$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5Yp1V3CrTViPNdd70rxtjG7q0EA.roa File: 5Yp1V3CrTViPNdd70rxtjG7q0EA.roa (raw, json) Hash identifier: L8BuAcMdxWPZeMk+D/4tVUKeJeQKYapbUsYUtfjtV30= Subject key identifier: E5:8A:75:57:70:AB:4D:58:8F:35:D7:7B:D2:BC:6D:8C:6E:EA:D0:40 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 1066 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5Yp1V3CrTViPNdd70rxtjG7q0EA.roa Signing time: Fri 22 Aug 2025 08:54:12 +0000 ROA not before: Fri 22 Aug 2025 08:54:12 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 192.72.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 22 08:54:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E58A755770AB4D588F35D77BD2BC6D8C6EEAD040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:5f:93:19:49:cd:0d:cd:ce:2b:b1:77:89: 50:51:71:44:34:76:01:a9:20:3a:0e:d3:a6:3d:cf: 89:4f:52:a1:16:b9:1e:17:e7:d3:e4:b2:f6:91:89: 21:d6:cb:a5:ea:24:e2:ff:a1:af:f3:9f:21:a8:78: ae:ce:44:3b:09:3b:dc:82:48:3f:8c:7a:cd:6a:1a: 7e:aa:b1:08:8d:b4:79:b3:8f:7d:84:8d:be:52:17: 0f:3d:3e:ef:45:70:41:c7:8e:1b:b1:71:d7:82:ee: 4d:9b:cc:a1:27:73:f2:01:60:94:be:95:ae:6d:77: 54:30:e9:19:96:8a:0d:ab:28:ad:59:e2:54:2a:7f: c3:12:04:a6:11:15:db:de:14:27:21:80:6e:d6:e9: b0:a0:5e:af:f5:80:05:37:01:a5:0e:08:eb:11:c3: bb:d8:48:57:32:3c:5d:e0:c6:8d:5d:c5:92:30:6b: f3:3f:1c:b7:34:4e:5e:76:0a:32:9e:8a:b6:f3:f6: 1a:ad:ea:7f:e2:51:a1:a2:e4:86:16:ba:c4:07:52: db:bb:06:f5:bc:a3:61:3a:e4:d1:3b:3b:e0:08:ea: 31:0f:70:5c:e6:df:28:8f:e1:0d:f4:c0:f3:71:60: a2:ec:6e:b2:4d:4a:ee:47:38:93:03:4c:e4:6b:8e: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:75:57:70:AB:4D:58:8F:35:D7:7B:D2:BC:6D:8C:6E:EA:D0:40 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5Yp1V3CrTViPNdd70rxtjG7q0EA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.3.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e3:dd:4b:18:54:29:76:d8:e6:86:d3:e8:7f:1b:b5:fb:52: ec:a5:bf:6a:80:67:74:be:52:29:92:38:79:fa:c6:7c:69:0a: 02:e6:36:0c:2f:00:64:de:56:48:1a:b4:80:11:40:09:7d:c0: e2:72:85:90:c0:60:77:71:39:c2:a4:25:54:ca:81:ba:91:bc: e6:ab:16:0d:d2:bc:f2:72:8a:81:99:00:b0:c2:b5:53:23:e9: 4a:bb:1c:34:56:5f:b7:00:73:4b:29:81:10:d0:e3:01:e2:e5: a2:7a:20:10:c2:1e:3c:0a:d4:e6:97:4d:24:60:6a:3a:b0:36: 20:0b:2e:83:e8:cc:92:f0:77:7d:c2:12:76:99:c2:ab:02:6a: b1:8f:90:63:c1:2b:27:79:e7:32:3b:43:2c:8f:d2:d4:b5:77: 10:ca:d3:4e:66:7a:0b:4d:42:6a:a8:8c:d9:2b:db:2e:5b:f7: 99:74:e0:ed:e0:c1:64:36:6c:fe:fd:f7:93:62:34:1d:58:94: 73:45:c3:7a:d1:b0:8d:79:5e:fd:c8:d8:c0:8f:fc:52:70:03: 57:53:84:b5:3c:9f:b4:96:27:7c:28:d7:09:53:35:96:f0:e8: 48:c6:ea:3e:b1:4f:dd:3a:65:b4:e4:16:e7:a9:70:d1:1c:39: 5f:2c:c8:1d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTA4MjIw ODU0MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU1OEE3NTU3NzBBQjRE NTg4RjM1RDc3QkQyQkM2RDhDNkVFQUQwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqw1+TGUnNDc3OK7F3iVBRcUQ0dgGpIDoO06Y9z4lPUqEWuR4X 59PksvaRiSHWy6XqJOL/oa/znyGoeK7ORDsJO9yCSD+Mes1qGn6qsQiNtHmzj32E jb5SFw89Pu9FcEHHjhuxcdeC7k2bzKEnc/IBYJS+la5td1Qw6RmWig2rKK1Z4lQq f8MSBKYRFdveFCchgG7W6bCgXq/1gAU3AaUOCOsRw7vYSFcyPF3gxo1dxZIwa/M/ HLc0Tl52CjKeirbz9hqt6n/iUaGi5IYWusQHUtu7BvW8o2E65NE7O+AI6jEPcFzm 3yiP4Q30wPNxYKLsbrJNSu5HOJMDTORrjvRfAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU5Yp1V3CrTViPNdd70rxtjG7q0EAwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNVlwMVYzQ3JUVmlQTmRkNzByeHRq RzdxMEVBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBIAzAN BgkqhkiG9w0BAQsFAAOCAQEAjuPdSxhUKXbY5obT6H8btftS7KW/aoBndL5SKZI4 efrGfGkKAuY2DC8AZN5WSBq0gBFACX3A4nKFkMBgd3E5wqQlVMqBupG85qsWDdK8 8nKKgZkAsMK1UyPpSrscNFZftwBzSymBENDjAeLlonogEMIePArU5pdNJGBqOrA2 IAsug+jMkvB3fcISdpnCqwJqsY+QY8ErJ3nnMjtDLI/S1LV3EMrTTmZ6C01CaqiM 2SvbLlv3mXTg7eDBZDZs/v33k2I0HViUc0XDetGwjXle/cjYwI/8UnADV1OEtTyf tJYnfCjXCVM1lvDoSMbqPrFP3TpltOQW56lw0Rw5XyzIHQ== -----END CERTIFICATE-----Generated at Sun Aug 24 07:44:28 2025 by rpki-client