$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/vX2zurKcZq6uHugr79Vj7CluX8U.roa File: vX2zurKcZq6uHugr79Vj7CluX8U.roa (raw, json) Hash identifier: GdVPCwO2JcoPshr3Z+ad1hPe/GxgIs2qP3IuU8IWvC8= Subject key identifier: BD:7D:B3:BA:B2:9C:66:AE:AE:1E:E8:2B:EF:D5:63:EC:29:6E:5F:C5 Certificate issuer: /CN=294B61C9DA3584274182FA20AF8626E1AEA81F32 Certificate serial: 07 Authority key identifier: 29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/vX2zurKcZq6uHugr79Vj7CluX8U.roa Signing time: Thu 09 Oct 2025 01:49:24 +0000 ROA not before: Thu 09 Oct 2025 01:49:24 +0000 ROA not after: Wed 07 Oct 2026 15:30:20 +0000 asID: 131657 IP address blocks: 138.252.10.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 14:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294B61C9DA3584274182FA20AF8626E1AEA81F32 Validity Not Before: Oct 9 01:49:24 2025 GMT Not After : Oct 7 15:30:20 2026 GMT Subject: CN=BD7DB3BAB29C66AEAE1EE82BEFD563EC296E5FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:08:12:ea:5e:70:b1:43:39:09:ea:da:51: ca:e6:86:9d:0e:ef:f7:81:01:49:9f:35:41:40:b2: 9c:e8:33:38:62:e1:9d:f6:5e:83:29:2a:e2:dc:a2: 7b:7b:ad:c6:b9:ce:83:05:79:9f:0d:78:d5:4c:b6: ab:dd:0c:38:a7:c6:fb:0c:1e:78:85:91:06:42:67: 1c:b1:b4:2d:df:64:85:46:98:69:ae:9d:e3:a4:84: 98:4c:9a:6a:11:ee:24:cd:27:aa:24:7a:20:32:04: ff:ce:0c:9a:6b:c9:59:38:c8:bd:25:4e:79:1d:4e: 32:00:ab:20:5b:11:8f:16:8f:fb:a7:0c:7b:c7:57: 30:9f:6e:ea:8c:dd:6c:85:bf:a1:f2:c4:8a:ea:40: f7:8f:b9:d8:4a:27:b1:70:e4:e4:e4:ce:4d:b7:91: bb:76:41:bb:bb:52:38:44:49:cb:84:32:a2:8b:72: 9c:e1:23:93:7e:db:a2:cc:ee:fd:59:c5:29:53:4c: f5:13:87:c5:53:11:6c:ff:f7:3f:63:c9:d4:53:84: 5e:35:c3:d4:5a:dc:76:8c:62:cc:a6:6c:a7:46:da: 61:60:e3:ec:88:b2:53:04:b7:45:cc:89:98:5b:1b: d0:01:62:a7:a0:7b:d7:b3:97:6f:04:08:9b:c2:a0: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:B3:BA:B2:9C:66:AE:AE:1E:E8:2B:EF:D5:63:EC:29:6E:5F:C5 X509v3 Authority Key Identifier: keyid:29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/vX2zurKcZq6uHugr79Vj7CluX8U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.10.0/23 Signature Algorithm: sha256WithRSAEncryption 32:8e:33:56:ae:52:65:74:37:5c:b9:15:82:12:dc:78:34:fe: eb:56:3c:2b:8b:28:3c:f3:9d:4d:ed:18:69:b8:27:3e:88:70: fc:1b:1b:84:a2:b6:28:d9:85:8b:c6:46:af:22:ae:85:21:c3: 89:d3:5b:82:a9:c0:0f:0f:5a:a7:5d:83:a0:15:6d:12:fb:da: ae:b8:62:0d:df:5d:03:db:06:8a:b2:a7:92:02:15:ce:c0:b6: e7:01:52:73:8b:a2:51:36:0c:a6:8e:ca:fb:76:58:cf:b6:21: b8:2c:2c:e6:c5:34:68:92:73:13:63:8b:2d:51:89:b8:58:e5: ab:4e:bd:a6:95:42:7a:27:7b:66:4f:3b:7e:6a:f3:40:d4:da: 70:c1:a1:ec:34:3b:7d:1a:e7:53:e1:e8:bc:cb:bc:a2:79:b1: ff:5b:3c:cd:f9:6e:e8:67:e0:5f:34:83:ea:63:f9:02:6b:a4: 20:74:2a:2d:f0:c4:06:d5:a4:5a:66:90:b6:88:cd:c2:ce:b0: f2:dc:84:fc:9b:5b:8d:ad:2f:01:6f:e8:19:9f:6e:2a:4a:c0: 10:82:93:03:33:99:84:82:16:b8:2d:53:3a:82:37:61:bb:4f: b7:49:16:86:33:cc:b3:a0:d3:97:2d:19:b0:df:89:43:30:51: a5:ef:fe:e8 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTRC NjFDOURBMzU4NDI3NDE4MkZBMjBBRjg2MjZFMUFFQTgxRjMyMB4XDTI1MTAwOTAx NDkyNFoXDTI2MTAwNzE1MzAyMFowMzExMC8GA1UEAxMoQkQ3REIzQkFCMjlDNjZB RUFFMUVFODJCRUZENTYzRUMyOTZFNUZDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMVpCBLqXnCxQzkJ6tpRyuaGnQ7v94EBSZ81QUCynOgzOGLhnfZe gykq4tyie3utxrnOgwV5nw141Uy2q90MOKfG+wweeIWRBkJnHLG0Ld9khUaYaa6d 46SEmEyaahHuJM0nqiR6IDIE/84MmmvJWTjIvSVOeR1OMgCrIFsRjxaP+6cMe8dX MJ9u6ozdbIW/ofLEiupA94+52EonsXDk5OTOTbeRu3ZBu7tSOERJy4QyootynOEj k37boszu/VnFKVNM9ROHxVMRbP/3P2PJ1FOEXjXD1FrcdoxizKZsp0baYWDj7Iiy UwS3RcyJmFsb0AFip6B717OXbwQIm8KgIAECAwEAAaOCAe4wggHqMB0GA1UdDgQW BBS9fbO6spxmrq4e6Cvv1WPsKW5fxTAfBgNVHSMEGDAWgBQpS2HJ2jWEJ0GC+iCv hibhrqgfMjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS0dBTUUv S1V0aHlkbzFoQ2RCZ3ZvZ3I0WW00YTZvSHpJLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9LVXRoeWRvMWhDZEJndm9ncjRZbTRhNm9IekkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS0dBTUUvdlgyenVyS2NacTZ1SHVncjc5 Vmo3Q2x1WDhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr8 CjANBgkqhkiG9w0BAQsFAAOCAQEAMo4zVq5SZXQ3XLkVghLceDT+61Y8K4soPPOd Te0YabgnPohw/BsbhKK2KNmFi8ZGryKuhSHDidNbgqnADw9ap12DoBVtEvvarrhi Dd9dA9sGirKnkgIVzsC25wFSc4uiUTYMpo7K+3ZYz7YhuCws5sU0aJJzE2OLLVGJ uFjlq069ppVCeid7Zk87fmrzQNTacMGh7DQ7fRrnU+HovMu8onmx/1s8zflu6Gfg XzSD6mP5AmukIHQqLfDEBtWkWmaQtojNws6w8tyE/Jtbja0vAW/oGZ9uKkrAEIKT AzOZhIIWuC1TOoI3YbtPt0kWhjPMs6DTly0ZsN+JQzBRpe/+6A== -----END CERTIFICATE-----Generated at Fri Oct 24 12:28:12 2025 by rpki-client