$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/x2poO9x49ek2IZDnA9up_AUvUps.roa File: x2poO9x49ek2IZDnA9up_AUvUps.roa (raw, json) Hash identifier: rxZw1Emm/fHEFW6tJOFAd0tXgP/AuPA79aMXU7csfgE= Subject key identifier: C7:6A:68:3B:DC:78:F5:E9:36:21:90:E7:03:DB:A9:FC:05:2F:52:9B Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Certificate serial: 04E1 Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/x2poO9x49ek2IZDnA9up_AUvUps.roa Signing time: Thu 10 Jul 2025 09:44:27 +0000 ROA not before: Thu 10 Jul 2025 09:44:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 31972 IP address blocks: 202.148.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 16:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Validity Not Before: Jul 10 09:44:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C76A683BDC78F5E9362190E703DBA9FC052F529B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:05:c3:75:73:6c:5c:cf:88:9b:aa:d2:d1: 70:03:0b:cf:7c:2a:1a:47:9c:ac:88:9f:c6:e3:9c: 09:43:d0:6f:de:99:8e:dd:7f:12:d0:be:fa:8b:58: 45:6d:dc:16:5d:2a:3c:2f:d2:1d:64:42:9e:3c:8f: 1d:98:a7:0b:18:8c:da:83:e4:64:16:8c:7b:89:ce: 60:2d:dc:8d:64:71:56:c2:7d:6b:d3:6f:4e:12:03: d5:78:f2:2b:40:62:96:a2:61:6c:0c:ca:ff:78:2f: a4:4a:a0:59:75:e4:76:9e:9e:33:36:0c:33:e9:28: ed:7a:2d:c4:26:4a:9e:75:5e:12:ce:bb:2a:69:17: a6:c8:0d:64:a3:04:1f:1a:d5:ad:9d:ba:8d:5f:ee: 9c:64:fe:8a:8f:39:9b:7d:af:54:f6:67:4d:7e:b9: 6c:7c:a1:b2:a4:fd:2e:5f:ba:d7:6a:b6:1b:47:38: ec:40:33:3e:7a:34:3b:eb:49:4f:e0:79:9e:a8:c2: a3:32:13:ef:91:f4:21:28:f3:0d:e1:75:b3:46:69: 70:af:23:28:76:f5:60:fd:07:b4:ae:93:39:37:a9: 26:d0:0c:26:80:02:ff:dc:b3:55:ec:bf:17:b6:a6: c2:f4:72:01:22:83:2c:6c:0b:4f:67:0a:80:f4:ea: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:68:3B:DC:78:F5:E9:36:21:90:E7:03:DB:A9:FC:05:2F:52:9B X509v3 Authority Key Identifier: keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/x2poO9x49ek2IZDnA9up_AUvUps.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.148.212.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:8d:31:27:29:17:51:eb:67:3d:4f:b5:1f:7d:d0:03:2f:74: 13:c4:01:da:bb:25:ff:a2:c5:6d:b3:af:87:6a:40:37:39:f6: 4e:01:f5:69:39:7e:28:0a:d4:29:ec:76:80:43:02:4d:7f:ed: db:1c:02:5c:2c:c5:6f:fb:b3:ef:ac:7d:99:2b:03:cb:56:7d: 3f:fc:6f:4e:e3:d4:10:1a:59:db:32:95:2d:9f:a3:40:8d:45: d1:78:9e:50:27:7b:ea:5e:ed:b6:a9:ef:54:9b:2c:e8:79:21: 10:2b:95:c4:b3:5a:c3:9a:30:66:4b:7f:20:99:6b:56:d6:6f: 14:b7:86:fe:33:35:69:bf:17:cd:c1:40:b9:84:33:e2:8a:1f: d1:ae:52:24:95:10:fe:ef:9b:ff:51:cf:8d:6f:8f:dd:b8:d8: dd:68:08:3a:34:07:d0:60:df:d6:43:16:fc:ff:be:26:ca:fe: 77:b5:dc:a5:33:a3:3f:3c:24:f6:26:cb:a4:72:51:aa:d0:83: cb:1f:c7:01:d2:a8:fa:51:e6:8b:f3:4b:29:bc:c7:55:db:f2: ef:ee:8f:38:4e:b2:31:38:f4:7c:5a:ac:70:ad:ef:fd:12:7f: 91:5e:72:2c:9c:45:e3:53:d2:3d:b4:c4:d9:26:c2:e7:4a:db: a6:25:7f:b8 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNTA3MTAw OTQ0MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3NkE2ODNCREM3OEY1 RTkzNjIxOTBFNzAzREJBOUZDMDUyRjUyOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEUQXDdXNsXM+Im6rS0XADC898KhpHnKyIn8bjnAlD0G/emY7d fxLQvvqLWEVt3BZdKjwv0h1kQp48jx2YpwsYjNqD5GQWjHuJzmAt3I1kcVbCfWvT b04SA9V48itAYpaiYWwMyv94L6RKoFl15HaenjM2DDPpKO16LcQmSp51XhLOuypp F6bIDWSjBB8a1a2duo1f7pxk/oqPOZt9r1T2Z01+uWx8obKk/S5futdqthtHOOxA Mz56NDvrSU/geZ6owqMyE++R9CEo8w3hdbNGaXCvIyh29WD9B7Sukzk3qSbQDCaA Av/cs1Xsvxe2psL0cgEigyxsC09nCoD06pmVAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUx2poO9x49ek2IZDnA9up/AUvUpswHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL3gycG9POXg0OWVr MklaRG5BOXVwX0FVdlVwcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHKlNQwDQYJKoZIhvcNAQELBQADggEBAByNMScpF1HrZz1PtR990AMvdBPE Adq7Jf+ixW2zr4dqQDc59k4B9Wk5figK1CnsdoBDAk1/7dscAlwsxW/7s++sfZkr A8tWfT/8b07j1BAaWdsylS2fo0CNRdF4nlAne+pe7bap71SbLOh5IRArlcSzWsOa MGZLfyCZa1bWbxS3hv4zNWm/F83BQLmEM+KKH9GuUiSVEP7vm/9Rz41vj9242N1o CDo0B9Bg39ZDFvz/vibK/ne13KUzoz88JPYmy6RyUarQg8sfxwHSqPpR5ovzSym8 x1Xb8u/ujzhOsjE49HxarHCt7/0Sf5FeciycReNT0j20xNkmwudK26Ylf7g= -----END CERTIFICATE-----Generated at Sun Jul 20 11:43:11 2025 by rpki-client