$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/txSbRe6Rem_T1LPiaktUpNYbcCc.roa File: txSbRe6Rem_T1LPiaktUpNYbcCc.roa (raw, json) Hash identifier: 6s/yNxyk2+WBebyHa5nPLFKtIRBrdcWqP3Sxy5IwvB8= Subject key identifier: B7:14:9B:45:EE:91:7A:6F:D3:D4:B3:E2:6A:4B:54:A4:D6:1B:70:27 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FC8 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/txSbRe6Rem_T1LPiaktUpNYbcCc.roa Signing time: Fri 22 Aug 2025 08:50:25 +0000 ROA not before: Fri 22 Aug 2025 08:50:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4040 (0xfc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B7149B45EE917A6FD3D4B3E26A4B54A4D61B7027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:8a:71:f1:d9:d1:0b:de:5c:9a:56:5d:4e: 3b:d1:65:92:e5:07:d3:87:3d:42:f0:9b:82:a2:0b: 12:78:af:6c:c4:30:0e:f7:d8:69:2c:46:bc:52:c0: 0e:c5:b0:59:12:32:41:bf:37:8c:86:5f:46:d2:39: ea:10:54:ba:54:f0:fb:0a:55:e2:6f:6a:8c:3d:33: 3a:e4:ef:5f:ba:0d:43:bf:58:75:d8:00:22:59:c3: 01:b3:5a:aa:5a:21:86:b0:81:c7:ee:7f:26:47:bf: a9:4f:32:95:c1:50:23:5e:b8:e4:57:9e:11:c1:42: e9:44:a2:42:4f:f2:7b:7b:3f:98:6f:38:68:e2:fa: f6:fa:cc:17:a6:fb:54:56:5f:39:fd:4a:a4:4a:08: 36:b6:74:30:9f:bc:b3:f5:cd:4c:e9:c5:b1:c5:39: ca:97:0c:20:17:88:30:7d:71:dd:c1:31:4b:c5:e3: 2e:cd:22:0a:98:c4:e5:ef:23:b4:50:17:f9:1d:09: 53:6e:f2:e2:ec:1d:ce:e7:ad:b4:ee:b2:d4:05:21: f8:33:23:e2:9a:f9:41:a8:8c:d8:bc:a3:e8:2e:ef: a5:69:64:04:2f:f5:07:60:a1:01:3f:21:86:c1:ab: 3e:42:3f:8c:a3:36:70:8d:12:ec:dd:9f:1d:47:7e: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:9B:45:EE:91:7A:6F:D3:D4:B3:E2:6A:4B:54:A4:D6:1B:70:27 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/txSbRe6Rem_T1LPiaktUpNYbcCc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.56.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:d8:43:a4:59:d0:17:cb:4c:fa:b5:45:de:23:a9:f3:a0:65: 61:d8:e6:13:06:10:31:05:e6:36:5a:47:bd:58:ae:1e:12:22: 08:ac:a0:bb:c1:da:ab:6c:5e:11:9d:a5:a4:37:51:45:9f:64: 8a:d9:08:f5:69:a5:36:8c:8e:f7:80:38:bb:71:a3:22:1f:84: 01:c0:03:ca:d4:cb:15:80:2c:1a:81:d1:e2:a0:a9:da:84:f8: 30:3f:f4:aa:8c:b3:4b:99:bb:53:ad:02:35:4d:c6:41:9c:09: d2:39:ba:cb:bf:89:a2:4b:40:e1:f0:1e:b8:0c:84:c3:cb:aa: 49:6b:5c:ed:70:b1:d2:ec:33:f4:f4:f1:a0:19:a0:41:27:1e: 5d:4d:fc:c6:18:6c:ca:1a:5b:6c:df:8d:cb:73:1d:7e:4b:b6: 73:67:fd:16:b9:de:c9:a7:c0:96:7e:0f:c3:79:e1:97:34:8c: 38:74:52:06:f9:e2:f3:ce:36:20:18:6d:a0:bb:0d:d3:a8:6e: fc:9d:ed:8f:39:29:fb:9b:a3:16:71:95:5d:4e:ed:ec:64:b1: 0d:1d:52:8e:87:c7:69:3c:fb:a3:ad:0f:79:3f:b2:d2:ed:bd: 45:6f:16:30:49:c2:e1:63:91:a8:5b:91:6c:46:33:10:01:e4: 1d:f8:d1:a3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI3MTQ5QjQ1RUU5MTdB NkZEM0Q0QjNFMjZBNEI1NEE0RDYxQjcwMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDdIpx8dnRC95cmlZdTjvRZZLlB9OHPULwm4KiCxJ4r2zEMA73 2GksRrxSwA7FsFkSMkG/N4yGX0bSOeoQVLpU8PsKVeJvaow9Mzrk71+6DUO/WHXY ACJZwwGzWqpaIYawgcfufyZHv6lPMpXBUCNeuORXnhHBQulEokJP8nt7P5hvOGji +vb6zBem+1RWXzn9SqRKCDa2dDCfvLP1zUzpxbHFOcqXDCAXiDB9cd3BMUvF4y7N IgqYxOXvI7RQF/kdCVNu8uLsHc7nrbTustQFIfgzI+Ka+UGojNi8o+gu76VpZAQv 9QdgoQE/IYbBqz5CP4yjNnCNEuzdnx1Hft8lAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUtxSbRe6Rem/T1LPiaktUpNYbcCcwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vdHhTYlJlNlJlbV9UMUxQaWFrdFVw TlliY0NjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA98bODAN BgkqhkiG9w0BAQsFAAOCAQEAO9hDpFnQF8tM+rVF3iOp86BlYdjmEwYQMQXmNlpH vViuHhIiCKygu8Haq2xeEZ2lpDdRRZ9kitkI9WmlNoyO94A4u3GjIh+EAcADytTL FYAsGoHR4qCp2oT4MD/0qoyzS5m7U60CNU3GQZwJ0jm6y7+JoktA4fAeuAyEw8uq SWtc7XCx0uwz9PTxoBmgQSceXU38xhhsyhpbbN+Ny3Mdfku2c2f9FrneyafAln4P w3nhlzSMOHRSBvni8842IBhtoLsN06hu/J3tjzkp+5ujFnGVXU7t7GSxDR1SjofH aTz7o60PeT+y0u29RW8WMEnC4WORqFuRbEYzEAHkHfjRow== -----END CERTIFICATE-----Generated at Wed Nov 5 22:11:30 2025 by rpki-client