$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/kvQkqbc4LzlHby27w17qLy29jWM.roa File: kvQkqbc4LzlHby27w17qLy29jWM.roa (raw, json) Hash identifier: sGbqpVh2WqLdmdlsBidPocaqsKGmsv3ZTImWpAzM6HY= Subject key identifier: 92:F4:24:A9:B7:38:2F:39:47:6F:2D:BB:C3:5E:EA:2F:2D:BD:8D:63 Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Certificate serial: 0227 Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/kvQkqbc4LzlHby27w17qLy29jWM.roa Signing time: Fri 22 Aug 2025 09:03:39 +0000 ROA not before: Fri 22 Aug 2025 09:03:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150766 IP address blocks: 36.50.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 08:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Validity Not Before: Aug 22 09:03:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=92F424A9B7382F39476F2DBBC35EEA2F2DBD8D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:61:ff:2b:9a:0c:f1:6e:39:2d:1d:9b:b1: 9b:9f:8a:37:8d:3f:00:fe:25:4a:da:fd:f1:2b:bc: 63:5b:65:af:9f:9e:09:14:0a:3b:77:08:32:ec:a2: 1c:e3:e1:a3:a9:88:f5:f4:8d:d3:42:35:11:c7:1c: 96:e0:61:c0:96:a4:20:3e:e8:2f:da:51:7a:56:52: b5:fb:c7:ca:5e:bb:86:72:f6:ac:31:13:0b:d1:33: a3:66:f8:4c:e5:49:9a:3f:a4:1f:e3:27:f8:5b:49: ae:6b:61:d9:b6:f6:c4:dd:59:27:99:8a:98:3f:72: 3e:23:40:41:cb:c2:9d:af:14:07:93:f5:29:6c:5b: 8e:08:c9:8c:36:3c:ae:fe:4a:7f:e4:7c:61:c8:ad: f5:4c:b6:50:96:03:46:a2:34:7f:d7:68:18:3f:f5: 35:4c:c7:82:d2:66:91:7e:00:2c:92:f2:61:b7:67: bd:c2:3e:b7:15:20:f1:af:87:4e:85:dd:77:fa:76: bb:6f:17:1d:39:de:86:75:1e:9d:ca:a1:b3:e1:4f: 11:99:13:0c:17:5b:af:fd:51:85:e8:3b:89:eb:d3: 4c:91:37:ea:c2:5e:a0:96:53:d1:45:cc:d5:4e:2a: a6:57:2a:19:7b:09:e7:bc:78:ce:8c:52:20:48:a2: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F4:24:A9:B7:38:2F:39:47:6F:2D:BB:C3:5E:EA:2F:2D:BD:8D:63 X509v3 Authority Key Identifier: keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/kvQkqbc4LzlHby27w17qLy29jWM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.50.229.0/24 Signature Algorithm: sha256WithRSAEncryption 88:ef:0d:2b:0e:8c:80:4c:0d:f4:f2:ba:71:89:eb:b4:3b:64: 94:e7:05:80:f3:6f:6b:8a:a5:aa:74:70:a4:79:2a:98:d4:3e: bf:6f:c7:93:b8:13:21:89:5e:ad:dc:01:0d:21:69:43:7f:89: 5d:f0:27:a1:b0:bf:1b:10:d5:b8:9c:d7:95:4f:33:45:da:f6: f6:1e:a8:a3:02:0a:61:06:7a:53:b0:a7:23:88:80:67:0f:3a: f2:84:95:94:ca:80:d0:fc:5b:10:67:00:1a:a3:75:7d:df:e5: a4:16:77:66:9e:2b:0d:c8:9b:61:a5:be:a3:d6:7c:d2:3e:27: 60:68:4c:cc:5c:58:53:30:e9:93:fb:62:fa:9e:0d:f8:51:68: c8:29:67:07:72:62:8b:01:af:31:cb:0d:ca:fd:9c:b1:7b:f0: 2a:19:3a:73:c8:52:c4:2f:31:8e:77:a0:01:e8:e6:33:ec:4c: 23:ea:4e:f2:88:03:2b:36:3b:f6:6a:73:c5:8d:cb:4f:d5:8f: be:19:50:f4:41:34:1c:7c:2e:6a:5c:b6:8a:12:4d:70:ae:7a: 54:d8:54:96:0e:04:37:de:4a:0a:68:22:29:11:51:ce:7a:3f: 29:40:a2:58:d8:08:39:89:64:1f:6b:1b:0e:c4:7c:ab:55:9e: 7d:72:ac:cd -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNTA4MjIw OTAzMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyRjQyNEE5QjczODJG Mzk0NzZGMkRCQkMzNUVFQTJGMkRCRDhENjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ/2H/K5oM8W45LR2bsZufijeNPwD+JUra/fErvGNbZa+fngkU Cjt3CDLsohzj4aOpiPX0jdNCNRHHHJbgYcCWpCA+6C/aUXpWUrX7x8peu4Zy9qwx EwvRM6Nm+EzlSZo/pB/jJ/hbSa5rYdm29sTdWSeZipg/cj4jQEHLwp2vFAeT9Sls W44IyYw2PK7+Sn/kfGHIrfVMtlCWA0aiNH/XaBg/9TVMx4LSZpF+ACyS8mG3Z73C PrcVIPGvh06F3Xf6drtvFx053oZ1Hp3KobPhTxGZEwwXW6/9UYXoO4nr00yRN+rC XqCWU9FFzNVOKqZXKhl7Cee8eM6MUiBIouZDAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUkvQkqbc4LzlHby27w17qLy29jWMwHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5 goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lUL2t2UWtxYmM0THps SGJ5Mjd3MTdxTHkyOWpXTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAkMuUwDQYJKoZIhvcNAQELBQADggEBAIjvDSsOjIBMDfTyunGJ67Q7ZJTn BYDzb2uKpap0cKR5KpjUPr9vx5O4EyGJXq3cAQ0haUN/iV3wJ6GwvxsQ1bic15VP M0Xa9vYeqKMCCmEGelOwpyOIgGcPOvKElZTKgND8WxBnABqjdX3f5aQWd2aeKw3I m2GlvqPWfNI+J2BoTMxcWFMw6ZP7YvqeDfhRaMgpZwdyYosBrzHLDcr9nLF78CoZ OnPIUsQvMY53oAHo5jPsTCPqTvKIAys2O/Zqc8WNy0/Vj74ZUPRBNBx8LmpctooS TXCuelTYVJYOBDfeSgpoIikRUc56PylAoljYCDmJZB9rGw7EfKtVnn1yrM0= -----END CERTIFICATE-----Generated at Thu Sep 18 05:06:41 2025 by rpki-client