$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5SHpyr24HV9EcdBtF7BOBz8oL9Q.roa File: 5SHpyr24HV9EcdBtF7BOBz8oL9Q.roa (raw, json) Hash identifier: hhtuWf1EZRQsl9Qlv/LE+LfM77uaIcibqKRIWv3pImY= Subject key identifier: E5:21:E9:CA:BD:B8:1D:5F:44:71:D0:6D:17:B0:4E:07:3F:28:2F:D4 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A0E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5SHpyr24HV9EcdBtF7BOBz8oL9Q.roa Signing time: Fri 22 Aug 2025 08:53:40 +0000 ROA not before: Fri 22 Aug 2025 08:53:40 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 106.105.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6670 (0x1a0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E521E9CABDB81D5F4471D06D17B04E073F282FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:04:48:df:78:8a:25:f1:2a:14:6d:08:ea: 72:2f:0d:44:3b:12:d6:62:17:b0:cb:fe:52:c1:09: 3f:9a:e3:cd:0f:a0:2d:ef:5f:aa:9b:a5:08:b7:19: e0:e9:ab:a8:fd:89:48:a3:a4:c5:53:43:a2:c3:59: f7:07:36:18:0e:65:3a:f0:ee:7d:42:bc:1f:1e:14: 08:e1:b8:ad:d3:84:28:1d:35:cf:c4:2d:b3:f9:6c: 23:9b:22:04:fb:b4:49:2c:dc:7a:46:a2:41:fe:68: 85:df:6e:f6:83:50:36:02:d0:60:10:32:70:43:55: 3e:7d:b5:02:7c:56:ef:7b:68:12:1c:4c:c6:8e:65: 7d:e9:24:fd:59:2d:8a:2e:31:d7:de:7b:4f:d9:c8: c3:7b:c3:3e:36:87:ab:ae:7e:28:d8:39:d7:58:71: 01:fa:1e:02:06:20:24:91:19:16:b4:b6:79:a0:7b: f3:ea:33:b2:c6:9e:49:0c:f0:27:de:c4:94:82:28: 69:3c:3b:a6:93:a7:35:14:d6:46:ea:61:5c:cd:9c: a3:7f:43:4b:b6:c8:6e:31:8e:7e:d5:39:14:09:40: 40:3b:11:07:71:c4:8f:aa:00:ec:ea:b8:66:0d:a1: 5a:13:42:83:42:8e:f1:7a:41:c8:60:40:8f:e5:72: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:E9:CA:BD:B8:1D:5F:44:71:D0:6D:17:B0:4E:07:3F:28:2F:D4 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5SHpyr24HV9EcdBtF7BOBz8oL9Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.105.164.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:9e:1a:bb:a3:05:69:4e:ad:e9:eb:ce:ba:2f:75:2c:18:e9: c3:5d:dd:fd:a0:ba:d3:fb:53:10:13:4f:cc:d0:7a:ea:15:45: f3:94:98:49:ee:a8:df:7c:60:3c:12:1b:f2:65:b1:26:7c:74: 61:64:9a:07:bf:cb:2e:96:5c:00:8f:94:26:1f:60:e9:b0:03: e0:59:17:58:12:cd:fb:24:9a:90:59:88:42:6c:60:05:af:99: 2b:13:2b:c7:a0:89:a4:3f:b5:fa:49:70:c8:f8:54:9d:98:d7: ba:db:50:33:7f:b0:b0:c3:57:9a:00:31:7a:2d:ea:f1:dc:16: 5c:25:bc:6f:2e:74:ba:05:83:24:48:aa:af:ad:1f:2b:4e:4d: 19:34:83:78:75:af:6d:d8:83:0e:d1:28:88:33:78:a3:7a:9f: 7d:23:7a:1d:bd:4c:d0:72:47:bb:0b:eb:ae:26:6a:3a:54:49: bb:ef:0c:85:46:b7:cd:12:08:06:d7:5b:15:72:d2:3a:0b:24: 71:5f:c5:db:ff:1d:46:49:eb:38:49:04:73:28:ca:9c:71:df: 45:fa:59:03:1c:1c:b0:28:02:ca:1e:7a:ee:30:a3:04:ee:0a: 47:89:f5:1f:fd:be:fc:12:7b:a5:d4:f5:cf:69:ca:4f:ee:53: 76:99:a1:8f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU1MjFFOUNBQkRCODFE NUY0NDcxRDA2RDE3QjA0RTA3M0YyODJGRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC84QRI33iKJfEqFG0I6nIvDUQ7EtZiF7DL/lLBCT+a480PoC3v X6qbpQi3GeDpq6j9iUijpMVTQ6LDWfcHNhgOZTrw7n1CvB8eFAjhuK3ThCgdNc/E LbP5bCObIgT7tEks3HpGokH+aIXfbvaDUDYC0GAQMnBDVT59tQJ8Vu97aBIcTMaO ZX3pJP1ZLYouMdfee0/ZyMN7wz42h6uufijYOddYcQH6HgIGICSRGRa0tnmge/Pq M7LGnkkM8CfexJSCKGk8O6aTpzUU1kbqYVzNnKN/Q0u2yG4xjn7VORQJQEA7EQdx xI+qAOzquGYNoVoTQoNCjvF6QchgQI/lclwhAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU5SHpyr24HV9EcdBtF7BOBz8oL9QwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNVNIcHlyMjRIVjlFY2RCdEY3Qk9C ejhvTDlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmpppDAN BgkqhkiG9w0BAQsFAAOCAQEADJ4au6MFaU6t6evOui91LBjpw13d/aC60/tTEBNP zNB66hVF85SYSe6o33xgPBIb8mWxJnx0YWSaB7/LLpZcAI+UJh9g6bAD4FkXWBLN +ySakFmIQmxgBa+ZKxMrx6CJpD+1+klwyPhUnZjXuttQM3+wsMNXmgAxei3q8dwW XCW8by50ugWDJEiqr60fK05NGTSDeHWvbdiDDtEoiDN4o3qffSN6Hb1M0HJHuwvr riZqOlRJu+8MhUa3zRIIBtdbFXLSOgskcV/F2/8dRknrOEkEcyjKnHHfRfpZAxwc sCgCyh567jCjBO4KR4n1H/2+/BJ7pdT1z2nKT+5Tdpmhjw== -----END CERTIFICATE-----Generated at Sun Aug 24 13:51:18 2025 by rpki-client