$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ldnRxhv1yTtmnvKq3-VYpoEOEEI.roa File: ldnRxhv1yTtmnvKq3-VYpoEOEEI.roa (raw, json) Hash identifier: dGygZN/gcFJPruUdeMfM4AgxkJgEOHZxGG+uNkvJrYQ= Subject key identifier: 95:D9:D1:C6:1B:F5:C9:3B:66:9E:F2:AA:DF:E5:58:A6:81:0E:10:42 Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Certificate serial: 0504 Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ldnRxhv1yTtmnvKq3-VYpoEOEEI.roa Signing time: Fri 22 Aug 2025 08:52:17 +0000 ROA not before: Fri 22 Aug 2025 08:52:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 31972 IP address blocks: 2406:ce40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Validity Not Before: Aug 22 08:52:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=95D9D1C61BF5C93B669EF2AADFE558A6810E1042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:0f:26:ea:5b:87:0f:f4:c8:46:ef:9b:17: 3a:b4:99:50:03:a4:00:c7:07:88:d8:93:b3:7d:6b: 41:e0:3e:fe:6b:c2:0a:e4:ac:e1:12:e7:e9:8c:46: 67:bd:84:19:b7:50:ff:2e:c2:29:b0:70:8d:2a:b7: 91:b0:8f:6d:e0:ff:61:97:3e:b1:e8:1f:b9:fb:fe: aa:05:6c:7b:40:86:4d:8f:50:91:f6:09:89:c2:0e: d0:3e:26:c2:b1:18:14:86:7d:95:c5:1b:be:77:fe: c9:99:67:fe:90:8b:53:d3:65:4a:d6:08:70:1e:d5: 8f:38:0e:29:3f:bc:c3:e4:9f:09:ad:dd:7c:c3:65: 9c:fa:52:bb:b5:13:d1:06:b7:3d:5b:86:b9:ee:24: 04:d4:6c:08:e5:c0:47:fa:d6:45:e3:54:5c:e0:d7: 04:6f:4f:d8:9c:34:b8:58:30:e4:97:34:61:5a:4e: 01:57:8a:0d:23:74:6b:e7:fb:f8:e6:90:70:83:15: d0:7a:6c:73:a0:7f:d4:1a:a5:82:d0:d0:9f:e7:5e: 65:2d:1e:48:4e:6a:36:e5:b0:8a:ee:4b:b9:5e:cf: 03:e8:ab:9c:26:f6:4c:c3:ef:f3:15:3e:75:d4:db: 80:1c:02:f3:6e:da:43:a5:d5:99:c8:f9:56:36:34: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:D1:C6:1B:F5:C9:3B:66:9E:F2:AA:DF:E5:58:A6:81:0E:10:42 X509v3 Authority Key Identifier: keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/ldnRxhv1yTtmnvKq3-VYpoEOEEI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 3e:c3:a8:73:54:2d:09:8a:12:35:9d:6f:48:c5:95:00:7d:28: fb:44:a7:70:95:58:3f:d4:c1:ec:e7:0e:59:cf:6a:60:d2:82: b4:3f:c3:99:f9:54:d2:e1:b8:b7:1d:d5:27:35:f7:40:fa:9a: 5f:d5:16:fe:de:48:e4:9c:79:94:09:64:0d:fc:12:c4:b9:a8: c3:d7:49:50:36:99:11:49:34:05:38:9e:33:e7:3d:14:64:21: df:1e:01:90:74:0b:2a:eb:be:a8:ce:b8:16:3e:0b:62:12:21: 18:a5:7a:38:18:3d:5e:1a:46:bd:cb:7f:cd:86:82:5d:74:7f: 40:31:43:ad:25:50:2f:bb:0d:45:b2:ff:ab:db:ae:d3:ef:0a: 84:21:fa:4f:ce:02:45:ac:92:bc:53:b9:e3:27:ae:e3:49:b9: 33:3d:d3:b4:5a:24:a8:79:db:7a:47:24:d2:ba:e0:eb:4d:ec: cf:43:80:f9:ff:d8:d2:67:4a:39:89:cc:bd:6e:b4:9c:87:7f: 78:b2:c0:cb:1f:a6:91:d9:7f:67:66:35:3a:59:fa:90:b1:df: b2:a4:97:a5:0a:f2:76:c9:63:47:a5:c0:95:d6:bf:04:a3:1f: 34:71:c5:5f:12:5a:fe:55:60:c5:56:02:23:8a:4e:09:ba:4a: 5a:14:a8:70 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNTA4MjIw ODUyMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk1RDlEMUM2MUJGNUM5 M0I2NjlFRjJBQURGRTU1OEE2ODEwRTEwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUNA8m6luHD/TIRu+bFzq0mVADpADHB4jYk7N9a0HgPv5rwgrk rOES5+mMRme9hBm3UP8uwimwcI0qt5Gwj23g/2GXPrHoH7n7/qoFbHtAhk2PUJH2 CYnCDtA+JsKxGBSGfZXFG753/smZZ/6Qi1PTZUrWCHAe1Y84Dik/vMPknwmt3XzD ZZz6Uru1E9EGtz1bhrnuJATUbAjlwEf61kXjVFzg1wRvT9icNLhYMOSXNGFaTgFX ig0jdGvn+/jmkHCDFdB6bHOgf9QapYLQ0J/nXmUtHkhOajblsIruS7lezwPoq5wm 9kzD7/MVPnXU24AcAvNu2kOl1ZnI+VY2NK91AgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUldnRxhv1yTtmnvKq3+VYpoEOEEIwHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL2xkblJ4aHYxeVR0 bW52S3EzLVZZcG9FT0VFSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkBs5AMA0GCSqGSIb3DQEBCwUAA4IBAQA+w6hzVC0JihI1nW9IxZUAfSj7 RKdwlVg/1MHs5w5Zz2pg0oK0P8OZ+VTS4bi3HdUnNfdA+ppf1Rb+3kjknHmUCWQN /BLEuajD10lQNpkRSTQFOJ4z5z0UZCHfHgGQdAsq676ozrgWPgtiEiEYpXo4GD1e Gka9y3/NhoJddH9AMUOtJVAvuw1Fsv+r267T7wqEIfpPzgJFrJK8U7njJ67jSbkz PdO0WiSoedt6RyTSuuDrTezPQ4D5/9jSZ0o5icy9brSch394ssDLH6aR2X9nZjU6 WfqQsd+ypJelCvJ2yWNHpcCV1r8Eox80ccVfElr+VWDFVgIjik4JukpaFKhw -----END CERTIFICATE-----Generated at Sun Aug 24 05:45:12 2025 by rpki-client