$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/WN3EM-lrueHLT6K35P_ut00RPTk.roa File: WN3EM-lrueHLT6K35P_ut00RPTk.roa (raw, json) Hash identifier: IqbtQ7gghDS21q1cDCo9mYIXdxYIsz/vSLDAUES3iq0= Subject key identifier: 58:DD:C4:33:E9:6B:B9:E1:CB:4F:A2:B7:E4:FF:EE:B7:4D:11:3D:39 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FC4 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/WN3EM-lrueHLT6K35P_ut00RPTk.roa Signing time: Fri 22 Aug 2025 08:50:23 +0000 ROA not before: Fri 22 Aug 2025 08:50:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 13335 IP address blocks: 223.27.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4036 (0xfc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=58DDC433E96BB9E1CB4FA2B7E4FFEEB74D113D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:29:f2:6f:78:41:79:d0:49:de:16:f5:c3: 85:16:4f:ed:cd:44:05:cb:5c:9c:ff:33:b1:89:1a: ff:43:05:59:dc:99:94:21:e5:09:78:11:57:5a:24: c5:09:23:4b:e6:9d:52:b2:f4:6f:cd:6f:01:b4:6c: 98:f8:a0:ce:ce:23:d5:2e:65:db:58:48:aa:4d:e7: 65:a6:75:63:d7:19:1c:df:6c:06:d0:44:b5:eb:67: c5:d0:28:e0:b6:b2:85:a3:43:53:53:48:65:5b:5c: 61:64:4a:b5:55:39:ea:7f:16:3c:84:84:15:4d:8c: 71:9e:02:c0:11:10:f3:e6:23:30:03:2d:19:e3:80: 16:d6:16:32:48:ac:53:33:77:7c:3c:e3:93:2b:07: f2:ea:c1:cd:1f:7d:f9:b7:89:32:82:5a:24:67:23: da:54:af:e8:3b:71:d3:48:68:dd:87:6d:b3:a2:de: bd:b5:da:45:03:3f:86:b9:a1:94:79:3e:04:c2:a7: 19:4d:fe:5f:8b:e4:7c:7f:7c:53:da:9f:2e:12:40: d1:c4:e3:de:43:ef:ee:29:31:b5:47:50:81:26:2b: 64:43:f0:b0:1c:b1:e8:c7:4f:4f:fc:95:0f:f8:60: bf:94:18:e8:55:33:4f:e6:c6:2b:d8:95:fa:2e:90: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DD:C4:33:E9:6B:B9:E1:CB:4F:A2:B7:E4:FF:EE:B7:4D:11:3D:39 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/WN3EM-lrueHLT6K35P_ut00RPTk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.48.0/20 Signature Algorithm: sha256WithRSAEncryption 10:d5:21:11:9a:98:ce:7a:ef:05:65:08:26:c0:d1:fe:85:fa: d3:af:53:12:de:e7:4b:0b:19:75:36:d0:64:ff:a9:14:88:c0: a7:34:3a:82:11:61:7e:e0:a9:f3:35:39:b8:da:b8:71:85:97: 0e:1f:78:dc:00:76:8b:86:dd:e1:a8:90:39:b3:89:88:71:fa: 35:a3:86:e4:ea:a4:8e:7e:8d:ae:37:f8:4f:3b:70:a9:8f:b1: 2e:78:0c:a2:62:76:01:7b:ef:4f:fb:6e:62:3c:13:b6:de:05: fd:e1:60:84:82:1c:d9:fb:7b:f3:eb:f1:23:a9:63:ec:59:52: ba:d7:bf:54:72:26:a0:f7:74:ae:41:91:f8:16:81:88:7f:ef: 7f:6c:65:a5:07:06:2e:29:89:cf:2e:cf:4c:b4:85:03:ec:06: e1:7a:f1:82:3c:78:fd:01:cc:c8:02:b8:78:10:78:8f:cf:14: 88:c3:2f:3f:91:de:31:ca:5c:50:51:88:8e:b4:96:7c:18:db: 55:40:77:1b:d6:7a:e7:73:c2:d5:dd:6e:64:fc:8c:78:24:73: 37:f9:06:b7:a0:2c:5d:26:00:d9:ec:33:c3:00:c7:80:3c:47: c4:69:7d:f4:3e:0e:8c:75:29:4b:63:5e:e2:d8:4f:d1:38:aa: f4:71:7a:32 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4RERDNDMzRTk2QkI5 RTFDQjRGQTJCN0U0RkZFRUI3NEQxMTNEMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4Uinyb3hBedBJ3hb1w4UWT+3NRAXLXJz/M7GJGv9DBVncmZQh 5Ql4EVdaJMUJI0vmnVKy9G/NbwG0bJj4oM7OI9UuZdtYSKpN52WmdWPXGRzfbAbQ RLXrZ8XQKOC2soWjQ1NTSGVbXGFkSrVVOep/FjyEhBVNjHGeAsAREPPmIzADLRnj gBbWFjJIrFMzd3w845MrB/Lqwc0fffm3iTKCWiRnI9pUr+g7cdNIaN2HbbOi3r21 2kUDP4a5oZR5PgTCpxlN/l+L5Hx/fFPany4SQNHE495D7+4pMbVHUIEmK2RD8LAc sejHT0/8lQ/4YL+UGOhVM0/mxivYlfoukMRzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUWN3EM+lrueHLT6K35P/ut00RPTkwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vV04zRU0tbHJ1ZUhMVDZLMzVQX3V0 MDBSUFRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBN8bMDAN BgkqhkiG9w0BAQsFAAOCAQEAENUhEZqYznrvBWUIJsDR/oX6069TEt7nSwsZdTbQ ZP+pFIjApzQ6ghFhfuCp8zU5uNq4cYWXDh943AB2i4bd4aiQObOJiHH6NaOG5Oqk jn6Nrjf4TztwqY+xLngMomJ2AXvvT/tuYjwTtt4F/eFghIIc2ft78+vxI6lj7FlS ute/VHImoPd0rkGR+BaBiH/vf2xlpQcGLimJzy7PTLSFA+wG4Xrxgjx4/QHMyAK4 eBB4j88UiMMvP5HeMcpcUFGIjrSWfBjbVUB3G9Z653PC1d1uZPyMeCRzN/kGt6As XSYA2ewzwwDHgDxHxGl99D4OjHUpS2Ne4thP0Tiq9HF6Mg== -----END CERTIFICATE-----Generated at Sun Aug 24 11:43:50 2025 by rpki-client