$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8cwWLzKJfqmrWq_YDiL46XKCt6Y.roa File: 8cwWLzKJfqmrWq_YDiL46XKCt6Y.roa (raw, json) Hash identifier: bG9ikQlY6I/YQSQkjOGIkywti3xfj28I6+6rau7EAh4= Subject key identifier: F1:CC:16:2F:32:89:7E:A9:AB:5A:AF:D8:0E:22:F8:E9:72:82:B7:A6 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A62 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8cwWLzKJfqmrWq_YDiL46XKCt6Y.roa Signing time: Fri 22 Aug 2025 08:54:01 +0000 ROA not before: Fri 22 Aug 2025 08:54:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131611 IP address blocks: 113.196.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6754 (0x1a62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:54:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F1CC162F32897EA9AB5AAFD80E22F8E97282B7A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f2:c0:b4:d7:46:3f:c6:55:c5:71:ba:e5:08: a6:96:f7:12:01:01:a1:49:38:f4:69:7e:1d:e9:a9: c8:9c:13:a3:cf:57:6f:f2:04:6c:37:08:cd:22:6c: 4a:fb:84:5e:80:89:5f:75:b1:ac:50:67:96:7c:d0: 0d:94:4a:f2:ca:25:d5:ee:70:e7:4a:48:08:37:54: 29:6f:84:58:af:f9:0d:ec:8a:26:50:5d:83:7e:f4: ae:9b:52:14:d8:4b:64:0d:91:41:a3:57:ee:95:59: c4:47:45:36:6c:b7:77:b0:8f:85:9b:a2:25:96:ba: bc:85:7c:a3:be:10:ab:6b:2a:b8:26:3f:e9:4b:bb: 25:3e:0a:1a:d6:04:0d:79:bb:21:a7:92:d5:3d:8b: a2:52:7a:21:55:bc:30:9a:8d:03:26:52:1a:e7:59: 6a:6d:6f:ff:56:bd:f6:78:81:8a:8e:30:5e:9d:e1: 10:25:4c:ca:5f:f7:06:d4:9e:e4:5c:a2:73:89:c3: 70:c3:df:f0:ad:d3:b7:13:b0:b0:1e:90:a7:b1:7c: f3:a4:4e:57:a6:b2:ad:b8:79:89:24:54:b3:c2:b1: da:f5:72:d0:46:23:32:0b:d0:7f:45:59:73:11:04: a3:8b:51:0f:5e:e0:c1:02:ff:86:af:f1:bd:1f:19: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CC:16:2F:32:89:7E:A9:AB:5A:AF:D8:0E:22:F8:E9:72:82:B7:A6 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8cwWLzKJfqmrWq_YDiL46XKCt6Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.196.192.0/19 Signature Algorithm: sha256WithRSAEncryption 2e:c6:55:f2:db:37:49:42:a1:aa:83:46:4a:cf:03:1e:b8:2b: 63:66:54:b3:2f:18:d2:f6:4b:f8:af:5e:3e:61:19:cf:52:f9: c1:e2:fd:ce:2c:80:8f:fa:9f:5f:16:0e:31:58:72:a2:1f:e3: 27:d9:b4:f8:74:43:6b:02:73:21:89:97:2f:bd:68:37:c0:f0: 6b:ab:dc:04:0f:2f:94:c6:4a:7a:c8:36:69:4b:c0:61:33:70: 81:07:88:22:ea:f6:04:b7:ab:4e:28:98:ac:47:52:af:ae:b2: a4:63:19:58:b4:7a:44:20:ce:cb:07:83:55:1b:06:cb:a0:b3: 56:67:6e:79:f7:a1:df:26:99:4d:9f:20:de:3d:61:0f:13:d1: c9:33:09:4a:e2:87:6c:d5:7e:7f:42:b6:8a:20:9f:4d:2a:3e: d9:0f:1a:cb:8f:5a:2b:e3:4b:aa:48:ec:4b:f1:21:76:34:00: 6d:91:9b:e4:74:b9:98:9b:32:c4:f7:d3:77:b1:20:97:e6:d0: 0c:96:e3:49:1d:20:f9:26:1e:f8:21:0e:84:9c:a7:07:6d:a2: f1:7d:df:c6:55:c2:0e:6f:24:e5:06:21:b3:4f:cc:5e:1e:51: ff:87:dd:99:e9:f3:d3:98:11:37:62:67:97:75:a4:ab:61:cc: 54:c0:64:f3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODU0MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYxQ0MxNjJGMzI4OTdF QTlBQjVBQUZEODBFMjJGOEU5NzI4MkI3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDy8sC010Y/xlXFcbrlCKaW9xIBAaFJOPRpfh3pqcicE6PPV2/y BGw3CM0ibEr7hF6AiV91saxQZ5Z80A2USvLKJdXucOdKSAg3VClvhFiv+Q3siiZQ XYN+9K6bUhTYS2QNkUGjV+6VWcRHRTZst3ewj4WboiWWuryFfKO+EKtrKrgmP+lL uyU+ChrWBA15uyGnktU9i6JSeiFVvDCajQMmUhrnWWptb/9WvfZ4gYqOMF6d4RAl TMpf9wbUnuRconOJw3DD3/Ct07cTsLAekKexfPOkTlemsq24eYkkVLPCsdr1ctBG IzIL0H9FWXMRBKOLUQ9e4MEC/4av8b0fGS2BAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8cwWLzKJfqmrWq/YDiL46XKCt6YwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOGN3V0x6S0pmcW1yV3FfWURpTDQ2 WEtDdDZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXHEwDAN BgkqhkiG9w0BAQsFAAOCAQEALsZV8ts3SUKhqoNGSs8DHrgrY2ZUsy8Y0vZL+K9e PmEZz1L5weL9ziyAj/qfXxYOMVhyoh/jJ9m0+HRDawJzIYmXL71oN8Dwa6vcBA8v lMZKesg2aUvAYTNwgQeIIur2BLerTiiYrEdSr66ypGMZWLR6RCDOyweDVRsGy6Cz Vmduefeh3yaZTZ8g3j1hDxPRyTMJSuKHbNV+f0K2iiCfTSo+2Q8ay49aK+NLqkjs S/EhdjQAbZGb5HS5mJsyxPfTd7Egl+bQDJbjSR0g+SYe+CEOhJynB22i8X3fxlXC Dm8k5QYhs0/MXh5R/4fdmenz05gRN2Jnl3Wkq2HMVMBk8w== -----END CERTIFICATE-----Generated at Sun Aug 24 13:51:19 2025 by rpki-client