$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa File: zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa (raw, json) Hash identifier: 4WOxoLw0W96yUmxJv3ac7DDaLuuI/40+Ms3ofP7ccYE= Subject key identifier: CF:27:82:4C:7D:2E:E1:D3:C1:A5:2E:3C:BC:F6:8C:D6:A6:E1:D1:94 Certificate issuer: /CN=294B61C9DA3584274182FA20AF8626E1AEA81F32 Certificate serial: 09 Authority key identifier: 29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa Signing time: Thu 09 Oct 2025 01:49:33 +0000 ROA not before: Thu 09 Oct 2025 01:49:33 +0000 ROA not after: Wed 07 Oct 2026 15:30:20 +0000 asID: 134823 IP address blocks: 138.252.10.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294B61C9DA3584274182FA20AF8626E1AEA81F32 Validity Not Before: Oct 9 01:49:33 2025 GMT Not After : Oct 7 15:30:20 2026 GMT Subject: CN=CF27824C7D2EE1D3C1A52E3CBCF68CD6A6E1D194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:68:d0:58:9a:2e:70:ce:c3:44:84:2f:b5: 1f:75:78:59:64:2f:21:d5:de:f0:27:94:4e:ec:7c: 23:58:90:e4:6f:b3:78:1d:b0:d9:e7:86:63:0d:49: 7d:a0:33:e9:a0:fa:0d:55:b0:02:63:6e:d3:c6:2f: 8e:d1:36:53:c6:75:c2:20:d6:f7:e3:19:99:69:3f: a3:29:26:9f:47:c4:fa:5e:4d:62:57:b6:8e:5d:3e: 5b:a2:65:33:6a:7d:70:9e:86:0e:c0:3d:a5:08:75: b9:02:10:2c:d7:ec:91:9d:10:f9:3c:4b:21:9f:02: c2:c8:3f:d1:18:3e:15:aa:a5:25:c4:ce:30:9e:5a: de:9c:2c:03:3d:ed:c7:fa:9f:28:8a:32:41:cb:a6: d6:52:5e:49:32:c6:e7:1d:e0:40:be:0e:27:b2:20: de:f5:cb:f7:8d:d7:19:51:90:a2:0e:a3:51:d7:ef: e3:1a:c3:d3:bc:31:2e:06:c3:d6:ee:d6:c9:14:d6: 1d:09:4a:5c:01:61:d6:1a:a9:4a:2c:cb:4a:b3:5a: ba:92:88:1a:bc:57:9e:42:10:25:4b:13:84:02:e1: 56:26:b3:76:04:f3:2b:97:90:30:23:1e:01:db:76: b5:3e:b0:e1:23:d0:d3:09:58:61:ee:7b:79:24:53: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:27:82:4C:7D:2E:E1:D3:C1:A5:2E:3C:BC:F6:8C:D6:A6:E1:D1:94 X509v3 Authority Key Identifier: keyid:29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.10.0/23 Signature Algorithm: sha256WithRSAEncryption 94:ec:5f:69:73:56:5b:5c:02:99:9f:60:fe:d5:27:a5:67:46: 99:4d:6e:2a:45:dd:a1:4a:cf:d8:b2:7f:cd:08:a9:83:44:20: 4e:d5:52:b3:59:ef:1d:c1:62:ce:81:96:52:d5:df:c4:31:24: fa:3e:82:2b:05:01:81:6e:8e:0c:32:15:ea:ed:22:1e:a3:c6: af:75:37:ad:e4:8a:d0:55:a5:66:64:05:35:ca:0f:59:2a:82: 6b:0a:4c:44:a3:f2:2b:29:f2:13:52:42:34:0c:78:20:16:bc: 08:e7:2b:3b:3f:4e:84:0b:2a:02:3f:eb:8a:b3:98:66:f7:55: 4b:ae:4d:92:a3:02:79:35:9d:19:1e:c2:06:2e:64:e3:df:aa: 5b:5c:db:35:05:63:01:06:c5:8e:09:2d:4d:79:d3:f3:12:bd: 24:af:25:32:a7:f8:a7:8e:1e:63:39:ed:c8:7f:88:a0:2b:a9: 76:32:46:51:63:31:64:89:70:e4:5b:80:fc:c2:aa:ee:f1:98: d9:f7:59:1a:fa:7e:46:c5:5d:81:69:14:11:90:1c:1a:ca:df: 4e:e7:b1:85:74:70:48:50:d7:a1:eb:d3:c4:6f:62:98:42:9a: ee:39:d3:32:e1:eb:e6:82:09:0d:c3:83:73:15:d8:1f:2e:f4: f8:a0:e7:61 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTRC NjFDOURBMzU4NDI3NDE4MkZBMjBBRjg2MjZFMUFFQTgxRjMyMB4XDTI1MTAwOTAx NDkzM1oXDTI2MTAwNzE1MzAyMFowMzExMC8GA1UEAxMoQ0YyNzgyNEM3RDJFRTFE M0MxQTUyRTNDQkNGNjhDRDZBNkUxRDE5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMaPaNBYmi5wzsNEhC+1H3V4WWQvIdXe8CeUTux8I1iQ5G+zeB2w 2eeGYw1JfaAz6aD6DVWwAmNu08YvjtE2U8Z1wiDW9+MZmWk/oykmn0fE+l5NYle2 jl0+W6JlM2p9cJ6GDsA9pQh1uQIQLNfskZ0Q+TxLIZ8Cwsg/0Rg+FaqlJcTOMJ5a 3pwsAz3tx/qfKIoyQcum1lJeSTLG5x3gQL4OJ7Ig3vXL943XGVGQog6jUdfv4xrD 07wxLgbD1u7WyRTWHQlKXAFh1hqpSizLSrNaupKIGrxXnkIQJUsThALhViazdgTz K5eQMCMeAdt2tT6w4SPQ0wlYYe57eSRTnvUCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBTPJ4JMfS7h08GlLjy89ozWpuHRlDAfBgNVHSMEGDAWgBQpS2HJ2jWEJ0GC+iCv hibhrqgfMjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS0dBTUUv S1V0aHlkbzFoQ2RCZ3ZvZ3I0WW00YTZvSHpJLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9LVXRoeWRvMWhDZEJndm9ncjRZbTRhNm9IekkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS0dBTUUvenllQ1RIMHU0ZFBCcFM0OHZQ YU0xcWJoMFpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr8 CjANBgkqhkiG9w0BAQsFAAOCAQEAlOxfaXNWW1wCmZ9g/tUnpWdGmU1uKkXdoUrP 2LJ/zQipg0QgTtVSs1nvHcFizoGWUtXfxDEk+j6CKwUBgW6ODDIV6u0iHqPGr3U3 reSK0FWlZmQFNcoPWSqCawpMRKPyKynyE1JCNAx4IBa8COcrOz9OhAsqAj/rirOY ZvdVS65NkqMCeTWdGR7CBi5k49+qW1zbNQVjAQbFjgktTXnT8xK9JK8lMqf4p44e YzntyH+IoCupdjJGUWMxZIlw5FuA/MKq7vGY2fdZGvp+RsVdgWkUEZAcGsrfTuex hXRwSFDXoevTxG9imEKa7jnTMuHr5oIJDcODcxXYHy70+KDnYQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:48 2025 by rpki-client