$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jZcsYxWFAok45X0dZOeOhBKE5Qg.roa File: jZcsYxWFAok45X0dZOeOhBKE5Qg.roa (raw, json) Hash identifier: KhQFrHetEogVzm46m5t5jg3/05/TiZSyzZ3oZnSF8Fw= Subject key identifier: 8D:97:2C:63:15:85:02:89:38:E5:7D:1D:64:E7:8E:84:12:84:E5:08 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 197E Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jZcsYxWFAok45X0dZOeOhBKE5Qg.roa Signing time: Fri 22 Aug 2025 08:53:03 +0000 ROA not before: Fri 22 Aug 2025 08:53:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 175.183.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6526 (0x197e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Aug 22 08:53:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8D972C631585028938E57D1D64E78E841284E508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c9:87:fe:8e:4b:d1:a5:7c:ae:f8:7f:c9:d5: d9:7a:a4:95:aa:24:24:45:c0:27:d0:76:d8:37:9f: b3:ab:23:90:fd:4e:c9:8e:b9:45:73:b4:a2:e5:35: cb:fa:4f:39:61:db:9b:83:77:57:68:17:71:ce:db: c5:0c:0a:24:1c:ec:56:12:d1:1b:ac:b7:ed:69:23: 89:fe:02:cb:06:3c:f2:ad:1b:70:cd:dc:ba:b4:36: 78:05:66:d5:44:58:e3:ed:2f:b5:76:bf:41:9c:1e: 0a:31:16:79:31:27:84:0f:10:f8:d2:b8:95:1e:1c: 30:7e:b2:fc:da:21:d4:0f:7d:f5:86:ed:ae:d2:50: 9f:c3:31:58:a4:3d:ed:76:d2:83:49:79:55:1c:50: 83:51:54:35:cd:8b:7d:46:0a:6b:96:65:9f:2e:90: 11:e1:d7:5f:e7:b8:c6:73:47:99:27:01:ea:3c:ad: 71:60:34:a9:5d:de:a8:ff:8f:cf:4b:2f:2b:d9:ac: 81:0c:df:4f:89:46:0d:b1:f7:93:7d:ad:cb:2d:70: 0e:89:e8:8e:74:8f:9b:43:d3:40:0d:dd:2b:6b:fd: 8f:c9:11:7b:f9:63:4e:8f:ee:2a:8e:8b:1b:6f:aa: 11:2d:19:44:6a:84:cc:fe:d9:e1:aa:65:44:04:b1: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:97:2C:63:15:85:02:89:38:E5:7D:1D:64:E7:8E:84:12:84:E5:08 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jZcsYxWFAok45X0dZOeOhBKE5Qg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.183.80.0/20 Signature Algorithm: sha256WithRSAEncryption bd:2e:3b:17:0f:3d:62:28:99:f8:8d:ba:63:28:3b:ad:5e:62: 5e:a7:6a:8a:86:79:1a:0b:3f:f1:78:9b:14:3b:bd:4e:e5:80: d8:ad:0d:a2:4d:44:e5:98:16:25:af:fe:c6:1e:47:9d:6f:11: 3a:89:ed:b3:a4:1c:eb:7d:32:e6:cb:77:ff:e6:13:4e:75:9e: 23:82:b4:8c:0c:33:9d:dc:5e:84:da:6a:ba:e5:bc:f2:63:95: e9:c0:48:48:28:e2:dc:93:c7:24:c3:80:62:c7:11:fc:62:2c: 33:f8:fd:36:03:23:49:5a:8f:b1:bb:f7:5d:24:80:0a:5e:6a: e8:58:21:de:99:d0:4e:e2:bc:6f:2e:fa:93:58:6a:d7:1d:6b: 63:ca:7a:6f:c9:95:3c:ac:e5:b0:f1:a1:73:aa:f2:5d:28:cb: db:70:ad:a5:be:0e:b1:28:6a:7e:7a:a9:a4:97:c7:54:6e:ae: 09:a0:7a:1c:e3:b7:39:eb:b7:53:2a:0c:62:cb:f7:84:8c:d4: 10:5c:60:d8:2f:32:38:09:72:fc:0a:56:89:99:8c:96:a1:0e: e7:7c:94:c8:bc:a9:dd:91:15:7c:cc:de:f9:5e:89:3c:e3:9f: b4:49:0d:ad:6e:a2:fa:70:02:6e:64:38:8f:d8:72:9c:76:41: 52:86:6b:9f -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw ODUzMDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhEOTcyQzYzMTU4NTAy ODkzOEU1N0QxRDY0RTc4RTg0MTI4NEU1MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsyYf+jkvRpXyu+H/J1dl6pJWqJCRFwCfQdtg3n7OrI5D9TsmO uUVztKLlNcv6Tzlh25uDd1doF3HO28UMCiQc7FYS0Rust+1pI4n+AssGPPKtG3DN 3Lq0NngFZtVEWOPtL7V2v0GcHgoxFnkxJ4QPEPjSuJUeHDB+svzaIdQPffWG7a7S UJ/DMVikPe120oNJeVUcUINRVDXNi31GCmuWZZ8ukBHh11/nuMZzR5knAeo8rXFg NKld3qj/j89LLyvZrIEM30+JRg2x95N9rcstcA6J6I50j5tD00AN3Str/Y/JEXv5 Y06P7iqOixtvqhEtGURqhMz+2eGqZUQEsZBvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUjZcsYxWFAok45X0dZOeOhBKE5QgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvalpjc1l4V0ZBb2s0NVgwZFpPZU9o QktFNVFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBK+3UDAN BgkqhkiG9w0BAQsFAAOCAQEAvS47Fw89YiiZ+I26Yyg7rV5iXqdqioZ5Ggs/8Xib FDu9TuWA2K0Nok1E5ZgWJa/+xh5HnW8ROonts6Qc630y5st3/+YTTnWeI4K0jAwz ndxehNpquuW88mOV6cBISCji3JPHJMOAYscR/GIsM/j9NgMjSVqPsbv3XSSACl5q 6Fgh3pnQTuK8by76k1hq1x1rY8p6b8mVPKzlsPGhc6ryXSjL23Ctpb4OsShqfnqp pJfHVG6uCaB6HOO3Oeu3UyoMYsv3hIzUEFxg2C8yOAly/ApWiZmMlqEO53yUyLyp 3ZEVfMze+V6JPOOftEkNrW6i+nACbmQ4j9hynHZBUoZrnw== -----END CERTIFICATE-----Generated at Sun Aug 24 13:49:38 2025 by rpki-client