$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/pPprJxVcJvlDvQyWzHV2ySglsXI.roa File: pPprJxVcJvlDvQyWzHV2ySglsXI.roa (raw, json) Hash identifier: 0smWmrco2EQ8ldbYzdcM7oqKA1onZKCGNzD840XDaWs= Subject key identifier: A4:FA:6B:27:15:5C:26:F9:43:BD:0C:96:CC:75:76:C9:28:25:B1:72 Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Certificate serial: 04E3 Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/pPprJxVcJvlDvQyWzHV2ySglsXI.roa Signing time: Thu 10 Jul 2025 09:44:53 +0000 ROA not before: Thu 10 Jul 2025 09:44:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 132369 IP address blocks: 202.148.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 16:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Validity Not Before: Jul 10 09:44:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A4FA6B27155C26F943BD0C96CC7576C92825B172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:8a:c6:18:10:d6:93:78:05:74:14:ab:c9: 74:da:c0:77:fe:f7:59:9a:b6:11:71:a2:88:dd:96: 6a:b8:4b:50:ad:6e:32:b6:d9:3e:7b:de:81:f6:c3: 5f:50:9d:06:61:6b:15:bf:2c:a6:5f:41:b2:36:7f: 27:4a:56:8e:be:01:aa:bd:a3:9a:6e:fc:d0:dc:12: 90:16:7f:5f:48:1d:4f:26:db:32:a7:f5:bf:5d:6b: 62:97:4c:98:57:37:03:ad:af:57:82:8d:76:32:c2: be:e0:d0:05:ee:d6:12:9f:50:6f:96:b7:ff:3e:fe: 4f:d7:16:c4:89:df:89:82:c3:b8:5a:be:04:45:9c: 34:8c:de:95:c4:b4:4b:d2:80:3b:4e:4c:73:ba:d1: 96:be:5e:3d:94:e8:af:e9:72:21:b3:2e:75:d9:14: aa:a5:33:1b:8a:d3:88:73:2c:e3:69:97:59:6d:87: 0a:49:f9:68:6e:93:09:37:ca:35:a7:8e:83:08:2b: ba:d3:57:2a:06:10:bc:4c:6c:61:95:c2:f9:33:d4: 5b:11:67:71:4f:60:e5:2e:51:05:81:15:ec:7f:7d: bf:05:c5:a4:e6:ce:3d:fa:9e:94:05:51:97:36:88: 9a:83:38:c9:f2:5d:1b:14:b1:c1:61:b8:d9:b3:fa: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FA:6B:27:15:5C:26:F9:43:BD:0C:96:CC:75:76:C9:28:25:B1:72 X509v3 Authority Key Identifier: keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/pPprJxVcJvlDvQyWzHV2ySglsXI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.148.212.0/23 Signature Algorithm: sha256WithRSAEncryption 06:be:b0:8a:ff:5f:77:75:14:d1:fa:b4:21:3f:b6:b8:4c:94: 5f:9a:09:60:38:1a:63:2a:5e:3a:8a:c3:7b:7e:f6:d0:da:f8: 84:30:47:ee:f7:97:8d:8e:7f:7a:34:65:12:39:2e:c5:b9:51: 61:42:7c:3a:d2:61:6d:57:4a:8c:66:d8:dd:46:20:df:df:0e: 31:e6:01:96:b1:43:a7:62:db:f6:a3:c0:c4:44:f0:5a:0b:b9: 10:e2:55:e9:c8:c0:cf:0e:c7:67:52:29:c4:c4:1a:45:da:86: aa:d6:3d:dd:40:9b:34:e7:de:d6:c8:8f:38:de:04:d9:5a:cc: 7a:b3:e7:43:be:bc:63:89:a6:72:66:a9:b6:5e:4d:f6:5a:8d: 68:8d:9d:a2:49:c0:f0:83:43:89:f0:c7:5e:b4:e6:52:c8:b4: de:a1:76:37:7d:be:49:a9:10:9d:ad:8e:15:cf:01:9f:aa:97: b6:49:5d:f6:03:b5:6e:78:e9:b4:9a:3f:3f:c4:cc:d0:9e:66: 64:5a:4f:c6:52:7a:69:49:35:ed:15:17:ed:13:20:6b:c8:f5: 25:bc:3f:c3:33:61:45:ab:8f:e6:ed:a0:f1:c4:b3:dc:f5:43: aa:c5:d6:ef:75:93:22:c5:4e:d8:bd:84:83:2b:f7:76:2b:fa: 2d:9c:21:15 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNTA3MTAw OTQ0NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0RkE2QjI3MTU1QzI2 Rjk0M0JEMEM5NkNDNzU3NkM5MjgyNUIxNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCii4rGGBDWk3gFdBSryXTawHf+91mathFxoojdlmq4S1CtbjK2 2T573oH2w19QnQZhaxW/LKZfQbI2fydKVo6+Aaq9o5pu/NDcEpAWf19IHU8m2zKn 9b9da2KXTJhXNwOtr1eCjXYywr7g0AXu1hKfUG+Wt/8+/k/XFsSJ34mCw7havgRF nDSM3pXEtEvSgDtOTHO60Za+Xj2U6K/pciGzLnXZFKqlMxuK04hzLONpl1lthwpJ +Whukwk3yjWnjoMIK7rTVyoGELxMbGGVwvkz1FsRZ3FPYOUuUQWBFex/fb8FxaTm zj36npQFUZc2iJqDOMnyXRsUscFhuNmz+prZAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUpPprJxVcJvlDvQyWzHV2ySglsXIwHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL3BQcHJKeFZjSnZs RHZReVd6SFYyeVNnbHNYSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHKlNQwDQYJKoZIhvcNAQELBQADggEBAAa+sIr/X3d1FNH6tCE/trhMlF+a CWA4GmMqXjqKw3t+9tDa+IQwR+73l42Of3o0ZRI5LsW5UWFCfDrSYW1XSoxm2N1G IN/fDjHmAZaxQ6di2/ajwMRE8FoLuRDiVenIwM8Ox2dSKcTEGkXahqrWPd1AmzTn 3tbIjzjeBNlazHqz50O+vGOJpnJmqbZeTfZajWiNnaJJwPCDQ4nwx1605lLItN6h djd9vkmpEJ2tjhXPAZ+ql7ZJXfYDtW546bSaPz/EzNCeZmRaT8ZSemlJNe0VF+0T IGvI9SW8P8MzYUWrj+btoPHEs9z1Q6rF1u91kyLFTti9hIMr93Yr+i2cIRU= -----END CERTIFICATE-----Generated at Sun Jul 20 11:41:50 2025 by rpki-client