$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/LNGq2KkqngXkGjM1eDmDU0GUB3k.roa File: LNGq2KkqngXkGjM1eDmDU0GUB3k.roa (raw, json) Hash identifier: Y8ICa+/nETcWYLFRdvkQ4d7OtENDwDTGjR1srNoNEtY= Subject key identifier: 2C:D1:AA:D8:A9:2A:9E:05:E4:1A:33:35:78:39:83:53:41:94:07:79 Certificate issuer: /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8 Certificate serial: 0D25 Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/LNGq2KkqngXkGjM1eDmDU0GUB3k.roa Signing time: Fri 22 Aug 2025 09:03:59 +0000 ROA not before: Fri 22 Aug 2025 09:03:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131597 IP address blocks: 45.113.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8 Validity Not Before: Aug 22 09:03:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2CD1AAD8A92A9E05E41A33357839835341940779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:36:57:2f:d8:9e:ad:49:4b:45:a2:6e:7a:81: f5:37:00:bd:54:30:66:d8:e7:87:06:f9:42:78:c9: ee:ec:76:70:bb:87:53:fd:a3:26:0d:f4:fe:3c:18: b6:b3:6d:b2:5f:cf:05:c3:6e:93:10:4f:9f:cf:c1: 55:47:f0:dc:e5:f8:e1:66:b7:11:e7:03:4f:98:bb: 18:c2:bd:1f:ed:9f:de:b9:09:32:7d:ad:24:47:7e: 70:74:bf:42:13:01:aa:0e:18:c6:09:2c:22:3c:d7: d2:dd:11:6b:c7:71:91:05:8c:f6:46:c2:ac:23:ae: 4f:6c:92:2f:5d:23:da:62:06:64:52:35:e8:e9:1f: d5:96:05:b8:b3:ca:24:0a:5e:8f:98:a6:56:b5:76: f3:81:fa:53:09:1d:0b:29:8f:42:e0:67:ec:e2:13: a3:fd:46:76:52:ce:1f:74:13:42:1b:b6:f7:43:b7: 06:4c:56:36:78:d4:ef:72:af:ad:fc:d0:0c:f5:6f: df:d7:23:41:87:13:36:88:12:a7:a5:62:af:03:4c: ac:53:e6:07:f3:aa:bf:a1:f9:03:b7:f2:57:44:03: bb:14:00:7b:05:30:2f:5c:06:2b:e5:75:ae:19:94: c7:55:aa:f5:0c:f4:16:ce:e2:03:c7:92:a0:fe:bb: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:AA:D8:A9:2A:9E:05:E4:1A:33:35:78:39:83:53:41:94:07:79 X509v3 Authority Key Identifier: keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/LNGq2KkqngXkGjM1eDmDU0GUB3k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.113.156.0/22 Signature Algorithm: sha256WithRSAEncryption c5:0d:a4:6b:42:48:65:4c:86:ba:32:b0:5d:c1:08:d7:59:6a: 2b:c8:02:b3:63:bd:a7:40:d3:06:8b:54:65:c5:61:a4:74:5e: 82:33:e6:07:b9:b8:c6:25:0c:1e:52:30:3c:a8:0c:0c:57:0d: 46:fa:ff:f6:d2:ff:e1:1d:6e:11:9f:af:20:ed:48:ff:06:ae: 6a:02:07:1c:d8:cd:f3:75:51:be:6e:1b:05:e0:08:57:6b:a9: 51:8b:31:ec:8a:0a:5a:15:f5:2c:14:fe:cf:1c:37:59:4a:23: d2:4d:cc:91:4b:8a:10:5e:da:57:90:36:f1:69:03:40:94:e9: aa:96:64:79:b5:16:fb:33:a2:c1:31:8b:0a:bc:ba:40:83:f3: 97:7a:9b:7a:36:14:a5:3e:de:0a:28:69:7a:eb:b8:a5:ff:5d: 8b:aa:24:2b:6d:92:0e:11:79:7c:c6:32:b5:d4:f4:49:5f:a0: 18:d0:01:d2:ef:c6:07:08:0f:7b:5b:25:fa:58:db:e9:03:e6: 2b:89:ea:3e:a0:8c:85:3a:32:c3:b9:b9:d3:5b:36:0f:ca:bd: 48:6f:a1:0b:ca:b7:8b:b6:c8:27:b6:6d:4b:27:d6:92:c8:d2: 49:f2:3f:56:76:9d:82:3c:d3:1d:76:0c:c6:9d:b6:fa:f2:fd: 40:fc:8a:ec -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNB ODBFNzVCQTJGMkIwRkQ0MzEyMTg5QTdFNDNFNDM1M0U4RDNBODAeFw0yNTA4MjIw OTAzNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJDRDFBQUQ4QTkyQTlF MDVFNDFBMzMzNTc4Mzk4MzUzNDE5NDA3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdNlcv2J6tSUtFom56gfU3AL1UMGbY54cG+UJ4ye7sdnC7h1P9 oyYN9P48GLazbbJfzwXDbpMQT5/PwVVH8Nzl+OFmtxHnA0+YuxjCvR/tn965CTJ9 rSRHfnB0v0ITAaoOGMYJLCI819LdEWvHcZEFjPZGwqwjrk9ski9dI9piBmRSNejp H9WWBbizyiQKXo+Ypla1dvOB+lMJHQspj0LgZ+ziE6P9RnZSzh90E0IbtvdDtwZM VjZ41O9yr6380Az1b9/XI0GHEzaIEqelYq8DTKxT5gfzqr+h+QO38ldEA7sUAHsF MC9cBivlda4ZlMdVqvUM9BbO4gPHkqD+u8CrAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQULNGq2KkqngXkGjM1eDmDU0GUB3kwHwYDVR0jBBgwFoAUM6gOdbovKw/UMSGJ p+Q+Q1Po06gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JT05J U01FL002Z09kYm92S3dfVU1TR0pwLVEtUTFQbzA2Zy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTTZnT2Rib3ZLd19VTVNHSnAtUS1RMVBvMDZnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JT05JU01FL0xOR3EyS2txbmdY a0dqTTFlRG1EVTBHVUIzay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAItcZwwDQYJKoZIhvcNAQELBQADggEBAMUNpGtCSGVMhroysF3BCNdZaivI ArNjvadA0waLVGXFYaR0XoIz5ge5uMYlDB5SMDyoDAxXDUb6//bS/+EdbhGfryDt SP8GrmoCBxzYzfN1Ub5uGwXgCFdrqVGLMeyKCloV9SwU/s8cN1lKI9JNzJFLihBe 2leQNvFpA0CU6aqWZHm1FvszosExiwq8ukCD85d6m3o2FKU+3gooaXrruKX/XYuq JCttkg4ReXzGMrXU9ElfoBjQAdLvxgcID3tbJfpY2+kD5iuJ6j6gjIU6MsO5udNb Ng/KvUhvoQvKt4u2yCe2bUsn1pLI0knyP1Z2nYI80x12DMadtvry/UD8iuw= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:23 2025 by rpki-client