$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/kEcPgSOA796c5Mt2VNY8aTXJnfg.roa File: kEcPgSOA796c5Mt2VNY8aTXJnfg.roa (raw, json) Hash identifier: lul1JfVLpRV/avvinKikkznn45lRtgGx9AohHvYhZJQ= Subject key identifier: 90:47:0F:81:23:80:EF:DE:9C:E4:CB:76:54:D6:3C:69:35:C9:9D:F8 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0E08 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/kEcPgSOA796c5Mt2VNY8aTXJnfg.roa Signing time: Fri 22 Aug 2025 08:50:58 +0000 ROA not before: Fri 22 Aug 2025 08:50:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 32787 IP address blocks: 27.105.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 22 08:50:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=90470F812380EFDE9CE4CB7654D63C6935C99DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:c7:10:c9:c1:7a:61:f3:ec:a1:53:aa:04: 84:20:58:3d:de:f9:57:1a:47:4a:58:61:52:29:9b: 8f:28:f4:1d:5c:be:fa:b6:e2:0e:18:18:94:2c:dd: 7a:cd:12:fb:72:1a:7b:45:78:f2:65:e7:4d:93:54: 3c:80:08:6f:03:f6:93:74:46:62:87:2f:aa:3e:21: 52:55:9a:0c:27:a0:70:ee:61:35:83:bb:cc:2a:73: da:40:01:7d:ab:aa:fe:03:4e:6e:a4:71:c4:ca:cd: b8:2c:c2:a2:dc:21:34:9b:17:f4:f6:d2:fa:5b:32: c8:84:82:9f:31:ee:75:b0:73:5d:5a:85:47:7c:b9: f0:f0:28:24:78:ee:e0:7c:f7:58:0e:df:8b:d9:29: 32:54:d1:d2:8a:80:bd:88:5d:92:12:bd:11:57:37: 4f:86:b3:cf:e6:83:77:b7:38:d2:78:01:8a:b7:b9: 9f:83:49:c4:42:13:23:33:29:ad:66:db:3e:a8:d0: 1f:9a:0a:10:1a:0b:2f:9f:68:6b:89:6e:46:ff:b0: 39:9a:ed:bc:ea:cd:85:d2:ca:85:38:8a:2c:84:88: 12:7f:b0:bc:ca:21:67:9b:ec:e0:62:5a:41:e1:f5: 10:fa:d4:07:79:b2:ce:2b:74:a1:de:d1:a1:6a:38: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:0F:81:23:80:EF:DE:9C:E4:CB:76:54:D6:3C:69:35:C9:9D:F8 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/kEcPgSOA796c5Mt2VNY8aTXJnfg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.105.82.0/24 Signature Algorithm: sha256WithRSAEncryption 35:12:73:64:2f:22:87:35:c8:7b:6f:b8:e9:45:3c:25:81:a4: f3:f4:c8:fb:c6:71:ee:a3:9a:e4:61:ca:f6:3b:d8:fe:c1:69: f6:62:61:0f:c3:dc:65:e3:1f:dc:8f:56:8e:56:ac:41:9b:75: 57:1d:ee:51:2e:f5:0d:a7:88:0c:be:5c:f5:97:8a:94:54:e0: 9e:92:97:27:32:dd:c6:77:5c:ca:4e:5c:83:7e:ae:09:9c:a2: 1c:87:2b:9c:bc:90:03:08:48:d4:f2:75:f0:09:21:37:85:c0: ef:42:59:85:99:48:da:80:13:da:89:46:b4:5c:9d:4d:69:b9: 98:a2:b5:1e:c9:67:8a:9d:80:28:c6:28:3d:c0:39:7b:bf:e4: ff:37:87:99:10:d7:7e:b6:14:dd:08:84:a8:70:48:71:26:c5: a9:94:ca:3f:3a:75:7f:a7:b4:ee:56:c5:09:3b:63:cf:7a:01: 7e:c0:0c:b4:d1:d8:46:6b:b8:c0:a5:75:b0:29:9d:63:2d:5b: 4d:d1:65:ac:03:b1:8d:62:91:41:3a:b0:35:3c:98:a0:2b:34: 49:30:12:eb:94:10:fd:8e:e6:b3:ae:f7:cf:30:7d:7a:46:85: 5b:f3:5f:00:1b:b1:00:86:e9:7d:b3:be:96:01:3a:7f:6d:25: a9:12:f6:c1 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTA4MjIw ODUwNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwNDcwRjgxMjM4MEVG REU5Q0U0Q0I3NjU0RDYzQzY5MzVDOTlERjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCj7scQycF6YfPsoVOqBIQgWD3e+VcaR0pYYVIpm48o9B1cvvq2 4g4YGJQs3XrNEvtyGntFePJl502TVDyACG8D9pN0RmKHL6o+IVJVmgwnoHDuYTWD u8wqc9pAAX2rqv4DTm6kccTKzbgswqLcITSbF/T20vpbMsiEgp8x7nWwc11ahUd8 ufDwKCR47uB891gO34vZKTJU0dKKgL2IXZISvRFXN0+Gs8/mg3e3ONJ4AYq3uZ+D ScRCEyMzKa1m2z6o0B+aChAaCy+faGuJbkb/sDma7bzqzYXSyoU4iiyEiBJ/sLzK IWeb7OBiWkHh9RD61Ad5ss4rdKHe0aFqOKqPAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUkEcPgSOA796c5Mt2VNY8aTXJnfgwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9rRWNQZ1NPQTc5NmM1TXQyVk5Z OGFUWEpuZmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG2lS MA0GCSqGSIb3DQEBCwUAA4IBAQA1EnNkLyKHNch7b7jpRTwlgaTz9Mj7xnHuo5rk Ycr2O9j+wWn2YmEPw9xl4x/cj1aOVqxBm3VXHe5RLvUNp4gMvlz1l4qUVOCekpcn Mt3Gd1zKTlyDfq4JnKIchyucvJADCEjU8nXwCSE3hcDvQlmFmUjagBPaiUa0XJ1N abmYorUeyWeKnYAoxig9wDl7v+T/N4eZENd+thTdCISocEhxJsWplMo/OnV/p7Tu VsUJO2PPegF+wAy00dhGa7jApXWwKZ1jLVtN0WWsA7GNYpFBOrA1PJigKzRJMBLr lBD9juazrvfPMH16RoVb818AG7EAhul9s76WATp/bSWpEvbB -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:25 2025 by rpki-client