$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/k2dHrf3Wd4WRf4AuE2Hr1jOyGOY.roa File: k2dHrf3Wd4WRf4AuE2Hr1jOyGOY.roa (raw, json) Hash identifier: F39g5lViLmx5JozHFrom6wVd45Y5rTU071obAu2Fe0s= Subject key identifier: 93:67:47:AD:FD:D6:77:85:91:7F:80:2E:13:61:EB:D6:33:B2:18:E6 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FCD Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/k2dHrf3Wd4WRf4AuE2Hr1jOyGOY.roa Signing time: Fri 22 Aug 2025 08:50:25 +0000 ROA not before: Fri 22 Aug 2025 08:50:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 124.150.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=936747ADFDD67785917F802E1361EBD633B218E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:07:75:8d:39:28:5a:8f:4c:cc:74:ab:16: 26:06:d2:ce:ed:78:c6:c0:96:91:ec:e1:76:16:d4: de:5d:d1:2e:d9:13:bb:3c:0a:2f:4c:ea:59:60:2d: 8d:f7:49:90:2f:a4:f4:a5:8a:23:1a:a6:35:e8:a8: 2d:53:82:66:12:22:cd:08:f6:f4:7c:46:36:a5:c6: 2a:06:09:ae:77:62:5f:c0:89:62:64:f4:0e:98:0c: c2:8b:46:38:d9:18:db:70:e6:8a:db:d5:c1:6a:6a: 15:20:0c:3c:40:c3:8d:6c:ee:e8:1f:31:9c:fe:ef: 1a:a2:f4:9b:29:b3:4a:3a:71:13:a6:49:e8:dd:35: cd:1b:0b:7e:bc:c2:74:e2:f8:7f:cb:9e:c7:75:41: 97:03:a3:4a:71:29:07:91:97:cd:31:ea:2d:e5:76: d7:43:66:7e:b5:f3:f0:b8:9f:34:c0:2e:24:80:f5: e2:18:9b:f8:90:d0:92:66:8e:27:7a:d3:1b:d0:38: f9:9a:f9:e2:9a:89:e8:4c:a8:55:4d:df:98:9e:18: 2c:c7:83:c9:8c:52:61:0a:e3:0b:f2:48:da:fd:59: e3:cf:dc:f9:9a:9b:ce:86:95:e9:cc:62:cd:a9:32: 53:c3:7e:f7:cc:93:ba:1e:b8:69:3c:1c:7a:ab:d8: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:67:47:AD:FD:D6:77:85:91:7F:80:2E:13:61:EB:D6:33:B2:18:E6 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/k2dHrf3Wd4WRf4AuE2Hr1jOyGOY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.128.0/21 Signature Algorithm: sha256WithRSAEncryption 66:da:c3:8b:a7:d7:b1:21:0c:97:e9:b5:61:5d:5f:ea:0e:3a: e9:ea:31:c8:f5:66:70:d4:75:1c:b4:62:93:e3:59:32:b3:39: 47:91:b6:88:3a:5f:21:f1:42:b6:37:bc:f4:d9:c6:d5:1a:75: 77:76:67:7d:55:0d:93:51:01:05:68:ad:f6:44:35:b3:a0:06: d3:79:2b:92:86:27:bd:6c:0b:78:94:7f:92:f0:b0:7a:88:11: d6:b1:31:a9:35:47:cd:7e:db:8d:26:56:f4:c1:f1:39:ba:17: 32:7d:08:e9:77:a5:76:58:6c:1d:53:fe:03:2b:57:8b:50:bc: ed:09:97:ae:73:29:f4:7d:eb:96:82:9d:b2:72:bd:a4:24:1a: cd:df:bb:52:21:49:4e:30:bb:36:96:40:90:92:a5:8e:aa:4b: f7:d8:36:ce:48:7c:c2:e5:d7:a7:26:c5:ce:63:66:1a:f0:33: b9:c8:c5:01:db:a4:e4:d1:48:3b:02:2c:03:f0:9a:27:d7:d1: 4c:13:60:d8:5b:8d:98:77:c3:49:b1:0e:9f:89:c2:3a:0c:10: 8c:5f:c0:46:8e:bc:bb:00:12:f8:15:9f:f5:1f:d9:5d:5a:d4: e8:0a:16:66:10:0e:b7:8c:54:3d:20:9f:d8:29:dd:e4:6c:a3: ec:53:0e:9c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkzNjc0N0FERkRENjc3 ODU5MTdGODAyRTEzNjFFQkQ2MzNCMjE4RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeJAd1jTkoWo9MzHSrFiYG0s7teMbAlpHs4XYW1N5d0S7ZE7s8 Ci9M6llgLY33SZAvpPSliiMapjXoqC1TgmYSIs0I9vR8RjalxioGCa53Yl/AiWJk 9A6YDMKLRjjZGNtw5orb1cFqahUgDDxAw41s7ugfMZz+7xqi9Jsps0o6cROmSejd Nc0bC368wnTi+H/Lnsd1QZcDo0pxKQeRl80x6i3ldtdDZn618/C4nzTALiSA9eIY m/iQ0JJmjid60xvQOPma+eKaiehMqFVN35ieGCzHg8mMUmEK4wvySNr9WePP3Pma m86GlenMYs2pMlPDfvfMk7oeuGk8HHqr2P6xAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUk2dHrf3Wd4WRf4AuE2Hr1jOyGOYwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vazJkSHJmM1dkNFdSZjRBdUUySHIx ak95R09ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3yWgDAN BgkqhkiG9w0BAQsFAAOCAQEAZtrDi6fXsSEMl+m1YV1f6g466eoxyPVmcNR1HLRi k+NZMrM5R5G2iDpfIfFCtje89NnG1Rp1d3ZnfVUNk1EBBWit9kQ1s6AG03krkoYn vWwLeJR/kvCweogR1rExqTVHzX7bjSZW9MHxOboXMn0I6XeldlhsHVP+AytXi1C8 7QmXrnMp9H3rloKdsnK9pCQazd+7UiFJTjC7NpZAkJKljqpL99g2zkh8wuXXpybF zmNmGvAzucjFAduk5NFIOwIsA/CaJ9fRTBNg2FuNmHfDSbEOn4nCOgwQjF/ARo68 uwAS+BWf9R/ZXVrU6AoWZhAOt4xUPSCf2Cnd5Gyj7FMOnA== -----END CERTIFICATE-----Generated at Sun Aug 24 11:45:19 2025 by rpki-client