$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fO6FcTv-X4P1RUCT_UnV_cuXthA.roa File: fO6FcTv-X4P1RUCT_UnV_cuXthA.roa (raw, json) Hash identifier: e7twuWlXTWBbDLXXNqy53GQSzi+V13eJY36lz5/UfwU= Subject key identifier: 7C:EE:85:71:3B:FE:5F:83:F5:45:40:93:FD:49:D5:FD:CB:97:B6:10 Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Certificate serial: 1072 Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fO6FcTv-X4P1RUCT_UnV_cuXthA.roa Signing time: Fri 22 Aug 2025 08:54:16 +0000 ROA not before: Fri 22 Aug 2025 08:54:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 192.72.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4210 (0x1072) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665 Validity Not Before: Aug 22 08:54:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7CEE85713BFE5F83F5454093FD49D5FDCB97B610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:5b:ea:dd:65:de:6a:04:40:f6:69:ca:28: d4:b4:29:ef:47:a0:00:b3:41:70:34:64:75:1d:33: af:92:b8:ee:c2:ce:b3:2d:ad:24:e6:75:9b:a4:ba: f1:e2:d7:0f:fe:59:9a:9d:80:53:07:24:90:53:33: d7:bb:23:63:b9:82:59:33:e3:38:ea:ee:d2:29:12: 8c:5a:0e:bb:c0:1e:10:16:7b:5d:ea:52:00:dd:58: 53:ba:59:f6:39:84:ab:d0:d6:1b:a8:26:80:61:2b: b3:86:82:a1:ed:6a:d5:19:9c:9a:8a:12:36:a4:15: 58:50:f8:29:e2:67:13:e9:e7:80:b2:43:c8:97:83: ec:2f:0d:7e:6a:04:f4:9c:aa:04:66:35:cc:a4:b0: 76:d0:38:9d:a8:e8:a7:b1:cf:79:dd:66:b7:ce:53: f9:34:21:01:0a:58:43:72:9c:9b:db:38:22:85:a8: 81:1f:61:2b:4f:93:06:7d:9d:17:d6:b3:63:94:8d: 90:e2:4c:e6:43:69:b0:cb:42:98:f6:7d:e9:ef:4d: 5e:04:5f:92:16:9b:ce:4c:58:a1:55:9b:c9:6e:97: 9f:14:ae:c2:40:b7:b9:64:b8:99:30:31:a6:4d:84: 73:b6:e3:09:fb:65:77:45:af:f6:27:90:db:42:04: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EE:85:71:3B:FE:5F:83:F5:45:40:93:FD:49:D5:FD:CB:97:B6:10 X509v3 Authority Key Identifier: keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fO6FcTv-X4P1RUCT_UnV_cuXthA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.72.64.0/18 Signature Algorithm: sha256WithRSAEncryption 14:e7:ba:38:90:06:34:82:5f:06:d5:6e:3c:5a:99:37:f5:3d: 3d:ad:a8:c9:ff:5b:80:33:68:b8:40:88:a3:42:82:c5:fc:e9: 14:09:9a:6f:5e:2a:f0:21:ea:04:91:a7:b1:83:c9:d0:ec:0c: d2:1f:f1:d8:02:66:09:bb:af:42:47:e8:6a:bf:78:3b:61:56: 3f:30:1c:6b:58:4c:66:9d:1a:0b:61:da:47:b0:83:29:1b:83: ad:22:99:c4:c5:bc:f1:2c:67:71:ae:06:60:97:42:ed:4a:b1: 05:27:0b:61:46:b5:4d:0a:59:c7:3a:17:b7:16:a2:59:18:02: d7:86:9c:2f:00:6d:27:2a:73:df:68:1b:d8:6e:29:3f:96:89: 66:55:d8:4a:96:f2:22:e7:91:84:1d:ad:5b:3c:6f:a8:c7:1c: 29:fc:19:68:58:27:b9:8a:c9:9d:fe:c3:45:ff:4a:9d:44:53: 6c:72:9d:88:7d:a0:9a:85:ed:47:82:5c:c4:b0:5c:df:6c:8b: 8a:4e:08:25:8b:bd:a1:bb:90:03:2a:13:92:f0:6f:8c:57:bd: f7:ce:90:1f:7b:2e:d0:09:7a:d1:21:91:ae:48:14:37:8b:19: 3e:14:d3:c3:90:ac:ad:d2:6e:12:c0:5f:50:07:0b:a1:19:17: 18:53:89:b6 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTA4MjIw ODU0MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDRUU4NTcxM0JGRTVG ODNGNTQ1NDA5M0ZENDlENUZEQ0I5N0I2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVYlvq3WXeagRA9mnKKNS0Ke9HoACzQXA0ZHUdM6+SuO7CzrMt rSTmdZukuvHi1w/+WZqdgFMHJJBTM9e7I2O5glkz4zjq7tIpEoxaDrvAHhAWe13q UgDdWFO6WfY5hKvQ1huoJoBhK7OGgqHtatUZnJqKEjakFVhQ+CniZxPp54CyQ8iX g+wvDX5qBPScqgRmNcyksHbQOJ2o6Kexz3ndZrfOU/k0IQEKWENynJvbOCKFqIEf YStPkwZ9nRfWs2OUjZDiTOZDabDLQpj2fenvTV4EX5IWm85MWKFVm8lul58UrsJA t7lkuJkwMaZNhHO24wn7ZXdFr/YnkNtCBJHHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUfO6FcTv+X4P1RUCT/UnV/cuXthAwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC 1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90 S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZk82RmNUdi1YNFAxUlVDVF9VblZf Y3VYdGhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIQDAN BgkqhkiG9w0BAQsFAAOCAQEAFOe6OJAGNIJfBtVuPFqZN/U9Pa2oyf9bgDNouECI o0KCxfzpFAmab14q8CHqBJGnsYPJ0OwM0h/x2AJmCbuvQkfoar94O2FWPzAca1hM Zp0aC2HaR7CDKRuDrSKZxMW88Sxnca4GYJdC7UqxBScLYUa1TQpZxzoXtxaiWRgC 14acLwBtJypz32gb2G4pP5aJZlXYSpbyIueRhB2tWzxvqMccKfwZaFgnuYrJnf7D Rf9KnURTbHKdiH2gmoXtR4JcxLBc32yLik4IJYu9obuQAyoTkvBvjFe9986QH3su 0Al60SGRrkgUN4sZPhTTw5CsrdJuEsBfUAcLoRkXGFOJtg== -----END CERTIFICATE-----Generated at Sun Aug 24 09:42:00 2025 by rpki-client