$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/myCgHc1D12UtU0iJbKeu5omRKKg.roa File: myCgHc1D12UtU0iJbKeu5omRKKg.roa (raw, json) Hash identifier: cmYEiGE0vrKHX3l674bRH4qE+8HXNyY7SQYK3gec84g= Subject key identifier: 9B:20:A0:1D:CD:43:D7:65:2D:53:48:89:6C:A7:AE:E6:89:91:28:A8 Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Certificate serial: 1AEE Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/myCgHc1D12UtU0iJbKeu5omRKKg.roa Signing time: Wed 01 Oct 2025 03:58:01 +0000 ROA not before: Wed 01 Oct 2025 03:58:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 19551 IP address blocks: 218.32.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 09:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6894 (0x1aee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72 Validity Not Before: Oct 1 03:58:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9B20A01DCD43D7652D5348896CA7AEE6899128A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:1c:83:af:0d:da:bd:99:ec:3a:ef:63:fe: f5:86:47:06:c1:06:48:da:6d:75:0f:41:49:eb:7e: cb:c6:36:8e:48:63:cb:f2:ec:b9:d3:18:2d:c9:bd: 1b:e6:0f:2f:2e:c5:32:8b:09:50:77:28:12:29:94: b7:01:3a:60:4e:8c:1d:f6:d1:d4:90:d4:5c:45:88: a1:f8:8b:d6:b2:2e:a9:b1:d3:14:56:e7:9b:5a:19: 1a:2a:1f:da:21:e4:0e:b3:ad:c3:a3:0e:32:54:08: 07:cf:80:90:be:05:cb:7e:60:54:cc:6b:fa:12:1b: dc:ee:58:60:92:4f:02:38:44:5d:69:6b:d6:ad:c5: d8:4b:51:fe:95:16:6b:2f:d0:f6:e2:03:60:b3:ad: 6f:d5:30:8a:08:be:74:0c:26:f8:0f:8b:e9:18:a2: d8:ce:51:1c:26:56:3f:8e:62:2c:b3:33:07:f7:bc: 25:c2:2d:e5:d7:4a:1a:b4:67:94:ca:8d:12:9d:c7: ce:c9:7f:e4:33:49:76:6f:b4:56:0c:78:00:f1:33: b0:8e:d9:9f:2f:59:9f:65:28:f6:d0:a3:9d:04:8c: 07:56:54:d9:22:98:3d:64:e3:ac:99:9e:c9:6e:50: 24:cc:82:73:9b:05:8d:11:74:e1:aa:c0:2d:b1:b3: 4e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:20:A0:1D:CD:43:D7:65:2D:53:48:89:6C:A7:AE:E6:89:91:28:A8 X509v3 Authority Key Identifier: keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/myCgHc1D12UtU0iJbKeu5omRKKg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.32.57.0/24 Signature Algorithm: sha256WithRSAEncryption c5:8d:b5:b5:94:04:d3:96:e3:16:24:2d:90:e1:c9:04:28:a4: b2:fd:6d:37:90:db:35:6c:fa:47:8f:5e:0d:1b:fb:f2:d8:ce: 10:6e:95:67:4d:c0:30:f7:33:c1:6d:4e:af:db:de:ad:3d:de: 3c:2f:9b:83:8e:f3:eb:6e:a0:ea:b7:19:db:ac:1d:c8:11:15: d5:47:29:63:66:e1:e0:53:04:d0:d9:59:0a:38:cf:de:04:b8: 4a:45:4f:20:68:77:ea:10:0f:40:40:78:23:86:22:36:68:75: 6a:5d:49:7b:2a:a8:45:52:de:05:21:3c:43:5a:04:58:24:1f: bb:9b:9b:0d:30:b1:07:dc:42:2d:ef:47:b6:55:0e:6d:95:9a: 21:c4:0e:75:5b:1f:cb:ed:80:bd:db:fe:7d:aa:bf:cb:40:fa: 55:c1:85:36:c3:83:2e:39:c2:6e:a9:94:c5:82:ca:a7:e5:fb: 0d:fe:48:60:ac:7f:14:3e:af:e8:03:d9:dd:a9:d0:08:b4:99: fd:16:a6:a1:ee:e0:39:3b:56:a7:a3:3f:e2:03:e7:91:ee:7f: e5:4c:b2:7c:93:ba:d3:65:60:7c:80:7f:a8:4f:ba:ad:2e:d5: 4b:f4:05:c4:0d:59:11:1c:84:47:f7:49:a5:19:a7:ec:6a:84: 17:de:35:c5 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICGu4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTEwMDEw MzU4MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlCMjBBMDFEQ0Q0M0Q3 NjUyRDUzNDg4OTZDQTdBRUU2ODk5MTI4QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoqByDrw3avZnsOu9j/vWGRwbBBkjabXUPQUnrfsvGNo5IY8vy 7LnTGC3JvRvmDy8uxTKLCVB3KBIplLcBOmBOjB320dSQ1FxFiKH4i9ayLqmx0xRW 55taGRoqH9oh5A6zrcOjDjJUCAfPgJC+Bct+YFTMa/oSG9zuWGCSTwI4RF1pa9at xdhLUf6VFmsv0PbiA2CzrW/VMIoIvnQMJvgPi+kYotjOURwmVj+OYiyzMwf3vCXC LeXXShq0Z5TKjRKdx87Jf+QzSXZvtFYMeADxM7CO2Z8vWZ9lKPbQo50EjAdWVNki mD1k46yZnsluUCTMgnObBY0RdOGqwC2xs06FAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUmyCgHc1D12UtU0iJbKeu5omRKKgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbXlDZ0hjMUQxMlV0VTBpSmJLZXU1 b21SS0tnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANogOTAN BgkqhkiG9w0BAQsFAAOCAQEAxY21tZQE05bjFiQtkOHJBCiksv1tN5DbNWz6R49e DRv78tjOEG6VZ03AMPczwW1Or9verT3ePC+bg47z626g6rcZ26wdyBEV1UcpY2bh 4FME0NlZCjjP3gS4SkVPIGh36hAPQEB4I4YiNmh1al1JeyqoRVLeBSE8Q1oEWCQf u5ubDTCxB9xCLe9HtlUObZWaIcQOdVsfy+2Avdv+faq/y0D6VcGFNsODLjnCbqmU xYLKp+X7Df5IYKx/FD6v6APZ3anQCLSZ/Ramoe7gOTtWp6M/4gPnke5/5UyyfJO6 02VgfIB/qE+6rS7VS/QFxA1ZERyER/dJpRmn7GqEF941xQ== -----END CERTIFICATE-----Generated at Mon Oct 20 05:45:57 2025 by rpki-client