$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Iwcje_QXrw_90QUEj0AUh8XhmVc.roa File: Iwcje_QXrw_90QUEj0AUh8XhmVc.roa (raw, json) Hash identifier: bGq25cGbUfz8m5dkawv7IgYGzOp2WbhBJuXVoVeWr04= Subject key identifier: 23:07:23:7B:F4:17:AF:0F:FD:D1:05:04:8F:40:14:87:C5:E1:99:57 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 1077 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Iwcje_QXrw_90QUEj0AUh8XhmVc.roa Signing time: Fri 22 Aug 2025 08:54:17 +0000 ROA not before: Fri 22 Aug 2025 08:54:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 192.72.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4215 (0x1077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 22 08:54:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2307237BF417AF0FFDD105048F401487C5E19957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:d7:e1:e2:bc:10:f1:03:3a:61:2e:0a:e1: 4b:06:50:a4:be:e9:39:ce:8f:36:d7:f5:0a:9b:3f: 29:21:6e:c6:a0:3e:4f:46:b5:e1:37:f9:23:20:c1: b9:ba:0c:73:54:19:37:18:97:3c:9e:f1:f8:36:dc: 14:85:36:5b:fd:77:2c:d4:bf:a5:21:15:34:08:fc: 3b:75:04:10:2c:be:1b:eb:ae:ce:61:da:92:f8:e0: ac:e5:6e:30:89:3c:73:c0:ee:b0:b3:c6:30:89:8a: 27:54:fb:83:47:8f:d5:0f:8e:73:f4:48:6a:71:37: d2:9a:25:f1:b3:08:00:64:af:ba:0e:f6:cc:1c:17: 8e:e3:77:b3:73:cf:83:3e:8f:ab:3f:53:84:02:b6: 05:e1:62:14:05:e9:d1:29:95:48:65:34:2f:5a:a1: ef:ec:78:46:e4:21:4d:e3:07:16:ca:ab:c1:ba:65: f3:4e:9d:f6:75:c4:ad:af:3e:86:1b:88:88:51:f5: 12:ce:a5:6d:67:56:61:25:c4:b3:50:d1:ee:59:ed: 50:21:90:32:be:be:6d:a7:ec:fe:c0:6b:02:54:6a: 85:ac:02:78:fb:fe:be:07:f3:17:05:3e:80:43:16: 8c:06:4d:df:ea:ff:2b:5f:57:d2:62:62:a6:df:93: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:23:7B:F4:17:AF:0F:FD:D1:05:04:8F:40:14:87:C5:E1:99:57 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Iwcje_QXrw_90QUEj0AUh8XhmVc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.224.0/20 Signature Algorithm: sha256WithRSAEncryption a9:4f:38:8d:b1:74:0a:53:ab:02:f6:08:d3:e3:fd:50:8f:c9: 22:79:d2:87:7c:6f:6d:8f:6f:af:4b:bb:01:94:8d:ca:cd:db: d5:7d:32:75:e1:ce:0a:ac:59:9f:07:59:1f:06:15:a5:fd:01: 37:76:75:09:56:f7:ce:d0:f3:e5:c2:39:58:30:4b:2e:02:7b: b8:24:5e:e3:76:b0:bc:58:36:cb:4b:0e:52:df:27:86:4e:21: bf:b9:39:74:2a:c4:76:e4:05:4d:d3:46:a9:a9:f4:f7:8c:49: 37:2b:2e:75:6b:5c:3c:b6:9c:60:31:81:45:1d:81:7e:e8:b7: 9f:dd:e8:49:20:52:8c:aa:5c:41:85:57:8b:8c:82:66:0d:e7: 0f:12:c7:99:f1:b7:41:1a:a1:2c:fa:05:39:6e:5c:5f:73:e2: 96:b0:90:46:ad:67:b0:b5:3b:88:81:06:6c:eb:94:8c:f0:22: 6b:a8:42:95:14:23:99:7b:7c:01:fc:7d:06:b3:c2:b7:c2:b8: 82:34:05:8b:6d:c9:c3:25:8c:03:ec:fa:0d:27:50:a2:f0:11: ed:bc:76:3c:90:a6:9b:ff:35:36:05:10:f5:4f:26:f0:76:7a: 1f:cc:f7:cf:12:e2:58:05:5e:5e:f8:38:cb:48:6f:f3:e6:4b: 4e:2f:0d:03 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTA4MjIw ODU0MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzMDcyMzdCRjQxN0FG MEZGREQxMDUwNDhGNDAxNDg3QzVFMTk5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFy9fh4rwQ8QM6YS4K4UsGUKS+6TnOjzbX9QqbPykhbsagPk9G teE3+SMgwbm6DHNUGTcYlzye8fg23BSFNlv9dyzUv6UhFTQI/Dt1BBAsvhvrrs5h 2pL44KzlbjCJPHPA7rCzxjCJiidU+4NHj9UPjnP0SGpxN9KaJfGzCABkr7oO9swc F47jd7Nzz4M+j6s/U4QCtgXhYhQF6dEplUhlNC9aoe/seEbkIU3jBxbKq8G6ZfNO nfZ1xK2vPoYbiIhR9RLOpW1nVmElxLNQ0e5Z7VAhkDK+vm2n7P7AawJUaoWsAnj7 /r4H8xcFPoBDFowGTd/q/ytfV9JiYqbfk8/VAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUIwcje/QXrw/90QUEj0AUh8XhmVcwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSXdjamVfUVhyd185MFFVRWowQVVo OFhobVZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMBI4DAN BgkqhkiG9w0BAQsFAAOCAQEAqU84jbF0ClOrAvYI0+P9UI/JInnSh3xvbY9vr0u7 AZSNys3b1X0ydeHOCqxZnwdZHwYVpf0BN3Z1CVb3ztDz5cI5WDBLLgJ7uCRe43aw vFg2y0sOUt8nhk4hv7k5dCrEduQFTdNGqan094xJNysudWtcPLacYDGBRR2Bfui3 n93oSSBSjKpcQYVXi4yCZg3nDxLHmfG3QRqhLPoFOW5cX3PilrCQRq1nsLU7iIEG bOuUjPAia6hClRQjmXt8Afx9BrPCt8K4gjQFi23JwyWMA+z6DSdQovAR7bx2PJCm m/81NgUQ9U8m8HZ6H8z3zxLiWAVeXvg4y0hv8+ZLTi8NAw== -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:04 2025 by rpki-client