$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/97_vk-oZakzXyaFkoBi_mfs1_iE.roa File: 97_vk-oZakzXyaFkoBi_mfs1_iE.roa (raw, json) Hash identifier: AIMMboJ6xLpAw09rm3Got+s3UcOtdRe6lYqKsuHFVK8= Subject key identifier: F7:BF:EF:93:EA:19:6A:4C:D7:C9:A1:64:A0:18:BF:99:FB:35:FE:21 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A02 Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/97_vk-oZakzXyaFkoBi_mfs1_iE.roa Signing time: Fri 22 Aug 2025 08:53:37 +0000 ROA not before: Fri 22 Aug 2025 08:53:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 122.147.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6658 (0x1a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F7BFEF93EA196A4CD7C9A164A018BF99FB35FE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:02:57:ad:ab:e2:44:63:a9:80:11:e8:2e: d5:15:9a:c0:60:11:62:ea:92:27:8e:7d:94:32:d7: ba:e7:0d:32:f1:a0:0b:1a:7e:71:20:2e:4e:64:19: ed:87:9a:a5:2f:1d:ac:f9:5d:c5:33:1c:8f:1c:16: 9c:82:ed:3e:31:18:bb:ef:30:ea:28:df:d4:d0:e8: a6:a8:f8:86:1f:bc:f9:7c:0e:63:98:58:e3:54:8a: 09:1d:18:13:b4:31:c5:a4:82:4b:f8:ad:77:8b:3b: ce:ab:02:f3:d1:32:55:09:21:c9:60:19:fc:98:00: 09:85:06:3f:0e:46:8e:8a:2d:b2:a9:b9:53:ff:7b: 79:cd:37:74:5b:84:ba:e0:dd:3c:ae:fb:14:21:da: d5:b7:a3:b2:ed:bd:7f:95:98:a3:a1:eb:fe:06:f9: a0:79:53:ba:54:77:4b:20:21:aa:7f:ad:44:60:dd: 92:46:87:ea:96:01:40:9a:6b:87:a5:53:2d:50:3b: 5b:02:56:51:e5:70:8b:35:9f:dc:da:ee:db:cd:92: 09:f0:b2:c5:d6:de:fb:65:c3:98:10:6b:5e:e7:85: 3e:90:e1:cd:17:a5:17:ba:45:f9:c5:92:e4:ad:a6: 45:41:5f:07:e1:98:d9:5e:83:ae:45:e4:50:33:26: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:EF:93:EA:19:6A:4C:D7:C9:A1:64:A0:18:BF:99:FB:35:FE:21 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/97_vk-oZakzXyaFkoBi_mfs1_iE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.147.164.0/23 Signature Algorithm: sha256WithRSAEncryption 33:3e:da:09:a4:01:f5:2f:c7:9a:b5:62:14:f7:e1:55:3f:de: a3:6c:27:ad:71:07:f8:a8:5f:5a:4d:f5:d1:b6:56:5c:e8:0b: db:7c:84:4e:39:f1:90:5d:69:63:b2:8a:2a:c7:49:0f:e6:41: 45:91:88:14:47:9e:ec:d2:86:a9:9e:2a:c5:e6:4b:8a:45:0c: 29:ed:97:5b:49:65:99:4d:59:65:ce:aa:25:54:35:67:6e:af: ba:de:a7:dd:32:45:86:f7:b5:61:b5:e1:b9:af:a9:94:4f:84: 42:8c:90:0e:a6:82:36:49:7f:76:e5:fe:91:33:34:40:b8:43: 17:f9:82:33:8f:c8:11:fe:ff:40:cb:79:e3:3e:60:c8:df:98: 01:6f:46:f5:18:2c:b9:50:1b:ff:b2:2b:22:c2:4b:48:1c:82: 13:76:b8:b2:a8:f6:6d:3f:a9:57:0e:77:d9:b1:6c:23:9d:70: 1b:27:f7:1e:42:88:c1:d2:29:d9:8d:73:a6:26:b2:b0:43:53: d5:25:6a:78:f1:7e:84:c4:c1:3e:1e:75:cb:e5:5d:d8:a1:0c: e6:43:59:76:af:52:e2:96:75:1f:f2:58:cb:8a:da:54:6f:27: 89:81:45:69:ef:a9:a7:7f:59:10:da:4d:64:14:d2:93:50:81: 07:0f:65:ef -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY3QkZFRjkzRUExOTZB NENEN0M5QTE2NEEwMThCRjk5RkIzNUZFMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbzAJXraviRGOpgBHoLtUVmsBgEWLqkieOfZQy17rnDTLxoAsa fnEgLk5kGe2HmqUvHaz5XcUzHI8cFpyC7T4xGLvvMOoo39TQ6Kao+IYfvPl8DmOY WONUigkdGBO0McWkgkv4rXeLO86rAvPRMlUJIclgGfyYAAmFBj8ORo6KLbKpuVP/ e3nNN3RbhLrg3Tyu+xQh2tW3o7LtvX+VmKOh6/4G+aB5U7pUd0sgIap/rURg3ZJG h+qWAUCaa4elUy1QO1sCVlHlcIs1n9za7tvNkgnwssXW3vtlw5gQa17nhT6Q4c0X pRe6RfnFkuStpkVBXwfhmNleg65F5FAzJnrFAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU97/vk+oZakzXyaFkoBi/mfs1/iEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOTdfdmstb1pha3pYeWFGa29CaV9t ZnMxX2lFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXqTpDAN BgkqhkiG9w0BAQsFAAOCAQEAMz7aCaQB9S/HmrViFPfhVT/eo2wnrXEH+KhfWk31 0bZWXOgL23yETjnxkF1pY7KKKsdJD+ZBRZGIFEee7NKGqZ4qxeZLikUMKe2XW0ll mU1ZZc6qJVQ1Z26vut6n3TJFhve1YbXhua+plE+EQoyQDqaCNkl/duX+kTM0QLhD F/mCM4/IEf7/QMt54z5gyN+YAW9G9RgsuVAb/7IrIsJLSByCE3a4sqj2bT+pVw53 2bFsI51wGyf3HkKIwdIp2Y1zpiaysENT1SVqePF+hMTBPh51y+Vd2KEM5kNZdq9S 4pZ1H/JYy4raVG8niYFFae+pp39ZENpNZBTSk1CBBw9l7w== -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:47 2025 by rpki-client