$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/S_Z253G90JKGV3DSDbPr17sIR3w.roa File: S_Z253G90JKGV3DSDbPr17sIR3w.roa (raw, json) Hash identifier: rvQltYT89ZfTFWOD/DM5VCv9k+0By1exhO4QIytfRjI= Subject key identifier: 4B:F6:76:E7:71:BD:D0:92:86:57:70:D2:0D:B3:EB:D7:BB:08:47:7C Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FD8 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/S_Z253G90JKGV3DSDbPr17sIR3w.roa Signing time: Fri 22 Aug 2025 08:50:28 +0000 ROA not before: Fri 22 Aug 2025 08:50:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4056 (0xfd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4BF676E771BDD092865770D20DB3EBD7BB08477C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:21:a7:65:96:5b:22:ad:ef:e9:34:36:0b: 6d:61:9f:6c:d4:25:b2:9e:68:8a:09:64:08:46:55: ff:f4:2f:49:b4:f1:ba:e6:18:4d:c0:54:fb:3b:bf: 3c:50:e1:90:23:20:cd:d1:61:e6:92:be:c1:a6:86: be:68:73:b7:9a:14:bd:d8:a0:db:c4:24:9c:48:4a: b8:ba:2e:f7:ff:47:d7:74:b2:e7:ed:c5:fd:d5:ef: e7:e9:2f:e5:68:56:7d:0b:49:05:51:83:dd:8c:0d: 35:ba:cf:e3:24:17:dc:b2:8b:f3:69:6f:13:60:7f: 03:c2:e5:41:86:de:77:03:33:70:9e:35:bc:8c:d5: 08:0f:be:b4:2e:b4:a6:75:7b:30:cb:aa:71:6b:b3: 63:87:f8:c3:02:3c:99:00:58:ae:f6:eb:52:e2:e1: be:7d:fd:8e:40:71:22:e8:4c:9f:63:ea:93:4a:ca: 2c:c4:89:19:ad:e2:18:b9:a2:82:57:22:06:87:e1: 91:a6:af:25:30:77:4d:ce:33:23:db:4d:56:89:d8: 35:fb:11:7e:9e:44:64:c0:60:c6:b9:77:0b:58:00: d4:ec:30:45:b4:54:c9:ac:33:b4:71:69:08:d8:ad: e9:62:93:b8:bf:df:0c:8d:c3:f6:8b:20:c1:70:39: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F6:76:E7:71:BD:D0:92:86:57:70:D2:0D:B3:EB:D7:BB:08:47:7C X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/S_Z253G90JKGV3DSDbPr17sIR3w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.46.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f0:92:87:6f:4c:c9:37:af:7d:e3:2e:1f:d8:54:98:7e:51: 8e:81:3d:38:8d:d2:b5:f1:73:d8:5c:df:83:84:83:6a:9b:01: f0:01:a5:ba:83:cf:61:69:ea:ce:d6:4f:41:1d:e0:e7:3d:c4: f9:47:f1:12:a1:36:2d:35:5d:52:11:80:7f:60:e2:e5:ac:56: ba:db:7b:9f:c3:84:33:76:cb:2c:19:9d:2a:2d:93:f4:8b:9c: 6a:57:9b:72:b4:e2:fe:53:ad:c2:bb:df:88:e9:54:e6:53:a4: 87:c3:ca:67:d0:5a:12:32:f3:62:e0:ca:cf:fe:56:b4:8c:a3: 8f:b2:97:f4:ee:c9:9d:f7:c3:ac:22:39:60:ce:96:19:45:10: aa:e0:c6:0e:71:f3:3e:3b:c5:d3:7e:02:78:2f:ac:4f:6c:80: bd:a7:83:4c:77:58:2d:72:7c:86:e2:28:0f:98:7d:11:49:47: 55:93:a9:a3:e9:91:95:35:f7:55:6d:e0:b9:6d:7f:fc:0e:53: 48:98:72:86:86:d9:fc:e3:b4:db:66:67:69:eb:3b:00:3b:7d: 41:e2:57:4c:3c:12:48:c8:be:9c:3d:e5:fd:1b:5b:39:26:fa: 62:27:97:5b:8f:0f:98:e6:c2:e3:36:bd:56:05:13:1a:91:6a: 0c:87:70:d9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRCRjY3NkU3NzFCREQw OTI4NjU3NzBEMjBEQjNFQkQ3QkIwODQ3N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyGyGnZZZbIq3v6TQ2C21hn2zUJbKeaIoJZAhGVf/0L0m08brm GE3AVPs7vzxQ4ZAjIM3RYeaSvsGmhr5oc7eaFL3YoNvEJJxISri6Lvf/R9d0suft xf3V7+fpL+VoVn0LSQVRg92MDTW6z+MkF9yyi/NpbxNgfwPC5UGG3ncDM3CeNbyM 1QgPvrQutKZ1ezDLqnFrs2OH+MMCPJkAWK7261Li4b59/Y5AcSLoTJ9j6pNKyizE iRmt4hi5ooJXIgaH4ZGmryUwd03OMyPbTVaJ2DX7EX6eRGTAYMa5dwtYANTsMEW0 VMmsM7RxaQjYrelik7i/3wyNw/aLIMFwOUdtAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUS/Z253G90JKGV3DSDbPr17sIR3wwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vU19aMjUzRzkwSktHVjNEU0RiUHIx N3NJUjN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bLjAN BgkqhkiG9w0BAQsFAAOCAQEAa/CSh29MyTevfeMuH9hUmH5RjoE9OI3StfFz2Fzf g4SDapsB8AGluoPPYWnqztZPQR3g5z3E+UfxEqE2LTVdUhGAf2Di5axWutt7n8OE M3bLLBmdKi2T9IucalebcrTi/lOtwrvfiOlU5lOkh8PKZ9BaEjLzYuDKz/5WtIyj j7KX9O7JnffDrCI5YM6WGUUQquDGDnHzPjvF034CeC+sT2yAvaeDTHdYLXJ8huIo D5h9EUlHVZOpo+mRlTX3VW3guW1//A5TSJhyhobZ/OO022Znaes7ADt9QeJXTDwS SMi+nD3l/RtbOSb6YieXW48PmObC4za9VgUTGpFqDIdw2Q== -----END CERTIFICATE-----Generated at Sun Aug 24 11:43:57 2025 by rpki-client