$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/KKgUhz5JbyNufz1xuD3J3xbebvs.roa File: KKgUhz5JbyNufz1xuD3J3xbebvs.roa (raw, json) Hash identifier: kbZEbvVI6dBggqmORJ0fOYZHz3Cqdm34XYO3IXze8kI= Subject key identifier: 28:A8:14:87:3E:49:6F:23:6E:7F:3D:71:B8:3D:C9:DF:16:DE:6E:FB Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4 Certificate serial: 0D97 Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/KKgUhz5JbyNufz1xuD3J3xbebvs.roa Signing time: Fri 22 Aug 2025 08:52:55 +0000 ROA not before: Fri 22 Aug 2025 08:52:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 10085 IP address blocks: 114.29.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4 Validity Not Before: Aug 22 08:52:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=28A814873E496F236E7F3D71B83DC9DF16DE6EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:09:bb:8f:09:96:48:0f:1c:dc:85:60:4a: 68:06:8a:f9:d8:cd:c2:c9:1e:82:bc:77:dc:f1:0a: b0:e7:82:6e:3e:97:d7:5b:fc:0f:25:bc:10:78:ed: d1:94:8e:9c:02:4e:a3:dd:53:77:fd:59:6a:07:b1: 71:11:4b:a6:f3:ae:19:fd:bf:2a:44:81:3f:d2:f0: 00:78:ac:3b:f0:54:42:a0:f5:a3:2d:71:e2:28:3b: 05:0a:87:36:04:bd:e7:d7:c8:b0:a4:fd:55:ea:c9: 9b:85:bb:e0:7d:32:95:e3:6a:63:2d:4a:1b:4a:d2: de:5d:7c:0f:fc:8f:6c:ae:30:7e:97:55:93:6b:77: 4a:00:f8:ff:00:a6:65:03:a2:ea:17:43:29:66:ee: a9:d9:6e:b9:bf:a7:8c:6c:fa:f7:13:b0:bc:88:ec: ea:dd:aa:6a:ef:c4:f4:a6:75:61:4b:ce:6b:b2:06: cd:c7:19:44:2f:4f:33:fb:45:ee:71:fd:f1:d8:15: 45:cc:79:d5:8c:65:d7:7a:b8:f1:86:c5:9b:b0:28: c9:98:ae:1a:ee:71:92:64:3c:25:57:36:65:25:4b: ef:fd:58:01:ed:f2:6e:74:dc:bf:6c:70:3d:e0:e3: 42:f8:8c:1b:7b:1b:c9:9b:03:ac:1a:63:6d:7b:03: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A8:14:87:3E:49:6F:23:6E:7F:3D:71:B8:3D:C9:DF:16:DE:6E:FB X509v3 Authority Key Identifier: keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/KKgUhz5JbyNufz1xuD3J3xbebvs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.29.240.0/22 Signature Algorithm: sha256WithRSAEncryption 04:cb:8e:7d:c1:65:d5:c8:f7:cf:df:77:35:14:59:b7:1b:68: 29:af:24:da:31:61:73:95:42:1a:95:fa:26:b7:a5:8c:44:15: 71:b7:27:89:c6:0e:d7:28:55:86:13:e8:6e:57:b2:bf:e2:a0: 94:c8:3f:1b:04:b2:a8:31:1f:1a:50:37:c0:03:18:cf:b7:f3: 56:9b:a6:75:29:95:97:68:3c:71:0b:22:cd:1b:f6:44:b0:29: 48:11:2c:da:87:cb:8b:74:30:0c:d1:db:84:68:27:0e:8b:f3: 54:19:8d:b0:7e:58:bf:df:d2:87:7e:83:2a:bf:e6:21:20:95: a3:12:5e:15:a5:37:0a:ef:f8:8d:7f:0f:59:8d:8b:c5:60:eb: 6c:5c:2f:1d:6d:7f:56:13:41:60:9c:2e:40:7e:da:71:bb:c5: 2e:e8:7e:ba:a7:51:80:c7:78:da:10:1b:f0:50:b9:40:2f:28: d3:24:b5:f2:94:e0:e8:22:b8:b0:0f:1d:f6:32:34:f4:a6:f0: 85:36:a8:64:5e:38:84:37:6b:f8:de:ee:9b:e4:0d:1c:a0:91: 8b:3b:6c:18:e9:fa:f0:c1:98:5f:8a:92:ab:4a:54:72:2f:de: 85:29:a6:24:1c:a6:ff:e2:fe:c6:f3:ee:e3:06:b7:04:9e:77: 1c:b9:68:74 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB RTJEMzMxRjJDNDI4MEMxNkFBOEJBRkUxNkZERENDRTM3MTVCNDAeFw0yNTA4MjIw ODUyNTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI4QTgxNDg3M0U0OTZG MjM2RTdGM0Q3MUI4M0RDOURGMTZERTZFRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP3Am7jwmWSA8c3IVgSmgGivnYzcLJHoK8d9zxCrDngm4+l9db /A8lvBB47dGUjpwCTqPdU3f9WWoHsXERS6bzrhn9vypEgT/S8AB4rDvwVEKg9aMt ceIoOwUKhzYEvefXyLCk/VXqyZuFu+B9MpXjamMtShtK0t5dfA/8j2yuMH6XVZNr d0oA+P8ApmUDouoXQylm7qnZbrm/p4xs+vcTsLyI7OrdqmrvxPSmdWFLzmuyBs3H GUQvTzP7Re5x/fHYFUXMedWMZdd6uPGGxZuwKMmYrhrucZJkPCVXNmUlS+/9WAHt 8m503L9scD3g40L4jBt7G8mbA6waY217A6jvAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKKgUhz5JbyNufz1xuD3J3xbebvswHwYDVR0jBBgwFoAUDq4tMx8sQoDBaqi6 /hb93M43FbQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0Rx NHRNeDhzUW9EQmFxaTZfaGI5M000M0ZiUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev RHE0dE14OHNRb0RCYXFpNl9oYjkzTTQzRmJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0tLZ1VoejVKYnlOdWZ6MXh1RDNKM3hi ZWJ2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJyHfAwDQYJ KoZIhvcNAQELBQADggEBAATLjn3BZdXI98/fdzUUWbcbaCmvJNoxYXOVQhqV+ia3 pYxEFXG3J4nGDtcoVYYT6G5Xsr/ioJTIPxsEsqgxHxpQN8ADGM+381abpnUplZdo PHELIs0b9kSwKUgRLNqHy4t0MAzR24RoJw6L81QZjbB+WL/f0od+gyq/5iEglaMS XhWlNwrv+I1/D1mNi8Vg62xcLx1tf1YTQWCcLkB+2nG7xS7ofrqnUYDHeNoQG/BQ uUAvKNMktfKU4OgiuLAPHfYyNPSm8IU2qGReOIQ3a/je7pvkDRygkYs7bBjp+vDB mF+KkqtKVHIv3oUppiQcpv/i/sbz7uMGtwSedxy5aHQ= -----END CERTIFICATE-----Generated at Sun Aug 24 09:20:32 2025 by rpki-client