$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YzUlghJtm4dUInmjHu7jSbME2O4.roa File: YzUlghJtm4dUInmjHu7jSbME2O4.roa (raw, json) Hash identifier: bM81l7foKMZIUGUqwUX+jIZ3AhPm/bhcoWgoKZohcg4= Subject key identifier: 63:35:25:82:12:6D:9B:87:54:22:79:A3:1E:EE:E3:49:B3:04:D8:EE Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1A2A Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YzUlghJtm4dUInmjHu7jSbME2O4.roa Signing time: Fri 22 Aug 2025 08:53:47 +0000 ROA not before: Fri 22 Aug 2025 08:53:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 106.104.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6698 (0x1a2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=63352582126D9B87542279A31EEEE349B304D8EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:ee:3a:96:e0:99:ed:49:e2:f6:fb:88:c7: 06:3e:80:e3:00:70:2b:91:9b:87:b2:da:d0:80:38: 1a:14:eb:58:7f:d9:5a:b4:5c:62:7b:6d:7e:4e:d4: f9:16:8e:4a:4b:1f:51:4c:52:4c:25:ad:a0:93:ad: 29:6e:e4:c2:4c:1f:70:03:d6:73:52:ca:a1:c8:81: 8c:c7:f9:68:e4:18:e6:2d:e3:e7:07:e0:e1:c3:7a: 4d:d7:11:8b:26:4e:b6:6b:74:78:1c:12:65:61:98: 79:2b:17:a9:db:6f:df:c7:cc:c9:1b:bb:bf:05:07: fb:1b:cc:e6:ee:45:b8:a5:6f:a7:bf:02:d4:2c:49: bb:1a:f7:97:91:e4:1f:bd:12:39:6d:29:d2:2e:28: 35:f5:15:0d:d1:45:6f:31:e4:f5:5c:13:68:56:8d: 58:7d:ea:45:7e:0a:53:6d:11:0d:e0:2e:20:39:72: 51:46:23:ac:f3:4b:b8:a2:fe:21:45:44:e3:18:9c: 34:d9:25:e3:bf:dd:35:4e:9d:56:5a:88:f9:b0:fe: bb:bf:6c:03:94:d8:43:70:f7:8f:fd:9c:a5:df:84: 51:69:11:4d:9f:7a:03:f0:3e:5e:e9:45:7a:aa:ca: 65:28:d6:4c:1c:c7:6b:e7:01:d4:6a:64:13:07:05: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:35:25:82:12:6D:9B:87:54:22:79:A3:1E:EE:E3:49:B3:04:D8:EE X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YzUlghJtm4dUInmjHu7jSbME2O4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.104.236.0/22 Signature Algorithm: sha256WithRSAEncryption c2:34:70:2e:45:e3:74:cd:9d:2d:da:60:1f:aa:19:26:ae:e1: c5:57:8c:e9:e4:a6:1a:e7:4f:bf:7f:cc:87:7c:d7:23:c8:f4: 28:3a:44:28:2e:77:8c:35:47:de:f2:7f:85:c2:2f:0d:61:17: 4c:d0:f4:3e:41:b7:77:e9:26:76:e7:bc:62:cf:2c:5c:58:ff: f2:19:0f:bf:fb:c8:59:5e:ba:87:31:13:22:ee:59:7e:fb:6c: 12:4a:1a:55:e7:53:c4:00:5b:cf:f7:2d:74:db:41:98:ed:fe: be:82:e6:75:4f:b9:09:30:14:3c:51:61:13:bc:20:67:3d:c9: df:f9:79:1b:f9:80:12:b6:ca:4b:04:40:1b:87:5b:64:bb:dc: b2:3d:d5:27:26:80:73:22:d9:db:df:95:de:59:46:1a:2a:ba: 08:dc:0e:d2:97:ce:b7:fa:62:1b:0a:16:8d:f4:12:98:94:38: e3:a7:76:70:ca:36:9a:75:f1:8a:b8:fd:7c:84:c3:5c:14:6d: 3a:a7:f9:a5:50:f0:90:8c:18:bb:c0:78:f8:b5:eb:25:ca:6e: e1:d5:47:d1:e5:29:db:1b:eb:ed:f5:17:f5:b8:fb:c1:16:fa: ab:0f:32:b1:f1:e0:4f:06:0c:d7:6f:24:6b:a2:16:5d:a7:27: 3d:f4:f7:7d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYzMzUyNTgyMTI2RDlC ODc1NDIyNzlBMzFFRUVFMzQ5QjMwNEQ4RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ku46luCZ7Uni9vuIxwY+gOMAcCuRm4ey2tCAOBoU61h/2Vq0 XGJ7bX5O1PkWjkpLH1FMUkwlraCTrSlu5MJMH3AD1nNSyqHIgYzH+WjkGOYt4+cH 4OHDek3XEYsmTrZrdHgcEmVhmHkrF6nbb9/HzMkbu78FB/sbzObuRbilb6e/AtQs Sbsa95eR5B+9EjltKdIuKDX1FQ3RRW8x5PVcE2hWjVh96kV+ClNtEQ3gLiA5clFG I6zzS7ii/iFFROMYnDTZJeO/3TVOnVZaiPmw/ru/bAOU2ENw94/9nKXfhFFpEU2f egPwPl7pRXqqymUo1kwcx2vnAdRqZBMHBXkzAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUYzUlghJtm4dUInmjHu7jSbME2O4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWXpVbGdoSnRtNGRVSW5takh1N2pT Yk1FMk80LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmpo7DAN BgkqhkiG9w0BAQsFAAOCAQEAwjRwLkXjdM2dLdpgH6oZJq7hxVeM6eSmGudPv3/M h3zXI8j0KDpEKC53jDVH3vJ/hcIvDWEXTND0PkG3d+kmdue8Ys8sXFj/8hkPv/vI WV66hzETIu5ZfvtsEkoaVedTxABbz/ctdNtBmO3+voLmdU+5CTAUPFFhE7wgZz3J 3/l5G/mAErbKSwRAG4dbZLvcsj3VJyaAcyLZ29+V3llGGiq6CNwO0pfOt/piGwoW jfQSmJQ446d2cMo2mnXxirj9fITDXBRtOqf5pVDwkIwYu8B4+LXrJcpu4dVH0eUp 2xvr7fUX9bj7wRb6qw8ysfHgTwYM128ka6IWXacnPfT3fQ== -----END CERTIFICATE-----Generated at Sun Aug 24 13:50:07 2025 by rpki-client