$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5S9rJqGBNBtQPrnZfhcxCNCP7Ng.roa File: 5S9rJqGBNBtQPrnZfhcxCNCP7Ng.roa (raw, json) Hash identifier: XeWynwPMvAko7OB2Y/324ZLEdbGyKyiSAGL3XOrkZDg= Subject key identifier: E5:2F:6B:26:A1:81:34:1B:50:3E:B9:D9:7E:17:31:08:D0:8F:EC:D8 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 198E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5S9rJqGBNBtQPrnZfhcxCNCP7Ng.roa Signing time: Fri 22 Aug 2025 08:53:07 +0000 ROA not before: Fri 22 Aug 2025 08:53:07 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131586 IP address blocks: 175.183.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6542 (0x198e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E52F6B26A181341B503EB9D97E173108D08FECD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:26:bd:e2:66:c9:09:4f:1b:5f:bd:d5:71: e2:5c:99:83:8e:75:8c:76:11:d0:67:93:2e:1b:bf: 7d:f6:00:b3:0f:a8:53:c1:38:98:03:39:8a:54:63: 25:d7:52:1f:56:23:3c:86:31:78:19:c9:5d:8c:de: 6b:c3:86:28:50:d9:76:df:7e:a6:3a:8d:47:b6:10: c5:08:13:48:29:f6:d5:a9:14:ae:1d:50:cc:df:4b: 40:91:56:db:4f:0c:e8:51:1d:fd:3d:c9:3f:b9:60: 42:61:02:16:ec:3c:be:e8:e6:d9:20:bb:51:10:c7: d8:5e:e4:15:20:54:51:f1:28:25:ce:dc:14:cf:19: d1:7b:9f:2a:55:08:88:3c:b3:a7:10:d4:99:23:24: 1b:7d:f3:41:1b:2c:3b:9f:d9:dd:dc:ef:b8:a2:2a: bc:ae:fe:2f:ab:56:69:b7:e5:75:39:a3:7a:5f:94: 2a:ca:65:44:fb:f9:5a:b7:98:4a:d6:ec:30:bc:cd: 20:25:e4:f7:6c:70:29:37:24:a6:17:4c:e1:70:6d: 3e:ec:4a:c4:a6:a4:a7:b4:79:1a:78:3d:19:c1:96: d5:0b:8a:f7:25:7c:7a:1b:75:3a:a8:18:c9:a9:2a: c2:d8:21:df:17:0f:d6:af:df:a9:19:4b:0a:83:4c: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2F:6B:26:A1:81:34:1B:50:3E:B9:D9:7E:17:31:08:D0:8F:EC:D8 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5S9rJqGBNBtQPrnZfhcxCNCP7Ng.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.137.0/24 Signature Algorithm: sha256WithRSAEncryption 57:9d:27:6c:92:c3:fd:4a:b6:d6:67:06:c2:1f:44:05:c0:de: 74:5f:dd:be:ad:c3:66:9d:10:9a:31:90:50:6c:f2:f7:50:df: 2c:10:33:74:d3:c7:a3:48:b9:fd:6a:3a:61:0b:15:4a:1f:21: 59:8d:37:30:1d:7b:1f:80:48:5f:9a:76:e9:a5:c8:f0:cd:34: ed:47:a5:73:da:08:a0:f1:d4:07:94:8b:c1:4a:03:2a:d3:89: 37:33:bc:8c:c9:e0:1d:c6:54:cb:ae:5d:e8:ec:5f:81:e9:14: 7d:86:5d:78:19:ec:0c:15:8c:0a:59:95:3d:5d:31:f1:41:fe: 07:db:ef:55:f5:1b:44:14:57:67:48:cb:88:43:d2:74:ac:08: 4e:de:fd:07:7e:2c:ee:3d:0b:3a:95:4c:7e:3e:24:2b:b9:95: 4e:f9:78:96:1a:82:cb:dd:4f:7b:12:15:51:1f:de:c8:7d:c0: f8:1e:2f:67:93:84:44:e6:5b:68:82:37:2e:bc:72:8d:3f:db: bc:91:12:68:55:06:36:d3:f0:2b:0f:bc:af:73:81:99:20:92: f2:8c:2c:d9:93:88:05:e6:1c:ee:e7:c8:bb:1b:73:28:55:3c: c3:1c:d7:fe:99:be:c1:e6:a4:14:23:d6:90:dd:08:f1:94:d1: b0:2c:b2:13 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU1MkY2QjI2QTE4MTM0 MUI1MDNFQjlEOTdFMTczMTA4RDA4RkVDRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/uSa94mbJCU8bX73VceJcmYOOdYx2EdBnky4bv332ALMPqFPB OJgDOYpUYyXXUh9WIzyGMXgZyV2M3mvDhihQ2XbffqY6jUe2EMUIE0gp9tWpFK4d UMzfS0CRVttPDOhRHf09yT+5YEJhAhbsPL7o5tkgu1EQx9he5BUgVFHxKCXO3BTP GdF7nypVCIg8s6cQ1JkjJBt980EbLDuf2d3c77iiKryu/i+rVmm35XU5o3pflCrK ZUT7+Vq3mErW7DC8zSAl5PdscCk3JKYXTOFwbT7sSsSmpKe0eRp4PRnBltULivcl fHobdTqoGMmpKsLYId8XD9av36kZSwqDTJgFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU5S9rJqGBNBtQPrnZfhcxCNCP7NgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNVM5ckpxR0JOQnRRUHJuWmZoY3hD TkNQN05nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK+3iTAN BgkqhkiG9w0BAQsFAAOCAQEAV50nbJLD/Uq21mcGwh9EBcDedF/dvq3DZp0QmjGQ UGzy91DfLBAzdNPHo0i5/Wo6YQsVSh8hWY03MB17H4BIX5p26aXI8M007Uelc9oI oPHUB5SLwUoDKtOJNzO8jMngHcZUy65d6OxfgekUfYZdeBnsDBWMClmVPV0x8UH+ B9vvVfUbRBRXZ0jLiEPSdKwITt79B34s7j0LOpVMfj4kK7mVTvl4lhqCy91PexIV UR/eyH3A+B4vZ5OEROZbaII3LrxyjT/bvJESaFUGNtPwKw+8r3OBmSCS8ows2ZOI BeYc7ufIuxtzKFU8wxzX/pm+weakFCPWkN0I8ZTRsCyyEw== -----END CERTIFICATE-----Generated at Sun Aug 24 11:53:15 2025 by rpki-client