$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/Zvb97bmc4-h7hYQrJp3v_79V4Lo.roa File: Zvb97bmc4-h7hYQrJp3v_79V4Lo.roa (raw, json) Hash identifier: RMYNFsjQS/zqZZZ8OO7LqFIRkod97NmqIP5/5eNVbrU= Subject key identifier: 66:F6:FD:ED:B9:9C:E3:E8:7B:85:84:2B:26:9D:EF:FF:BF:55:E0:BA Certificate issuer: /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1 Certificate serial: 10E6 Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/Zvb97bmc4-h7hYQrJp3v_79V4Lo.roa Signing time: Tue 01 Jul 2025 01:43:00 +0000 ROA not before: Tue 01 Jul 2025 01:43:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131645 IP address blocks: 202.148.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 10:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4326 (0x10e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1 Validity Not Before: Jul 1 01:43:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=66F6FDEDB99CE3E87B85842B269DEFFFBF55E0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:01:f9:28:d4:f4:e9:0e:b9:db:83:00:82:18: 91:dd:0b:53:b5:51:e8:ca:89:2e:a2:ea:7b:0c:d7: 67:d0:c8:3f:15:3d:9b:95:00:97:34:4a:9c:ed:b9: 69:cd:68:12:3b:9e:a1:1b:e4:e9:89:76:46:5c:70: 50:76:28:cc:da:76:9e:58:93:75:d1:5f:2e:ff:12: a9:4e:fb:b1:c9:0e:2b:1a:4e:c8:73:5b:8c:00:89: 97:b4:75:09:0a:73:e2:0c:61:76:21:f8:4b:f7:2b: 65:04:5a:ed:7b:74:ed:3d:72:70:9e:df:42:26:a7: 49:f9:28:8d:e7:99:9a:98:97:93:b1:fd:53:1a:49: ee:d4:77:5b:5d:47:64:fd:f2:64:bf:7d:80:46:1f: e4:83:77:6a:d5:55:92:87:1c:6a:68:52:1a:d7:ce: ba:f4:e7:31:e9:43:dd:2f:bc:79:db:5a:6c:49:6c: 41:fd:c9:49:b6:50:53:d8:86:b5:02:f2:d4:1e:88: a0:9f:c8:9f:87:e1:56:e5:38:80:c7:eb:77:7e:32: 03:6a:99:5e:91:18:fb:85:09:f6:f7:fd:8f:07:e8: cd:ea:44:fe:db:c7:f1:d2:48:d1:9d:0b:ed:f7:67: 0f:c4:68:bc:d2:b7:f5:d1:47:89:06:b9:b6:eb:54: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F6:FD:ED:B9:9C:E3:E8:7B:85:84:2B:26:9D:EF:FF:BF:55:E0:BA X509v3 Authority Key Identifier: keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/Zvb97bmc4-h7hYQrJp3v_79V4Lo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.148.208.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:3d:60:f3:d0:04:a7:fc:e4:16:31:2d:c9:e6:24:ea:61:be: 95:82:4e:0d:1f:34:11:9f:b5:6a:dc:88:b7:ba:c1:92:8f:64: c2:90:8f:58:a2:8b:31:a9:8e:0b:b6:e5:6a:83:83:aa:15:4b: 92:05:aa:f0:4c:7a:4c:65:e5:fc:97:b5:90:93:5c:e9:df:2e: b9:ff:c4:48:17:5f:8f:7d:26:53:1c:ad:9d:ef:b0:50:47:fb: ac:d9:74:eb:9c:c6:e7:69:f9:f2:67:b5:3b:73:e2:92:e1:2d: ac:3e:92:1a:25:8a:95:e7:36:f8:b2:8b:7a:2d:86:d9:77:2d: bb:4d:35:6b:ab:29:e1:4f:f3:98:94:65:a5:72:70:8e:1c:1f: 41:0a:bb:8b:45:dc:6b:bb:77:6a:4c:76:85:c9:41:63:fb:11: fa:f3:63:08:75:22:ba:21:a5:49:b3:d7:5c:f1:e0:19:d4:cd: 7b:20:25:d9:cf:0c:2f:47:fb:48:c3:63:73:0b:ec:0e:15:46: 7b:46:d6:1a:5b:ac:13:eb:91:6b:d5:b3:ca:2b:a3:d9:92:2b: 27:4a:15:41:ed:d2:c8:b8:65:ee:9a:ba:82:28:9a:80:d2:9e: 9f:73:e3:5b:6b:ff:5d:dc:5b:cd:4b:ad:67:15:d8:a7:b6:54: f3:26:9c:7b -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODI4 QkQxOUVGQThFQkU1OUVGNDA3QkI3RkFCNjg5OEY3NTRDN0VDMTAeFw0yNTA3MDEw MTQzMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2RjZGREVEQjk5Q0Uz RTg3Qjg1ODQyQjI2OURFRkZGQkY1NUUwQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD8Afko1PTpDrnbgwCCGJHdC1O1UejKiS6i6nsM12fQyD8VPZuV AJc0SpztuWnNaBI7nqEb5OmJdkZccFB2KMzadp5Yk3XRXy7/EqlO+7HJDisaTshz W4wAiZe0dQkKc+IMYXYh+Ev3K2UEWu17dO09cnCe30Imp0n5KI3nmZqYl5Ox/VMa Se7Ud1tdR2T98mS/fYBGH+SDd2rVVZKHHGpoUhrXzrr05zHpQ90vvHnbWmxJbEH9 yUm2UFPYhrUC8tQeiKCfyJ+H4VblOIDH63d+MgNqmV6RGPuFCfb3/Y8H6M3qRP7b x/HSSNGdC+33Zw/EaLzSt/XRR4kGubbrVFhBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUZvb97bmc4+h7hYQrJp3v/79V4LowHwYDVR0jBBgwFoAUgovRnvqOvlnvQHu3 +raJj3VMfsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tDTy9n b3ZSbnZxT3ZsbnZRSHUzLXJhSmozVk1mc0UuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2dvdlJudnFPdmxudlFIdTMtcmFKajNWTWZzRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0tLQ08vWnZiOTdibWM0LWg3aFlRckpwM3Zf NzlWNExvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcqU0DAN BgkqhkiG9w0BAQsFAAOCAQEAij1g89AEp/zkFjEtyeYk6mG+lYJODR80EZ+1atyI t7rBko9kwpCPWKKLMamOC7blaoODqhVLkgWq8Ex6TGXl/Je1kJNc6d8uuf/ESBdf j30mUxytne+wUEf7rNl065zG52n58me1O3PikuEtrD6SGiWKlec2+LKLei2G2Xct u001a6sp4U/zmJRlpXJwjhwfQQq7i0Xca7t3akx2hclBY/sR+vNjCHUiuiGlSbPX XPHgGdTNeyAl2c8ML0f7SMNjcwvsDhVGe0bWGlusE+uRa9Wzyiuj2ZIrJ0oVQe3S yLhl7pq6giiagNKen3PjW2v/XdxbzUutZxXYp7ZU8yacew== -----END CERTIFICATE-----Generated at Sat Jul 5 08:36:37 2025 by rpki-client