$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/3gvA_CwCybz-aYstX9_fnH4zoK8.roa File: 3gvA_CwCybz-aYstX9_fnH4zoK8.roa (raw, json) Hash identifier: 4QTAQi8p23JBg36G2X9Qt6Q3mgaV8zX7JDGdukRs2as= Subject key identifier: DE:0B:C0:FC:2C:02:C9:BC:FE:69:8B:2D:5F:DF:DF:9C:7E:33:A0:AF Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FD5 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3gvA_CwCybz-aYstX9_fnH4zoK8.roa Signing time: Fri 22 Aug 2025 08:50:28 +0000 ROA not before: Fri 22 Aug 2025 08:50:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4053 (0xfd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DE0BC0FC2C02C9BCFE698B2D5FDFDF9C7E33A0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cb:6f:21:d1:81:0e:aa:0f:d1:1c:d2:13:7d: 29:4c:04:57:f9:bf:66:93:26:a0:4c:5b:47:fa:c1: 65:5c:2b:d3:0b:25:15:55:72:4e:8b:77:f4:b2:a8: e9:fd:b9:80:02:4a:f2:0a:4a:80:54:4d:e5:d3:55: dc:2e:4c:d5:f9:f2:a5:20:1e:2b:6c:a5:26:63:66: 31:54:eb:87:bb:47:1e:ac:03:61:36:7a:0f:74:4f: 35:5f:e5:60:5b:e2:df:65:e8:bf:9a:e9:ab:d8:11: a4:ba:bf:3e:63:34:de:c3:0d:9e:c8:5a:04:ad:76: f3:3f:58:b1:c2:b7:1c:2a:78:c2:10:71:40:a3:50: ae:b2:60:a3:9b:e8:5b:b1:95:97:47:40:7d:10:a5: 61:1f:7d:ce:6e:2b:ad:15:d8:61:96:66:c3:ff:51: 81:ee:f8:36:0b:7a:de:9d:27:a8:ae:4c:3d:bb:b1: 3e:c6:61:6f:31:e3:8f:ea:14:e4:5f:27:f9:37:86: c2:6e:8b:92:6c:29:db:e7:67:7d:ca:d0:04:0f:76: bf:64:21:3c:9e:b2:92:09:5f:41:b4:18:f4:30:df: d3:78:3d:89:3e:13:bb:17:3b:7d:dd:fe:79:ee:d4: 36:9a:de:c7:73:b3:96:cb:6f:62:6c:4d:0f:c1:b1: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0B:C0:FC:2C:02:C9:BC:FE:69:8B:2D:5F:DF:DF:9C:7E:33:A0:AF X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3gvA_CwCybz-aYstX9_fnH4zoK8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.36.0/22 Signature Algorithm: sha256WithRSAEncryption 96:86:17:1e:ad:c1:1e:32:fd:31:78:a8:6c:47:ad:a6:7f:a4: 49:78:b4:2f:13:03:e1:24:81:d8:34:58:e9:2f:50:37:4a:69: e0:9a:6e:50:1f:0c:18:e7:ab:95:c4:80:aa:2a:a1:6b:bd:df: 50:ae:a7:65:5d:59:16:25:5a:7b:b7:fa:d9:c5:db:0d:9c:8a: d3:24:a4:08:21:b5:fc:61:d7:85:8f:e9:db:7a:f0:d5:da:44: de:b7:e4:5c:b0:d5:6f:b8:6e:a2:76:8c:50:a0:a4:70:39:96: 80:c7:4c:69:44:82:66:02:a0:c8:56:09:3b:f0:61:c1:55:89: 7b:91:73:bc:bc:ba:cc:73:a7:13:79:c4:28:aa:e6:d2:8b:e9: 95:0a:ef:32:1a:2a:e5:61:ac:b3:e6:f4:1e:e6:12:90:58:a1: 61:1e:a9:f1:f5:7e:e1:ea:d2:65:63:e9:b4:01:66:45:04:8b: 83:fa:7d:72:a2:26:d1:f9:53:7f:78:6c:56:8c:a4:bc:e0:42: 3b:68:ce:a2:c6:32:cb:45:c9:45:80:d6:1d:d8:b1:c9:55:bb: a7:d6:e9:c1:1f:e3:96:da:b2:20:01:01:c8:81:fb:13:e8:56: 55:de:6f:45:b8:3b:4a:20:6d:63:e5:b9:2c:eb:ce:3f:ab:e8: da:9a:22:ca -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERFMEJDMEZDMkMwMkM5 QkNGRTY5OEIyRDVGREZERjlDN0UzM0EwQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsy28h0YEOqg/RHNITfSlMBFf5v2aTJqBMW0f6wWVcK9MLJRVV ck6Ld/SyqOn9uYACSvIKSoBUTeXTVdwuTNX58qUgHitspSZjZjFU64e7Rx6sA2E2 eg90TzVf5WBb4t9l6L+a6avYEaS6vz5jNN7DDZ7IWgStdvM/WLHCtxwqeMIQcUCj UK6yYKOb6FuxlZdHQH0QpWEffc5uK60V2GGWZsP/UYHu+DYLet6dJ6iuTD27sT7G YW8x44/qFORfJ/k3hsJui5JsKdvnZ33K0AQPdr9kITyespIJX0G0GPQw39N4PYk+ E7sXO33d/nnu1Daa3sdzs5bLb2JsTQ/BsW8NAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU3gvA/CwCybz+aYstX9/fnH4zoK8wHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vM2d2QV9Dd0N5YnotYVlzdFg5X2Zu SDR6b0s4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAt8bJDAN BgkqhkiG9w0BAQsFAAOCAQEAloYXHq3BHjL9MXiobEetpn+kSXi0LxMD4SSB2DRY 6S9QN0pp4JpuUB8MGOerlcSAqiqha73fUK6nZV1ZFiVae7f62cXbDZyK0ySkCCG1 /GHXhY/p23rw1dpE3rfkXLDVb7huonaMUKCkcDmWgMdMaUSCZgKgyFYJO/BhwVWJ e5FzvLy6zHOnE3nEKKrm0ovplQrvMhoq5WGss+b0HuYSkFihYR6p8fV+4erSZWPp tAFmRQSLg/p9cqIm0flTf3hsVoykvOBCO2jOosYyy0XJRYDWHdixyVW7p9bpwR/j ltqyIAEByIH7E+hWVd5vRbg7SiBtY+W5LOvOP6vo2poiyg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:05 2025 by rpki-client