$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/qlBaJW9shwtePd0iS761YhqVT1Y.roa File: qlBaJW9shwtePd0iS761YhqVT1Y.roa (raw, json) Hash identifier: 8011c5bzm0CIzO+lecPRH2fZqHhoAXxIpF4xrsNsrZs= Subject key identifier: AA:50:5A:25:6F:6C:87:0B:5E:3D:DD:22:4B:BE:B5:62:1A:95:4F:56 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0FD7 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/qlBaJW9shwtePd0iS761YhqVT1Y.roa Signing time: Fri 22 Aug 2025 08:50:28 +0000 ROA not before: Fri 22 Aug 2025 08:50:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38843 IP address blocks: 223.27.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4055 (0xfd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 22 08:50:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AA505A256F6C870B5E3DDD224BBEB5621A954F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:01:af:e8:91:64:56:b9:96:72:80:07:70: 6f:ff:05:90:e7:9f:7e:8f:ce:61:04:08:1f:24:f1: 8b:21:07:5f:e3:54:eb:f9:48:c9:e8:3b:86:eb:93: d5:44:11:6d:69:d3:67:7b:a8:2c:36:57:f4:ab:22: bc:e5:c9:1f:b4:e7:5d:d6:c2:bc:e0:ac:48:cc:5c: 56:43:0b:b6:9d:fb:23:8e:da:9e:e3:75:56:fa:91: e8:12:6f:75:8a:b2:15:72:63:85:fa:dd:43:83:9a: 13:19:18:fb:eb:77:87:98:4a:6f:8b:c1:3a:4d:4d: 7c:24:c7:71:dd:7a:d2:30:8a:ea:0d:b3:bd:2d:67: fa:29:08:c7:00:83:f2:66:48:95:af:9d:f4:8a:7e: a0:fc:32:ef:5e:d7:e8:bc:58:18:c8:bb:91:5c:23: 9d:fc:6b:a0:fa:e0:f8:b4:5e:79:e8:2a:ad:2f:91: 75:47:f1:06:8b:e8:8e:9a:f3:db:da:b8:a7:9c:73: 60:92:64:7f:c6:72:39:6c:6b:7b:c0:04:60:e4:c4: 59:b4:ea:dc:18:61:46:f4:f2:f8:2c:67:ec:75:38: 27:44:ec:28:06:60:71:61:31:fe:31:f2:03:69:33: 6f:4e:68:a7:06:48:07:80:bc:aa:9a:90:d0:5d:13: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:50:5A:25:6F:6C:87:0B:5E:3D:DD:22:4B:BE:B5:62:1A:95:4F:56 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/qlBaJW9shwtePd0iS761YhqVT1Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.47.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:28:e3:42:fb:a6:16:7e:ae:da:25:4d:db:86:5d:41:a1:60: fd:9b:e0:89:af:b6:ac:df:e5:bc:1a:31:1f:05:56:96:29:60: 8c:a8:b2:a6:e2:14:bc:25:77:c2:7d:67:0a:d1:76:1e:72:2a: 23:70:23:e0:d1:b7:7c:2c:63:37:1e:f2:dd:27:42:fe:8e:2f: a8:33:07:e7:60:ef:3c:0d:1c:d0:d2:06:a9:ec:87:33:4c:23: 72:0f:ae:4c:ee:9f:37:72:bf:9b:94:a2:a4:9f:31:3f:89:5a: 91:7a:cc:bd:32:7e:ea:0e:e9:ec:da:d0:9f:ca:b0:20:7e:cd: f1:4b:49:60:61:1a:fc:b2:73:17:7d:2a:75:46:ab:54:93:a0: f7:4f:0e:1d:c2:d4:ad:40:22:2a:db:fb:0d:89:6f:02:8d:19: 1e:ee:3f:62:bf:14:c1:e0:e4:49:9d:0b:c0:b1:5c:04:27:74: 31:89:b4:6d:f2:91:67:ac:68:91:56:10:39:ce:2d:49:f5:8a: 32:d6:dd:a6:be:d3:66:23:d5:93:1c:4c:28:67:09:e5:46:c3: 7e:ed:45:c1:bd:ad:23:1a:cb:fa:be:c9:b9:c3:6d:82:04:93: 0f:2e:a7:1b:4e:29:f4:8e:e8:96:fd:b7:d6:07:09:6d:18:2e: 59:f9:9c:ec -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTA4MjIw ODUwMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFBNTA1QTI1NkY2Qzg3 MEI1RTNEREQyMjRCQkVCNTYyMUE5NTRGNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDROwGv6JFkVrmWcoAHcG//BZDnn36PzmEECB8k8YshB1/jVOv5 SMnoO4brk9VEEW1p02d7qCw2V/SrIrzlyR+0513WwrzgrEjMXFZDC7ad+yOO2p7j dVb6kegSb3WKshVyY4X63UODmhMZGPvrd4eYSm+LwTpNTXwkx3HdetIwiuoNs70t Z/opCMcAg/JmSJWvnfSKfqD8Mu9e1+i8WBjIu5FcI538a6D64Pi0XnnoKq0vkXVH 8QaL6I6a89vauKecc2CSZH/Gcjlsa3vABGDkxFm06twYYUb08vgsZ+x1OCdE7CgG YHFhMf4x8gNpM29OaKcGSAeAvKqakNBdEzdzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUqlBaJW9shwtePd0iS761YhqVT1YwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vcWxCYUpXOXNod3RlUGQwaVM3NjFZ aHFWVDFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bLzAN BgkqhkiG9w0BAQsFAAOCAQEAXSjjQvumFn6u2iVN24ZdQaFg/Zvgia+2rN/lvBox HwVWlilgjKiypuIUvCV3wn1nCtF2HnIqI3Aj4NG3fCxjNx7y3SdC/o4vqDMH52Dv PA0c0NIGqeyHM0wjcg+uTO6fN3K/m5SipJ8xP4lakXrMvTJ+6g7p7NrQn8qwIH7N 8UtJYGEa/LJzF30qdUarVJOg908OHcLUrUAiKtv7DYlvAo0ZHu4/Yr8UweDkSZ0L wLFcBCd0MYm0bfKRZ6xokVYQOc4tSfWKMtbdpr7TZiPVkxxMKGcJ5UbDfu1Fwb2t IxrL+r7JucNtggSTDy6nG04p9I7olv231gcJbRguWfmc7A== -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:53 2025 by rpki-client