:93: 10:1a:a9:36:4c:dc:72:6b:11:40:3a:73:19:ac:b5:74:78:29: df:62:df:48:3d:00:98:b1:19:61:28:3a:a3:1b:c9:3c:ac:8e: 93:42:5b:7a:f4:3e:b2:d5:02:72:93:a4:41:ca:f3:db:eb:c3: 8b:db:ab:df -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3NUM5QUU3QUNFRDYx NjM3RDJEMENDNEI2OTU4NzY3MzBBNjZGQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDX5eIMBDJ0nHidKYslvQWIPSyVVFWo7UQ7Nurb63KCEOblbTZk VOfnH4Iqpk3DVEJnshF3GkSN6Mgtiuof+n61MkoUMV/NG/sLVn6xjroOvYF2xnHk 12RK6Tr31Ho+o7w0i9ArUUt7AWgH88linfAFB6EARqPY+SR4Mjy3ZGSD/ycTFwIh UiljeAZJXC+GGKRK9rrTOAYz0j8p/RVGhpcTJXRR9c96xY1UhNw+GK4RYPVq2ZIp v5Cyy+obJAZtTJRPWarZ0DmsqEa6Bi3s1yr6sbQzLxMsRCw1ae587g803kND63Y1 bTz/MAZxj2hJEUaws4rnV8elOyBkKoHN8JdFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUl1ya56ztYWN9LQzEtpWHZzCmb7kwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vbDF5YTU2enRZV045TFF6RXRwV0ha ekNtYjdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHyWgjAN BgkqhkiG9w0BAQsFAAOCAQEAZIYwK9/11/xNM6bK+6gPe+YcJvNgKjXwK3vfddvI aySdu8mXQj3r2+yEAYceWRIUwh/pVDJQmnoIrcHDbfV6AtdQOQy1uNjYC2OGaafp fIWkI46zcTChbXyWcSdrHw16WMJS5Xt75oOvxabspGRzsRmLOi0gl7cZ4tVsQNV7 ms05uuJf0rDVTWrmaxb5ZHHy4cowJekF6LuxuIpFyw7qcFqkcCEFXuGnhFAjf6Jx QbXT7/SwPJhx1RjdI0MAaaq5kXch4cuTEBqpNkzccmsRQDpzGay1dHgp32LfSD0A mLEZYSg6oxvJPKyOk0JbevQ+stUCcpOkQcrz2+vDi9ur3w== -----END CERTIFICATE-----Generated at Wed Nov 5 22:10:38 2025 by rpki-client