$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/RnOvek3KpQlD-BT5mXD0AFKQfPs.roa File: RnOvek3KpQlD-BT5mXD0AFKQfPs.roa (raw, json) Hash identifier: k502wOLzwDTJlHNSE9nGb9i2LH3Idd88IxhFxvrwAJM= Subject key identifier: 46:73:AF:7A:4D:CA:A5:09:43:F8:14:F9:99:70:F4:00:52:90:7C:FB Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0E1D Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/RnOvek3KpQlD-BT5mXD0AFKQfPs.roa Signing time: Fri 22 Aug 2025 08:51:04 +0000 ROA not before: Fri 22 Aug 2025 08:51:04 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18182 IP address blocks: 27.105.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3613 (0xe1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 22 08:51:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4673AF7A4DCAA50943F814F99970F40052907CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:0e:15:7c:0c:1b:f6:ad:5a:ba:44:b1:d3: d5:e5:51:83:4b:d3:6c:c8:5d:3f:b5:d3:1f:55:67: 7e:12:fb:79:1d:7c:1c:42:7a:24:c6:18:d2:81:c2: f1:52:f0:71:bf:dc:71:08:fb:b5:3b:04:ab:c5:51: db:cb:57:7c:2b:f6:6b:0a:d0:02:85:9f:df:72:79: a5:ba:17:fa:24:a5:72:f4:7d:5d:ee:bb:93:5b:57: dc:4c:84:23:c8:71:19:f5:eb:93:0c:6a:ca:bc:12: 3a:f5:f8:f7:51:64:7b:c2:a0:66:2c:95:36:a9:d3: b6:52:8a:9e:01:84:53:50:d9:8b:fe:14:8a:ed:0a: 3a:93:4f:cc:1b:5f:be:da:bc:b8:f9:03:10:5c:08: b3:79:96:6b:84:fe:56:89:7b:db:d3:94:48:3a:d5: 3b:70:8a:25:f8:7b:db:07:28:d6:6c:c1:b0:81:da: 06:b5:93:bb:f6:20:85:e3:8b:c5:25:6e:7b:b4:c5: 1a:31:5e:ea:9a:77:cd:32:2f:ef:73:b3:04:7a:4b: 90:d1:73:05:4d:f2:84:81:ce:63:97:87:1c:57:66: 20:3b:99:ef:a1:e6:b2:2d:0d:b5:d9:da:f7:77:13: 1b:61:a6:e6:62:d6:d5:21:70:f0:ee:3b:31:13:5a: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:73:AF:7A:4D:CA:A5:09:43:F8:14:F9:99:70:F4:00:52:90:7C:FB X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/RnOvek3KpQlD-BT5mXD0AFKQfPs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.105.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:5e:59:01:e3:66:59:df:2a:36:dd:8e:66:14:0d:cc:44:1c: 3e:d9:a5:d4:b6:be:c9:4b:df:18:94:17:7a:e4:cb:9b:b2:d8: fa:54:95:34:25:80:cc:2c:bf:10:ed:45:df:67:ee:0d:e0:78: 81:96:da:93:58:03:a5:0e:b9:b1:97:95:9e:e5:cf:96:0b:6a: 98:19:83:0f:5a:ba:49:b5:e1:ad:7d:2c:cf:d5:96:90:4d:4d: b1:bf:16:b3:ee:a5:82:2e:a6:68:1e:16:31:c8:16:91:42:67: ee:36:53:bf:72:55:8f:a4:55:7b:39:09:67:f6:83:f8:12:ff: ca:ad:c9:c3:e7:a3:94:49:6c:9e:48:cb:15:42:01:10:1c:2c: 54:49:ee:d9:6b:12:ce:d3:c6:66:3a:88:78:31:87:1d:37:41: 26:8b:f1:b3:8d:fd:0c:d5:69:68:e1:81:3a:80:93:bd:9d:7c: 25:4a:89:5a:43:63:f3:65:92:19:f7:df:30:67:f1:09:b9:64: b1:df:50:39:90:ac:0a:5c:52:a5:3a:fe:ad:5a:6a:3d:e6:cc: 17:84:d7:ea:d7:69:32:db:8b:e4:f0:aa:c1:92:f8:24:e5:f0: 6d:7d:22:2b:60:58:00:64:4f:3f:28:23:6c:32:9a:0a:2d:ac: 0b:d7:73:c1 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTA4MjIw ODUxMDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ2NzNBRjdBNERDQUE1 MDk0M0Y4MTRGOTk5NzBGNDAwNTI5MDdDRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzjA4VfAwb9q1aukSx09XlUYNL02zIXT+10x9VZ34S+3kdfBxC eiTGGNKBwvFS8HG/3HEI+7U7BKvFUdvLV3wr9msK0AKFn99yeaW6F/okpXL0fV3u u5NbV9xMhCPIcRn165MMasq8Ejr1+PdRZHvCoGYslTap07ZSip4BhFNQ2Yv+FIrt CjqTT8wbX77avLj5AxBcCLN5lmuE/laJe9vTlEg61TtwiiX4e9sHKNZswbCB2ga1 k7v2IIXji8Ulbnu0xRoxXuqad80yL+9zswR6S5DRcwVN8oSBzmOXhxxXZiA7me+h 5rItDbXZ2vd3ExthpuZi1tUhcPDuOzETWgq1AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQURnOvek3KpQlD+BT5mXD0AFKQfPswHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9Sbk92ZWszS3BRbEQtQlQ1bVhE MEFGS1FmUHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAG2kw DQYJKoZIhvcNAQELBQADggEBAJ1eWQHjZlnfKjbdjmYUDcxEHD7ZpdS2vslL3xiU F3rky5uy2PpUlTQlgMwsvxDtRd9n7g3geIGW2pNYA6UOubGXlZ7lz5YLapgZgw9a ukm14a19LM/VlpBNTbG/FrPupYIupmgeFjHIFpFCZ+42U79yVY+kVXs5CWf2g/gS /8qtycPno5RJbJ5IyxVCARAcLFRJ7tlrEs7TxmY6iHgxhx03QSaL8bON/QzVaWjh gTqAk72dfCVKiVpDY/Nlkhn33zBn8Qm5ZLHfUDmQrApcUqU6/q1aaj3mzBeE1+rX aTLbi+TwqsGS+CTl8G19IitgWABkTz8oI2wymgotrAvXc8E= -----END CERTIFICATE-----Generated at Sun Aug 24 13:42:13 2025 by rpki-client