$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/dwmQc4Y7Mefbd7-9WmjhW0OpbJE.roa File: dwmQc4Y7Mefbd7-9WmjhW0OpbJE.roa (raw, json) Hash identifier: mOb6wF3pi7xqJS+uh1icMRw0zzRWYQLOh4TtGWVRSNA= Subject key identifier: 77:09:90:73:86:3B:31:E7:DB:77:BF:BD:5A:68:E1:5B:43:A9:6C:91 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FBB Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/dwmQc4Y7Mefbd7-9WmjhW0OpbJE.roa Signing time: Fri 22 Aug 2025 08:50:22 +0000 ROA not before: Fri 22 Aug 2025 08:50:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=77099073863B31E7DB77BFBD5A68E15B43A96C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:b5:d4:af:1d:fc:fc:77:d0:53:75:7f:59: 5a:57:40:6a:12:e7:54:d8:25:fd:39:f3:c0:02:f9: 70:e4:4d:2c:11:5c:87:0e:ea:2d:b1:f8:cb:4d:13: 1c:14:6a:61:7d:17:57:70:b0:24:7f:38:71:82:59: f5:54:7f:e9:1c:d8:42:15:63:7e:7a:00:27:b1:b6: 12:c2:0a:99:7f:1a:cc:24:ff:3c:21:e2:3c:83:fd: 6f:85:94:fe:a8:f4:d4:2a:2e:89:9a:b5:51:43:50: 1e:a8:63:16:14:fa:ca:19:73:a2:30:cc:6e:e8:56: ca:cc:8e:7d:6c:d9:25:e8:aa:e4:62:ee:86:55:c2: 0d:81:2a:61:0c:05:08:eb:a4:c1:cf:9c:88:21:40: d7:4b:23:41:33:58:ad:51:63:75:e4:1c:8e:df:30: 76:5c:8a:04:e1:f6:bc:51:55:68:c7:17:37:55:05: 09:11:5a:00:72:d8:f9:c4:34:46:8b:ef:1b:6e:bb: e5:59:aa:d9:1d:23:b7:75:59:71:f0:8a:d7:26:3b: f2:23:3b:be:56:2a:b8:ed:84:02:0d:49:d6:16:db: cf:2f:37:38:5a:9a:1b:4c:0a:a0:4f:cd:0c:12:68: 80:75:63:24:55:f6:3a:4b:de:bb:e8:a8:61:a6:e8: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:09:90:73:86:3B:31:E7:DB:77:BF:BD:5A:68:E1:5B:43:A9:6C:91 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/dwmQc4Y7Mefbd7-9WmjhW0OpbJE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.59.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:d5:98:a8:5e:6b:1a:a3:82:6c:91:41:19:d7:f8:88:c9:02: 3f:e4:d4:25:ed:4a:70:76:ec:04:0a:12:03:08:99:9c:21:38: 28:0e:c7:6e:64:ec:ef:c1:a6:62:e9:b9:38:10:96:42:35:e8: ea:85:ea:ee:cd:3d:9a:00:51:15:f1:a7:ca:f8:8e:f4:a0:c0: ac:dd:80:10:68:3e:50:0f:cc:41:51:b7:5b:79:ca:c7:66:44: 77:f1:98:08:9e:48:e6:1c:8c:b8:3e:f0:48:a3:bf:b5:26:5a: b0:24:d2:1f:24:d9:dd:a2:c6:93:51:d0:c7:e0:dc:78:aa:1d: 23:f7:51:ea:1a:32:bf:b6:5d:55:38:80:4d:6b:bc:1d:25:a9: 72:b8:6f:27:0e:92:75:66:aa:d7:a7:57:e0:76:4c:4a:25:70: e2:2d:ca:7a:52:88:15:7a:57:d7:ae:24:f4:33:dd:26:82:43: dd:2c:6d:b0:f4:86:3e:ad:32:eb:a9:af:27:7e:de:01:6d:a4: e0:7f:03:6e:54:c7:e4:24:3c:40:96:a2:d3:89:4f:d6:d4:7e: 0d:12:3c:3f:7b:4e:8c:98:fa:68:59:52:6b:4b:a0:e9:c7:48: 25:4b:6b:9f:5c:78:c3:5d:54:4a:dc:eb:c4:30:02:16:af:06: 16:d6:99:3c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc3MDk5MDczODYzQjMx RTdEQjc3QkZCRDVBNjhFMTVCNDNBOTZDOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAC7XUrx38/HfQU3V/WVpXQGoS51TYJf0588AC+XDkTSwRXIcO 6i2x+MtNExwUamF9F1dwsCR/OHGCWfVUf+kc2EIVY356ACexthLCCpl/Gswk/zwh 4jyD/W+FlP6o9NQqLomatVFDUB6oYxYU+soZc6IwzG7oVsrMjn1s2SXoquRi7oZV wg2BKmEMBQjrpMHPnIghQNdLI0EzWK1RY3XkHI7fMHZcigTh9rxRVWjHFzdVBQkR WgBy2PnENEaL7xtuu+VZqtkdI7d1WXHwitcmO/IjO75WKrjthAINSdYW288vNzha mhtMCqBPzQwSaIB1YyRV9jpL3rvoqGGm6MsbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUdwmQc4Y7Mefbd7+9WmjhW0OpbJEwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vZHdtUWM0WTdNZWZiZDctOVdtamhX ME9wYkpFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bOzAN BgkqhkiG9w0BAQsFAAOCAQEAm9WYqF5rGqOCbJFBGdf4iMkCP+TUJe1KcHbsBAoS AwiZnCE4KA7HbmTs78GmYum5OBCWQjXo6oXq7s09mgBRFfGnyviO9KDArN2AEGg+ UA/MQVG3W3nKx2ZEd/GYCJ5I5hyMuD7wSKO/tSZasCTSHyTZ3aLGk1HQx+DceKod I/dR6hoyv7ZdVTiATWu8HSWpcrhvJw6SdWaq16dX4HZMSiVw4i3KelKIFXpX164k 9DPdJoJD3SxtsPSGPq0y66mvJ37eAW2k4H8DblTH5CQ8QJai04lP1tR+DRI8P3tO jJj6aFlSa0ug6cdIJUtrn1x4w11UStzrxDACFq8GFtaZPA== -----END CERTIFICATE-----Generated at Sun Aug 24 11:43:52 2025 by rpki-client