$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/DOyTdaGWSCeAx6F1qVBUCTkTFiA.roa File: DOyTdaGWSCeAx6F1qVBUCTkTFiA.roa (raw, json) Hash identifier: zLLWLGAD2x042oVx00Yq0FeBOnb5Z3ubtM3VclCSQFY= Subject key identifier: 0C:EC:93:75:A1:96:48:27:80:C7:A1:75:A9:50:54:09:39:13:16:20 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 19AB Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DOyTdaGWSCeAx6F1qVBUCTkTFiA.roa Signing time: Fri 22 Aug 2025 08:53:14 +0000 ROA not before: Fri 22 Aug 2025 08:53:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 136543 IP address blocks: 115.30.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6571 (0x19ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0CEC9375A196482780C7A175A950540939131620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:be:dc:5c:a1:e6:8d:c4:5f:cd:1f:78:00: f3:97:7a:ac:68:97:a0:78:37:b8:7d:a0:24:5a:30: b1:09:67:15:97:35:ed:5e:c3:28:9b:9e:cc:5c:57: d1:95:80:ad:f2:9d:80:7e:62:a4:d5:84:0a:be:93: 3f:00:cd:9e:b8:ea:e7:89:fa:ed:ba:76:ec:11:54: c7:2a:61:02:d1:33:fd:cb:a9:7b:c4:e2:54:b5:c7: 95:ad:5e:b3:12:9b:b4:31:92:16:34:1a:a7:5c:e5: 68:4e:ce:a5:92:12:07:c4:c3:7f:7d:90:9b:4f:5d: c1:40:22:69:1b:0b:2e:cd:9f:c6:79:83:cd:17:4d: 31:81:66:fc:df:61:06:d2:83:8e:21:c3:a1:c2:08: bd:de:7d:ad:e8:19:2d:e1:fc:55:30:e3:11:f6:c0: dd:ac:18:f0:85:1c:fc:ab:cc:6b:52:43:88:9b:40: 6a:fd:31:32:cf:6d:8e:7f:56:bb:04:cd:b8:ef:20: cd:50:f2:64:aa:10:ec:0e:ca:d1:d4:15:1f:02:e9: b1:d6:59:ea:ed:30:04:53:a9:29:f5:2d:65:45:39: 1e:b3:7d:a0:e4:37:c9:1c:2b:f1:77:1c:a1:16:e8: 4d:6b:22:f7:39:54:a2:0e:c8:8c:f8:d6:a6:82:c9: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:93:75:A1:96:48:27:80:C7:A1:75:A9:50:54:09:39:13:16:20 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DOyTdaGWSCeAx6F1qVBUCTkTFiA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.30.65.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:8b:64:e2:b7:e5:aa:12:7d:8d:4b:d9:58:ae:b5:22:52:9b: 95:b3:12:a6:8b:06:87:aa:d2:5f:38:b2:e6:36:51:1f:09:c1: ca:3e:14:ca:3c:40:c4:d6:a4:94:91:05:6e:d1:10:4f:80:65: 88:46:fc:18:29:53:f2:2f:17:1e:ef:54:b6:fb:9c:68:63:04: 62:e4:17:c5:89:15:34:4d:0c:5f:71:91:4a:c4:5a:eb:82:5d: 51:16:6f:70:7f:8b:1a:a8:05:4b:bb:ba:4e:64:b9:f1:4f:18: 0a:38:1d:00:8b:01:70:83:43:05:58:d6:8f:0e:d4:16:f9:e9: b2:62:dd:dd:27:78:28:ba:13:b4:09:8e:22:94:d9:63:1f:4e: f9:68:f3:8d:51:89:d3:a0:97:98:44:0f:87:cc:44:4c:ed:7d: d3:67:7d:91:06:c3:a0:f8:f2:e4:87:cb:94:f2:c3:c9:2e:72: e6:30:6b:55:87:b0:6a:29:0e:b0:ff:1f:26:17:a5:4f:9e:41: 79:23:3e:22:a1:1d:86:be:9d:82:f7:79:09:01:3e:aa:35:85: b1:32:93:cc:5c:37:3c:a1:85:33:90:a7:7f:e6:ce:f7:a9:d7: 0d:05:a7:68:6c:a5:e4:2a:dc:d7:b0:e3:7d:79:48:ca:66:8a: b7:5f:80:dd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBDRUM5Mzc1QTE5NjQ4 Mjc4MEM3QTE3NUE5NTA1NDA5MzkxMzE2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCutr7cXKHmjcRfzR94APOXeqxol6B4N7h9oCRaMLEJZxWXNe1e wyibnsxcV9GVgK3ynYB+YqTVhAq+kz8AzZ646ueJ+u26duwRVMcqYQLRM/3LqXvE 4lS1x5WtXrMSm7QxkhY0Gqdc5WhOzqWSEgfEw399kJtPXcFAImkbCy7Nn8Z5g80X TTGBZvzfYQbSg44hw6HCCL3efa3oGS3h/FUw4xH2wN2sGPCFHPyrzGtSQ4ibQGr9 MTLPbY5/VrsEzbjvIM1Q8mSqEOwOytHUFR8C6bHWWertMARTqSn1LWVFOR6zfaDk N8kcK/F3HKEW6E1rIvc5VKIOyIz41qaCyexlAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUDOyTdaGWSCeAx6F1qVBUCTkTFiAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRE95VGRhR1dTQ2VBeDZGMXFWQlVD VGtURmlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHMeQTAN BgkqhkiG9w0BAQsFAAOCAQEACotk4rflqhJ9jUvZWK61IlKblbMSposGh6rSXziy 5jZRHwnByj4UyjxAxNaklJEFbtEQT4BliEb8GClT8i8XHu9UtvucaGMEYuQXxYkV NE0MX3GRSsRa64JdURZvcH+LGqgFS7u6TmS58U8YCjgdAIsBcINDBVjWjw7UFvnp smLd3Sd4KLoTtAmOIpTZYx9O+WjzjVGJ06CXmEQPh8xETO1902d9kQbDoPjy5IfL lPLDyS5y5jBrVYewaikOsP8fJhelT55BeSM+IqEdhr6dgvd5CQE+qjWFsTKTzFw3 PKGFM5Cnf+bO96nXDQWnaGyl5Crc17DjfXlIymaKt1+A3Q== -----END CERTIFICATE-----Generated at Sun Aug 24 16:08:54 2025 by rpki-client